ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/st2/drive/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/st2/drive/aaa_test.php
<?php
header( 'Access-Control-Allow-Origin: https://www.123vid.net', true );
header('X-Frame-Options: ALLOW-FROM https://www.123vid.net/');
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function curl_detail($url,$ref) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = ":authority: embed.streamx.me";
    $head[] = ":method: GET";
    $head[] = ":scheme: https";
    $head[] = "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
    $head[] = "accept-encoding: gzip, deflate, br";
    $head[] = "accept-language: vi-VN,vi;q=0.9,fr-FR;q=0.8,fr;q=0.7,en-US;q=0.6,en;q=0.5";
    $head[] = "Referer: ".$ref;
    $head[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36";
    $head[] = "upgrade-insecure-requests: 1";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_REFERER, $ref);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_ENCODING , "br");
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function curl_func($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    //curl_setopt($ch, CURLOPT_REFERER, 'http://www.phimmoi.net');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 10);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function encode_html($input)
{
    $temp = '';
    $length = strlen($input);
    for($i = 0; $i < $length; $i++)
        $temp .= '%' . bin2hex($input[$i]);
    return $temp;
}

if(!isset($_GET['time'])){
    return;
}

/*$time = $_GET['time'];
$time_check = time()-1;
$time_check2 = time()+5;
if($time < $time_check){
    return;
}
if($time > $time_check2){
    return;
}*/

require __DIR__ . '/bypass3/src/autoload.php';

use CloudflareBypass\RequestMethod\CFStream;

$stream_cf_wrapper = new CFStream(array(
    'max_retries'   => 5,                       // How many times to try and get clearance?
    'cache'         => true,                   // Enable caching?
    'cache_path'    => __DIR__ . '/cache3',      // Where to cache cookies? (Default: system tmp directory)
    'verbose'       => false,
    'verbose_mode'       => false
));

// Get Example: 1
$opts = array(
    'http' => array(
        'method' => "GET",
        'header' => array(
            'accept: */*',       // required
            'host: kissanime.ac',    // required
            'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36'
        )
    )
);
//$id = $_GET['id'];
//$url = "https://kissanime.ac/ajax/anime/load_episodes_v2?s=ptserver&episode_id=" . $id;
$url_encode = $_GET['url'];
$url_decode = str_encode(hex2bin($url_encode),'123Vid@Net');

//$url_decode = $_GET['url'];
$arr_url = explode('?id=',$url_decode);
$id = $arr_url[1];
$url = "https://kissanime.ac/ajax/anime/load_episodes_v2?s=ptserver&episode_id=" . $id;

$ctx = $stream_cf_wrapper->contextCreate($url, stream_context_create($opts));
$c1 = file_get_contents($url, false, $ctx);
$arr1 = json_decode($c1);

$status = $arr1->status;
if($status=='true') {
    /*$iframe = $arr1->value;
    preg_match('#iframe src="(.*?)" width=#is', $iframe, $match);
    $url2 = $match[1];*/

    $url2 = $arr1->value;

    $c2 = curl_detail($url2, $url_decode);

    $content2 = brotli_uncompress($c2);

    if(strpos($content2,'redirector.googlevideo.com')===false){//video error
        $url = "https://kissanime.ac/ajax/anime/load_episodes_v2?s=oserver&episode_id=" . $id;
        $ctx = $stream_cf_wrapper->contextCreate($url, stream_context_create($opts));
        $c1 = file_get_contents($url, false, $ctx);
        $arr1 = json_decode($c1);
        $status = $arr1->status;
        if($status=='true') {
            /*$iframe = $arr1->value;
            preg_match('#iframe src="(.*?)" width=#is', $iframe, $match);
            $url2 = $match[1];*/

            $url2 = $arr1->value;

            $c2 = curl_detail($url2, $url_decode);
            $content2 = brotli_uncompress($c2);
            preg_match('#"src":"(.*?)master.m3u8#is',$content2,$match);
            $type = 'application/x-mpegURL';
            $file = str_replace(array('\/'), array('/'), $match[1]).'index-v1-a1.m3u8';


            $file_encode = bin2hex(str_encode($file, '123Vid@Net'));
            $file = 'playlist.php?url='.base64_encode($file_encode);
        }
    }else {
        $arr_c2 = explode('setPlayerHTML5([', $content2);

        preg_match_all('#redirector.googlevideo.com(.*?)","type#is', $arr_c2[1], $match2);

        include 'Mobile_Detect.php';
        $detect = new Mobile_Detect;
        $type = 'video/mp4';
        $file = 'https://redirector.googlevideo.com' . str_replace(array('\/'), array('/'), $match[1][0]);
        foreach ($match2[1] as $key => $val) {
            if ($detect->isMobile() || $detect->isTablet()) {
                if (strpos($val, 'itag=18') !== false) {
                    $file = 'https://redirector.googlevideo.com' . str_replace(array('\/'), array('/'), $val);
                    break;
                }
            } else {
                if (strpos($val, 'itag=22') !== false) {
                    $file = 'https://redirector.googlevideo.com' . str_replace(array('\/'), array('/'), $val);
                    break;
                }
            }
        }
        $file_encode = bin2hex(str_encode($file, '123Vid@Net'));
        $file = 'https://st1.123vid.net/mp4.php?link=' . $file_encode . '&token=' . md5(uniqid(microtime()));
    }
}else{//oserver
    $url = "https://kissanime.ac/ajax/anime/load_episodes_v2?s=oserver&episode_id=" . $id;
    $ctx = $stream_cf_wrapper->contextCreate($url, stream_context_create($opts));
    $c1 = file_get_contents($url, false, $ctx);
    $arr1 = json_decode($c1);
    $status = $arr1->status;
    if ($status == 'true') {
        /*$iframe = $arr1->value;
        preg_match('#iframe src="(.*?)" width=#is', $iframe, $match);
        $url2 = $match[1];*/
        $url2 = $arr1->value;
        $c2 = curl_detail($url2, $url_decode);
        $content2 = brotli_uncompress($c2);
        preg_match('#"src":"(.*?)master.m3u8#is', $content2, $match);
        $type = 'application/x-mpegURL';
        $file = str_replace(array('\/'), array('/'), $match[1]) . 'index-v1-a1.m3u8';
        $file_encode = bin2hex(str_encode($file, '123Vid@Net'));
        $file = 'playlist.php?url=' . base64_encode($file_encode);
    }
}
$html_input = '<video autoplay controls preload="auto" id="ht_player" style="width: 100%; height: 100%" class="video-js vjs-default-skin"
       poster="https://www.123vid.net/skin/phim98/assets/img/123vid.jpg" data-setup="{ }">
    <source src="'.$file.'" type="'.$type.'"/>
    <p>Video Playback Not Supported</p>
</video>';
$html_encode = encode_html($html_input);
?>
<html style="width: 100%; height: 100%"><head>
    <title>-Server 2 embed-</title>
    <base href="https://st1.123vid.net/drive/">
    <style type="text/css">
        body {
            background: #000000;
            margin: 0px;
            padding: 0px;
        }
    </style>
    <link href="js/video-js.css" rel="stylesheet" type="text/css" />
    <link href="js/vsg-skin.css" rel="stylesheet" type="text/css" />
    <script src="js/video.js"></script>
    <script src="js/videojs-contrib-hls.js"></script>
</head>
<body style="width: 100%; height: 100%" oncontextmenu="return false;">
<script type="text/javascript">
    document.write(unescape('<?php echo $html_encode;?>'));
</script>
</body></html>

ZeroDay Forums Mini