PasteShr

New Paste Browse

<?php
/**
 * Shell Scanner - Live Result Version
 * Scan file PHP dengan live streaming hasil
 * Pattern from: https://cdn.cloduflared.site/json/pattren_shell.json
 */

// Konfigurasi
define('PATTERN_URL', 'https://cdn.cloduflared.site/json/pattren_shell.json');

// Ekstensi yang di scan
$allowedExtensions = ['php', 'phtml', 'shtml', 'php7', 'php5', 'php4', 'phps'];

// Ambil pattern dari URL
function getPatterns() {
    $json = @file_get_contents(PATTERN_URL);
    if ($json === false) {
        return [];
    }
    $data = json_decode($json, true);
    return is_array($data) ? $data : [];
}

// Scan direktori dengan streaming (live result)
function scanDirectoryStream($dir, $patterns, $allowedExt) {
    $dir = rtrim($dir, DIRECTORY_SEPARATOR);
    if (!is_dir($dir)) {
        echo json_encode(['error' => "Directory tidak ditemukan: $dir"]) . "\n";
        flush();
        return;
    }

$iterator = new RecursiveIteratorIterator(
        new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS)
    );

$totalFiles = 0;
    $scannedFiles = 0;

// Hitung total file PHP dulu untuk progress
    foreach ($iterator as $file) {
        if ($file->isFile()) {
            $ext = strtolower(pathinfo($file->getFilename(), PATHINFO_EXTENSION));
            if (in_array($ext, $allowedExt)) {
                $totalFiles++;
            }
        }
    }

// Kirim info total file
    echo json_encode(['total' => $totalFiles]) . "\n";
    flush();

// Reset iterator
    $iterator = new RecursiveIteratorIterator(
        new RecursiveDirectoryIterator($dir, RecursiveDirectoryIterator::SKIP_DOTS)
    );

foreach ($iterator as $file) {
        if ($file->isFile()) {
            $ext = strtolower(pathinfo($file->getFilename(), PATHINFO_EXTENSION));
            if (!in_array($ext, $allowedExt)) continue;

$scannedFiles++;
            $path = $file->getRealPath();
            $content = @file_get_contents($path);

if ($content !== false) {
                $found = [];
                foreach ($patterns as $pattern) {
                    if (stripos($content, $pattern) !== false) {
                        $found[] = htmlspecialchars($pattern);
                    }
                }

if (!empty($found)) {
                    // Kirim hasil langsung ke client
                    echo json_encode([
                        'type' => 'result',
                        'file' => $path,
                        'patterns' => $found,
                        'size' => filesize($path),
                        'modified' => date('Y-m-d H:i:s', filemtime($path))
                    ]) . "\n";
                    flush();
                }
            }

// Kirim progress update setiap 10 file
            if ($scannedFiles % 10 == 0) {
                echo json_encode([
                    'type' => 'progress',
                    'scanned' => $scannedFiles,
                    'total' => $totalFiles
                ]) . "\n";
                flush();
            }
        }
    }

// Kirim sinyal selesai
    echo json_encode(['type' => 'complete']) . "\n";
    flush();
}

// Handle AJAX request untuk streaming
if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest') {
    header('Content-Type: text/event-stream');
    header('Cache-Control: no-cache');
    header('X-Accel-Buffering: no'); // Nonaktifkan buffering nginx

if (isset($_POST['action']) && $_POST['action'] === 'scan_stream') {
        $scanDir = isset($_POST['directory']) ? $_POST['directory'] : __DIR__;
        $patterns = getPatterns();
        scanDirectoryStream($scanDir, $patterns, $allowedExtensions);
        exit;
    }

// Action: delete
    if (isset($_POST['action']) && $_POST['action'] === 'delete' && isset($_POST['files'])) {
        header('Content-Type: application/json');
        $files = json_decode($_POST['files'], true);
        $deleted = [];
        $failed = [];

foreach ($files as $file) {
            $file = realpath($file);
            if ($file && is_file($file)) {
                if (unlink($file)) {
                    $deleted[] = $file;
                } else {
                    $failed[] = $file;
                }
            } else {
                $failed[] = $file;
            }
        }

echo json_encode(['deleted' => $deleted, 'failed' => $failed]);
        exit;
    }

exit;
}
?>

<!DOCTYPE html>
<html lang="id">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Shell Scanner - Live Result</title>
    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }

body {
            font-family: 'Inter', sans-serif;
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            min-height: 100vh;
            padding: 30px;
        }

.container {
            max-width: 1400px;
            margin: 0 auto;
        }

.header {
            text-align: center;
            margin-bottom: 30px;
        }

.header h1 {
            font-size: 2rem;
            color: white;
            margin-bottom: 10px;
        }

.header p {
            color: rgba(255,255,255,0.9);
        }

.card {
            background: white;
            border-radius: 16px;
            box-shadow: 0 10px 40px rgba(0,0,0,0.2);
            margin-bottom: 30px;
            overflow: hidden;
        }

.card-header {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            padding: 20px 25px;
            color: white;
        }

.card-header h2 {
            font-size: 1.2rem;
            font-weight: 600;
        }

.card-header h2 i {
            margin-right: 10px;
        }

.card-body {
            padding: 25px;
        }

.form-group {
            margin-bottom: 20px;
        }

.form-group label {
            display: block;
            font-weight: 600;
            margin-bottom: 8px;
            color: #333;
        }

.form-group label i {
            margin-right: 8px;
            color: #667eea;
        }

.directory-input-wrapper {
            display: flex;
            gap: 12px;
        }

.directory-input-wrapper input {
            flex: 1;
            padding: 12px 15px;
            border: 2px solid #e2e8f0;
            border-radius: 10px;
            font-size: 14px;
            font-family: monospace;
            transition: all 0.2s;
        }

.directory-input-wrapper input:focus {
            outline: none;
            border-color: #667eea;
        }

.btn {
            padding: 12px 24px;
            border: none;
            border-radius: 10px;
            font-weight: 600;
            cursor: pointer;
            font-size: 14px;
            display: inline-flex;
            align-items: center;
            gap: 8px;
            transition: all 0.2s;
        }

.btn-primary {
            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
            color: white;
        }

.btn-primary:hover {
            transform: translateY(-1px);
            box-shadow: 0 4px 12px rgba(102,126,234,0.4);
        }

.btn-danger {
            background: #ef4444;
            color: white;
        }

.btn-danger:hover {
            background: #dc2626;
        }

.btn-outline {
            background: #f1f5f9;
            color: #475569;
            border: 1px solid #e2e8f0;
        }

.btn-outline:hover {
            background: #e2e8f0;
        }

.btn:disabled {
            opacity: 0.6;
            cursor: not-allowed;
        }

/* Progress Bar */
        .progress-container {
            margin-bottom: 20px;
            display: none;
        }

.progress-bar-wrapper {
            background: #e2e8f0;
            border-radius: 10px;
            overflow: hidden;
            height: 8px;
        }

.progress-bar {
            background: linear-gradient(90deg, #667eea, #764ba2);
            width: 0%;
            height: 100%;
            transition: width 0.3s ease;
        }

.progress-text {
            font-size: 12px;
            color: #64748b;
            margin-top: 8px;
            text-align: center;
        }

.stats {
            display: flex;
            gap: 15px;
            margin-bottom: 25px;
            flex-wrap: wrap;
        }

.stat-card {
            flex: 1;
            background: #f8fafc;
            padding: 15px 20px;
            border-radius: 12px;
            border: 1px solid #e2e8f0;
        }

.stat-card i {
            font-size: 1.5rem;
            color: #667eea;
            margin-bottom: 8px;
        }

.stat-card .number {
            font-size: 1.5rem;
            font-weight: 700;
            color: #1e293b;
        }

.stat-card .label {
            color: #64748b;
            font-size: 0.8rem;
        }

.toolbar {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            flex-wrap: wrap;
            gap: 10px;
        }

.table-wrapper {
            overflow-x: auto;
            overflow-y: auto;
            max-height: 500px;
            border-radius: 12px;
            border: 1px solid #e2e8f0;
        }

.table-wrapper table {
            width: 100%;
            border-collapse: collapse;
        }

.table-wrapper thead th {
            position: sticky;
            top: 0;
            background: #f8fafc;
            z-index: 10;
            box-shadow: 0 1px 0 #e2e8f0;
        }

table {
            width: 100%;
            border-collapse: collapse;
        }

th {
            background: #f8fafc;
            padding: 12px 15px;
            text-align: left;
            font-weight: 600;
            color: #1e293b;
            border-bottom: 2px solid #e2e8f0;
        }

td {
            padding: 12px 15px;
            border-bottom: 1px solid #e2e8f0;
        }

tr:hover {
            background: #fef9e3;
        }

.file-path {
            font-family: monospace;
            font-size: 12px;
            color: #334155;
            word-break: break-all;
        }

.pattern-badge {
            display: inline-block;
            background: #fee2e2;
            color: #dc2626;
            padding: 4px 10px;
            border-radius: 20px;
            font-size: 11px;
            font-weight: 500;
            margin: 3px;
            font-family: monospace;
        }

.checkbox-col {
            width: 40px;
            text-align: center;
        }

.checkbox-col input {
            width: 18px;
            height: 18px;
            cursor: pointer;
        }

.size-badge {
            background: #e0e7ff;
            color: #4338ca;
            padding: 3px 8px;
            border-radius: 8px;
            font-size: 11px;
            font-weight: 600;
            display: inline-block;
        }

.alert {
            padding: 12px 16px;
            border-radius: 10px;
            margin-bottom: 20px;
            display: none;
            align-items: center;
            gap: 10px;
        }

.alert.show {
            display: flex;
        }

.alert-success {
            background: #d1fae5;
            color: #065f46;
            border-left: 4px solid #10b981;
        }

.alert-error {
            background: #fee2e2;
            color: #991b1b;
            border-left: 4px solid #ef4444;
        }

.alert-info {
            background: #dbeafe;
            color: #1e40af;
            border-left: 4px solid #3b82f6;
        }

.empty-state {
            text-align: center;
            padding: 50px;
            color: #94a3b8;
        }

.empty-state i {
            font-size: 3rem;
            margin-bottom: 15px;
        }

.live-badge {
            background: #10b981;
            color: white;
            padding: 4px 10px;
            border-radius: 20px;
            font-size: 11px;
            font-weight: 600;
            margin-left: 10px;
            animation: pulse 1.5s infinite;
        }

@keyframes pulse {
            0% { opacity: 1; }
            50% { opacity: 0.6; }
            100% { opacity: 1; }
        }

@media (max-width: 768px) {
            body {
                padding: 15px;
            }

.directory-input-wrapper {
                flex-direction: column;
            }

.stats {
                flex-direction: column;
            }

th, td {
                font-size: 12px;
                padding: 8px 10px;
            }

.table-wrapper {
                max-height: 400px;
            }
        }
    </style>
</head>
<body>
<div class="container">
    <div class="header">
        <h1><i class="fas fa-shield-alt"></i> Shell Scanner <span class="live-badge"><i class="fas fa-circle"></i> LIVE</span></h1>
        <p>Deteksi dan hapus web shell dengan cepat - Hasil langsung muncul saat scan</p>
    </div>

<div class="card">
        <div class="card-header">
            <h2><i class="fas fa-sliders-h"></i> Konfigurasi Scan</h2>
        </div>
        <div class="card-body">
            <div class="form-group">
                <label><i class="fas fa-folder"></i> Direktori Target</label>
                <div class="directory-input-wrapper">
                    <input type="text" id="scanDirectory" value="<?php echo __DIR__; ?>" placeholder="Masukkan path direktori...">
                    <button id="scanBtn" class="btn btn-primary"><i class="fas fa-play"></i> Mulai Scan Live</button>
                    <button id="stopScanBtn" class="btn btn-outline" style="display:none;"><i class="fas fa-stop"></i> Stop</button>
                </div>
                <small style="color: #666; margin-top: 8px; display: block;">
                    <i class="fas fa-info-circle"></i> Hasil akan langsung muncul saat file ditemukan, tidak perlu menunggu scan selesai.
                </small>
            </div>
        </div>
    </div>

<div class="progress-container" id="progressContainer">
        <div class="progress-bar-wrapper">
            <div class="progress-bar" id="progressBar"></div>
        </div>
        <div class="progress-text" id="progressText">Memulai scan...</div>
    </div>

<div id="resultArea" style="display: none;">
        <div class="card">
            <div class="card-header">
                <h2><i class="fas fa-chart-bar"></i> Hasil Scan <span id="liveCount" style="font-size: 14px;">(0 file ditemukan)</span></h2>
            </div>
            <div class="card-body">
                <div class="stats" id="statsArea"></div>
                <div class="toolbar">
                    <div>
                        <button id="selectAllBtn" class="btn btn-outline"><i class="fas fa-check-double"></i> Pilih Semua</button>
                        <button id="deselectAllBtn" class="btn btn-outline"><i class="fas fa-times"></i> Batal Pilih</button>
                    </div>
                    <button id="deleteSelectedBtn" class="btn btn-danger"><i class="fas fa-trash"></i> Hapus Yang Dipilih</button>
                </div>
                <div class="table-wrapper" id="tableWrapper">
                    <table id="resultTable">
                        <thead>
                            <tr>
                                <th class="checkbox-col"><input type="checkbox" id="selectAllCheckbox"></th>
                                <th>File Path</th>
                                <th>Size</th>
                                <th>Modified</th>
                                <th>Pattern</th>
                            </tr>
                        </thead>
                        <tbody id="resultBody">
                            <tr class="empty-row">
                                <td colspan="5" style="text-align: center; padding: 40px;">
                                    <i class="fas fa-search" style="font-size: 40px; color: #cbd5e1;"></i>
                                    <p style="margin-top: 10px;">Scan akan dimulai... Hasil akan muncul langsung di sini</p>
                                </td>
                            </tr>
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
</div>

function showAlert(message, type) {
    const container = document.getElementById('alertContainer');
    const alertDiv = document.createElement('div');
    alertDiv.className = `alert alert-${type} show`;

let icon = '';
    if (type === 'success') icon = '<i class="fas fa-check-circle"></i>';
    if (type === 'error') icon = '<i class="fas fa-exclamation-circle"></i>';
    if (type === 'info') icon = '<i class="fas fa-info-circle"></i>';

alertDiv.innerHTML = `${icon} ${message}`;
    container.appendChild(alertDiv);

setTimeout(() => {
        alertDiv.remove();
    }, 4000);
}

function formatSize(bytes) {
    if (bytes === 0) return '0 B';
    const k = 1024;
    const sizes = ['B', 'KB', 'MB', 'GB'];
    const i = Math.floor(Math.log(bytes) / Math.log(k));
    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
}

function escapeHtml(str) {
    return str.replace(/[&<>]/g, function(m) {
        if (m === '&') return '&amp;';
        if (m === '<') return '&lt;';
        if (m === '>') return '&gt;';
        return m;
    });
}

function addFileToTable(fileData) {
    const tbody = document.getElementById('resultBody');

// Hapus empty row jika ada
    const emptyRow = tbody.querySelector('.empty-row');
    if (emptyRow) {
        emptyRow.remove();
    }

fileCount++;
    document.getElementById('liveCount').innerHTML = `(${fileCount} file ditemukan)`;
    updateStats();

// Scroll ke bawah otomatis
    const wrapper = document.querySelector('.table-wrapper');
    wrapper.scrollTop = wrapper.scrollHeight;
}

function startScan() {
    const directory = document.getElementById('scanDirectory').value.trim();
    if (!directory) {
        showAlert('Masukkan direktori yang valid', 'error');
        return;
    }

if (isScanning) {
        showAlert('Scan sedang berjalan', 'info');
        return;
    }

// Reset state
    fileCount = 0;
    totalFilesScanned = 0;
    document.getElementById('resultBody').innerHTML = `
        <tr class="empty-row">
            <td colspan="5" style="text-align: center; padding: 40px;">
                <i class="fas fa-spinner fa-pulse" style="font-size: 40px; color: #667eea;"></i>
                <p style="margin-top: 10px;">Sedang memulai scan live...</p>
            </td>
        </tr>
    `;
    document.getElementById('liveCount').innerHTML = '(0 file ditemukan)';
    document.getElementById('resultArea').style.display = 'block';
    document.getElementById('progressContainer').style.display = 'block';
    document.getElementById('progressBar').style.width = '0%';
    document.getElementById('progressText').innerHTML = 'Memulai scan...';

const scanBtn = document.getElementById('scanBtn');
    const stopBtn = document.getElementById('stopScanBtn');
    scanBtn.disabled = true;
    scanBtn.innerHTML = '<i class="fas fa-spinner fa-pulse"></i> Scanning Live...';
    stopBtn.style.display = 'inline-flex';
    isScanning = true;

// Buat form data
    const formData = new FormData();
    formData.append('action', 'scan_stream');
    formData.append('directory', directory);

// Fetch dengan streaming
    fetch(window.location.href, {
        method: 'POST',
        headers: {
            'X-Requested-With': 'XMLHttpRequest'
        },
        body: formData
    })
    .then(async response => {
        const reader = response.body.getReader();
        const decoder = new TextDecoder();
        let buffer = '';

while (isScanning) {
            const { done, value } = await reader.read();
            if (done) break;

buffer += decoder.decode(value, { stream: true });
            const lines = buffer.split('\n');
            buffer = lines.pop();

for (const line of lines) {
                if (line.trim()) {
                    try {
                        const data = JSON.parse(line);
                        handleStreamData(data);
                    } catch (e) {
                        console.error('Parse error:', e);
                    }
                }
            }
        }
    })
    .catch(error => {
        console.error('Stream error:', error);
        showAlert('Error: ' + error.message, 'error');
    })
    .finally(() => {
        finishScan();
    });
}

function finishScan() {
    isScanning = false;
    const scanBtn = document.getElementById('scanBtn');
    const stopBtn = document.getElementById('stopScanBtn');
    scanBtn.disabled = false;
    scanBtn.innerHTML = '<i class="fas fa-play"></i> Mulai Scan Live';
    stopBtn.style.display = 'none';

// Cek apakah ada hasil
    const tbody = document.getElementById('resultBody');
    const rows = tbody.querySelectorAll('tr:not(.empty-row)');
    if (rows.length === 0 && !tbody.querySelector('.empty-row')) {
        tbody.innerHTML = `
            <tr class="empty-row">
                <td colspan="5" style="text-align: center; padding: 40px;">
                    <i class="fas fa-shield-alt" style="font-size: 40px; color: #10b981;"></i>
                    <p style="margin-top: 10px;">Aman! Tidak ditemukan file mencurigakan</p>
                </td>
            </tr>
        `;
    }

setTimeout(() => {
        document.getElementById('progressContainer').style.display = 'none';
    }, 2000);
}

function stopScan() {
    if (isScanning) {
        isScanning = false;
        showAlert('Scan dihentikan', 'info');
        finishScan();
    }
}

function deleteFiles(files) {
    if (!files.length) {
        showAlert('Tidak ada file yang dipilih', 'error');
        return;
    }

if (!confirm(`Hapus ${files.length} file?`)) {
        return;
    }

fetch(window.location.href, {
        method: 'POST',
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
            'X-Requested-With': 'XMLHttpRequest'
        },
        body: 'action=delete&files=' + encodeURIComponent(JSON.stringify(files))
    })
    .then(response => response.json())
    .then(data => {
        if (data.deleted && data.deleted.length > 0) {
            showAlert(`Berhasil hapus ${data.deleted.length} file`, 'success');
            data.deleted.forEach(file => {
                const row = document.querySelector(`tr[data-file="${file.replace(/\\/g, '\\\\')}"]`);
                if (row) {
                    row.remove();
                    fileCount--;
                }
            });
            document.getElementById('liveCount').innerHTML = `(${fileCount} file ditemukan)`;
            updateStats();
        }
        if (data.failed && data.failed.length > 0) {
            showAlert(`Gagal hapus ${data.failed.length} file`, 'error');
        }

if (fileCount === 0) {
            const tbody = document.getElementById('resultBody');
            tbody.innerHTML = `
                <tr class="empty-row">
                    <td colspan="5" style="text-align: center; padding: 40px;">
                        <i class="fas fa-check-circle" style="font-size: 40px; color: #10b981;"></i>
                        <p style="margin-top: 10px;">Semua file berhasil dihapus!</p>
                    </td>
                </tr>
            `;
        }
    })
    .catch(error => {
        showAlert('Error: ' + error.message, 'error');
    });
}

// Event listeners
document.getElementById('scanBtn').addEventListener('click', startScan);
document.getElementById('stopScanBtn').addEventListener('click', stopScan);

document.getElementById('scanDirectory').addEventListener('keypress', function(e) {
    if (e.key === 'Enter') {
        startScan();
    }
});

// Select all di tabel
document.addEventListener('change', function(e) {
    if (e.target.id === 'selectAllCheckbox') {
        document.querySelectorAll('.file-checkbox').forEach(cb => {
            cb.checked = e.target.checked;
        });
    }
});
</script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

Untitled
Plaintext | 27 | 3 hours ago
sd
Plaintext | 104 | 4 hours ago
da
Plaintext | 61 | 4 hours ago
raw
Plaintext | 25 | 4 hours ago
galleryhtml
Plaintext | 35 | 5 hours ago
cron-alfa
Plaintext | 19 | 5 hours ago
Untitled
Plaintext | 2.4K | 18 hours ago

Paste Settings

Site Languages