!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\nuevo\security\htdocs\   drwxrwxrwx
Free 7.98 GB of 239.26 GB (3.34%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     securefunctions.php (5.1 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
    
function mysqlrootupdate($currentpass$newpass$renewpass) {
        
$curdir getcwd();
        list(
$partwampp$directorwampp) = preg_split('/\\\security\\\htdocs/'$curdir);
        
$mypasswdtxt "mysqlrootpasswd.txt";
        
$mypasswdtxtdir $partwampp."\security\\".$mypasswdtxt;
        
$dir $partwampp."\security\\";
        global 
$rootpasswdupdate;
        global 
$update;
        global 
$mysqlpfile;
        if (@
mysql_connect("localhost""root""$currentpass")) {
            
mysql_select_db("mysql");

            
mysql_query("SET PASSWORD = PASSWORD('$newpass')");  //Fix by Wiedmann
            
mysql_query("FLUSH PRIVILEGES");
            
mysql_close();

            if (!
file_exists($dir)) { // Fix by Wiedmann
                
mkdir($dir);
            }
            if (
$mysqlpfile=="yes")
            {
            
$datei fopen($mypasswdtxtdir'w+');
            
$put "mysql user = root\r\nmysql password = $newpass";
            
fputs($datei$put);
            
fclose($datei);
            }
            
$rootpasswdupdate "yes";
        } else {
            
$rootpasswdupdate "no";
        }
    }

    function 
phpmyadminstatus() {
        global 
$currentstatus;
        global 
$authzeile;
        global 
$notfind;

        
$curdir getcwd();
        list(
$partwampp$directorwampp) = preg_split('/\\\security/'$curdir);
        
$configinc "config.inc.php";
        
$phpmyadminconf $partwampp."\phpmyadmin\\".$configinc;

        if (
file_exists($phpmyadminconf)) {
            
$datei fopen($phpmyadminconf'r');
            
$i 0;
            while (!
feof($datei)) {
                
$zeile fgets($datei255);
                
$oldzeile[] = $zeile;
                @list(
$left$right) = preg_split('/=/'$zeile);
                if (
preg_match("/'auth_type'/i"$left)) {
                    if (
preg_match("/'http'/i"$right)) {
                        
$currentstatus[] = "http";
                        
$authzeile[] = $i;
                    } elseif (
preg_match("/'cookie'/i"$right)) {
                        
$currentstatus[] = "cookie";
                        
$authzeile[] = $i;
                    } else {
                        
$currentstatus[] = "null";
                        
$authzeile[] = $i;
                    }
                }
                
$i++;
            }
            
fclose($datei);
        } else {
            
$notfind 1;
        }
    }

    function 
changephpadminauth($phpmyadminauth$myupdate) {
        global 
$phpmyadminconfsafe;
        
$curdir getcwd();
        list(
$partwampp$directorwampp) = preg_split('/\\\security\\\htdocs/'$curdir);
        
$configinc "config.inc.php";
        
$phpmyadminconf $partwampp."\phpmyadmin\\".$configinc;

        if (
file_exists($phpmyadminconf)) {
            
$datei fopen($phpmyadminconf'r');
            
$i 0;
            while (!
feof($datei)) {
                
$zeile fgets($datei255);
                
$oldzeile[] = $zeile;
                @list(
$left$right) = preg_split('/=/'$zeile);
                if (
preg_match("/'auth_type'/i"$left)) {
                    if (
preg_match("/'http'/i"$right)) {
                        
$currentstatus[] = "http";
                        
$authzeile[] = $i;
                    } elseif (
preg_match("/'cookie'/i"$right)) {
                        
$currentstatus[] = "cookie";
                        
$authzeile[] = $i;
                    } else {
                        
$currentstatus[] = "null";
                        
$authzeile[] = $i;
                    }
                }
                
$i++;
            }
            
fclose($datei);
        } else {
            
$notfind 1;
        }

        
$mynewzeile "\$cfg['Servers'][\$i]['auth_type']     = '$phpmyadminauth';      // Authentication method (config, http or cookie based)\n";

        if (
file_exists($phpmyadminconf)) {
            if ((
$currentstatus[0] == "null") || ($myupdate == "1")) {
                
copy($phpmyadminconf$phpmyadminconf.'.safe');
                
$phpmyadminconfsafe $partwampp."\phpmyadmin\\".$configinc.".safe";
                
$phpmyadminauth "http";
                
$datei fopen($phpmyadminconf'w+');
                if (
$datei) {
                    for (
$z 0$z $i 1$z++) {
                        if (
$authzeile[0] == $z) {
                            
fputs($datei$mynewzeile);
                        } else {
                            
fputs($datei$oldzeile[$z]);
                        }
                    }
                }
            }
        }
    }

    function 
htaccess($xauser$xapasswd) {
        global 
$xamppdirconfig;
        global 
$xapasswdtxtdir;
        global 
$htpasswddir;
        global 
$htpasswddirectory;
        global 
$htxampp;
        global 
$xapfile;
        
$curdir getcwd();
        list(
$partwampp$directorwampp) = preg_split('/\\\security\\\htdocs/'$curdir);
        
$htaccess ".htaccess";
        
$xapasswdtxt "xamppdirpasswd.txt";
        
$htpasswd "xampp.users";
        
$xapasswdtxtdir $partwampp."\security\\".$xapasswdtxt;
        
$curspcript $_SERVER["SCRIPT_FILENAME"];
        
$htxampp $partwampp."\htdocs\\xampp\\".$htaccess;
        
$htpasswdexe $partwampp."\apache\\bin\\htpasswd.exe";
        if (
file_exists($htpasswdexe)) {
            
$htpasswddir "\"".$partwampp."\security\\".$htpasswd."\"";
            
$htpasswddirectory $partwampp."\security\\".$htpasswd;
            
$dir $partwampp."\security\\";
            if (!
file_exists($dir)) {
                
mkdir($dir);
            }

            
$datei fopen($htxampp'w+');
            
$insert "AuthName \"xampp user\"\r\nAuthType Basic\r\nAuthUserFile $htpasswddir\r\nrequire valid-user";
            
fputs($datei,$insert);
            
fclose($datei);

            
chdir($partwampp."\security"); // Fix by Wiedmann
            
$htpassrealm "start /b \"\" \"$htpasswdexe\" -c -m -b .\\xampp.users $xauser $xapasswd";
            
$handle popen($htpassrealm'w');
            
pclose($handle);
            
chdir($curdir);
            if (
$xapfile=="yes")
            {
            
$datei fopen($xapasswdtxtdir'w+');
            
$put "XAMPP user = $xauser\r\nXAMPP password = $xapasswd";
            
fputs($datei$put);
            
fclose($datei);
            }
            
$hdir $dir.'htdocs\\';
            
copy($htxampp$dir.'htdocs\\.htaccess');
            
$xamppdirconfig "ok";
        } else {
            
$xamppdirconfig "notok";
        }
    }
?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0468 ]--