ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/proxy/download2.php
<?php
define('MSG_NO_ACCESS', 'No access');
/*$arr_bot_deny = array('googlebot','bingbot','baiduspider','ahrefsbot','semrushbot','seznambot','yoozbot','linkdexbot','mj12bot','seobilitybot','msnbot-media','facebookexternalhit',' mail.ru_bot','musobot','sogou web spider');
foreach ($arr_bot_deny as $val) {
    if(stripos($_SERVER['HTTP_USER_AGENT'],$val)!== false){
        header('HTTP/1.0 403 Forbidden');
        die();
        exit();
    }
}*/
$acceptedDomains = array('123vid.top','123vid.net','vidoe.top','www.vidoe.top');
$referer=get_domain($_SERVER['HTTP_REFERER']);
if(!$referer || !in_array($referer,$acceptedDomains))
{
    header('HTTP/1.0 403 Forbidden');
    exit(MSG_NO_ACCESS);
}
include '../vendor/autoload.php';
use YouTube\YouTubeDownloader;
use YouTube\Exception\YouTubeException;
$yt = new YouTubeDownloader();
function get_domain($url)
{
    $pieces = parse_url($url);
    $domain = isset($pieces['host']) ? $pieces['host'] : '';
    if (preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs))
    {
        return $regs['domain'];
    }
    return false;
}

if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')){
    ob_start('ob_gzhandler');
}else{
    ob_start();
}
include 'Mobile_Detect.php';
$detect = new Mobile_Detect;
require '../lib/aes_decrypt.class.php';
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function decodeCryptZingTV($text){
    $key = 'f_pk_ZingTV_1_@z';
    $iv = 'f_iv_ZingTV_1_@z';
    if($text != ''){
        $cipher = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
        $iv_size = mcrypt_enc_get_iv_size($cipher);
        if(mcrypt_generic_init($cipher, $key, $iv) != -1){
            $char = '';
            for($i=0; $i<strlen($text);$i+=2){
                $char .= chr(hexdec($text{$i}.$text{($i+1)}));
            }
            $cipherText = mdecrypt_generic($cipher,$char);
            mcrypt_generic_deinit($cipher);
            return $cipherText;
        }else{
            return false;
        }
    }
}
/*if(!function_exists (hex2bin)){
    function hex2bin($hexdata) {
        $bindata = '';
        for ($i=0;$i<strlen($hexdata);$i+=2) {
            $bindata .= chr(hexdec(substr($hexdata,$i,2)));
        }
        return $bindata;
    }
}*/

function curl($url) {
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    //curl_setopt($ch, CURLOPT_REFERER, 'http://www.phimmoi.net');
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 60);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 60);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
function post($url,$data) {
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $user_agent = 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36';
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    curl_setopt($process, CURLOPT_REFERER, 'http://www.anivn.com');
//curl_setopt($process, CURLOPT_HEADER, 1);
    curl_setopt($process, CURLOPT_USERAGENT, $user_agent);
    //curl_setopt($process, CURLOPT_COOKIEFILE, 'cookies.txt');
    // curl_setopt($process, CURLOPT_COOKIEJAR, 'cookies.txt');
    curl_setopt($process, CURLOPT_ENCODING , 'gzip');
    curl_setopt($process, CURLOPT_TIMEOUT, 10);
//if ($this->proxy) curl_setopt($process, CURLOPT_PROXY, $this->proxy);
    curl_setopt($process, CURLOPT_POSTFIELDS, $data);
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($process, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($process, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($process, CURLOPT_FOLLOWLOCATION, 0);
    curl_setopt($process, CURLOPT_POST, 1);
    $return = curl_exec($process);
    curl_close($process);
    return $return;
}
$url = $_GET['url'];
$url =  str_encode(hex2bin($url),'ngocgiac');

$pos9 = strpos($url,'youtube.com');
if($pos9!==false){
    $referer_url = str_replace('.html','',basename($_SERVER['HTTP_REFERER']));
    $memcache = new Memcache;
    $memcache->connect('127.0.0.1', 11211) or die ("Sorry, could not connect memcached! . We're working on getting this fixed as soon as we can.");
    $key_url = md5('video-download-3-'.$url);
    $cache_show_source = $memcache->get($key_url);
    if($cache_show_source){
        $show_source = $cache_show_source;
    }else {
        $show_source = '';
        $show_source .= '<h2>*Tip: Choose a quality video and click "Download".</h2><table class="container"><tr><th>Quality</th><th>Mime</th><th>Download</th></tr>';
        $arr_itag = array(18,22,37,137);
        $downloadOptions = $yt->getDownloadLinks($url);
        if ($downloadOptions->getAllFormats()) {
            $array_video = (array) $downloadOptions->getAllFormats();
            foreach($array_video as $val){
                if($val->audioQuality!='') {
                    $url_video = $val->url;
                    $quality = $val->qualityLabel;
                    $arr_type = explode(';', $val->mimeType);
                    $show_source .= '<tr><td><a href="' . $url_video . '&title=Video-' . $referer_url . '-[vidoe.top]" target="_blank" style="color:#249af2">' . $quality . '</a></td><td>' . $arr_type[0] . '</td><td><a href="' . $url_video . '&title=Video-' . $referer_url . '-[vidoe.top]" target="_blank"><span class="fa fa-cloud-download"></span> Download </a></td></tr>';
                }
            }

            /*$url_video =  $downloadOptions->getFirstCombinedFormat()->url;
            $quality = $downloadOptions->getFirstCombinedFormat()->qualityLabel;
            $arr_type = explode(';',$downloadOptions->getFirstCombinedFormat()->mimeType);

            $show_source .= '<tr><td><a href="' . $url_video . '&title=Video-'.$referer_url.'-[vidoe.top]" target="_blank" style="color:#249af2">'.$quality.'</a></td><td>'.trim($arr_type[0]).'</td><td><a href="' .$url_video . '&title=Video-'.$referer_url.'-[vidoe.top]" target="_blank"><span class="fa fa-cloud-download"></span> Download </a></td></tr>';*/

        } else {
            $show_source .= '<tr><td colspan="4">No links found</td></tr>';
        }
        $show_source .= '</table>';
        if (!empty($arr)) {
            $memcache->set($key_url, $show_source, MEMCACHE_COMPRESSED, 1200);
        }

    }

    /*$memcache = new Memcache;
    $memcache->connect('45.252.249.168', 11211) or die ("Sorry, could not connect memcached! . We're working on getting this fixed as soon as we can.");
    $key_url = md5($url);
    $cache_show_source = $memcache->get($key_url);
    if($cache_show_source){
        $show_source = $cache_show_source;
    }else {
        $url = 'https://downvis.com/download?url=' . urlencode($url);
        $url = 'https://st2.123vid.net/logs/curl/get_page_getlinktube.php?url=' . base64_encode($url);
        $content = curl($url);
        if ($content != ''){
            include '../lib/simple_html_dom.php';
            $html = str_get_html($content);
            $show_source = '';
            $show_source .= $html->find('div.clip table', 0)->innertext;
            $show_source = '<table class="container">' . preg_replace('#<thead>(.*?)<\/thead>#is', '', trim($show_source)) . '</table>';
            $show_source = str_replace('[downvis.com]', '[123vid.net]', $show_source);
            $memcache->set($key_url, $show_source, MEMCACHE_COMPRESSED, 3600);
        }else{
            echo '<div class="content" style="color: #ffffff;">
                        <h1 id="unavailable-message" class="message">
                                 Sorry, we\'re processing this video.
                        </h1>
                        <div id="unavailable-submessage" class="submessage">
                           Please choose a another video.
                        </div>
                      </div>';
            exit();
        }

    }*/
}
?>
    <html>
    <head>
        <link rel="stylesheet" href="../skin/1video/css/table.css">
        <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css">
        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script>
    </head>
    <body <?php echo $txt_no_rightclick;?>>
        <?php echo $show_source;?>
        <script>
            function download_video(id,title,q) {
                $('.container').html('<tr><th>Downloading video, please wait a bit...</th></tr>');
                $( ".container" ).load( "https://img.123vid.top/yt_dl.php?id="+id+"&q="+q, function() {
                    location.href='https://www.vidoe.top/proxy/download4.php?id='+id+'&title='+title;
                });

            }
        </script>
    </body>
    </html>
<?php
ob_end_flush();
exit();
?>

ZeroDay Forums Mini