ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/proxy/get_link_tv.zing.vn.php
<?php
if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')){
    ob_start('ob_gzhandler');
}else{
    ob_start();
}
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
if(!function_exists (hex2bin)){
    function hex2bin($hexdata) {
        $bindata = '';
        for ($i=0;$i<strlen($hexdata);$i+=2) {
            $bindata .= chr(hexdec(substr($hexdata,$i,2)));
        }
        return $bindata;
    }
}
function get_content_phim47($url,$referer) {

    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    curl_setopt($process, CURLOPT_HEADER, 0);
    //curl_setopt($process, CURLOPT_USERAGENT, 'Googlebot/2.1 (+http://www.google.com/bot.html)');
    curl_setopt($process, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13');
    curl_setopt($process, CURLOPT_COOKIEFILE, dirname(__FILE__).'/'.'cookies_tvzingvn.txt');
    curl_setopt($process, CURLOPT_COOKIEJAR,  dirname(__FILE__).'/'.'cookies_tvzingvn.txt');
    curl_setopt($process, CURLOPT_REFERER, $referer);
    curl_setopt($process, CURLOPT_ENCODING, 'gzip,deflate');
    //curl_setopt($process,CURLOPT_ENCODING , compression);
    curl_setopt($process, CURLOPT_TIMEOUT, 5);
    //if (proxy) curl_setopt($cUrl, CURLOPT_PROXY, 'proxy_ip:proxy_port');
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    //curl_setopt($process, CURLOPT_FOLLOWLOCATION, 1);
    $return = curl_exec($process);
    curl_close($process);
    //$content = strip_tags($return,'<div><a><p><span><li><ul><object><embed><b><font>');
    return $return;
}

//Start TV.ZING.VN
class zing {
    public $_text = '';
    public $_key = 'f_pk_ZingTV_1_@z';
    public $_iv = 'f_iv_ZingTV_1_@z';
    public $_result = '';
    public function _decrypt(){
        if($this->_text != ''){
            $cipher = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');
            $iv_size = mcrypt_enc_get_iv_size($cipher);
            if(mcrypt_generic_init($cipher, $this->_key, $this->_iv) != -1){
                $cipherText = mdecrypt_generic($cipher,$this->_hexToString($this->_text));
                mcrypt_generic_deinit($cipher);
                $this->_result = $cipherText;
                return true;
            }else{
                return false;
            }
        }
    }
    protected function _hexToString($hex){
        if(!is_string($hex)){
            return null;
        }
        $char = '';
        for($i=0; $i<strlen($hex);$i+=2){
            $char .= chr(hexdec($hex{$i}.$hex{($i+1)}));
        }
        return $char;
    }
}
$url = trim($_GET['url']);
$zing = get_content_phim47($url,'http://news.zing.vn');
$content = strip_tags($zing);
preg_match('/xmlURL: "([^>]*)",/U', $content, $link_zing);
//print_r($link_zing);
//exit();
//$xml = str_replace( 'media', 'media-embed', $link_zing[1]);
$sourceXML = file_get_contents('compress.zlib://'.$link_zing[1]);
/*$zing = get_content_phim47('http://tv.zing.vn/video/Trung-Tam-Mai-Moi-Cyrano-Tap-2/IWZ9D9WC.html','zing.vn');
preg_match_all('/xmlURL: "([^>]*)",/U', $zing, $link_zing);
$xml = str_replace( 'media', 'media-embed', $link_zing[1][0]);
$sourceXML = file_get_contents('compress.zlib://'.$xml);*/

$f360 = explode('<source streamingType="1"><![CDATA[',$sourceXML);$f360=explode(']]></source>',$f360[1]);$getf360=new zing; $getf360->_text=''.$f360[0].''; if($getf360->_decrypt()!=false);
if($getf360->_result != ''){
    $f480 = explode('<f480 streamingType="1"><![CDATA[',$sourceXML);$f480=explode(']]></f480>',$f480[1]);$getf480=new zing; $getf480->_text=''.$f480[0].''; if($getf480->_decrypt()!=false);
    $f720 = explode('<f720 streamingType="1"><![CDATA[',$sourceXML);$f720=explode(']]></f720>',$f720[1]);$getf720=new zing; $getf720->_text=''.$f720[0].''; if($getf720->_decrypt()!=false);
    $link = $getf360->_result.'@@'.$getf720->_result;
    //$link = '720p: '.$getf720->_result.'<br> 480p: '.$getf480->_result.'<br> 360p: '.$getf360->_result;
} else {
    $f360 = explode('<source streamingType="2"><![CDATA[',$sourceXML);$f360=explode(']]></source>',$f360[1]);$getf360=new zing; $getf360->_text=''.$f360[0].''; if($getf360->_decrypt()!=false);
    if($getf360->_result != ''){
        $f480 = explode('<f480 streamingType="2"><![CDATA[',$sourceXML);$f480=explode(']]></f480>',$f480[1]);$getf480=new zing; $getf480->_text=''.$f480[0].''; if($getf480->_decrypt()!=false);
        $f720 = explode('<f720 streamingType="2"><![CDATA[',$sourceXML);$f720=explode(']]></f720>',$f720[1]);$getf720=new zing; $getf720->_text=''.$f720[0].''; if($getf720->_decrypt()!=false);
        $link = $getf360->_result.'@@'.$getf720->_result;
        //$link = '720p: '.$getf720->_result.'<br> 480p: '.$getf480->_result.'<br> 360p: '.$getf360->_result;
    } else {
        $f360 = explode('<source streamingType="3"><![CDATA[',$sourceXML);$f360=explode(']]></source>',$f360[1]);$getf360=new zing; $getf360->_text=''.$f360[0].''; if($getf360->_decrypt()!=false);
        $f480 = explode('<f480 streamingType="3"><![CDATA[',$sourceXML);$f480=explode(']]></f480>',$f480[1]);$getf480=new zing; $getf480->_text=''.$f480[0].''; if($getf480->_decrypt()!=false);
        $f720 = explode('<f720 streamingType="3"><![CDATA[',$sourceXML);$f720=explode(']]></f720>',$f720[1]);$getf720=new zing; $getf720->_text=''.$f720[0].''; if($getf720->_decrypt()!=false);
        $link = $getf360->_result.'@@'.$getf720->_result;
        //$link = '720p: '.$getf720->_result.'<br> 480p: '.$getf480->_result.'<br> 360p: '.$getf360->_result;
    }
}
if(strpos($link,'.mp4')!==false) {
    $vpt_zing_encode = bin2hex(str_encode(trim($link), 'ngocgiac'));
    echo $vpt_zing_encode;
}else{
    preg_match_all ('#<source src="(.+?)" type="video/mp4" />#',$zing,$zingvn);
    foreach ($zingvn[1] as $vpt_zing){
        $vpt_zing_encode = bin2hex(str_encode(trim($vpt_zing),'ngocgiac'));
        echo $vpt_zing_encode;
    }
}

//End TV.ZING.VN



/*$content = get_content_phim47($_GET['url']);
preg_match_all ('#<source src="(.+?)" type="video/mp4" />#',$content,$zingvn);
foreach ($zingvn[1] as $vpt_zing){
	$vpt_zing_encode = bin2hex(str_encode(trim($vpt_zing),'ngocgiac'));
    echo $vpt_zing_encode;
}*/

ob_end_flush();
exit();
?>

ZeroDay Forums Mini