PasteShr

New Paste Browse

<?php
/**
 * Shell Scanner - Simple AJAX Version
 * Scan file PHP: .php, .phtml, .shtml, .php7, .php5, .php4, .phps
 * Pattern from: https://cdn.cloduflared.site/json/pattren_shell.json
 */

// Konfigurasi
define('PATTERN_URL', 'https://cdn.cloduflared.site/json/pattren_shell.json');

// Ekstensi yang di scan
$allowedExtensions = ['php', 'phtml', 'shtml', 'php7', 'php5', 'php4', 'phps'];

// Ambil pattern dari URL
function getPatterns() {
    $json = @file_get_contents(PATTERN_URL);
    if ($json === false) {
        return [];
    }
    $data = json_decode($json, true);
    return is_array($data) ? $data : [];
}

// Scan direktori recursive
function scanDirectory($dir, $patterns, $allowedExt) {
    $results = [];
    $dir = rtrim($dir, DIRECTORY_SEPARATOR);
    if (!is_dir($dir)) return ['error' => "Directory tidak ditemukan: $dir"];

$iterator = new RecursiveIteratorIterator(
        new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS)
    );

foreach ($iterator as $file) {
        if ($file->isFile()) {
            $ext = strtolower(pathinfo($file->getFilename(), PATHINFO_EXTENSION));
            if (!in_array($ext, $allowedExt)) continue;

$path = $file->getRealPath();
            $content = @file_get_contents($path);
            if ($content === false) continue;

$found = [];
            foreach ($patterns as $pattern) {
                if (stripos($content, $pattern) !== false) {
                    $found[] = htmlspecialchars($pattern);
                }
            }

if (!empty($found)) {
                $results[] = [
                    'file' => $path,
                    'patterns' => $found,
                    'size' => filesize($path),
                    'modified' => date('Y-m-d H:i:s', filemtime($path))
                ];
            }
        }
    }
    return $results;
}

// Handle AJAX request
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest') {
    header('Content-Type: application/json');

// Action: scan
    if (isset($_POST['action']) && $_POST['action'] === 'scan') {
        $scanDir = isset($_POST['directory']) ? $_POST['directory'] : __DIR__;
        $patterns = getPatterns();
        $results = scanDirectory($scanDir, $patterns, $allowedExtensions);
        echo json_encode(['status' => 'success', 'results' => $results, 'directory' => $scanDir]);
        exit;
    }

// Action: delete
    if (isset($_POST['action']) && $_POST['action'] === 'delete' && isset($_POST['files'])) {
        $files = json_decode($_POST['files'], true);
        $deleted = [];
        $failed = [];

foreach ($files as $file) {
            $file = realpath($file);
            if ($file && is_file($file)) {
                if (unlink($file)) {
                    $deleted[] = $file;
                } else {
                    $failed[] = $file;
                }
            } else {
                $failed[] = $file;
            }
        }

echo json_encode(['deleted' => $deleted, 'failed' => $failed]);
        exit;
    }

echo json_encode(['status' => 'error', 'message' => 'Invalid action']);
    exit;
}
?>

<!DOCTYPE html>
<html lang="id">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Shell Scanner</title>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

body {
            font-family: 'Inter', sans-serif;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            padding: 30px;
        }

.container {
            max-width: 1400px;
            margin: 0 auto;
        }

.header {
            text-align: center;
            margin-bottom: 30px;
        }

.header h1 {
            font-size: 2rem;
            color: white;
            margin-bottom: 10px;
        }

.header p {
            color: rgba(255,255,255,0.9);
        }

.card {
            background: white;
            border-radius: 16px;
            box-shadow: 0 10px 40px rgba(0,0,0,0.2);
            margin-bottom: 30px;
            overflow: hidden;
        }

.card-header {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            padding: 20px 25px;
            color: white;
        }

.card-header h2 {
            font-size: 1.2rem;
            font-weight: 600;
        }

.card-header h2 i {
            margin-right: 10px;
        }

.card-body {
            padding: 25px;
        }

.form-group {
            margin-bottom: 20px;
        }

.form-group label {
            display: block;
            font-weight: 600;
            margin-bottom: 8px;
            color: #333;
        }

.form-group label i {
            margin-right: 8px;
            color: #667eea;
        }

.directory-input-wrapper {
            display: flex;
            gap: 12px;
        }

.directory-input-wrapper input {
            flex: 1;
            padding: 12px 15px;
            border: 2px solid #e2e8f0;
            border-radius: 10px;
            font-size: 14px;
            font-family: monospace;
            transition: all 0.2s;
        }

.directory-input-wrapper input:focus {
            outline: none;
            border-color: #667eea;
        }

.btn {
            padding: 12px 24px;
            border: none;
            border-radius: 10px;
            font-weight: 600;
            cursor: pointer;
            font-size: 14px;
            display: inline-flex;
            align-items: center;
            gap: 8px;
            transition: all 0.2s;
        }

.btn-primary {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            color: white;
        }

.btn-primary:hover {
            transform: translateY(-1px);
            box-shadow: 0 4px 12px rgba(102,126,234,0.4);
        }

.btn-danger {
            background: #ef4444;
            color: white;
        }

.btn-danger:hover {
            background: #dc2626;
        }

.btn-outline {
            background: #f1f5f9;
            color: #475569;
            border: 1px solid #e2e8f0;
        }

.btn-outline:hover {
            background: #e2e8f0;
        }

.btn:disabled {
            opacity: 0.6;
            cursor: not-allowed;
        }

.stats {
            display: flex;
            gap: 15px;
            margin-bottom: 25px;
            flex-wrap: wrap;
        }

.stat-card {
            flex: 1;
            background: #f8fafc;
            padding: 15px 20px;
            border-radius: 12px;
            border: 1px solid #e2e8f0;
        }

.stat-card i {
            font-size: 1.5rem;
            color: #667eea;
            margin-bottom: 8px;
        }

.stat-card .number {
            font-size: 1.5rem;
            font-weight: 700;
            color: #1e293b;
        }

.stat-card .label {
            color: #64748b;
            font-size: 0.8rem;
        }

.toolbar {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            flex-wrap: wrap;
            gap: 10px;
        }

/* SCROLLABLE TABLE - INI YANG DIUPDATE */
        .table-wrapper {
            overflow-x: auto;
            overflow-y: auto;
            max-height: 500px;
            border-radius: 12px;
            border: 1px solid #e2e8f0;
        }

/* Biar header tabel tetep sticky pas di-scroll */
        .table-wrapper table {
            width: 100%;
            border-collapse: collapse;
        }

.table-wrapper thead th {
            position: sticky;
            top: 0;
            background: #f8fafc;
            z-index: 10;
            box-shadow: 0 1px 0 #e2e8f0;
        }

table {
            width: 100%;
            border-collapse: collapse;
        }

th {
            background: #f8fafc;
            padding: 12px 15px;
            text-align: left;
            font-weight: 600;
            color: #1e293b;
            border-bottom: 2px solid #e2e8f0;
        }

td {
            padding: 12px 15px;
            border-bottom: 1px solid #e2e8f0;
        }

tr:hover {
            background: #fef9e3;
        }

.file-path {
            font-family: monospace;
            font-size: 12px;
            color: #334155;
            word-break: break-all;
        }

.pattern-badge {
            display: inline-block;
            background: #fee2e2;
            color: #dc2626;
            padding: 4px 10px;
            border-radius: 20px;
            font-size: 11px;
            font-weight: 500;
            margin: 3px;
            font-family: monospace;
        }

.checkbox-col {
            width: 40px;
            text-align: center;
        }

.checkbox-col input {
            width: 18px;
            height: 18px;
            cursor: pointer;
        }

.size-badge {
            background: #e0e7ff;
            color: #4338ca;
            padding: 3px 8px;
            border-radius: 8px;
            font-size: 11px;
            font-weight: 600;
            display: inline-block;
        }

.alert {
            padding: 12px 16px;
            border-radius: 10px;
            margin-bottom: 20px;
            display: none;
            align-items: center;
            gap: 10px;
        }

.alert.show {
            display: flex;
        }

.alert-success {
            background: #d1fae5;
            color: #065f46;
            border-left: 4px solid #10b981;
        }

.alert-error {
            background: #fee2e2;
            color: #991b1b;
            border-left: 4px solid #ef4444;
        }

.alert-info {
            background: #dbeafe;
            color: #1e40af;
            border-left: 4px solid #3b82f6;
        }

.empty-state {
            text-align: center;
            padding: 50px;
            color: #94a3b8;
        }

.empty-state i {
            font-size: 3rem;
            margin-bottom: 15px;
        }

@media (max-width: 768px) {
            body {
                padding: 15px;
            }

.directory-input-wrapper {
                flex-direction: column;
            }

.stats {
                flex-direction: column;
            }

th, td {
                font-size: 12px;
                padding: 8px 10px;
            }

.table-wrapper {
                max-height: 400px;
            }
        }
    </style>
</head>
<body>
<div class="container">
    <div class="header">
        <h1><i class="fas fa-shield-alt"></i> Shell Scanner</h1>
        <p>Deteksi dan hapus web shell dengan cepat</p>
    </div>

<div class="card">
        <div class="card-header">
            <h2><i class="fas fa-sliders-h"></i> Konfigurasi Scan</h2>
        </div>
        <div class="card-body">
            <div class="form-group">
                <label><i class="fas fa-folder"></i> Direktori Target</label>
                <div class="directory-input-wrapper">
                    <input type="text" id="scanDirectory" value="<?php echo __DIR__; ?>" placeholder="Masukkan path direktori...">
                    <button id="scanBtn" class="btn btn-primary"><i class="fas fa-search"></i> Mulai Scan</button>
                </div>
                <small style="color: #666; margin-top: 8px; display: block;">
                    <i class="fas fa-info-circle"></i> Contoh: /home/user/public_html atau D:/xampp/htdocs
                </small>
            </div>
        </div>
    </div>

<div id="resultArea" style="display: none;">
        <div class="card">
            <div class="card-header">
                <h2><i class="fas fa-chart-bar"></i> Hasil Scan</h2>
            </div>
            <div class="card-body">
                <div class="stats" id="statsArea"></div>
                <div class="toolbar">
                    <div>
                        <button id="selectAllBtn" class="btn btn-outline"><i class="fas fa-check-double"></i> Pilih Semua</button>
                        <button id="deselectAllBtn" class="btn btn-outline"><i class="fas fa-times"></i> Batal Pilih</button>
                    </div>
                    <button id="deleteSelectedBtn" class="btn btn-danger"><i class="fas fa-trash"></i> Hapus Yang Dipilih</button>
                </div>
                <div class="table-wrapper" id="tableWrapper"></div>
            </div>
        </div>
    </div>
</div>

let icon = '';
    if (type === 'success') icon = '<i class="fas fa-check-circle"></i>';
    if (type === 'error') icon = '<i class="fas fa-exclamation-circle"></i>';
    if (type === 'info') icon = '<i class="fas fa-info-circle"></i>';

alertDiv.innerHTML = `${icon} ${message}`;
    container.appendChild(alertDiv);

setTimeout(() => {
        alertDiv.remove();
    }, 4000);
}

function formatSize(bytes) {
    if (bytes === 0) return '0 B';
    const k = 1024;
    const sizes = ['B', 'KB', 'MB', 'GB'];
    const i = Math.floor(Math.log(bytes) / Math.log(k));
    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
}

function escapeHtml(str) {
    return str.replace(/[&<>]/g, function(m) {
        if (m === '&') return '&amp;';
        if (m === '<') return '&lt;';
        if (m === '>') return '&gt;';
        return m;
    });
}

function renderResults(results, directory) {
    const resultArea = document.getElementById('resultArea');
    const tableWrapper = document.getElementById('tableWrapper');
    const statsArea = document.getElementById('statsArea');

if (!results || results.length === 0) {
        tableWrapper.innerHTML = `
            <div class="empty-state">
                <i class="fas fa-shield-alt"></i>
                <h3>Aman!</h3>
                <p>Tidak ditemukan file mencurigakan di <strong>${escapeHtml(directory)}</strong></p>
            </div>
        `;
        statsArea.innerHTML = `
            <div class="stat-card">
                <i class="fas fa-file-alt"></i>
                <div class="number">0</div>
                <div class="label">File Terdeteksi</div>
            </div>
        `;
        resultArea.style.display = 'block';
        return;
    }

let totalPatterns = 0;
    results.forEach(item => {
        totalPatterns += item.patterns.length;
    });

statsArea.innerHTML = `
        <div class="stat-card">
            <i class="fas fa-file-alt"></i>
            <div class="number">${results.length}</div>
            <div class="label">File Terdeteksi</div>
        </div>
        <div class="stat-card">
            <i class="fas fa-bug"></i>
            <div class="number">${totalPatterns}</div>
            <div class="label">Pattern Terdeteksi</div>
        </div>
        <div class="stat-card">
            <i class="fas fa-folder"></i>
            <div class="number" style="font-size: 0.9rem;">${escapeHtml(directory)}</div>
            <div class="label">Direktori Scan</div>
        </div>
    `;

let tableHtml = `
        <table id="resultTable">
            <thead>
                <tr>
                    <th class="checkbox-col"><input type="checkbox" id="selectAllCheckbox"></th>
                    <th>File Path</th>
                    <th>Size</th>
                    <th>Modified</th>
                    <th>Pattern</th>
                 </tr>
            </thead>
            <tbody>
    `;

results.forEach(item => {
        tableHtml += `
            <tr data-file="${item.file.replace(/\\/g, '\\\\')}">
                <td class="checkbox-col"><input type="checkbox" class="file-checkbox" value="${item.file.replace(/\\/g, '\\\\')}"> </td>
                <td class="file-path"><i class="fas fa-file-code"></i> ${escapeHtml(item.file)}</td>
                <td><span class="size-badge">${formatSize(item.size)}</span></td>
                <td>${item.modified}</td>
                <td>
        `;

item.patterns.forEach(pattern => {
            tableHtml += `<span class="pattern-badge">${escapeHtml(pattern)}</span>`;
        });

tableHtml += `
                </td>
            </tr>
        `;
    });

tableHtml += `
            </tbody>
        </table>
    `;

tableWrapper.innerHTML = tableHtml;
    resultArea.style.display = 'block';

function deleteFiles(files) {
    if (!files.length) {
        showAlert('Tidak ada file yang dipilih', 'error');
        return;
    }

if (!confirm(`Hapus ${files.length} file?`)) {
        return;
    }

fetch(window.location.href, {
        method: 'POST',
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'X-Requested-With': 'XMLHttpRequest'
        },
        body: 'action=delete&files=' + encodeURIComponent(JSON.stringify(files))
    })
    .then(response => response.json())
    .then(data => {
        if (data.deleted && data.deleted.length > 0) {
            showAlert(`Berhasil hapus ${data.deleted.length} file`, 'success');
            data.deleted.forEach(file => {
                const row = document.querySelector(`tr[data-file="${file.replace(/\\/g, '\\\\')}"]`);
                if (row) row.remove();
            });
        }
        if (data.failed && data.failed.length > 0) {
            showAlert(`Gagal hapus ${data.failed.length} file`, 'error');
        }

const remainingRows = document.querySelectorAll('.file-checkbox');
        if (remainingRows.length === 0) {
            document.getElementById('statsArea').innerHTML = `
                <div class="stat-card">
                    <i class="fas fa-file-alt"></i>
                    <div class="number">0</div>
                    <div class="label">File Terdeteksi</div>
                </div>
            `;
            document.getElementById('tableWrapper').innerHTML = `
                <div class="empty-state">
                    <i class="fas fa-check-circle"></i>
                    <h3>Bersih!</h3>
                    <p>Semua file berhasil dihapus</p>
                </div>
            `;
        }
    })
    .catch(error => {
        showAlert('Error: ' + error.message, 'error');
    });
}

function startScan() {
    const directory = document.getElementById('scanDirectory').value.trim();
    if (!directory) {
        showAlert('Masukkan direktori yang valid', 'error');
        return;
    }

const scanBtn = document.getElementById('scanBtn');
    scanBtn.disabled = true;
    scanBtn.innerHTML = '<i class="fas fa-spinner fa-pulse"></i> Scanning...';

fetch(window.location.href, {
        method: 'POST',
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'X-Requested-With': 'XMLHttpRequest'
        },
        body: 'action=scan&directory=' + encodeURIComponent(directory)
    })
    .then(response => response.json())
    .then(data => {
        scanBtn.disabled = false;
        scanBtn.innerHTML = '<i class="fas fa-search"></i> Mulai Scan';

if (data.status === 'success') {
            if (data.results.error) {
                showAlert(data.results.error, 'error');
                return;
            }
            renderResults(data.results, data.directory);
            showAlert(`Scan selesai! Ditemukan ${data.results.length} file`, 'success');
        } else {
            showAlert('Gagal scan', 'error');
        }
    })
    .catch(error => {
        scanBtn.disabled = false;
        scanBtn.innerHTML = '<i class="fas fa-search"></i> Mulai Scan';
        showAlert('Error: ' + error.message, 'error');
    });
}

document.getElementById('scanBtn').addEventListener('click', startScan);

document.getElementById('scanDirectory').addEventListener('keypress', function(e) {
    if (e.key === 'Enter') {
        startScan();
    }
});
</script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

block-php
Plaintext | 10 | 3 hours ago
scan_shell
Plaintext | 8 | 3 hours ago
scan-new
Plaintext | 9 | 3 hours ago
Untitled
Plaintext | 10 | 4 hours ago
exclusive hotmail cloud hiring up
Plaintext | 21 | 15 hours ago
Untitled
Plaintext | 24 | 1 day ago
Untitled
Plaintext | 13 | 2 days ago

Paste Settings

Site Languages