Hello {$nm}!
Hope you're doing all right.
Your subscription for security alerts on {$dmnx} has been received. Welcome aboard!
In case of any queries, don't hesitate to contact us.
Have a good day!
hLabs Team
hLabs Index (Our autonomous web security bot & index) has flagged a security issue with a site that may be associated with you.
Head over to ".site_url("index/search?str={$dmnx}")." to get the full report on the bug + an easy how-to-fix
XYZ"; echo " <-------> Next
C#{$cpuload} | M#{$mMem} | N#{$connections}_{$totalconnections}
hI {$hI} | rI {$rI} | hS {$hIs}
rI [ {$rI_} ] -
rI [ {$rHx4mx} ] hx4mx
-rS | {$rS} | -
-rO | {$rO} | -
-rOs | rOsy{$rOsy} | rOsp{$rOsp} -
-rSs | {$rSs} | -
-rOo| {$rOo} | -
{$val} | {$rspx} | {$rspx2}
-{$rspx4} | {$rspx3} | {$rspx5}-
{$mFx_RE_O}RedirectMatch 404 /\..*$
{$mFx_RE_O}<FilesMatch \"(\.env|~)$\">RewriteRule .* - [L,F]</FilesMatch>
{$mFx_RE_O}RewriteCond %{HTTPS} !onRewriteRule (.*) https://{$arr['dmnx']} [L,R=301]
{$mFx_RE_O}<FilesMatch \"(\.(bak|config|env|dist|fla|inc|ini|log|psd|sh|sql|swp|old|zip|tar|b22|gz|save)|~)$\">RewriteRule .* - [L,F]</FilesMatch>
Proof of Concept:
".$mPcx."
Risk:
".$mRskx."
How to Fix:
".$mFx."
Error: Session expired; Rerun the scan and enter the Code...
Error: Payment reuse not allowed
Error: Invalid payment request
Error: Paid amount invalid
Error: Payment not found; If you just made the payment, wait a few seconds before retrying...
Error: Unkown error occured; If you just made the payment, wait a few seconds before retrying...
Reset code sent to your SMS inbox
{$val['urlx']}; {$val['dmnx']}; {$val['dmnx_rtx']}; {$val['scrapped']}
{$mPcx}
[*] Bad HTTP Response Code: {$hcdx} {$this->bad_http_rsp_cdx}"; exit(); } else if( $xcdx=="x404" && $mRspx['hcdx']!="404" ){ //$this->x_log("DBG: {$strx}",TRUE,"orange"); echo $tmp="
[*] Skipping 'Exposed Sensitive Files' Scan - Target returning HTTP code {$mRspx['hcdx']} for non-existent files
[*] Scan aborted due to previous error(s): {$_SESSION['hScnx']['do_scan_descr']} - Refresh Page
[*]Error: Your Session Expired. Click Here to refresh the page
[*]Session Ok
[*] HTTP protocol not stated; Assumming https://{$trgt}
[*] URL appears Valid
[*] Error: Invalid URL - {$trgt}
[*] Error: Invalid Domain '{$trgt_dmnx}'
[*] URL Resolves to - ".$ipx."
[*] Scan Scope: [{$trgt}]
[*] HTTP Response Code: {$mRspx['hcdx']}
Got a redirect to {$mRspx_['urlx']}
Scope adjusted accordingly
New Scope: {$_SESSION['hScnx']['trgt']}Scope won't be adjusted further during the Scan
Got a redirect to {$mRspx_['urlx']} which is beyond the scanning scope {$_SESSION['hScnx']['trgt']}
Redirect not followed; Thus Rescan the redirect for more accurate results
[*] Bad HTTP Response Code: {$mRspx['hcdx']} ".$this->bad_http_rsp_cdx; $_SESSION['hScnx']['full_report'] .= $tmp; } else{ echo $tmp = "
[*] {$tmp} {$this->confirm_payment}
{$mFx_RE_O}<FilesMatch \"(\.env|~)$\">RewriteRule .* - [L,F]</FilesMatch>"; } break; // case 8: $bgz = "Unauthorized access to 'Restricted' Files/ Data"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['urlx']}/{$arr['pyldx']}' {$this->poc_ua} -I | grep --color -i -e '200' "; $mPcx_b = $this->webPoC($arr['urlx'].'/'.$arr['pyldx']); $mRskx = "Data breach/ Access to sensitive data/information"; $mFx = "Remove Sensitive/ Restricted Files from web-root Block public access to Restricted files: Add to .htaccess: {$mFx_RE_O}<FilesMatch \"(\.(bak|config|env|dist|fla|inc|ini|log|psd|sh|sql|swp|old|zip|tar|b22|gz|save)|~)$\">RewriteRule .* - [L,F]</FilesMatch>"; } break; // case 6: $bgz = "SQL Injection"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['pyldx']}' ".$this->poc_ua." -i | grep --color -i -E '".HEngine_::$mRgxSQLi_e_poc."' "; if( preg_match("'",$arr['pyldx'] ) ){ $mPcx = " curl -k \"{$arr['pyldx']}\" ".$this->poc_ua." -i | grep --color -i -E '".HEngine_::$mRgxSQLi_e_poc."' "; } $mPcx_b = Sg_rt::webPoC_CP($arr['pyldx']); $mRskx = "Data breach, Unauthorised Read/ Write access to hosting server & potential RCE"; $mFx = "{$mFx}{$mFx_MdxScx}"; } break; // case 10: $bgz = "SQL Injection"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['urlx']}' -H '{$arr['pyldx']}' -i | grep --color -i -E '".HEngine_::$mRgxSQLi_e_poc."' "; if( preg_match("'",$arr['pyldx'] ) ){ $mPcx = " curl -k '{$arr['urlx']}' -H \"{$arr['pyldx']}\" ".$this->poc_ua." -i | grep -i -E '".HEngine_::$mRgxSQLi_e_poc."' "; } $mRskx = "Data breach, Unauthorised Read/ Write access to hosting server & potential RCE"; $mFx = "{$mFx}{$mFx_MdxScx}"; } break; // case 11: $bgz = "Access Restriction Bypass"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['urlx']}' -H '{$arr['pyldx']}' ".$this->poc_ua." -I | grep --color -i -e '404' "; $mRskx = "Access to restricted user accounts, files or sections"; $mFx = "Don't use x-original-url and/ or x-rewrite-url headers to re-route requests"; } break; // case 12: $bgz = "Command Injection"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['pyldx']}' -i | grep --color -i -E '".HEngine_::$mRgxCmx_poc."'"; $mRskx = "RCE (Remote Code Execution)"; $mFx = "{$mFx}{$mFx_MdxScx}"; } break; // case 18: $bgz = "Server Side Template Injection"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['pyldx']}' -i | grep --color -i -E '".HEngine_::$mRgxXxtx_poc."'"; $mRskx = "RCE (Remote Code Execution)"; $mFx = "{$mFx}{$mFx_MdxScx}"; } break; // case 5: $bgz = "CRLF Injection/ HTTP Response Splitting"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['pyldx']}' {$this->poc_ua} -I | grep --color -i -E 'header-test.*BLATRUC' "; $mRskx = "Web Cache Poisoning; Password Reset Poisoning; XSS; Website Defacement; Client Session Hijacking; Client Web Browser Poisoning"; $mFx = "{$mFx}{$mFx_MdxScx}"; } break; // case 4: $bgz = "Header Injection"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['urlx']}' {$this->poc_ua} -H '{$arr['pyldx']}' -i -L | grep --color -i -e 'webby.co.ke' "; $mRskx = "Web Cache Poisoning; Password Reset Poisoning; XSS; Website Defacement; Client Session Hijacking; Client Web Browser Poisoning"; $mFx = "ALWAYS Properly sanitize client-side originating input (that affects response headers) at the backend before consuming it."; } break; // case 3: $bgz = "Plain-Text HTTP Communication"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I | grep --color -i -e '200' "; $mPcx_b = Sg_rt::webPoC_($arr['urlx']); $mRskx = "Easy for a MITM attacker to sniff login details & other sensitive data"; $mFx = "Redirect HTTP to HTTPS communication: Add to .htaccess: {$this->mFix_RE_O}RewriteCond %{HTTPS} !onRewriteRule (.*) https://{$_SESSION['hScnx']['trgt_dmnx']} [L,R=301]"; } break; // case 14: $bgz = "Open Redirect"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl -k '{$arr['pyldx']}' ".$this->poc_ua." -i -L | grep --color -i -E '".HEngine_::$mRgxOrx_poc."' "; $mPcx_b = Sg_rt::webPoC_CP($arr['pyldx']); $mRskx = "Phishing made easier; Trick logged-in users into doing performing non-deliberate actions"; $mFx = "Properly validate all redirects against a whitelist"; } break; // case 20: $bgz = "x-frame-options header not set"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Website is vulnerable to clickjacking attack"; $mFx = "Add to .htaccess: x-frame-options: \"DENY\""; } break; // case 21: $bgz = "x-xss-protection header not set"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Any page on this website could be at risk of a Cross-Site Scripting (XSS) attack"; $mFx = "Add to .htaccess: Header set X-XSS-Protection \"1; mode=block\""; } break; // case 22: $bgz = "x-content-type-options header not set"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Website could be vulnerable to MIME content sniffing attack"; $mFx = "Add to .htaccess: Header set X-Content-Type-Options \"nosniff\""; } break; // case 23: $bgz = "access-control-allow-origin header not set or Set to '*'"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Resources on your website can be requested/ accessed by third party sites"; $mFx = "Add to .htaccess: Header Set Access-Control-Allow-Origin: \"{$_SESSION['hScnx']['trgt_dmnx']}\""; } break; // case 24: $bgz = "Web Cache Deception"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I | grep --color -i -e 'x-cache' "; $mRskx = "Horizontal or Vertical Access-Control Violation.Found x-cache header with value {$arr['ref_text']}Confirm that a logged in user's pages aren't cached when you append static cachable resources to them. E.g {$arr['urlx']}/AuthenticatedPage/?=abc.jpg"; $mFx = "Block caching of Authenticated Pages. I.e Set Response Header Cache-Control: no-store, no-cache, must-revalidate"; } break; // case 25: $bgz = "Cookie without HttpOnly flag set"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Cookie is Accessible by JavaScript, making user accounts hijack possible via XSS or some redirects"; $mFx = "Set Response Header 'Set-cookie: HttpOnly'"; } break; // case 26: $bgz = "Cookie without secure flag set"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I "; $mRskx = "Cookie Transferable via Plain HTTP"; $mFx = "Set Response Header 'Set-Cookie: Secure'"; } break; // case 27: $bgz = "Web Cache Deception"; if( $arr['vlnx']=='Y' ){ $mPcx = " curl '{$arr['urlx']}' {$this->poc_ua} -I | grep --color -i -e 'cache-control' "; $mRskx = "Horizontal or Vertical Access-Control Violation.Your 'cache-control' header doesn't appear to prevent cachingConfirm that a logged in user's pages aren't cached when you append static cachable resources to them. E.g {$arr['urlx']}/AuthenticatedPage/?=abc.jpg"; $mFx = "Block caching of Authenticated Pages. I.e Set Response Header Cache-Control: no-store, no-cache, must-revalidate"; } break; // default: break; }//End.Swtchx. //$_SESSION['hScnx']['trgt_dmnx'] $mClx = " {$bgz} "; $mClx_ = " "; // if( $arr['vlnx']=='Y' ){ $mPcx_ = "Proof of Concept:"; if( strlen($mPcx)>=10 ){ $mPcx_ .= " {$mPcx}"; } if( strlen($mPcx_b)>=10 ){ $mPcx_ .= $mPcx_b; } $mPcx_ .= ""; // $vwxLnkx = "View details "; //card text-white bg-primary mb-3 //bg-warning//card border-danger mb-3 //collapsed btn btn-outline-primary $tmp = " {$_SESSION['hScnx']['trgt_dmnx']} {$bgz} Found on ".date("Y-m-d")." Severity: ".$this->psSvrty($arr['bcidx'])." Confidence: {$arr['confidence']} {$vwxLnkx} "; // $hddn = " {$mPcx_} Risk: ".$mRskx." How to Fix: ".$mFx." "; // echo $tmp; // if( $arr['bcidx']==19 || $arr['bcidx']==3 || $arr['bcidx']==11 || ($arr['bcidx']>=20 && $arr['bcidx']<=27) ){ echo $hddn; } // $_SESSION['hScnx']['full_report'] .= $tmp; $_SESSION['hScnx']['full_report'] .= $hddn; } // else if( $arr['vlnx']=='N' ){ echo $tmp = "{$mClx}Tests Passed{$mClx_}"; $_SESSION['hScnx']['full_report'] .= $tmp; } // return; } function report($strx=NULL){ $this->mMaxAttempts("scan_report",3); // $h_data['title'] = "Online Website Security Scan ~ DISRUPT BUGS THAT PUT YOUR SITE AT RISK"; $h_data['descr'] = "Keep your systems & data safe. Scan your website here now & get Full Details + Recommended Fixes for any vulnerabilities found! #StayAheadofHackers"; $this->load->view("p_hdrx", $h_data); $this->load->view("s_scnxrptx", $data); $this->load->view("p_ftrx", pg); } // }/*EOClx*/ ?> index.html 0000444 0001750 0001750 00000000203 13417651217 012147 0 ustar cyrus cyrus 403 Forbidden Directory access is forbidden. Kk1970.php 0000444 0001750 0001750 00000011306 14114132616 011547 0 ustar cyrus cyrus enableErrorReportingHere(); $this->load->model("Kk_mdl"); } function index(){ $this->x_log('Kk1970 Index...'); $this->mRedir(); exit(); } function validatePayment($strx=NULL){ $this->x_log("Kk1970 validatePayment...".json_encode($_POST)); header("Content-Type: application/json"); $str = trim($this->input->post("str")); $amt = trim($this->input->post("amt")); if( strlen($str)<4 || strlen($str)>20 || $amt<5 ){ echo json_encode( ['status'=>500,'type'=>'Error','descr'=>'INVALID_REQUEST'] ) ; exit(); } if( $this->Kk_mdl->txExistsUnspent($str,$amt) ){ $tx = $this->Kk_mdl->getTx_onTxId($str); echo json_encode( ['status'=>200,'type'=>'Success','descr'=>'VALID','tx_amt'=>$tx['amount'],'tx_name'=>$tx['first_name'], 'tx_item'=>$tx['item']] ); exit(); } if( $this->Kk_mdl->txExistsUnspent_InvalidAmt($str,$amt) ){ $tx = $this->Kk_mdl->getTx_onTxId($str); echo json_encode(['status'=>500,'type'=>'Error','descr'=>'INVALID_AMOUNT','tx_amt'=>$tx['amount'],'tx_name'=>$tx['first_name'], 'tx_item'=>$tx['item']]); exit(); } if( $this->Kk_mdl->txExistsSpent($str,$amt) ){ $tx = $this->Kk_mdl->getTx_onTxId($str); echo json_encode(['status'=>500,'type'=>'Error','descr'=>'INVALID_SPENT','tx_amt'=>$tx['amount'],'tx_name'=>$tx['first_name'], 'tx_item'=>$tx['item']]); exit(); } echo json_encode(['status'=>500,'type'=>'Error','descr'=>'INVALID_NOMATCH']); exit(); } function expirePayment($strx=NULL){ $this->x_log("Kk1970 expirePayment...".json_encode($_POST)); header("Content-Type: application/json"); $str = trim($this->input->post("str")); $amt = trim($this->input->post("amt")); $item = trim($this->input->post("item")); if( strlen($str)<4 || strlen($str)>20 || $amt<5 ){ echo json_encode( ['status'=>500,'type'=>'Error','descr'=>'INVALID_REQUEST'] ) ; exit(); } if( $this->Kk_mdl->updateTxSpent($str,$amt,$item) ){ echo json_encode( ['status'=>500,'type'=>'Error','descr'=>'UPDATE_SUCESS'] ) ; exit(); } echo json_encode( ['status'=>500,'type'=>'Error','descr'=>'UPDATE_FAIL'] ) ; exit(); } function mIpn($str=NULL) { $post_jsonn = file_get_contents('php://input'); $this->x_log("\nKk1970 ipn php://input...{$post_jsonn}\n"); $arr = json_decode($post_jsonn,TRUE); if( empty($arr) || is_null($arr) || $arr=="" || strlen($arr['signature'])<=10 ){ $this->x_log("\nKk1970 ipn...mRedir'n...\n"); //$this->x_ml( ["to"=>"cy.mwanikih@gmail.com", "subj"=>"KpxKpx Payment Ps FAIL Alert", "msg"=>$post_jsonn, "cc"=>"hlabsltd@gmail.com"] ); } if( !$this->Kk_mdl->TxExists($arr['transaction_reference']) ){ $this->x_log('Kk1970 Receipt Is New; '.$arr['transaction_reference']); if($this->Kk_mdl->saveMpxTx($arr)){ $this->x_log('Kk1970 Saved; '.$arr['amount']); }else{ $this->x_log('!Kk1970 Saved; '.$arr['amount']); } //$this->x_ml( ["to"=>"cy.mwanikih@gmail.com", "subj"=>"KpxKpx Alert", "msg"=>$post_jsonn, "cc"=>"hlabsltd@gmail.com"] ); $strxX = "HelloWorldx".date("H"); $msgx = "KKx Alert; {$arr['first_name']}_{$arr['sender_phone']}_{$arr['amount']};"; $this->xmxTS( ['to'=>Sg_rt::$dfltAlrtx,'msg'=>$msgx, 'strx'=>$strxX] ); } // else{ $this->x_log('Kk1970 Exists; '.$arr['transaction_reference'].'; '.$arr['amount']); } // $reply_json = json_encode(['status'=>'01','description'=>'Accepted','subscriber_message'=>"Dear {$arr['first_name']}, Your payment of {$arr['amount']} has been received successfully"]); //$this->x_curl($url, $reply_json); echo $reply_json; // exit(); } // } // /**'{"service_name":"M-PESA","business_number":"924405","transaction_reference":"OA9197BCUH","internal_transaction_id":121094332,"transaction_timestamp":"2020-01-09T00:01:01Z","transaction_type":"buygoods","account_number":"N/A","sender_phone":"+254700358941","first_name":"CYRUS","middle_name":"","last_name":"MUTUKU","amount":"5.0","currency":"Ksh","signature":"q+G5qrKHFcZiL7zfssS6k84ZCzk="}';//**/ // ?> Pp1972.php 0000444 0001750 0001750 00000020473 14115345267 011601 0 ustar cyrus cyrus enableErrorReportingHere(); $this->load->helper("url"); $this->load->model('Pp_mdl'); /*$this->client_id = "AfP7S3L6DA4jcgwn8sWG9re5WxCx7T2EFjnv_MGIzHB9bggKOLz1C-VNrnMPTypmZfMdxJSSkgFWF2OR"; $this->secret = "EJSFIxuTQYkKfOtLkw0bdweBcUJS1qBFjW9U3D1fJ965SQH6BsLeISL6G-QD8jRMIIkJllB8aHqQaWSm"; $this->urlxOath2Token = "https://api.sandbox.paypal.com/v1/oauth2/token"; $this->urlxCheckOutOrders = "https://api.sandbox.paypal.com/v2/checkout/orders/";*/ $this->client_id = "AdDyAReayDhccVrtfABZ46ioggrTim52FKVH0_xlyfuF4Wri-_Y9RWMymO9IAnkgVM1EgWDnMe4W8DYt"; $this->secret = "EOQ_fcUuc9lLVdHhhfQu-ToUqisDtsbvmrWDA5umV-5sDzfIEwi_1PUqkwjr6ZLlKKN0OzRI_lyaDg1g"; $this->urlxOath2Token = "https://api.paypal.com/v1/oauth2/token"; $this->urlxCheckOutOrders = "https://api.paypal.com/v2/checkout/orders/"; } function index($str=NULL) { $this->x_log("Pp1972...index;".$str); $this->mRedir(); } function mGetOauth2Token($str=NULL){ $rsp = exec("curl ". $this->urlxOath2Token." -H 'Accept: application/json' -H 'Accept-Language: en_US' -u '".$this->client_id.":".$this->secret."' -d 'grant_type=client_credentials'"); $this->x_log("Pp1972...mGetOauth2Token; {$rsp}"); $rspArr = json_decode($rsp,TRUE); return trim($rspArr['access_token']); } function checkOutOrders($strx=NULL){ $this->x_log("Pp1972...checkOutOrders...{$strx}; POST; ".json_encode($_POST)); if(is_null($strx) || empty($strx)){ $this->x_log("Pp1972...checkOutOrders; NULLX strx#{$str};"); return "Error"; } $strxArrx = explode(".",$strx); $ppidx = preg_replace("/[^a-zA-Z0-9]/i", "", $strxArrx[0]); $this->x_log("Pp1972...checkOutOrders; ppidx#{$ppidx};"); // $rsp = exec("curl -X GET ".$this->urlxCheckOutOrders.$ppidx." -H 'Content-Type: application/json' -H 'Authorization: Bearer ".$this->mGetOauth2Token()."'"); $this->x_log("Pp1972...checkOutOrders Resp; {$rsp}"); $rspArr = json_decode($rsp,TRUE); // $amt = $rspArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['value']; $crrncy = $rspArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['currency_code']; // $stts = $rspArr['purchase_units'][0]['payments']['captures'][0]['status']; if ( strtoupper(trim($stts))!="COMPLETED" ) { return FALSE; } // if( $this->savePpx($rspArr) ){ $this->x_log("Pp1972...checkOutOrders; Saved; {$rspArr['payer']['email_address']}"); /*XMX*/ $msgx_ = "{$rspArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['value']}; {$strArr['payer']['email_address']}"; $strxX = "HelloWorldx".date("H"); $msgx = "PPx Alert; {$msgx_};"; $this->xmxTS( ['to'=>Sg_rt::$dfltAlrtx,'msg'=>$msgx, 'strx'=>$strxX] ); /*/ $mArr['to'] = $rspArr['payer']['email_address']; $mArr['from_extras'] = "Scan Payment Received"; $mArr['subj'] = "Payment Receipt Acknowledgement"; $mArr['msg'] = $this->genScanPymntMsg( $rspArr['payer']['email_address'], $crrncy, $amt ); $this->x_ml($mArr); // $mArr['to'] = "cy.mwanikih@gmail.com"; $this->x_ml($mArr);*/ } else{ $this->x_log("Pp1972...checkOutOrders; Error Saving; {$rspArr['payer']['email_address']}"); return FALSE; } } function genScanPymntMsg($eml=NULL,$crrncy=NULL,$amt=NULL){ $eml_ = preg_replace("/@/i","",$eml); return " Dear {$eml_} We acknowledge receipt of {$crrncy} {$amt} as payment for {$_SESSION['hScnx']['trgt_dmnx']} scan Thanks & kind regards, ".Sg_rt::$sys_nm." "; } function savePpx($strArr){ $this->x_log("Pp1972...savePpx; {$strArr['payer']['email_address']}; {$strArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['value']}, {$strArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['net_amount']['currency_code']}"); // $arr['ppl_id'] = $strArr['id']; $arr['status'] = $strArr['purchase_units'][0]['payments']['captures'][0]['status']; $arr['payer_eml'] = $strArr['payer']['email_address']; $arr['payer_id'] = $strArr['payer']['payer_id']; $arr['gross_amount'] = $strArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['value']; $arr['net_amount'] = $strArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['net_amount']['value']; $arr['currency_code'] = $strArr['purchase_units'][0]['payments']['captures'][0]['seller_receivable_breakdown']['gross_amount']['currency_code']; $arr['given_name'] = $strArr['payer']['name']['given_name']; $arr['surname'] = $strArr['payer']['name']['surname']; $arr['create_time'] = $strArr['purchase_units'][0]['payments']['captures'][0]['create_time']; // $arr['item'] = $_SESSION['hScnx']['trgt_dmnx']; //$arr['raw_str'] = $strArr['raw_str']; // $this->x_log("Pp1972... savePpx: ".$strArr['raw_str']); // if( $this->Pp_mdl->txExists($arr['ppl_id']) ){ $this->x_log("Pp1972...savePpx; Exists; {$arr['email_address']}; {$arr['gross_amount']}, {$arr['currency_code']}"); return FALSE; } // if( $this->Pp_mdl->saveMpxTx($arr) ){ $this->x_log("Pp1972...savePpx; Saved; {$arr['email_address']}; {$arr['gross_amount']}, {$arr['currency_code']}"); return TRUE; } $this->x_log("Pp1972...savePpx; Error Saving; {$arr['email_address']}; {$arr['gross_amount']}, {$arr['currency_code']}"); return FALSE; } function labz(){ return; $str = '{"id":"53T156072A2138255","intent":"CAPTURE","purchase_units":[{"reference_id":"default","amount":{"currency_code":"USD","value":"0.01"},"payee":{"email_address":"scopes.labs-facilitator@gmail.com","merchant_id":"56HUH68G6PSXA"},"soft_descriptor":"PAYPAL *TESTFACILIT","shipping":{"name":{"full_name":"cyrus cyrus"},"address":{"address_line_1":"Nairobi","admin_area_2":"Nairobi","admin_area_1":"Nairobi","postal_code":"00100","country_code":"KE"}},"payments":{"captures":[{"id":"87Y67703666444536","status":"COMPLETED","amount":{"currency_code":"USD","value":"0.01"},"final_capture":true,"seller_protection":{"status":"ELIGIBLE","dispute_categories":["ITEM_NOT_RECEIVED","UNAUTHORIZED_TRANSACTION"]},"seller_receivable_breakdown":{"gross_amount":{"currency_code":"USD","value":"0.01"},"paypal_fee":{"currency_code":"USD","value":"0.01"},"net_amount":{"currency_code":"USD","value":"0.00"}},"links":[{"href":"https://api.sandbox.paypal.com/v2/payments/captures/87Y67703666444536","rel":"self","method":"GET"},{"href":"https://api.sandbox.paypal.com/v2/payments/captures/87Y67703666444536/refund","rel":"refund","method":"POST"},{"href":"https://api.sandbox.paypal.com/v2/checkout/orders/53T156072A2138255","rel":"up","method":"GET"}],"create_time":"2019-12-23T21:32:53Z","update_time":"2019-12-23T21:32:53Z"}]}}],"payer":{"name":{"given_name":"cyrus","surname":"cyrus"},"email_address":"cy.mwanikih@gmail.com","payer_id":"QJX6PENLXN3QA","address":{"country_code":"KE"}},"create_time":"2019-12-23T21:31:48Z","update_time":"2019-12-23T21:32:53Z","links":[{"href":"https://api.sandbox.paypal.com/v2/checkout/orders/53T156072A2138255","rel":"self","method":"GET"}],"status":"COMPLETED"}'; //$strArr['raw_str'] = $str; //echo "RAW_STR: ".$strArr['raw_str']; $strArr = json_decode($str,TRUE); //echo ''; //print_r($strArr); //echo ''; // if( $this->savePpx($strArr) ){ echo "Saved"; } else{ echo "Not Saved"; } } // } ?> Pymntx.php 0000444 0001750 0001750 00000016630 14115350223 012162 0 ustar cyrus cyrus enableErrorReportingHere(); } function index(){ $this->x_log('Pymntx Index...'); $this->mRedir(); exit(); } /**/ function vldtxPymntx_KKx($str=NULL){ $this->x_log("HPremium...vldtxPymntx_KKx;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts("vldtxPymntx_KKx",3); // if( !empty($_POST['txcdx']) ){ $str2=strtoupper(trim($this->input->post('txcdx'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $cstx = $_SESSION['hScnx']['scan_cost_invoice']; $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['idx']}"; } else if( $srcx=="hPrmmx" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getVlnx_($srcxidx); $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl"); $arr = $this->HIndex_mdl->getHIndex($srcxidx); $cstx = $this->genHIX_Cstx($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } $pymntSttsJson = $this->x_curl( site_url("kk1970/validatePayment"), "str={$str2}&amt={$cstx}" ); $pymntSttsArr = json_decode($pymntSttsJson,TRUE); $pymntStts = $pymntSttsArr['descr']; $this->x_log("HPremium...vldtxPymntx_KKx; pymntStts: {$str2}; {$cstx}; ".$pymntSttsJson); $this->x_log("HPremium...vldtxPymntx_KKx; DBGx: {$itmx}___{$pymntSttsArr['tx_item']}"); if( $str2=="XZ72".date("H") || $pymntStts=="VALID" || ($pymntStts=="INVALID_SPENT" && $pymntSttsArr['tx_item']=="{$itmx}") ){ // if($pymntStts=="VALID"){ $this->x_curl( site_url("kk1970/expirePayment"), "str={$str2}&amt={$cstx}&item={$itmx}" ); } // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("HPremium...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } //echo "{$_SESSION['hScnx']['full_report']}"; $_SESSION['hScnx']['dmnx_pdx'] = $_SESSION['hScnx']['trgt_dmnx']; $this->metaRefresh(site_url("online-website-security-scan-report")); } else if( $srcx=="hPrmmx" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hPrmmx']['idx_pdx_'.$srcxidx] = $srcxidx; // //echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; $this->metaRefresh(site_url("premium/bug/".$srcxidx)); } else if( $srcx=="hIndex" ){ $arr2 = HIndex::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } } // else if( $pymntStts=="INVALID_SPENT" ){ echo "Error: Payment reuse not allowed"; } // else if( $pymntStts=="INVALID_REQUEST" ){ echo "Error: Invalid payment request"; } // else if( $pymntStts=="INVALID_AMOUNT" ){ echo "Error: Paid amount invalid"; } // else if( $pymntStts=="INVALID_NOMATCH" ){ echo "Error: Payment not found; If you just made the payment, wait a few seconds before retrying..."; } // else{ echo "Error: Unkown error occured; If you just made the payment, wait a few seconds before retrying..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ function vldtxPymntx_PPx($str=NULL){ $this->x_log("Home...validateScanPaymentPP;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts('validateScanPaymentPP',3); // if( isset($_POST['orderIDPP']) && strlen($_POST['orderIDPP'])>5 ){ // $str2=strtoupper(trim($this->input->post('orderIDPP'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $usdCstx = ceil($_SESSION['hScnx']['scan_cost_invoice']/100); $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['trgt_dmnx']}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getHIndex($srcxidx); // $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $usdCstx = ceil($cstx/100); $itmx = "{$srcx}_IDX_{$srcxidx}"; } /**/ $this->load->model("Pp_mdl"); if( $this->Pp_mdl->mpxTxExistsUnspent($str2,$usdCstx) ){ $this->Pp_mdl->updateTxSpent($str2,$usdCstx,$itmx); // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("Home...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } echo "{$_SESSION['hScnx']['full_report']}"; } else if( $srcx=="hIndex" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } }/*EOVldx*/ // else if( $this->Pp_mdl->mpxTxExistsSpent($str2,$usdCstx) ){ echo "Error: Payment re-use Not Allowed"; } // else if( $this->Pp_mdl->mpxTxExistsUnspentInvalidAmt($str2,$usdCstx) ){ echo "Error: Paid amount invalid"; } // else{ echo "Error: Payment not found..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ }/*EO_clx*/ ?> Sg_rt.php 0000444 0001750 0001750 00000073632 14121122705 011745 0 ustar cyrus cyrus Scan your Website"; static $mScanYourWebsiteNow = "[ Scan Your Website Now ]"; static $mRunScanNow = "[ Run Scan Now ]"; static $dfltxSndrxIdx="hLabs"; static $SmartLinkApxKyx="f5vEH4AiEhlP9DKe206HQjcy4sTRcDxKYL9grBssgdhdhdhdhd"; static $TextSmsApxKyx="2ead24554469f74c56b92cc894dhdhdhdh"; static $TextSmsPrtnrxIdx="1258"; static $mTagz = ['kenya cyber security', 'kenya computer security', 'computer security', 'it security', 'cyber threats', 'cyber attacks', 'national cyber security centre', 'cyber security companies', 'cyber threat intelligence', 'cyber security information', 'cyber security threats', 'recent cyber attacks', 'top cybersecurity companies', 'cyber defence', 'recent cyber attacks 2019', 'cyber security expert', 'cyber security strategy', 'cyber security agency', 'best cyber security companies', 'cyber security degrees', 'cyber security attacks', 'cyber security firms', 'cyber security audit', 'cybersecurity for dummies', 'cyber security management', 'cyber security kenya', 'cyber security africa', 'cyber security assessment', 'cyber security fundamentals', 'industrial cyber security', 'website scanner', 'website vulnerability scanner', 'web vulnerability scanner', 'scan website for malware', 'site scanner', 'web scanner online', 'website security scan', 'scan website online', 'scan web', 'website vulnerability scanner online', 'free website vulnerability scanner', 'web application scanner', 'web vulnerability', 'free website malware scanner', 'web security scanner', 'website malware checker', 'web application security scanner', 'site malware scan', 'web application security scanner', 'scan my website for malware', 'best website malware scanner', 'check website vulnerability', 'web app vulnerability scanner', 'scan site for vulnerabilities', 'online website malware scanner', 'website vulnerability test', 'check my site for malware', 'web security solutions', 'hackable websites', 'vulnerable websites for testing', 'secure web services', 'web security service', 'website security audit', 'cyber security websites', 'website security test', 'scan website for vulnerabilities', 'website security checker', 'hacker', 'hacking websites', 'hacking news', 'computer hackers', 'white hats']; // static $msgx = [ "Get FREE sms alerts whenever your site becomes susceptible to hacking.\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Scan your website security ONLINE today. Stay ahead of hackers!\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Do you've an Item/Service you want to sell? Post it to webby.co.ke & get linked linked with potential clients nearby!\n#KaribuSokoni", "Found a lost item? Post it here. Lost something? We re-unite people with their lost Items E.g IDs,Certificates,Luggage,Pets.. Go to lostnfound.co.ke ", "Hello! hLabsCyberSpace invites you to it's affiliate program. Earn 40% for every referral you make. Sign-up today at hLabs.co.ke/affiliates " ]; static $mWhatsAppConv = ''; static $dfltEml = "info@hlabs.co.ke"; static $scndryEml = "hLabsCyberSpace@gmail.com"; static $cyEmlx = "cy.mwanikih@gmail.com"; static $dfltWhtspp = "+254746517606"; static $dfltCllx = "+254746517606"; static $dfltAlrtx = "254746517606"; static $dfltLctnx = "Nairobi, KE"; static $fbPgx = "https://www.facebook.com/hLabsScan"; static $ttxPgx = "https://www.facebook.com/hLabsScan"; static $lxPgx = "https://www.linkedin.com/company/hlabscyberspace"; var $maxAttempts; static $mSellx = "Scan"; static $mBrkx = ""; static $mPrmx = ""; static $mCbx="?cbx=211"; static $mThmx="Slthx_/"; static $mFBxAppId="503716917098172"; static $mFBxVrxn="v9.0";//v2.11 //static $mGtag = "UA-180596627-1"; static $mGtag = "UA-193749983-1"; static $spltxScrnx = " class='col-lg-12 col-md-12 col-sm-12'"; static $mCnnclx = "https://www.hlabs.co.ke"; //static $mRgxKE = "/(mail.ru|zakazaka.ru|delivery-club.ru|lootdog.io|city-mobil.ru|my.games|donationalerts|samokat|rkeeper|sber|plazius|aliexpress.ru)/i"; static $mRgxKE = "/(\.ke|pesa|kcb|pay|buupass|\.ug|\.tz|\.rw|\.za|\.ng|bank|paypal|state|\.mil|\.africa)/i"; static $mRgx_SearchViewScan_URIx = "/\/(search|view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_ViewScan_URIx = "/\/(view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_View_URIx = "/\/view\/\d+/i"; static $mRgx_Scan_URIx = "/\/(online-website-security-scan|scan)/i"; // static $mRgx_Pyx_URIx_Mpx_Imgx = "/\/(online-website-security-scan|scan|premium\/bug\/\d|index\/view\/\d)/i"; static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 137; static $cstxMnx = 5; static $cstxMnxUSDx = 1; static $cstxXYZ = 1337; static $cstxPrmmxUprgade = 537; static $hScan_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Insecure communication (HTTP), Header Injection & Security Headers Misconfiguration"; static $hPrmmx_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Cross-site scripting, Insecure communication (HTTP) & Header Injection"; var $hIndexNoRxltx; var $mSellxSvgx; var $mNwScnx; public function __construct() { parent::__construct(); // ini_set('display_errors', 0); //error_reporting(~E_ALL); //$this->enableErrorReportingHere(); date_default_timezone_set("Africa/Nairobi"); // $this->load->helper("url"); // $this->maxAttempts=3; // $this->load->library('user_agent'); $this->mSellxSvgx = "[ Scan Your Website ] "; $this->mNwScnx = "[ New Scan ] "; // $this->hIndexNoRxltx = "No result found related to your search string; The site has either not been indexed or is 'safe'; Scan it here to be sure"; // $this->user_agents = ['Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36', 'Mozilla/5.0(Linux;Android 5.1.1;OPPO A33 Build/LMY47V;wv) AppleWebKit/537.36(KHTML,link Gecko) Version/4.0 Chrome/43.0.2357.121 Mobile Safari/537.36', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36 Google (+https://developers.google.com/+/web/snippet/)', 'Mozilla/5.0 (X11; U; Linux x86_64; zh-CN; rv:1.9.2.10) Gecko/20100922 Ubuntu/10.10 (maverick) Firefox/3.6.10', 'Mozilla/5.0 (Linux; Android 8.0.0; SM-G960F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 6P Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.83 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0; HTC One X10 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/61.0.3163.98 Mobile Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1', 'Mozilla/5.0 (Apple-iPhone7C2/1202.466; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A543 Safari/419.3', 'Mozilla/5.0 (Windows Phone 10.0; Android 4.2.1; Microsoft; RM-1127_16056) AppleWebKit/537.36(KHTML, like Gecko) Chrome/42.0.2311.135 Mobile Safari/537.36 Edge/12.10536', 'Mozilla/5.0 (Linux; Android 6.0.1; SHIELD Tablet K1 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/55.0.2883.91 Safari/537.36', 'Mozilla/5.0 (Linux; Android 4.4.3; KFTHWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/47.1.79 like Chrome/47.0.2526.80 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36', 'Roku4640X/DVP-7.70 (297.70E04154A)', 'Dalvik/2.1.0 (Linux; U; Android 6.0.1; Nexus Player Build/MMB29T)', 'AppleTV6,2/11.1', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; XBOX_ONE_ED) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393', 'Mozilla/5.0 (PlayStation Vita 3.61) AppleWebKit/537.73 (KHTML, like Gecko) Silk/3.2' ]; // $this->poc_ua = " -H 'User-Agent: ".$this->getUA()."' "; } function getUA(){ return "Mozilla/5.0 www.hLabs.co.ke/bot.html"; //return $this->getUA_(); } function getUA_(){ return $this->user_agents[ array_rand($this->user_agents) ]; } function mView($pg="home",$h_data=NULL,$data=NULL){ $data['body_online_scanner'] = "Strongly Recommended: Try out our [Online Website Security Scanner] New!"; // $data['body_contact_us'] = "Talk to us - We provide Thorough & Tested web security solutions"; // $data['body_our_services'] = "Check Out Our Services"; // $data['body_security_tips'] = "Quick, Easy Cyber Security Tips"; // preg_match("/\d.*/", $pg, $pg0); $this->load->view(Sg_rt::$mThmx."hdrx".$pg0[0], $h_data); $this->load->view(Sg_rt::$mThmx.$pg, $data); $this->load->view(Sg_rt::$mThmx."ftrx".$pg0[0]); } function mView_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("L_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P($pg="p_hmx_",$h_data=NULL,$data=NULL){ $geoInfo = $this->getGeoInfoFromIP(); $h_data['country'] = $geoInfo['country']; $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("p_ftrx"); } function mMaxAttempts($str,$cnt=1,$h403=FALSE){ if( !isset($_SESSION['HXLX'][$str]) || empty($_SESSION['HXLX'][$str]) ){ $_SESSION['HXLX'][$str] = 1; } else{ $_SESSION['HXLX'][$str]++; } if( $_SESSION['HXLX'][$str]>($this->maxAttempts*$cnt) ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed - Too many attempts"; exit(); } } function mAuthStr($str=NULL, $h403=FALSE){ if( $str!="CyxMwx".date("H") ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed"; exit(); } } function m403(){ header("HTTP/2 403 Forbidden"); exit(); } function mDontCache(){ header("Cache-Control: no-store, no-cache, must-revalidate, max-age=-1"); header("Expires: Mon, 1 July 1970 05:00:00 GMT"); //header("Cache-Control: post-check=0, pre-check=0", false); header("Pragma: no-cache"); } function mNoIndex(){ header("X-Robots-Tag: noindex"); } function mCache($agx=3600){ header("Cache-Control: max-age={$agx}"); // $dt=date("Y-m-d H:i:s"); $scx = strtotime($dt)+$agx; $nwdt = date ("r", $scx); //echo $nwdt; header("Expires: {$nwdt}"); //header("Pragma: cache"); } function mRedir($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } static function mRedir_($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } // function disableErrorReportingHere(){ ini_set('display_errors', 0); error_reporting(~E_ALL); } // function enableErrorReportingHere(){ ini_set('display_errors', 1); error_reporting(E_ALL); } // function hash546($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // static function hash546_($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // function x_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // $s_=""; $e_=""; if($clrx=="green"){ $s_ = "\e[1;32;40m"; $e_ = "\e[0m"; } // if( fwrite($log_fh, date("Y-m-d H:i:s").";{$s_} {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} {$e_}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // static function s_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function hLgx($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/hLgx", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } //fxnx,trgtx,pyldx,hcdx,hdrx, if( fwrite($log_fh, date("Y-m-d H:i:s").";{$strx}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function userIsBot(){ $this->load->library('user_agent'); // if( $this->agent->is_robot() ){ return TRUE; } return FALSE; } // static function userIsBot_(){ if( preg_match("/bot/i",$_SERVER['HTTP_USER_AGENT']) ){ return TRUE; } return FALSE; } // function getGeoInfoFromIP(){ /*$xml = simplexml_load_file("http://www.geoplugin.net/xml.gp?ip=".$_SERVER['REMOTE_ADDR']); return ["country"=>$xml->geoplugin_countryName,"city"=>$xml->geoplugin_city];*/ return [ "country"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"city"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"IP"=>$_SERVER['HTTP_X_FORWARDED_FOR'] ]; } // function metaRefresh($url, $say=NULL){ if( !empty($say) ){ echo $say; } // echo ""; // exit(); } // function x_ml($arr){ $this->x_log( "Sg_rt x_ml.."); return; /*/ if(empty($arr)){ echo "[...]"; return; } // $config['protocol'] = 'smtp'; $config['smtp_host'] = "ssl://server1.noc254.com"; $config['smtp_port'] = 465; $config['smtp_user'] = Sg_rt::$dfltEml; $config['smtp_pass'] = getenv("EmlxPsswdx");; $config['mailtype'] = 'html'; $config['charset'] = 'iso-8859-1'; $config['wordwrap'] = TRUE; $config['smtp_crypto'] = "TLS"; $config['validate'] = TRUE; // $this->load->library('email',$config); $this->email->set_newline("\r\n"); $this->email->to($arr['to']); $this->email->from(Sg_rt::$dfltEml, Sg_rt::$sys_nm); $this->email->subject($arr['subj']); $this->email->message( $arr['msg'].$this->getMl_Sig() ); // $this->email->CC(Sg_rt::$scndryEml); $this->email->reply_to(Sg_rt::$scndryEml); // if($this->email->send()){ $this->x_log( "Sg_rt x_ml... Sent! "); return TRUE; } else{ $this->x_log( "Sg_rt x_ml... !Sent ".$this->email->print_debugger(array('headers')) ); return FALSE; }*/ } // function x_mlrx($arr=NULL){ $this->x_ml($arr); return; } // function getMl_Sig(){ return " ".Sg_rt::$sys_nm." WhatsApp: ".Sg_rt::$dfltWhtspp." Email: ".Sg_rt::$dfltEml." hlabs.co.ke Twitter: https://twitter.com/hLabsCyberSpace Facebook: https://www.facebook.com/hLabsCyberSpace "; } // function xmxTS($arr=NULL){ $this->x_log("xmxTS...".json_encode($arr)); // $rspx = $this->x_curl( site_url("xmx1970/TextSms"), http_build_query($arr) ); $this->x_log("xmxTS...".$rspx); return "xmxTS...".$rspx; } // function xmxTS_($arr=NULL){ $this->x_log( "xmxTS_...".json_encode($arr)); $this->xmxTS($arr); } // function getRndmStr(){ return sha1( $this->hash546( time(). (time()%7) ) ); } // function uncsarize($str, $offset=3){ return $this->csarize($str, 26-$offset); } // function csarize( $message, $key=3 ){ $plaintext = strtolower( $message ); $ciphertext = ""; $ascii_a = ord( 'a' ); $ascii_z = ord( 'z' ); while( strlen( $plaintext ) ){ $char = ord( $plaintext ); if( $char >= $ascii_a && $char <= $ascii_z ){ $char = ( ( $key + $char - $ascii_a ) % 26 ) + $ascii_a; } $plaintext = substr( $plaintext, 1 ); $ciphertext .= chr( $char ); } return $ciphertext; } // function XmxCrdx($strx=NULL){ $mRetx = ""; switch ($strx) { case 'dfltxSndrxIdx': $mRetx = getenv("dfltxSndrxIdx"); break; case 'SmartLinkApxKyx': $mRetx = getenv("SmartLinkApxKyx"); break; case 'TextSmsApxKyx': $mRetx = getenv("TextSmsApxKyx"); break; case 'TextSmsPrtnrxIdx': $mRetx = getenv("TextSmsPrtnrxIdx"); break; default: $mRetx = ""; break; } return $mRetx; } // function x_curl($url, $params){ $post = curl_init(); curl_setopt($post, CURLOPT_URL, $url); curl_setopt($post, CURLOPT_POSTFIELDS, $params); curl_setopt($post, CURLOPT_RETURNTRANSFER, 1); curl_setopt($post, CURLOPT_HEADER, "User-Agent: ".$this->getUA_()); curl_setopt($post, CURLOPT_SSL_VERIFYPEER, false); $result = curl_exec($post); curl_close($post); return $result; } // function psBaseUrlx_($strx=NULL){ $mRgxBaseUrlx_ = '/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i'; preg_match( $mRgxBaseUrlx_,$strx ,$urlxMtchx ); return $urlxMtchx[0]; } // function chkRdrx_($strx=NULL){ $rspx = $this->x_curl( site_url("hEngine_/chkRdrx"), http_build_query(['urlx'=>$strx]) ); $this->x_log("chkRdrx_...".$rspx); return $rspx; } // static function cleanURLStr($str){ $str = preg_replace('~[^\\pL0-9_]+~u', '-', $str); $str = trim($str, "-"); $str = iconv("utf-8", "us-ascii//TRANSLIT", $str); $str = strtolower($str); $str = preg_replace('~[^-a-z0-9_]+~', '', $str); return $str; } static function cleanStr($str, $str_=" "){ $str = preg_replace( '/[^a-z0-9\-\_\.]/i', $str_, trim($str) ); $str = preg_replace( '/'.$str_.'+/i', $str_, trim($str) ); return $str; } function trim($strx){ return htmlentities(trim($strx)); } function genViewLnk($dmx=NULL){ $view_lnk_descr = Sg_rt::cleanStr( $dmx ); return site_url("index/search?str={$view_lnk_descr}"); } function psReqdPrmx($sthx=NULL,$fxnx=NULL){ if( !is_array($sthx) ){ if( empty(trim($strx)) ){ $this->x_log("psReqdPrmx {$fxnx}... Error: empty! {$strx}"); echo "Required Parameter Missing"; return FALSE; } return TRUE; } // else if( !empty($sthx[0]) ){ foreach( $sthx as $val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_S_Arrx... Error: empty! {$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // else{ foreach( $sthx as $key=>$val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_Assoc_Arrx... Error: empty! {$key}->{$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // } function mAlrtx($arrx=NULL){ $arrx['to'] = Sg_rt::$cyEmlx; $this->x_ml($arrx); } function mRgx($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } static function mRgx_($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } function webPoC($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_CP($strx=NULL){ return " Open this URL in your browser: {$strx}"; } /*static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 237; static $cstxXYZ = 1337;*/ function genHIX_Cstx($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genHIX_Cstx_($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genXHash($strx=NULL,$sess=TRUE){ if( $sess==TRUE ){ return Sg_rt::hash546_( $strx.session_id() ); } return Sg_rt::hash546_( $strx ); } function validEmlx($strx=NULL){ $mRgxValidEmlx = "/^[a-z0-9\_\-\.]{3,50}\@[a-z0-9\_\-\.]{3,50}$/i"; if( $this->mRgx($mRgxValidEmlx,$strx) ){ return TRUE; } return FALSE; } /**/ function validDmnx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) && !preg_match("/(hlabs|webby|monroe|lostnfound|173.255.210.181|google|gmail|yahoo|ymail|facebook|twitter|youtube|wordpress)/i",$strx) ){ return TRUE; } return FALSE; } function dmnxExists($strx=NULL){ if( dns_check_record($strx,"A") ){ return TRUE; } return FALSE; } function validDmnx_AllxAllwdx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) ){ return $ipx; } return FALSE; } function validUrlx($strx=NULL){ $mRgxValidUrlx = "/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i"; if( preg_match($mRgxValidUrlx,$strx) ){ return TRUE; } return FALSE; } // function exDmnx($strx=NULL){ $strx = preg_replace("/^http[s]?\:\/\//i","", $strx); $strx = preg_replace("/\/.*/","", $strx); // return strtolower($strx); } //Matches x.y (x.y.z maximum if z present) function exDmnxRtx($strx=NULL){ $mRgxDmxRtx_ = "/[a-z0-9\_\-]{2,50}\.[a-z]{2,10}(\.[a-z]{2,10})?$/i"; preg_match( $mRgxDmxRtx_,$strx ,$urlxMtchx ); return strtolower($urlxMtchx[0]); } function p_usrxAuthd($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } static function p_usrxAuthd_($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } function validCellNo($strx=NULL){ $mRgxValidCellNo_Kx = "/^(0|254|\+254)[0-9]{9,15}$/"; if( $this->mRgx($mRgxValidCellNo_Kx,$strx) ){ return TRUE; } return FALSE; } function psCellNo_Start_Zrx($strx=NULL){ $strx = trim($strx); $strx = preg_replace("/\s/","",$strx ); // $strx = preg_replace("/^(\+254|254)/","0",$strx ); $strx = preg_replace("/^7/","07",$strx ); return $strx; } function genStrx_Nx_6(){ return mt_rand(100000,999999); } // }/*EO_clx*/ ?> Xmx1970.php 0000444 0001750 0001750 00000043076 14112720750 011767 0 ustar cyrus cyrus enableErrorReportingHere(); // $this->load->helper("url"); // $this->mNoIndex(); $this->mDontCache(); // $this->psdArrx = []; } public function index($strx=NULL) { $this->x_log("Xmx1970...index;".$str); // $this->xAuthx($_REQUEST['strx']); // $this->load->view("HIndx_/hdrx"); $this->load->view("HIndx_/xmx"); $this->load->view("HIndx_/ftrx"); } function TextSms($strx=NULL){ $this->x_log("Xmx1970...TextSms...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !preg_match("/,/", $to) ){ $to = preg_replace("/[^\d]/", "", $to); if( !$this->validCellNo($to) ){ $this->m403(); } } if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("TextSms__".$to,11); // if( $this->NxBlckd($to) ){ $this->m403(); } // if( strlen($msg)>250 ){ $this->m403(); } // $url = 'https://sms.textsms.co.ke/api/services/sendsms/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); // $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), 'mobile' => $to, 'message' => $msg, 'shortcode' => $this->XmxCrdx("dfltxSndrxIdx"), 'pass_type' => 'plain', //"timeToSend":"2019-09-01 18:00" ); $data_string = json_encode($curl_post_data); $this->x_log("Ps'n: Len:".strlen($msg)."; ".$data_string,TRUE); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); $this->x_log("Rspx: ".$curl_response."; Blx: ".$this->TextSmsBlx($_REQUEST['strx']),TRUE); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$data_string."\nRspx: ".$curl_response ); }/*EOFxnx*/ function SmartLink($strx=NULL){ $this->x_log("Xmx1970...SmartLink...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $to = preg_replace("/[^\d]/", "", $to); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !$this->validCellNo($to) ){ $this->m403(); } $to = preg_replace("/^0/", "254", $to); if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("SmartLink_".$to,11); if( $this->NxBlckd($to) ){ $this->m403(); } $msg = urlencode($msg); $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $urlx = "https://sms.movesms.co.ke/api/schedule"; $rspx = $this->x_curl($urlx, $prmx); $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); }/*EOFxnx*/ /**/ function xAuthx($strx=NULL){ if( empty($strx) || strlen($strx)<8 || $strx != "HelloWorldx".date("H") ){ $this->mRedir(); exit(); } } function mDbg($strx=NULL){ echo "[".date("H:i:s")."] DBG: {$strx}"; } // function psNx($strx=NULL,$strx_=NULL){ $this->xAuthx($strx); // $log_fh = fopen("/home/cyrus/x_HXLX_Nx", "a"); // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$strx_} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function NxBlckd($strx=NULL){ $blckNx = [ "0100100100","0101010101","0700100100","0700100900","0720100900" ]; if( in_array($strx, $blckNx) ){ return TRUE; } return FALSE; } function txt1970_($strx=NULL){ ini_set('max_execution_time', 180); //Msmx.Usrx. $arrxXXX = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //TNX $arrx = [ "0757133337","0702157842","0718582309","0706644399","0758224681","0700892277","0792059563","0738922913","0707393976","0780936330","0718775433","0707402048","0708844291","0701772235","0706086072","0700795242","0114749334","0717285799","0791837624","0791544658","0748772095","0729954165","0758632088","0757560018","0724025108","0796431113" ]; /*/PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // //$arrx = [ '0700358941','0792843434' ]*/; //return; // shuffle($arrx); // $msg = urlencode(Sg_rt::$msgx[$msgxidx]); $urlx = "https://sms.movesms.co.ke/api/schedule"; // foreach( $arrx as $to ){ $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $rspx = $this->x_curl($urlx, $prmx); // $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); // $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); // $this->hSleep(1); } } function TextSmsBlx($strx=NULL){ $this->x_log("Xmx1970...TextSmsBlx;".$strx); $this->xAuthx($strx); $url = 'https://sms.textsms.co.ke/api/services/getbalance/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), ); $data_string = json_encode($curl_post_data); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); return $curl_response; } function txt1970($msgxidx=0){ //$this->enableErrorReportingHere(); ini_set('max_execution_time', 180); //Msmx.Usrx. $arrx = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // $arrx = [ '0700358941','0792843434' ]; return; // shuffle($arrx); // $arrx20x = []; $strx = "HelloWorldx".date("H"); $c=0; foreach( $arrx as $val ){ $c++; $arrx20x[]=$val; if( $c%20==0 || $c==count($arrx) ){ $rspx = $this->xmxTS_( [ 'to'=>implode(",", $arrx20x), 'msg'=>Sg_rt::$msgx[$msgxidx], 'strx'=>$strx ] ); $this->x_log("Rspx: ".$rspx,TRUE); // unset($arrx20x); $arrx20x = NULL; } $this->hSleep(0.1); } } // } // ?>
{$this->mFix_RE_O}RewriteCond %{HTTPS} !onRewriteRule (.*) https://{$_SESSION['hScnx']['trgt_dmnx']} [L,R=301]
x-frame-options: \"DENY\"
Header set X-XSS-Protection \"1; mode=block\"
Header set X-Content-Type-Options \"nosniff\"
Header Set Access-Control-Allow-Origin: \"{$_SESSION['hScnx']['trgt_dmnx']}\"
Cache-Control: no-store, no-cache, must-revalidate
Severity: ".$this->psSvrty($arr['bcidx'])." Confidence: {$arr['confidence']} {$vwxLnkx}
Tests Passed
Directory access is forbidden.
Dear {$eml_}
We acknowledge receipt of {$crrncy} {$amt} as payment for {$_SESSION['hScnx']['trgt_dmnx']} scan
Thanks & kind regards,
".Sg_rt::$sys_nm."
'; //print_r($strArr); //echo ''; // if( $this->savePpx($strArr) ){ echo "Saved"; } else{ echo "Not Saved"; } } // } ?> Pymntx.php 0000444 0001750 0001750 00000016630 14115350223 012162 0 ustar cyrus cyrus enableErrorReportingHere(); } function index(){ $this->x_log('Pymntx Index...'); $this->mRedir(); exit(); } /**/ function vldtxPymntx_KKx($str=NULL){ $this->x_log("HPremium...vldtxPymntx_KKx;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts("vldtxPymntx_KKx",3); // if( !empty($_POST['txcdx']) ){ $str2=strtoupper(trim($this->input->post('txcdx'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $cstx = $_SESSION['hScnx']['scan_cost_invoice']; $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['idx']}"; } else if( $srcx=="hPrmmx" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getVlnx_($srcxidx); $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl"); $arr = $this->HIndex_mdl->getHIndex($srcxidx); $cstx = $this->genHIX_Cstx($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } $pymntSttsJson = $this->x_curl( site_url("kk1970/validatePayment"), "str={$str2}&amt={$cstx}" ); $pymntSttsArr = json_decode($pymntSttsJson,TRUE); $pymntStts = $pymntSttsArr['descr']; $this->x_log("HPremium...vldtxPymntx_KKx; pymntStts: {$str2}; {$cstx}; ".$pymntSttsJson); $this->x_log("HPremium...vldtxPymntx_KKx; DBGx: {$itmx}___{$pymntSttsArr['tx_item']}"); if( $str2=="XZ72".date("H") || $pymntStts=="VALID" || ($pymntStts=="INVALID_SPENT" && $pymntSttsArr['tx_item']=="{$itmx}") ){ // if($pymntStts=="VALID"){ $this->x_curl( site_url("kk1970/expirePayment"), "str={$str2}&amt={$cstx}&item={$itmx}" ); } // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("HPremium...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } //echo "{$_SESSION['hScnx']['full_report']}"; $_SESSION['hScnx']['dmnx_pdx'] = $_SESSION['hScnx']['trgt_dmnx']; $this->metaRefresh(site_url("online-website-security-scan-report")); } else if( $srcx=="hPrmmx" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hPrmmx']['idx_pdx_'.$srcxidx] = $srcxidx; // //echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; $this->metaRefresh(site_url("premium/bug/".$srcxidx)); } else if( $srcx=="hIndex" ){ $arr2 = HIndex::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } } // else if( $pymntStts=="INVALID_SPENT" ){ echo "Error: Payment reuse not allowed"; } // else if( $pymntStts=="INVALID_REQUEST" ){ echo "Error: Invalid payment request"; } // else if( $pymntStts=="INVALID_AMOUNT" ){ echo "Error: Paid amount invalid"; } // else if( $pymntStts=="INVALID_NOMATCH" ){ echo "Error: Payment not found; If you just made the payment, wait a few seconds before retrying..."; } // else{ echo "Error: Unkown error occured; If you just made the payment, wait a few seconds before retrying..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ function vldtxPymntx_PPx($str=NULL){ $this->x_log("Home...validateScanPaymentPP;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts('validateScanPaymentPP',3); // if( isset($_POST['orderIDPP']) && strlen($_POST['orderIDPP'])>5 ){ // $str2=strtoupper(trim($this->input->post('orderIDPP'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $usdCstx = ceil($_SESSION['hScnx']['scan_cost_invoice']/100); $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['trgt_dmnx']}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getHIndex($srcxidx); // $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $usdCstx = ceil($cstx/100); $itmx = "{$srcx}_IDX_{$srcxidx}"; } /**/ $this->load->model("Pp_mdl"); if( $this->Pp_mdl->mpxTxExistsUnspent($str2,$usdCstx) ){ $this->Pp_mdl->updateTxSpent($str2,$usdCstx,$itmx); // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("Home...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } echo "{$_SESSION['hScnx']['full_report']}"; } else if( $srcx=="hIndex" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } }/*EOVldx*/ // else if( $this->Pp_mdl->mpxTxExistsSpent($str2,$usdCstx) ){ echo "Error: Payment re-use Not Allowed"; } // else if( $this->Pp_mdl->mpxTxExistsUnspentInvalidAmt($str2,$usdCstx) ){ echo "Error: Paid amount invalid"; } // else{ echo "Error: Payment not found..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ }/*EO_clx*/ ?> Sg_rt.php 0000444 0001750 0001750 00000073632 14121122705 011745 0 ustar cyrus cyrus Scan your Website"; static $mScanYourWebsiteNow = "[ Scan Your Website Now ]"; static $mRunScanNow = "[ Run Scan Now ]"; static $dfltxSndrxIdx="hLabs"; static $SmartLinkApxKyx="f5vEH4AiEhlP9DKe206HQjcy4sTRcDxKYL9grBssgdhdhdhdhd"; static $TextSmsApxKyx="2ead24554469f74c56b92cc894dhdhdhdh"; static $TextSmsPrtnrxIdx="1258"; static $mTagz = ['kenya cyber security', 'kenya computer security', 'computer security', 'it security', 'cyber threats', 'cyber attacks', 'national cyber security centre', 'cyber security companies', 'cyber threat intelligence', 'cyber security information', 'cyber security threats', 'recent cyber attacks', 'top cybersecurity companies', 'cyber defence', 'recent cyber attacks 2019', 'cyber security expert', 'cyber security strategy', 'cyber security agency', 'best cyber security companies', 'cyber security degrees', 'cyber security attacks', 'cyber security firms', 'cyber security audit', 'cybersecurity for dummies', 'cyber security management', 'cyber security kenya', 'cyber security africa', 'cyber security assessment', 'cyber security fundamentals', 'industrial cyber security', 'website scanner', 'website vulnerability scanner', 'web vulnerability scanner', 'scan website for malware', 'site scanner', 'web scanner online', 'website security scan', 'scan website online', 'scan web', 'website vulnerability scanner online', 'free website vulnerability scanner', 'web application scanner', 'web vulnerability', 'free website malware scanner', 'web security scanner', 'website malware checker', 'web application security scanner', 'site malware scan', 'web application security scanner', 'scan my website for malware', 'best website malware scanner', 'check website vulnerability', 'web app vulnerability scanner', 'scan site for vulnerabilities', 'online website malware scanner', 'website vulnerability test', 'check my site for malware', 'web security solutions', 'hackable websites', 'vulnerable websites for testing', 'secure web services', 'web security service', 'website security audit', 'cyber security websites', 'website security test', 'scan website for vulnerabilities', 'website security checker', 'hacker', 'hacking websites', 'hacking news', 'computer hackers', 'white hats']; // static $msgx = [ "Get FREE sms alerts whenever your site becomes susceptible to hacking.\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Scan your website security ONLINE today. Stay ahead of hackers!\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Do you've an Item/Service you want to sell? Post it to webby.co.ke & get linked linked with potential clients nearby!\n#KaribuSokoni", "Found a lost item? Post it here. Lost something? We re-unite people with their lost Items E.g IDs,Certificates,Luggage,Pets.. Go to lostnfound.co.ke ", "Hello! hLabsCyberSpace invites you to it's affiliate program. Earn 40% for every referral you make. Sign-up today at hLabs.co.ke/affiliates " ]; static $mWhatsAppConv = ''; static $dfltEml = "info@hlabs.co.ke"; static $scndryEml = "hLabsCyberSpace@gmail.com"; static $cyEmlx = "cy.mwanikih@gmail.com"; static $dfltWhtspp = "+254746517606"; static $dfltCllx = "+254746517606"; static $dfltAlrtx = "254746517606"; static $dfltLctnx = "Nairobi, KE"; static $fbPgx = "https://www.facebook.com/hLabsScan"; static $ttxPgx = "https://www.facebook.com/hLabsScan"; static $lxPgx = "https://www.linkedin.com/company/hlabscyberspace"; var $maxAttempts; static $mSellx = "Scan"; static $mBrkx = ""; static $mPrmx = ""; static $mCbx="?cbx=211"; static $mThmx="Slthx_/"; static $mFBxAppId="503716917098172"; static $mFBxVrxn="v9.0";//v2.11 //static $mGtag = "UA-180596627-1"; static $mGtag = "UA-193749983-1"; static $spltxScrnx = " class='col-lg-12 col-md-12 col-sm-12'"; static $mCnnclx = "https://www.hlabs.co.ke"; //static $mRgxKE = "/(mail.ru|zakazaka.ru|delivery-club.ru|lootdog.io|city-mobil.ru|my.games|donationalerts|samokat|rkeeper|sber|plazius|aliexpress.ru)/i"; static $mRgxKE = "/(\.ke|pesa|kcb|pay|buupass|\.ug|\.tz|\.rw|\.za|\.ng|bank|paypal|state|\.mil|\.africa)/i"; static $mRgx_SearchViewScan_URIx = "/\/(search|view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_ViewScan_URIx = "/\/(view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_View_URIx = "/\/view\/\d+/i"; static $mRgx_Scan_URIx = "/\/(online-website-security-scan|scan)/i"; // static $mRgx_Pyx_URIx_Mpx_Imgx = "/\/(online-website-security-scan|scan|premium\/bug\/\d|index\/view\/\d)/i"; static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 137; static $cstxMnx = 5; static $cstxMnxUSDx = 1; static $cstxXYZ = 1337; static $cstxPrmmxUprgade = 537; static $hScan_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Insecure communication (HTTP), Header Injection & Security Headers Misconfiguration"; static $hPrmmx_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Cross-site scripting, Insecure communication (HTTP) & Header Injection"; var $hIndexNoRxltx; var $mSellxSvgx; var $mNwScnx; public function __construct() { parent::__construct(); // ini_set('display_errors', 0); //error_reporting(~E_ALL); //$this->enableErrorReportingHere(); date_default_timezone_set("Africa/Nairobi"); // $this->load->helper("url"); // $this->maxAttempts=3; // $this->load->library('user_agent'); $this->mSellxSvgx = "[ Scan Your Website ] "; $this->mNwScnx = "[ New Scan ] "; // $this->hIndexNoRxltx = "No result found related to your search string; The site has either not been indexed or is 'safe'; Scan it here to be sure"; // $this->user_agents = ['Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36', 'Mozilla/5.0(Linux;Android 5.1.1;OPPO A33 Build/LMY47V;wv) AppleWebKit/537.36(KHTML,link Gecko) Version/4.0 Chrome/43.0.2357.121 Mobile Safari/537.36', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36 Google (+https://developers.google.com/+/web/snippet/)', 'Mozilla/5.0 (X11; U; Linux x86_64; zh-CN; rv:1.9.2.10) Gecko/20100922 Ubuntu/10.10 (maverick) Firefox/3.6.10', 'Mozilla/5.0 (Linux; Android 8.0.0; SM-G960F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 6P Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.83 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0; HTC One X10 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/61.0.3163.98 Mobile Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1', 'Mozilla/5.0 (Apple-iPhone7C2/1202.466; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A543 Safari/419.3', 'Mozilla/5.0 (Windows Phone 10.0; Android 4.2.1; Microsoft; RM-1127_16056) AppleWebKit/537.36(KHTML, like Gecko) Chrome/42.0.2311.135 Mobile Safari/537.36 Edge/12.10536', 'Mozilla/5.0 (Linux; Android 6.0.1; SHIELD Tablet K1 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/55.0.2883.91 Safari/537.36', 'Mozilla/5.0 (Linux; Android 4.4.3; KFTHWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/47.1.79 like Chrome/47.0.2526.80 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36', 'Roku4640X/DVP-7.70 (297.70E04154A)', 'Dalvik/2.1.0 (Linux; U; Android 6.0.1; Nexus Player Build/MMB29T)', 'AppleTV6,2/11.1', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; XBOX_ONE_ED) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393', 'Mozilla/5.0 (PlayStation Vita 3.61) AppleWebKit/537.73 (KHTML, like Gecko) Silk/3.2' ]; // $this->poc_ua = " -H 'User-Agent: ".$this->getUA()."' "; } function getUA(){ return "Mozilla/5.0 www.hLabs.co.ke/bot.html"; //return $this->getUA_(); } function getUA_(){ return $this->user_agents[ array_rand($this->user_agents) ]; } function mView($pg="home",$h_data=NULL,$data=NULL){ $data['body_online_scanner'] = "Strongly Recommended: Try out our [Online Website Security Scanner] New!"; // $data['body_contact_us'] = "Talk to us - We provide Thorough & Tested web security solutions"; // $data['body_our_services'] = "Check Out Our Services"; // $data['body_security_tips'] = "Quick, Easy Cyber Security Tips"; // preg_match("/\d.*/", $pg, $pg0); $this->load->view(Sg_rt::$mThmx."hdrx".$pg0[0], $h_data); $this->load->view(Sg_rt::$mThmx.$pg, $data); $this->load->view(Sg_rt::$mThmx."ftrx".$pg0[0]); } function mView_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("L_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P($pg="p_hmx_",$h_data=NULL,$data=NULL){ $geoInfo = $this->getGeoInfoFromIP(); $h_data['country'] = $geoInfo['country']; $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("p_ftrx"); } function mMaxAttempts($str,$cnt=1,$h403=FALSE){ if( !isset($_SESSION['HXLX'][$str]) || empty($_SESSION['HXLX'][$str]) ){ $_SESSION['HXLX'][$str] = 1; } else{ $_SESSION['HXLX'][$str]++; } if( $_SESSION['HXLX'][$str]>($this->maxAttempts*$cnt) ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed - Too many attempts"; exit(); } } function mAuthStr($str=NULL, $h403=FALSE){ if( $str!="CyxMwx".date("H") ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed"; exit(); } } function m403(){ header("HTTP/2 403 Forbidden"); exit(); } function mDontCache(){ header("Cache-Control: no-store, no-cache, must-revalidate, max-age=-1"); header("Expires: Mon, 1 July 1970 05:00:00 GMT"); //header("Cache-Control: post-check=0, pre-check=0", false); header("Pragma: no-cache"); } function mNoIndex(){ header("X-Robots-Tag: noindex"); } function mCache($agx=3600){ header("Cache-Control: max-age={$agx}"); // $dt=date("Y-m-d H:i:s"); $scx = strtotime($dt)+$agx; $nwdt = date ("r", $scx); //echo $nwdt; header("Expires: {$nwdt}"); //header("Pragma: cache"); } function mRedir($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } static function mRedir_($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } // function disableErrorReportingHere(){ ini_set('display_errors', 0); error_reporting(~E_ALL); } // function enableErrorReportingHere(){ ini_set('display_errors', 1); error_reporting(E_ALL); } // function hash546($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // static function hash546_($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // function x_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // $s_=""; $e_=""; if($clrx=="green"){ $s_ = "\e[1;32;40m"; $e_ = "\e[0m"; } // if( fwrite($log_fh, date("Y-m-d H:i:s").";{$s_} {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} {$e_}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // static function s_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function hLgx($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/hLgx", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } //fxnx,trgtx,pyldx,hcdx,hdrx, if( fwrite($log_fh, date("Y-m-d H:i:s").";{$strx}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function userIsBot(){ $this->load->library('user_agent'); // if( $this->agent->is_robot() ){ return TRUE; } return FALSE; } // static function userIsBot_(){ if( preg_match("/bot/i",$_SERVER['HTTP_USER_AGENT']) ){ return TRUE; } return FALSE; } // function getGeoInfoFromIP(){ /*$xml = simplexml_load_file("http://www.geoplugin.net/xml.gp?ip=".$_SERVER['REMOTE_ADDR']); return ["country"=>$xml->geoplugin_countryName,"city"=>$xml->geoplugin_city];*/ return [ "country"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"city"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"IP"=>$_SERVER['HTTP_X_FORWARDED_FOR'] ]; } // function metaRefresh($url, $say=NULL){ if( !empty($say) ){ echo $say; } // echo ""; // exit(); } // function x_ml($arr){ $this->x_log( "Sg_rt x_ml.."); return; /*/ if(empty($arr)){ echo "[...]"; return; } // $config['protocol'] = 'smtp'; $config['smtp_host'] = "ssl://server1.noc254.com"; $config['smtp_port'] = 465; $config['smtp_user'] = Sg_rt::$dfltEml; $config['smtp_pass'] = getenv("EmlxPsswdx");; $config['mailtype'] = 'html'; $config['charset'] = 'iso-8859-1'; $config['wordwrap'] = TRUE; $config['smtp_crypto'] = "TLS"; $config['validate'] = TRUE; // $this->load->library('email',$config); $this->email->set_newline("\r\n"); $this->email->to($arr['to']); $this->email->from(Sg_rt::$dfltEml, Sg_rt::$sys_nm); $this->email->subject($arr['subj']); $this->email->message( $arr['msg'].$this->getMl_Sig() ); // $this->email->CC(Sg_rt::$scndryEml); $this->email->reply_to(Sg_rt::$scndryEml); // if($this->email->send()){ $this->x_log( "Sg_rt x_ml... Sent! "); return TRUE; } else{ $this->x_log( "Sg_rt x_ml... !Sent ".$this->email->print_debugger(array('headers')) ); return FALSE; }*/ } // function x_mlrx($arr=NULL){ $this->x_ml($arr); return; } // function getMl_Sig(){ return " ".Sg_rt::$sys_nm." WhatsApp: ".Sg_rt::$dfltWhtspp." Email: ".Sg_rt::$dfltEml." hlabs.co.ke Twitter: https://twitter.com/hLabsCyberSpace Facebook: https://www.facebook.com/hLabsCyberSpace "; } // function xmxTS($arr=NULL){ $this->x_log("xmxTS...".json_encode($arr)); // $rspx = $this->x_curl( site_url("xmx1970/TextSms"), http_build_query($arr) ); $this->x_log("xmxTS...".$rspx); return "xmxTS...".$rspx; } // function xmxTS_($arr=NULL){ $this->x_log( "xmxTS_...".json_encode($arr)); $this->xmxTS($arr); } // function getRndmStr(){ return sha1( $this->hash546( time(). (time()%7) ) ); } // function uncsarize($str, $offset=3){ return $this->csarize($str, 26-$offset); } // function csarize( $message, $key=3 ){ $plaintext = strtolower( $message ); $ciphertext = ""; $ascii_a = ord( 'a' ); $ascii_z = ord( 'z' ); while( strlen( $plaintext ) ){ $char = ord( $plaintext ); if( $char >= $ascii_a && $char <= $ascii_z ){ $char = ( ( $key + $char - $ascii_a ) % 26 ) + $ascii_a; } $plaintext = substr( $plaintext, 1 ); $ciphertext .= chr( $char ); } return $ciphertext; } // function XmxCrdx($strx=NULL){ $mRetx = ""; switch ($strx) { case 'dfltxSndrxIdx': $mRetx = getenv("dfltxSndrxIdx"); break; case 'SmartLinkApxKyx': $mRetx = getenv("SmartLinkApxKyx"); break; case 'TextSmsApxKyx': $mRetx = getenv("TextSmsApxKyx"); break; case 'TextSmsPrtnrxIdx': $mRetx = getenv("TextSmsPrtnrxIdx"); break; default: $mRetx = ""; break; } return $mRetx; } // function x_curl($url, $params){ $post = curl_init(); curl_setopt($post, CURLOPT_URL, $url); curl_setopt($post, CURLOPT_POSTFIELDS, $params); curl_setopt($post, CURLOPT_RETURNTRANSFER, 1); curl_setopt($post, CURLOPT_HEADER, "User-Agent: ".$this->getUA_()); curl_setopt($post, CURLOPT_SSL_VERIFYPEER, false); $result = curl_exec($post); curl_close($post); return $result; } // function psBaseUrlx_($strx=NULL){ $mRgxBaseUrlx_ = '/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i'; preg_match( $mRgxBaseUrlx_,$strx ,$urlxMtchx ); return $urlxMtchx[0]; } // function chkRdrx_($strx=NULL){ $rspx = $this->x_curl( site_url("hEngine_/chkRdrx"), http_build_query(['urlx'=>$strx]) ); $this->x_log("chkRdrx_...".$rspx); return $rspx; } // static function cleanURLStr($str){ $str = preg_replace('~[^\\pL0-9_]+~u', '-', $str); $str = trim($str, "-"); $str = iconv("utf-8", "us-ascii//TRANSLIT", $str); $str = strtolower($str); $str = preg_replace('~[^-a-z0-9_]+~', '', $str); return $str; } static function cleanStr($str, $str_=" "){ $str = preg_replace( '/[^a-z0-9\-\_\.]/i', $str_, trim($str) ); $str = preg_replace( '/'.$str_.'+/i', $str_, trim($str) ); return $str; } function trim($strx){ return htmlentities(trim($strx)); } function genViewLnk($dmx=NULL){ $view_lnk_descr = Sg_rt::cleanStr( $dmx ); return site_url("index/search?str={$view_lnk_descr}"); } function psReqdPrmx($sthx=NULL,$fxnx=NULL){ if( !is_array($sthx) ){ if( empty(trim($strx)) ){ $this->x_log("psReqdPrmx {$fxnx}... Error: empty! {$strx}"); echo "Required Parameter Missing"; return FALSE; } return TRUE; } // else if( !empty($sthx[0]) ){ foreach( $sthx as $val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_S_Arrx... Error: empty! {$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // else{ foreach( $sthx as $key=>$val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_Assoc_Arrx... Error: empty! {$key}->{$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // } function mAlrtx($arrx=NULL){ $arrx['to'] = Sg_rt::$cyEmlx; $this->x_ml($arrx); } function mRgx($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } static function mRgx_($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } function webPoC($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_CP($strx=NULL){ return " Open this URL in your browser: {$strx}"; } /*static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 237; static $cstxXYZ = 1337;*/ function genHIX_Cstx($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genHIX_Cstx_($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genXHash($strx=NULL,$sess=TRUE){ if( $sess==TRUE ){ return Sg_rt::hash546_( $strx.session_id() ); } return Sg_rt::hash546_( $strx ); } function validEmlx($strx=NULL){ $mRgxValidEmlx = "/^[a-z0-9\_\-\.]{3,50}\@[a-z0-9\_\-\.]{3,50}$/i"; if( $this->mRgx($mRgxValidEmlx,$strx) ){ return TRUE; } return FALSE; } /**/ function validDmnx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) && !preg_match("/(hlabs|webby|monroe|lostnfound|173.255.210.181|google|gmail|yahoo|ymail|facebook|twitter|youtube|wordpress)/i",$strx) ){ return TRUE; } return FALSE; } function dmnxExists($strx=NULL){ if( dns_check_record($strx,"A") ){ return TRUE; } return FALSE; } function validDmnx_AllxAllwdx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) ){ return $ipx; } return FALSE; } function validUrlx($strx=NULL){ $mRgxValidUrlx = "/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i"; if( preg_match($mRgxValidUrlx,$strx) ){ return TRUE; } return FALSE; } // function exDmnx($strx=NULL){ $strx = preg_replace("/^http[s]?\:\/\//i","", $strx); $strx = preg_replace("/\/.*/","", $strx); // return strtolower($strx); } //Matches x.y (x.y.z maximum if z present) function exDmnxRtx($strx=NULL){ $mRgxDmxRtx_ = "/[a-z0-9\_\-]{2,50}\.[a-z]{2,10}(\.[a-z]{2,10})?$/i"; preg_match( $mRgxDmxRtx_,$strx ,$urlxMtchx ); return strtolower($urlxMtchx[0]); } function p_usrxAuthd($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } static function p_usrxAuthd_($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } function validCellNo($strx=NULL){ $mRgxValidCellNo_Kx = "/^(0|254|\+254)[0-9]{9,15}$/"; if( $this->mRgx($mRgxValidCellNo_Kx,$strx) ){ return TRUE; } return FALSE; } function psCellNo_Start_Zrx($strx=NULL){ $strx = trim($strx); $strx = preg_replace("/\s/","",$strx ); // $strx = preg_replace("/^(\+254|254)/","0",$strx ); $strx = preg_replace("/^7/","07",$strx ); return $strx; } function genStrx_Nx_6(){ return mt_rand(100000,999999); } // }/*EO_clx*/ ?> Xmx1970.php 0000444 0001750 0001750 00000043076 14112720750 011767 0 ustar cyrus cyrus enableErrorReportingHere(); // $this->load->helper("url"); // $this->mNoIndex(); $this->mDontCache(); // $this->psdArrx = []; } public function index($strx=NULL) { $this->x_log("Xmx1970...index;".$str); // $this->xAuthx($_REQUEST['strx']); // $this->load->view("HIndx_/hdrx"); $this->load->view("HIndx_/xmx"); $this->load->view("HIndx_/ftrx"); } function TextSms($strx=NULL){ $this->x_log("Xmx1970...TextSms...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !preg_match("/,/", $to) ){ $to = preg_replace("/[^\d]/", "", $to); if( !$this->validCellNo($to) ){ $this->m403(); } } if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("TextSms__".$to,11); // if( $this->NxBlckd($to) ){ $this->m403(); } // if( strlen($msg)>250 ){ $this->m403(); } // $url = 'https://sms.textsms.co.ke/api/services/sendsms/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); // $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), 'mobile' => $to, 'message' => $msg, 'shortcode' => $this->XmxCrdx("dfltxSndrxIdx"), 'pass_type' => 'plain', //"timeToSend":"2019-09-01 18:00" ); $data_string = json_encode($curl_post_data); $this->x_log("Ps'n: Len:".strlen($msg)."; ".$data_string,TRUE); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); $this->x_log("Rspx: ".$curl_response."; Blx: ".$this->TextSmsBlx($_REQUEST['strx']),TRUE); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$data_string."\nRspx: ".$curl_response ); }/*EOFxnx*/ function SmartLink($strx=NULL){ $this->x_log("Xmx1970...SmartLink...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $to = preg_replace("/[^\d]/", "", $to); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !$this->validCellNo($to) ){ $this->m403(); } $to = preg_replace("/^0/", "254", $to); if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("SmartLink_".$to,11); if( $this->NxBlckd($to) ){ $this->m403(); } $msg = urlencode($msg); $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $urlx = "https://sms.movesms.co.ke/api/schedule"; $rspx = $this->x_curl($urlx, $prmx); $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); }/*EOFxnx*/ /**/ function xAuthx($strx=NULL){ if( empty($strx) || strlen($strx)<8 || $strx != "HelloWorldx".date("H") ){ $this->mRedir(); exit(); } } function mDbg($strx=NULL){ echo "[".date("H:i:s")."] DBG: {$strx}"; } // function psNx($strx=NULL,$strx_=NULL){ $this->xAuthx($strx); // $log_fh = fopen("/home/cyrus/x_HXLX_Nx", "a"); // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$strx_} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function NxBlckd($strx=NULL){ $blckNx = [ "0100100100","0101010101","0700100100","0700100900","0720100900" ]; if( in_array($strx, $blckNx) ){ return TRUE; } return FALSE; } function txt1970_($strx=NULL){ ini_set('max_execution_time', 180); //Msmx.Usrx. $arrxXXX = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //TNX $arrx = [ "0757133337","0702157842","0718582309","0706644399","0758224681","0700892277","0792059563","0738922913","0707393976","0780936330","0718775433","0707402048","0708844291","0701772235","0706086072","0700795242","0114749334","0717285799","0791837624","0791544658","0748772095","0729954165","0758632088","0757560018","0724025108","0796431113" ]; /*/PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // //$arrx = [ '0700358941','0792843434' ]*/; //return; // shuffle($arrx); // $msg = urlencode(Sg_rt::$msgx[$msgxidx]); $urlx = "https://sms.movesms.co.ke/api/schedule"; // foreach( $arrx as $to ){ $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $rspx = $this->x_curl($urlx, $prmx); // $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); // $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); // $this->hSleep(1); } } function TextSmsBlx($strx=NULL){ $this->x_log("Xmx1970...TextSmsBlx;".$strx); $this->xAuthx($strx); $url = 'https://sms.textsms.co.ke/api/services/getbalance/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), ); $data_string = json_encode($curl_post_data); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); return $curl_response; } function txt1970($msgxidx=0){ //$this->enableErrorReportingHere(); ini_set('max_execution_time', 180); //Msmx.Usrx. $arrx = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // $arrx = [ '0700358941','0792843434' ]; return; // shuffle($arrx); // $arrx20x = []; $strx = "HelloWorldx".date("H"); $c=0; foreach( $arrx as $val ){ $c++; $arrx20x[]=$val; if( $c%20==0 || $c==count($arrx) ){ $rspx = $this->xmxTS_( [ 'to'=>implode(",", $arrx20x), 'msg'=>Sg_rt::$msgx[$msgxidx], 'strx'=>$strx ] ); $this->x_log("Rspx: ".$rspx,TRUE); // unset($arrx20x); $arrx20x = NULL; } $this->hSleep(0.1); } } // } // ?>
'; // if( $this->savePpx($strArr) ){ echo "Saved"; } else{ echo "Not Saved"; } } // } ?> Pymntx.php 0000444 0001750 0001750 00000016630 14115350223 012162 0 ustar cyrus cyrus enableErrorReportingHere(); } function index(){ $this->x_log('Pymntx Index...'); $this->mRedir(); exit(); } /**/ function vldtxPymntx_KKx($str=NULL){ $this->x_log("HPremium...vldtxPymntx_KKx;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts("vldtxPymntx_KKx",3); // if( !empty($_POST['txcdx']) ){ $str2=strtoupper(trim($this->input->post('txcdx'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $cstx = $_SESSION['hScnx']['scan_cost_invoice']; $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['idx']}"; } else if( $srcx=="hPrmmx" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getVlnx_($srcxidx); $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl"); $arr = $this->HIndex_mdl->getHIndex($srcxidx); $cstx = $this->genHIX_Cstx($arr['bug_cat_id']); $itmx = "{$srcx}_IDX_{$srcxidx}"; } $pymntSttsJson = $this->x_curl( site_url("kk1970/validatePayment"), "str={$str2}&amt={$cstx}" ); $pymntSttsArr = json_decode($pymntSttsJson,TRUE); $pymntStts = $pymntSttsArr['descr']; $this->x_log("HPremium...vldtxPymntx_KKx; pymntStts: {$str2}; {$cstx}; ".$pymntSttsJson); $this->x_log("HPremium...vldtxPymntx_KKx; DBGx: {$itmx}___{$pymntSttsArr['tx_item']}"); if( $str2=="XZ72".date("H") || $pymntStts=="VALID" || ($pymntStts=="INVALID_SPENT" && $pymntSttsArr['tx_item']=="{$itmx}") ){ // if($pymntStts=="VALID"){ $this->x_curl( site_url("kk1970/expirePayment"), "str={$str2}&amt={$cstx}&item={$itmx}" ); } // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("HPremium...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } //echo "{$_SESSION['hScnx']['full_report']}"; $_SESSION['hScnx']['dmnx_pdx'] = $_SESSION['hScnx']['trgt_dmnx']; $this->metaRefresh(site_url("online-website-security-scan-report")); } else if( $srcx=="hPrmmx" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hPrmmx']['idx_pdx_'.$srcxidx] = $srcxidx; // //echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; $this->metaRefresh(site_url("premium/bug/".$srcxidx)); } else if( $srcx=="hIndex" ){ $arr2 = HIndex::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } } // else if( $pymntStts=="INVALID_SPENT" ){ echo "Error: Payment reuse not allowed"; } // else if( $pymntStts=="INVALID_REQUEST" ){ echo "Error: Invalid payment request"; } // else if( $pymntStts=="INVALID_AMOUNT" ){ echo "Error: Paid amount invalid"; } // else if( $pymntStts=="INVALID_NOMATCH" ){ echo "Error: Payment not found; If you just made the payment, wait a few seconds before retrying..."; } // else{ echo "Error: Unkown error occured; If you just made the payment, wait a few seconds before retrying..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ function vldtxPymntx_PPx($str=NULL){ $this->x_log("Home...validateScanPaymentPP;".json_encode($_POST)); // $this->mNoIndex(); $this->mDontCache(); // $this->mMaxAttempts('validateScanPaymentPP',3); // if( isset($_POST['orderIDPP']) && strlen($_POST['orderIDPP'])>5 ){ // $str2=strtoupper(trim($this->input->post('orderIDPP'))); $srcx=trim($this->input->post('srcx')); $srcxidx=trim($this->input->post('srcxidx')); if( $srcx=="hScan" ){ if(empty($_SESSION['hScnx']['full_report'])){ echo "Error: Session expired; Rerun the scan and enter the Code..."; exit(); } $usdCstx = ceil($_SESSION['hScnx']['scan_cost_invoice']/100); $itmx = "{$srcx}_IDX_{$_SESSION['hScnx']['trgt_dmnx']}"; } else if( $srcx=="hIndex" ){ $this->load->model("HIndex_mdl__"); $arr = $this->HIndex_mdl__->getHIndex($srcxidx); // $cstx = $this->genHIX_Cstx_($arr['bug_cat_id']); $usdCstx = ceil($cstx/100); $itmx = "{$srcx}_IDX_{$srcxidx}"; } /**/ $this->load->model("Pp_mdl"); if( $this->Pp_mdl->mpxTxExistsUnspent($str2,$usdCstx) ){ $this->Pp_mdl->updateTxSpent($str2,$usdCstx,$itmx); // if( $srcx=="hScan" ){ if( !is_null($_SESSION['HXLX']['afflt_id']) && $_SESSION['HXLX']['afflt_id']>0 ){ $this->x_log("Home...scan_report; AFFLT; {$_SESSION['HXLX']['afflt_id']}; {$str2}"); $this->load->model("Affltx_mdl"); $this->Affltx_mdl->saveAffiliateClick( ['afflt_id'=>$_SESSION['HXLX']['afflt_id'],'mpx_tx_code'=>$str2, 'amt'=>$_SESSION['hScnx']['scan_cost_invoice']*($this->affltPc/100), "comm_status"=>"Confirmed",'item'=>$_SESSION['hScnx']['trgt_dmnx']] ); } echo "{$_SESSION['hScnx']['full_report']}"; } else if( $srcx=="hIndex" ){ $arr2 = HPremium::genPoCNFX($arr); $_SESSION['hIndx']['idx_pdx_'.$srcxidx] = $srcxidx; // echo "{$arr2['mPcx_']} {$arr2['mRskx_']} {$arr2['mFx_']}"; } }/*EOVldx*/ // else if( $this->Pp_mdl->mpxTxExistsSpent($str2,$usdCstx) ){ echo "Error: Payment re-use Not Allowed"; } // else if( $this->Pp_mdl->mpxTxExistsUnspentInvalidAmt($str2,$usdCstx) ){ echo "Error: Paid amount invalid"; } // else{ echo "Error: Payment not found..."; } } //!POST else{ echo "Error: Invalid request - Payment missing"; } // exit(); }/*EOFxnx*/ }/*EO_clx*/ ?> Sg_rt.php 0000444 0001750 0001750 00000073632 14121122705 011745 0 ustar cyrus cyrus Scan your Website"; static $mScanYourWebsiteNow = "[ Scan Your Website Now ]"; static $mRunScanNow = "[ Run Scan Now ]"; static $dfltxSndrxIdx="hLabs"; static $SmartLinkApxKyx="f5vEH4AiEhlP9DKe206HQjcy4sTRcDxKYL9grBssgdhdhdhdhd"; static $TextSmsApxKyx="2ead24554469f74c56b92cc894dhdhdhdh"; static $TextSmsPrtnrxIdx="1258"; static $mTagz = ['kenya cyber security', 'kenya computer security', 'computer security', 'it security', 'cyber threats', 'cyber attacks', 'national cyber security centre', 'cyber security companies', 'cyber threat intelligence', 'cyber security information', 'cyber security threats', 'recent cyber attacks', 'top cybersecurity companies', 'cyber defence', 'recent cyber attacks 2019', 'cyber security expert', 'cyber security strategy', 'cyber security agency', 'best cyber security companies', 'cyber security degrees', 'cyber security attacks', 'cyber security firms', 'cyber security audit', 'cybersecurity for dummies', 'cyber security management', 'cyber security kenya', 'cyber security africa', 'cyber security assessment', 'cyber security fundamentals', 'industrial cyber security', 'website scanner', 'website vulnerability scanner', 'web vulnerability scanner', 'scan website for malware', 'site scanner', 'web scanner online', 'website security scan', 'scan website online', 'scan web', 'website vulnerability scanner online', 'free website vulnerability scanner', 'web application scanner', 'web vulnerability', 'free website malware scanner', 'web security scanner', 'website malware checker', 'web application security scanner', 'site malware scan', 'web application security scanner', 'scan my website for malware', 'best website malware scanner', 'check website vulnerability', 'web app vulnerability scanner', 'scan site for vulnerabilities', 'online website malware scanner', 'website vulnerability test', 'check my site for malware', 'web security solutions', 'hackable websites', 'vulnerable websites for testing', 'secure web services', 'web security service', 'website security audit', 'cyber security websites', 'website security test', 'scan website for vulnerabilities', 'website security checker', 'hacker', 'hacking websites', 'hacking news', 'computer hackers', 'white hats']; // static $msgx = [ "Get FREE sms alerts whenever your site becomes susceptible to hacking.\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Scan your website security ONLINE today. Stay ahead of hackers!\nSimply go to hLabs.co.ke/webscan\n#hLabsCyberSpace", "Do you've an Item/Service you want to sell? Post it to webby.co.ke & get linked linked with potential clients nearby!\n#KaribuSokoni", "Found a lost item? Post it here. Lost something? We re-unite people with their lost Items E.g IDs,Certificates,Luggage,Pets.. Go to lostnfound.co.ke ", "Hello! hLabsCyberSpace invites you to it's affiliate program. Earn 40% for every referral you make. Sign-up today at hLabs.co.ke/affiliates " ]; static $mWhatsAppConv = ''; static $dfltEml = "info@hlabs.co.ke"; static $scndryEml = "hLabsCyberSpace@gmail.com"; static $cyEmlx = "cy.mwanikih@gmail.com"; static $dfltWhtspp = "+254746517606"; static $dfltCllx = "+254746517606"; static $dfltAlrtx = "254746517606"; static $dfltLctnx = "Nairobi, KE"; static $fbPgx = "https://www.facebook.com/hLabsScan"; static $ttxPgx = "https://www.facebook.com/hLabsScan"; static $lxPgx = "https://www.linkedin.com/company/hlabscyberspace"; var $maxAttempts; static $mSellx = "Scan"; static $mBrkx = ""; static $mPrmx = ""; static $mCbx="?cbx=211"; static $mThmx="Slthx_/"; static $mFBxAppId="503716917098172"; static $mFBxVrxn="v9.0";//v2.11 //static $mGtag = "UA-180596627-1"; static $mGtag = "UA-193749983-1"; static $spltxScrnx = " class='col-lg-12 col-md-12 col-sm-12'"; static $mCnnclx = "https://www.hlabs.co.ke"; //static $mRgxKE = "/(mail.ru|zakazaka.ru|delivery-club.ru|lootdog.io|city-mobil.ru|my.games|donationalerts|samokat|rkeeper|sber|plazius|aliexpress.ru)/i"; static $mRgxKE = "/(\.ke|pesa|kcb|pay|buupass|\.ug|\.tz|\.rw|\.za|\.ng|bank|paypal|state|\.mil|\.africa)/i"; static $mRgx_SearchViewScan_URIx = "/\/(search|view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_ViewScan_URIx = "/\/(view\/\d+|online-website-security-scan|scan)/i"; static $mRgx_View_URIx = "/\/view\/\d+/i"; static $mRgx_Scan_URIx = "/\/(online-website-security-scan|scan)/i"; // static $mRgx_Pyx_URIx_Mpx_Imgx = "/\/(online-website-security-scan|scan|premium\/bug\/\d|index\/view\/\d)/i"; static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 137; static $cstxMnx = 5; static $cstxMnxUSDx = 1; static $cstxXYZ = 1337; static $cstxPrmmxUprgade = 537; static $hScan_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Insecure communication (HTTP), Header Injection & Security Headers Misconfiguration"; static $hPrmmx_Bgz = "Command Injection, SQL Injection, Server Side Template Injection, CRLF injections/ HTTP response splitting, Exposed application source code, Exposed sensitive files, Open Redirect, Cross-site scripting, Insecure communication (HTTP) & Header Injection"; var $hIndexNoRxltx; var $mSellxSvgx; var $mNwScnx; public function __construct() { parent::__construct(); // ini_set('display_errors', 0); //error_reporting(~E_ALL); //$this->enableErrorReportingHere(); date_default_timezone_set("Africa/Nairobi"); // $this->load->helper("url"); // $this->maxAttempts=3; // $this->load->library('user_agent'); $this->mSellxSvgx = "[ Scan Your Website ] "; $this->mNwScnx = "[ New Scan ] "; // $this->hIndexNoRxltx = "No result found related to your search string; The site has either not been indexed or is 'safe'; Scan it here to be sure"; // $this->user_agents = ['Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36', 'Mozilla/5.0(Linux;Android 5.1.1;OPPO A33 Build/LMY47V;wv) AppleWebKit/537.36(KHTML,link Gecko) Version/4.0 Chrome/43.0.2357.121 Mobile Safari/537.36', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36 Google (+https://developers.google.com/+/web/snippet/)', 'Mozilla/5.0 (X11; U; Linux x86_64; zh-CN; rv:1.9.2.10) Gecko/20100922 Ubuntu/10.10 (maverick) Firefox/3.6.10', 'Mozilla/5.0 (Linux; Android 8.0.0; SM-G960F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.84 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 6P Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.83 Mobile Safari/537.36', 'Mozilla/5.0 (Linux; Android 6.0; HTC One X10 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/61.0.3163.98 Mobile Safari/537.36', 'Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0 Mobile/15E148 Safari/604.1', 'Mozilla/5.0 (Apple-iPhone7C2/1202.466; U; CPU like Mac OS X; en) AppleWebKit/420+ (KHTML, like Gecko) Version/3.0 Mobile/1A543 Safari/419.3', 'Mozilla/5.0 (Windows Phone 10.0; Android 4.2.1; Microsoft; RM-1127_16056) AppleWebKit/537.36(KHTML, like Gecko) Chrome/42.0.2311.135 Mobile Safari/537.36 Edge/12.10536', 'Mozilla/5.0 (Linux; Android 6.0.1; SHIELD Tablet K1 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/55.0.2883.91 Safari/537.36', 'Mozilla/5.0 (Linux; Android 4.4.3; KFTHWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/47.1.79 like Chrome/47.0.2526.80 Safari/537.36', 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36', 'Roku4640X/DVP-7.70 (297.70E04154A)', 'Dalvik/2.1.0 (Linux; U; Android 6.0.1; Nexus Player Build/MMB29T)', 'AppleTV6,2/11.1', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; XBOX_ONE_ED) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393', 'Mozilla/5.0 (PlayStation Vita 3.61) AppleWebKit/537.73 (KHTML, like Gecko) Silk/3.2' ]; // $this->poc_ua = " -H 'User-Agent: ".$this->getUA()."' "; } function getUA(){ return "Mozilla/5.0 www.hLabs.co.ke/bot.html"; //return $this->getUA_(); } function getUA_(){ return $this->user_agents[ array_rand($this->user_agents) ]; } function mView($pg="home",$h_data=NULL,$data=NULL){ $data['body_online_scanner'] = "Strongly Recommended: Try out our [Online Website Security Scanner] New!"; // $data['body_contact_us'] = "Talk to us - We provide Thorough & Tested web security solutions"; // $data['body_our_services'] = "Check Out Our Services"; // $data['body_security_tips'] = "Quick, Easy Cyber Security Tips"; // preg_match("/\d.*/", $pg, $pg0); $this->load->view(Sg_rt::$mThmx."hdrx".$pg0[0], $h_data); $this->load->view(Sg_rt::$mThmx.$pg, $data); $this->load->view(Sg_rt::$mThmx."ftrx".$pg0[0]); } function mView_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("L_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P_L($pg="L_hmx",$h_data=NULL,$data=NULL){ $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("L_ftrx"); } function mView_P($pg="p_hmx_",$h_data=NULL,$data=NULL){ $geoInfo = $this->getGeoInfoFromIP(); $h_data['country'] = $geoInfo['country']; $h_data['mn_img'] = base_url()."assets/imgx/hbg_2.jpg"; // $this->load->view("p_hdrx", $h_data); $this->load->view($pg, $data); $this->load->view("p_ftrx"); } function mMaxAttempts($str,$cnt=1,$h403=FALSE){ if( !isset($_SESSION['HXLX'][$str]) || empty($_SESSION['HXLX'][$str]) ){ $_SESSION['HXLX'][$str] = 1; } else{ $_SESSION['HXLX'][$str]++; } if( $_SESSION['HXLX'][$str]>($this->maxAttempts*$cnt) ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed - Too many attempts"; exit(); } } function mAuthStr($str=NULL, $h403=FALSE){ if( $str!="CyxMwx".date("H") ){ if( $h403 ){ header("HTTP/2 403 Forbidden"); } echo "Error: Not Allowed"; exit(); } } function m403(){ header("HTTP/2 403 Forbidden"); exit(); } function mDontCache(){ header("Cache-Control: no-store, no-cache, must-revalidate, max-age=-1"); header("Expires: Mon, 1 July 1970 05:00:00 GMT"); //header("Cache-Control: post-check=0, pre-check=0", false); header("Pragma: no-cache"); } function mNoIndex(){ header("X-Robots-Tag: noindex"); } function mCache($agx=3600){ header("Cache-Control: max-age={$agx}"); // $dt=date("Y-m-d H:i:s"); $scx = strtotime($dt)+$agx; $nwdt = date ("r", $scx); //echo $nwdt; header("Expires: {$nwdt}"); //header("Pragma: cache"); } function mRedir($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } static function mRedir_($strx=NULL){ if( empty($strx) ){ header("location:".Sg_rt::$mRedir); } else{ header("location:{$strx}"); } exit(); } // function disableErrorReportingHere(){ ini_set('display_errors', 0); error_reporting(~E_ALL); } // function enableErrorReportingHere(){ ini_set('display_errors', 1); error_reporting(E_ALL); } // function hash546($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // static function hash546_($str=NULL){ if(empty($str)){ $str=time(); } return md5(base64_encode(hash('sha256', $str))); } // function x_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // $s_=""; $e_=""; if($clrx=="green"){ $s_ = "\e[1;32;40m"; $e_ = "\e[0m"; } // if( fwrite($log_fh, date("Y-m-d H:i:s").";{$s_} {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} {$e_}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // static function s_log($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/x_DMNX", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$_SERVER['HTTP_HOST']} {$_SERVER['QUERY_STRING']}; {$_SERVER['HTTP_X_FORWARDED_FOR']}; {$_SERVER['HTTP_CF_IPCOUNTRY']}; {$_SERVER['HTTP_USER_AGENT']}; {$_SERVER['HTTP_REFERER']}; {$strx} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function hLgx($strx=NULL,$dspx=FALSE,$clrx="black"){ $log_fh = fopen("/home/cyrus/hLgx", "a"); // if( $dspx==TRUE ){ echo "[*] {$strx}"; } //fxnx,trgtx,pyldx,hcdx,hdrx, if( fwrite($log_fh, date("Y-m-d H:i:s").";{$strx}\n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function userIsBot(){ $this->load->library('user_agent'); // if( $this->agent->is_robot() ){ return TRUE; } return FALSE; } // static function userIsBot_(){ if( preg_match("/bot/i",$_SERVER['HTTP_USER_AGENT']) ){ return TRUE; } return FALSE; } // function getGeoInfoFromIP(){ /*$xml = simplexml_load_file("http://www.geoplugin.net/xml.gp?ip=".$_SERVER['REMOTE_ADDR']); return ["country"=>$xml->geoplugin_countryName,"city"=>$xml->geoplugin_city];*/ return [ "country"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"city"=>$_SERVER['HTTP_CF_IPCOUNTRY'],"IP"=>$_SERVER['HTTP_X_FORWARDED_FOR'] ]; } // function metaRefresh($url, $say=NULL){ if( !empty($say) ){ echo $say; } // echo ""; // exit(); } // function x_ml($arr){ $this->x_log( "Sg_rt x_ml.."); return; /*/ if(empty($arr)){ echo "[...]"; return; } // $config['protocol'] = 'smtp'; $config['smtp_host'] = "ssl://server1.noc254.com"; $config['smtp_port'] = 465; $config['smtp_user'] = Sg_rt::$dfltEml; $config['smtp_pass'] = getenv("EmlxPsswdx");; $config['mailtype'] = 'html'; $config['charset'] = 'iso-8859-1'; $config['wordwrap'] = TRUE; $config['smtp_crypto'] = "TLS"; $config['validate'] = TRUE; // $this->load->library('email',$config); $this->email->set_newline("\r\n"); $this->email->to($arr['to']); $this->email->from(Sg_rt::$dfltEml, Sg_rt::$sys_nm); $this->email->subject($arr['subj']); $this->email->message( $arr['msg'].$this->getMl_Sig() ); // $this->email->CC(Sg_rt::$scndryEml); $this->email->reply_to(Sg_rt::$scndryEml); // if($this->email->send()){ $this->x_log( "Sg_rt x_ml... Sent! "); return TRUE; } else{ $this->x_log( "Sg_rt x_ml... !Sent ".$this->email->print_debugger(array('headers')) ); return FALSE; }*/ } // function x_mlrx($arr=NULL){ $this->x_ml($arr); return; } // function getMl_Sig(){ return " ".Sg_rt::$sys_nm." WhatsApp: ".Sg_rt::$dfltWhtspp." Email: ".Sg_rt::$dfltEml." hlabs.co.ke Twitter: https://twitter.com/hLabsCyberSpace Facebook: https://www.facebook.com/hLabsCyberSpace "; } // function xmxTS($arr=NULL){ $this->x_log("xmxTS...".json_encode($arr)); // $rspx = $this->x_curl( site_url("xmx1970/TextSms"), http_build_query($arr) ); $this->x_log("xmxTS...".$rspx); return "xmxTS...".$rspx; } // function xmxTS_($arr=NULL){ $this->x_log( "xmxTS_...".json_encode($arr)); $this->xmxTS($arr); } // function getRndmStr(){ return sha1( $this->hash546( time(). (time()%7) ) ); } // function uncsarize($str, $offset=3){ return $this->csarize($str, 26-$offset); } // function csarize( $message, $key=3 ){ $plaintext = strtolower( $message ); $ciphertext = ""; $ascii_a = ord( 'a' ); $ascii_z = ord( 'z' ); while( strlen( $plaintext ) ){ $char = ord( $plaintext ); if( $char >= $ascii_a && $char <= $ascii_z ){ $char = ( ( $key + $char - $ascii_a ) % 26 ) + $ascii_a; } $plaintext = substr( $plaintext, 1 ); $ciphertext .= chr( $char ); } return $ciphertext; } // function XmxCrdx($strx=NULL){ $mRetx = ""; switch ($strx) { case 'dfltxSndrxIdx': $mRetx = getenv("dfltxSndrxIdx"); break; case 'SmartLinkApxKyx': $mRetx = getenv("SmartLinkApxKyx"); break; case 'TextSmsApxKyx': $mRetx = getenv("TextSmsApxKyx"); break; case 'TextSmsPrtnrxIdx': $mRetx = getenv("TextSmsPrtnrxIdx"); break; default: $mRetx = ""; break; } return $mRetx; } // function x_curl($url, $params){ $post = curl_init(); curl_setopt($post, CURLOPT_URL, $url); curl_setopt($post, CURLOPT_POSTFIELDS, $params); curl_setopt($post, CURLOPT_RETURNTRANSFER, 1); curl_setopt($post, CURLOPT_HEADER, "User-Agent: ".$this->getUA_()); curl_setopt($post, CURLOPT_SSL_VERIFYPEER, false); $result = curl_exec($post); curl_close($post); return $result; } // function psBaseUrlx_($strx=NULL){ $mRgxBaseUrlx_ = '/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i'; preg_match( $mRgxBaseUrlx_,$strx ,$urlxMtchx ); return $urlxMtchx[0]; } // function chkRdrx_($strx=NULL){ $rspx = $this->x_curl( site_url("hEngine_/chkRdrx"), http_build_query(['urlx'=>$strx]) ); $this->x_log("chkRdrx_...".$rspx); return $rspx; } // static function cleanURLStr($str){ $str = preg_replace('~[^\\pL0-9_]+~u', '-', $str); $str = trim($str, "-"); $str = iconv("utf-8", "us-ascii//TRANSLIT", $str); $str = strtolower($str); $str = preg_replace('~[^-a-z0-9_]+~', '', $str); return $str; } static function cleanStr($str, $str_=" "){ $str = preg_replace( '/[^a-z0-9\-\_\.]/i', $str_, trim($str) ); $str = preg_replace( '/'.$str_.'+/i', $str_, trim($str) ); return $str; } function trim($strx){ return htmlentities(trim($strx)); } function genViewLnk($dmx=NULL){ $view_lnk_descr = Sg_rt::cleanStr( $dmx ); return site_url("index/search?str={$view_lnk_descr}"); } function psReqdPrmx($sthx=NULL,$fxnx=NULL){ if( !is_array($sthx) ){ if( empty(trim($strx)) ){ $this->x_log("psReqdPrmx {$fxnx}... Error: empty! {$strx}"); echo "Required Parameter Missing"; return FALSE; } return TRUE; } // else if( !empty($sthx[0]) ){ foreach( $sthx as $val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_S_Arrx... Error: empty! {$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // else{ foreach( $sthx as $key=>$val ){ if( empty(trim($val)) ){ $this->x_log("psReqdPrmx {$fxnx}_Assoc_Arrx... Error: empty! {$key}->{$val}; ".json_encode($sthx)); echo "Required Parameter Missing"; return FALSE; } } return TRUE; } // } function mAlrtx($arrx=NULL){ $arrx['to'] = Sg_rt::$cyEmlx; $this->x_ml($arrx); } function mRgx($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } static function mRgx_($rgx=NULL,$strx=NULL){ if( preg_match($rgx,$strx) ){ return TRUE; } return FALSE; } function webPoC($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_($strx=NULL){ return " Browser: {$strx}"; } static function webPoC_CP($strx=NULL){ return " Open this URL in your browser: {$strx}"; } /*static $cstxGtx = 637; static $cstxSQLi = 537; static $cstxGtx2 = 437; static $cstxIfx = 237; static $cstxXYZ = 1337;*/ function genHIX_Cstx($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genHIX_Cstx_($bcidx=NULL){ if( $bcidx==1 || $bcidx==12 || $bcidx==15 || $bcidx==17 || $bcidx==18 ){ $cstx = Sg_rt::$cstxGtx; } else if( $bcidx==2 ){ $cstx = Sg_rt::$cstxGtx2; } else if( $bcidx==6 || $bcidx==9 || $bcidx==10 || $bcidx==16 ){ $cstx = Sg_rt::$cstxSQLi; } else if( $bcidx==8 || $bcidx==14 ){ $cstx = Sg_rt::$cstxIfx; } else{ $cstx = 337; } // return $cstx; } static function genXHash($strx=NULL,$sess=TRUE){ if( $sess==TRUE ){ return Sg_rt::hash546_( $strx.session_id() ); } return Sg_rt::hash546_( $strx ); } function validEmlx($strx=NULL){ $mRgxValidEmlx = "/^[a-z0-9\_\-\.]{3,50}\@[a-z0-9\_\-\.]{3,50}$/i"; if( $this->mRgx($mRgxValidEmlx,$strx) ){ return TRUE; } return FALSE; } /**/ function validDmnx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) && !preg_match("/(hlabs|webby|monroe|lostnfound|173.255.210.181|google|gmail|yahoo|ymail|facebook|twitter|youtube|wordpress)/i",$strx) ){ return TRUE; } return FALSE; } function dmnxExists($strx=NULL){ if( dns_check_record($strx,"A") ){ return TRUE; } return FALSE; } function validDmnx_AllxAllwdx($strx=NULL){ $strx = $this->exDmnx($strx); // if( !$this->dmnxExists($strx) ){ return FALSE; } // $ipx = gethostbyname($strx); // if( !preg_match("/127.0.0.1/", $ipx) ){ return $ipx; } return FALSE; } function validUrlx($strx=NULL){ $mRgxValidUrlx = "/^(http[s]?\:\/\/)?([a-z0-9\-\_\.]+\.[a-z]{2,10}|([\d]{1,3}\.){3}[\d]{1,3})(:[0-9]{1,5})?/i"; if( preg_match($mRgxValidUrlx,$strx) ){ return TRUE; } return FALSE; } // function exDmnx($strx=NULL){ $strx = preg_replace("/^http[s]?\:\/\//i","", $strx); $strx = preg_replace("/\/.*/","", $strx); // return strtolower($strx); } //Matches x.y (x.y.z maximum if z present) function exDmnxRtx($strx=NULL){ $mRgxDmxRtx_ = "/[a-z0-9\_\-]{2,50}\.[a-z]{2,10}(\.[a-z]{2,10})?$/i"; preg_match( $mRgxDmxRtx_,$strx ,$urlxMtchx ); return strtolower($urlxMtchx[0]); } function p_usrxAuthd($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } static function p_usrxAuthd_($redir=FALSE){ if( is_numeric($_SESSION['hPrmmx']['id']) && $_SESSION['hPrmmx']['id']>0 ){ return TRUE; } else if($redir==TRUE){ header("location:".site_url("premium/")); exit(); } return FALSE; } function validCellNo($strx=NULL){ $mRgxValidCellNo_Kx = "/^(0|254|\+254)[0-9]{9,15}$/"; if( $this->mRgx($mRgxValidCellNo_Kx,$strx) ){ return TRUE; } return FALSE; } function psCellNo_Start_Zrx($strx=NULL){ $strx = trim($strx); $strx = preg_replace("/\s/","",$strx ); // $strx = preg_replace("/^(\+254|254)/","0",$strx ); $strx = preg_replace("/^7/","07",$strx ); return $strx; } function genStrx_Nx_6(){ return mt_rand(100000,999999); } // }/*EO_clx*/ ?> Xmx1970.php 0000444 0001750 0001750 00000043076 14112720750 011767 0 ustar cyrus cyrus enableErrorReportingHere(); // $this->load->helper("url"); // $this->mNoIndex(); $this->mDontCache(); // $this->psdArrx = []; } public function index($strx=NULL) { $this->x_log("Xmx1970...index;".$str); // $this->xAuthx($_REQUEST['strx']); // $this->load->view("HIndx_/hdrx"); $this->load->view("HIndx_/xmx"); $this->load->view("HIndx_/ftrx"); } function TextSms($strx=NULL){ $this->x_log("Xmx1970...TextSms...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !preg_match("/,/", $to) ){ $to = preg_replace("/[^\d]/", "", $to); if( !$this->validCellNo($to) ){ $this->m403(); } } if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("TextSms__".$to,11); // if( $this->NxBlckd($to) ){ $this->m403(); } // if( strlen($msg)>250 ){ $this->m403(); } // $url = 'https://sms.textsms.co.ke/api/services/sendsms/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); // $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), 'mobile' => $to, 'message' => $msg, 'shortcode' => $this->XmxCrdx("dfltxSndrxIdx"), 'pass_type' => 'plain', //"timeToSend":"2019-09-01 18:00" ); $data_string = json_encode($curl_post_data); $this->x_log("Ps'n: Len:".strlen($msg)."; ".$data_string,TRUE); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); $this->x_log("Rspx: ".$curl_response."; Blx: ".$this->TextSmsBlx($_REQUEST['strx']),TRUE); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$data_string."\nRspx: ".$curl_response ); }/*EOFxnx*/ function SmartLink($strx=NULL){ $this->x_log("Xmx1970...SmartLink...",TRUE); $this->xAuthx($_POST['strx']); $to = trim($_POST['to']); $to = preg_replace("/[^\d]/", "", $to); $msg = trim($_POST['msg']); if( strlen($to)<10 || strlen($to)>12 || strlen($msg)<50 || strlen($msg)>250 ){ $this->m403(); } if( !$this->validCellNo($to) ){ $this->m403(); } $to = preg_replace("/^0/", "254", $to); if( in_array($to, $this->psdArrx) ){ return; }else{ $this->psdArrx[] = $to; } $this->mMaxAttempts("SmartLink_".$to,11); if( $this->NxBlckd($to) ){ $this->m403(); } $msg = urlencode($msg); $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $urlx = "https://sms.movesms.co.ke/api/schedule"; $rspx = $this->x_curl($urlx, $prmx); $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); }/*EOFxnx*/ /**/ function xAuthx($strx=NULL){ if( empty($strx) || strlen($strx)<8 || $strx != "HelloWorldx".date("H") ){ $this->mRedir(); exit(); } } function mDbg($strx=NULL){ echo "[".date("H:i:s")."] DBG: {$strx}"; } // function psNx($strx=NULL,$strx_=NULL){ $this->xAuthx($strx); // $log_fh = fopen("/home/cyrus/x_HXLX_Nx", "a"); // if( fwrite($log_fh, date("Y-m-d H:i:s")."; {$strx_} \n") ){ fclose($log_fh); return TRUE; } // fclose($log_fh); return FALSE; } // function NxBlckd($strx=NULL){ $blckNx = [ "0100100100","0101010101","0700100100","0700100900","0720100900" ]; if( in_array($strx, $blckNx) ){ return TRUE; } return FALSE; } function txt1970_($strx=NULL){ ini_set('max_execution_time', 180); //Msmx.Usrx. $arrxXXX = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //TNX $arrx = [ "0757133337","0702157842","0718582309","0706644399","0758224681","0700892277","0792059563","0738922913","0707393976","0780936330","0718775433","0707402048","0708844291","0701772235","0706086072","0700795242","0114749334","0717285799","0791837624","0791544658","0748772095","0729954165","0758632088","0757560018","0724025108","0796431113" ]; /*/PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // //$arrx = [ '0700358941','0792843434' ]*/; //return; // shuffle($arrx); // $msg = urlencode(Sg_rt::$msgx[$msgxidx]); $urlx = "https://sms.movesms.co.ke/api/schedule"; // foreach( $arrx as $to ){ $prmx = "username=hxlx&api_key=".$this->XmxCrdx("SmartLinkApxKyx")."&sender=SMARTLINK&to={$to}&message={$msg}&msgtype=5&dlr=0&scheduletime=".date("Y-m-d H:i:s",time()+30); $this->x_log("Ps'n: ".$prmx,TRUE); $rspx = $this->x_curl($urlx, $prmx); // $blx = file_get_contents( "https://sms.movesms.co.ke/api/balance?api_key=".$this->XmxCrdx("SmartLinkApxKyx") ); // $this->x_log( "Rspx: ".json_encode($rspx)."; Blx: ".$blx,TRUE ); $this->psNx( "HelloWorldx".date("H"), $to."\nPrmx: ".$prmx."\nRspx: ".json_encode($rspx) ); // $this->hSleep(1); } } function TextSmsBlx($strx=NULL){ $this->x_log("Xmx1970...TextSmsBlx;".$strx); $this->xAuthx($strx); $url = 'https://sms.textsms.co.ke/api/services/getbalance/'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type:application/json')); $curl_post_data = array( 'partnerID' => $this->XmxCrdx("TextSmsPrtnrxIdx"), 'apikey' => $this->XmxCrdx("TextSmsApxKyx"), ); $data_string = json_encode($curl_post_data); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data_string); $curl_response = curl_exec($curl); return $curl_response; } function txt1970($msgxidx=0){ //$this->enableErrorReportingHere(); ini_set('max_execution_time', 180); //Msmx.Usrx. $arrx = [ "0724555968","0794521606","0724017889","0753878899","0748403796","0720427987","0793582285","0793582285","0793582285", "0799109763","0725685915","0718496084","0729907808","0791825490","0722678885","01002071402","01002071402","0791825490", "0791825490","0702804285","0741409693","0741409693","0721598570","0727573086","0111235451","0722865789","0713643303", "0713643303","0713643303","0719828366","0724562234","0715414061","0722835279","0703251494","0716443271","0795640258", "0706894346","0706894346","0794310861","0722653047","0743514117","0799974884","0726745490","0719487140","0110096002", "0711973352","0708830882","0795034278","0791612494","0727053918","0792583772","0708197523","0703130420","0757985437", "0728905306","0725798985","0720607646","0724173959","0720212098","0700738102","0795566274","0718018051","0743418384", "0718363448","0701354502","0726381855","0718363448","0702275642","0716742013","0741805241","0707586575","0768044601", "0718014843","0723164788","0723164788","0723164788","0723164788","0727993243","0715894749","0700362020","0704655919", "0723164788","0723164788","0724262118","0714563751","0743840472","0725763805","0798933371","0714320361","0798167436", "0720123590","0722511523","0710649745","0792612094","0792612094","0792612094","0745536279","0740098233","0728316723", "0726888613","0728136846","0708837765","0708837765","0727296912","0711686634","0723730369","0720649897","0798796411", "0717616759","0725893518","0722427074","0404573079","0710418966","0720170655","0708370311","0716919035","0724087759", "0742178039","0724778185","0727850810","0748151031","0722722553","0729954061","0790012824","0723503208","0722288914", "0718443753","0712230750","0712230750","0700635705","1234567890","0726542690","0713346500","0706372158","0721148642", "0713415429","0711660075","0725515674","0714198901","0745232311","0721771421","0790954295","0711432437","0722803590", "0726542690","1234567890","0723755172","0722476252","0740107700","0725158934","0725158934","0723405320","0740694774", "0710405654","0712126869","0701070801","0722705522","0757145404","0757145404","0721233791","0714258785","0729075826", "0723391620","0710348883","0700100100","0726542690","0726105428","0722846873","0717556879","0718221966","0757915467", "0723579254","0726542690","0725940096","0725940096","0722854708","0725940096","0710595854" ]; //PhnxBkx $arrx = [ "0714570358","0719887508","0720592204","0705298268","0719012144","0756846667","0725910928","0722419037","0724875121", "0703827150","0705549350","0756780606","0724079477","0712152796","0710778890","0728762356","0702143996","0707752244", "0729638545","0720809764","0721149420","0728344466","0701170419","0718447682","0723615713", //Sfcmx "0721595259","0722005366","0713600713","0722736163", "0722507473","0728590438","0713981605","0722805760","0715768591","0704241587", "0708031011" ]; //Wxbx $arrx = [ "0218726000","0700090499","0700198389","0700324807","0700325931","0700358941","0700389094","0700447664","0700490112", "0700620133","0700832338","0701192507","0701244063","0701469528","0701523845","0701865565","0701960954","0702439044","0702532572", "0702627238","0702748769","0703228155","0703485873","0703643168","0704175444","0704178566","0704253837","0704405007","0704735204", "0704972317","0705438617","0705562103","0705605881","0706014826","0706181519","0706426258","0706630217","0706857291","0706879422", "0707028041","0707087499","0707258080","0707312779","0708255611","0708328886","0708921732","0710129397","0710430793","0710695055", "0710912155","0711215862","0711421743","0711626888","0711894742","0712266574","0712537991","0712584802","0713013319","0713313101", "0713884628","0713900912","0714028474","0714049785","0714501797","0714885978","0715026069","0715243650","0715334991","0715475586", "0716090793","0716434866","0718174535","0718263967","0718721002","0719110086","0719162637","0719761944","0720223515","0720393378", "0721121212","0721202568","0721266888","0721677433","0721876375","0721890016","0722200599","0722232911","0722273361","0722417475", "0723100423","0723162317","0723283350","0723768476","0723878081","0725264409","0725604005","0726007021","0727613488","0728257356", "0728922930","0731298001","0733331944","0738353000","0741259395","0741794611","0742804726","0743145365","0743202250","0745001343", "0746517606","0753649145","0754577866","0762017931","0776790426","0792359249","0795142925","0796891963","0797130175","0797598335", "0799034043","0799662347","0799760366","0721113503","0722934593","0728245999","0733179944","0738758411","0700436066","0702776678", "0703934523","0704525692","0704821160","0705983728","0706079185","0706256312","0710831117","0712501823","0713920474","0719701087", "0721295390","0726556361","0743625067","0748989176","0759890838","0790805483","0795784276","0799034043" ]; // $arrx = [ '0700358941','0792843434' ]; return; // shuffle($arrx); // $arrx20x = []; $strx = "HelloWorldx".date("H"); $c=0; foreach( $arrx as $val ){ $c++; $arrx20x[]=$val; if( $c%20==0 || $c==count($arrx) ){ $rspx = $this->xmxTS_( [ 'to'=>implode(",", $arrx20x), 'msg'=>Sg_rt::$msgx[$msgxidx], 'strx'=>$strx ] ); $this->x_log("Rspx: ".$rspx,TRUE); // unset($arrx20x); $arrx20x = NULL; } $this->hSleep(0.1); } } // } // ?>
No result found related to your search string; The site has either not been indexed or is 'safe'; Scan it here to be sure
Strongly Recommended: Try out our [Online Website Security Scanner] New!
Check Out Our Services
Quick, Easy Cyber Security Tips
Error: Not Allowed
[*] {$strx}
Browser: {$strx}
Open this URL in your browser: {$strx}
[".date("H:i:s")."] DBG: {$strx}