����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/st2/drive/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/st2/drive/phim1.php
<?php
header( 'Access-Control-Allow-Origin: https://phim1.net');
function post($url,$data) {
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $user_agent = 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36';
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    //curl_setopt($process, CURLOPT_REFERER, 'http://www.anivn.com');
//curl_setopt($process, CURLOPT_HEADER, 1);
    curl_setopt($process, CURLOPT_USERAGENT, $user_agent);
    curl_setopt($process, CURLOPT_COOKIEFILE, 'cookie_okru_phim1.txt');
    curl_setopt($process, CURLOPT_COOKIEJAR, 'cookie_okru_phim1.txt');
    curl_setopt($process, CURLOPT_ENCODING , 'gzip');

    curl_setopt($process, CURLOPT_TIMEOUT, 10);
//if ($this->proxy) curl_setopt($process, CURLOPT_PROXY, $this->proxy);
    curl_setopt($process, CURLOPT_POSTFIELDS, $data);
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($process, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($process, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($process, CURLOPT_FOLLOWLOCATION, 0);
    curl_setopt($process, CURLOPT_POST, 1);
    $return = curl_exec($process);
    curl_close($process);
    return $return;
}
function get($url)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_ENCODING, 'gzip');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 20);
    curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie_okru_phim1.txt');
    curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie_okru_phim1.txt');
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 20);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function curl_detail($url,$ref) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = ":authority: ok.ru";
    $head[] = ":method: GET";
    $head[] = ":scheme: https";
    $head[] = "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8";
    $head[] = "accept-encoding: gzip, deflate, br";
    $head[] = "Referer: ".$ref;
    $head[] = "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36";
    $head[] = "upgrade-insecure-requests: 1";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_REFERER, $ref);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_ENCODING , "br");
    curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie_okru_phim1.txt');
    curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie_okru_phim1.txt');
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function curl($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
if(!isset($_GET['time'])){
    return;
}
$url_encode = $_GET['url'];

$txt_play = str_encode(hex2bin($url_encode),'123Vid@Net');

$pos17 = strpos($txt_play,'vup.to');
$pos16 = strpos($txt_play,'ok.ru');
if($pos16 !==false) {
    $arr_json['type'] = 'video/mp4';
    $arr_json['file'] = '';
    $url = $txt_play;
    $ref = 'https://ok.ru';
    $url = str_replace('videoembed/','video/',$url);
//login
    $txt_user_name = '84929057429';
    $txt_user_password = 'iSchool!23';
    $url_login = 'https://www.ok.ru/https';
    $data = 'st.redirect='.$url.'&st.asr=&st.posted=set&st.originalaction=https://ok.ru/dk?cmd=AnonymLogin&st.cmd=anonymLogin&st.fJS=0&st.st.screenSize=1366 x 768&st.st.browserSize=657&st.st.flashVer=0.0.0&st.email='.$txt_user_name.'&st.password='.$txt_user_password;
    $content = post($url_login,$data);
//get content after login
    $content = curl_detail($url,$ref);
    $content = brotli_uncompress($content);
    if(strpos($content,'hlsManifestUrl')===false){//not encoded yet
        if(strpos($content,'mobile\&quot;,\&quot;url\&quot;:\&quot;')!==false){//mp4 video
            $arr = explode('mobile\&quot;,\&quot;url\&quot;:\&quot;', $content);
            $arr2 = explode('\&quot;,\&quot;seekSchema', $arr[1]);
            $link = html_entity_decode($arr2[0]);
            $link = str_replace(array('\":\"', '\",\"', '\\u0026'), array('', '', '&'), $link);
            $link = str_replace(array('\&'), array('&'), $link);
            $link_encode = bin2hex(str_encode($link, '123Vid@Net'));
            $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
            $type = 'video/mp4';
            $arr_json['file'] = $link;
            $arr_json['type'] = $type;
        }
    }else {//encoded
        $arr = explode('hlsManifestUrl', $content);
        $arr2 = explode('failoverHosts', $arr[1]);
        $link = html_entity_decode($arr2[0]);
        $link = str_replace(array('\":\"', '\",\"', '\\u0026'), array('', '', '&'), $link);
        $link = str_replace(array('\&'), array('&'), $link);
        $link_encode = bin2hex(str_encode($link, '123Vid@Net'));
        //$link = 'https://st1.videock.com/drive/playlist2_phim1.php?time='.time().'&url=' . base64_encode($link_encode);
        $link = 'https://st1.videock.com/drive/playlist2_phim1/'.time().'/' . base64_encode($link_encode).'.m3u8';
        $type = 'application/x-mpegURL';
        $arr_json['file'] = $link;
        $arr_json['type'] = $type;
    }
    echo json_encode($arr_json);
    exit();
}
if($pos17 !==false) {
    $arr_json['type'] = 'video/mp4';
    $arr_json['file'] = '';
    $url = $txt_play;
    $arr_url = explode('?keyapi=',$url);
    $url = $arr_url[0];
    $id = str_replace('.html','',basename($url));

    $key='315f985n6di9q7n0g4a';
    if($arr_url[1]!=''){
        $key=$arr_url[1];
    }

    $url = 'https://vup.to/api/file/direct_link?key='.$key.'&file_code='.$id;
    $content = curl($url);
    $arr = json_decode($content,true);
    $source = '';
    $label = '';
    $selected = '';
    if($arr['msg']=='OK'){
        include 'Mobile_Detect.php';
        $detect = new Mobile_Detect;
        if ($detect->isMobile() or $detect->isTablet()) {
            foreach ($arr['result'] as $key=>$val){
                if($key=='n' and $val['url']!=''){
                    $label = '480p';
                    $selected = 'selected="true"';
                    $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
                    $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
                    break;
                }
                if($key=='o' and $val['url']!=''){
                    $label = '360p';
                    $selected = '';
                    $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
                    $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
                }
            }
        }else {
            foreach ($arr['result'] as $key => $val) {
                if ($key == 'h' and $val['url']!='') {
                    $label = '720p';
                    $selected = 'selected="true"';
                    $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
                    $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
                    break;
                }
                if ($key == 'n' and $val['url']!='') {
                    $label = '480p';
                    $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
                    $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
                }

                if ($key == 'o' and $val['url']!='') {
                    $label = '360p';
                    $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
                    $link = 'https://st1.videock.com/mp4.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
                }
            }
        }
        $arr_json['file'] = $link;
    }

    echo json_encode($arr_json);
    exit();
}

?>

ZeroDay Forums Mini