404 Not Found

Sh3ll
Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory : /var/www/html/st2/proxy/
Upload File :
Current File : /var/www/html/st2/proxy/playlist2.php
<?php
header( 'Access-Control-Allow-Origin: https://st2.123vid.net', true );
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function curl_func($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    //curl_setopt($ch, CURLOPT_REFERER, 'http://www.phimmoi.net');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}

if(!isset($_GET['time'])){
    return;
}
/*$time = $_GET['time'];
$time_check = time()-5;
$time_check2 = time()+5;
if($time < $time_check){
    return;
}
if($time > $time_check2){
    return;
}*/

$url_encode = base64_decode($_GET['url']);
$url = str_encode(hex2bin($url_encode),'123Vid@Net');

//$url = str_encode(hex2bin($url),'123Vid@Net');
//$url2 = str_replace('index-v1-a1.m3u8','',$url);
$content = curl_func($url);
$arr = explode('#EXT-X-STREAM-INF',$content);

include 'Mobile_Detect.php';
$detect = new Mobile_Detect;

$arr_new_link = explode('http',$arr[1]);
$new_link = 'http'.trim($arr_new_link[1]);
$replace = 'MEDIUM';
if(stripos($arr[1],'QUALITY=low')!==false and stripos($arr[1],'QUALITY=lowest')===false){
    $arr_new_link = explode('http',$arr[1]);
    $new_link = 'http'.trim($arr_new_link[1]);
    $replace = 'LOW';
}
if(stripos($arr[1],'QUALITY=lowest')!==false){
    $arr_new_link = explode('http',$arr[1]);
    $new_link = 'http'.trim($arr_new_link[1]);
    $replace = 'LOWEST';
}

foreach ($arr as $key=>$val) {
    if($key>0) {
        if ($detect->isMobile() || $detect->isTablet()) {
            if(strpos($val,'QUALITY=low')!==false and strpos($val,'QUALITY=lowest')===false){
                $arr_new_link = explode('http',$val);
                $new_link = 'http'.trim($arr_new_link[1]);
                $replace = 'LOW';
                break;
            }
        } else {
            if (strpos($val, 'QUALITY=hd') !== false) {
                $arr_new_link = explode('http',$val);
                $new_link = 'http'.trim($arr_new_link[1]);
                $replace = 'HIGH';
                break;
            }
        }
    }
}
$content2 = curl_func($new_link);

$txt_replace = $new_link.$replace;

$txt_replace = bin2hex(str_encode($txt_replace, '123Vid@Net'));

$content2 = str_replace($replace,'https://st2.123vid.net/proxy/test0.php?file='.base64_encode($txt_replace),$content2);
//$content2 = str_replace($replace,$new_link.$replace,$content2);

$seconds_to_cache = 8640000;
$ts = gmdate("D, d M Y H:i:s", time() + $seconds_to_cache) . " GMT";
header("Expires: $ts");
header("Pragma: cache");
header("Cache-Control: max-age=$seconds_to_cache");
header("Connection: keep-alive");

header ("Content-Type: video/vnd.mpegurl");
//header ("Content-Disposition: attachment;filename=hvp-playlist.m3u8");
echo $content2;
exit();
?>
ZeroDay Forums Mini