ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/proxy/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/vidoe.top/proxy/kk_test.php
<?php
function str_encode($data,$pwd)
{
    $x = 0;
    $a = 0;
    $j = 0;
    $Zcrypt = '';
    $pwd_length = strlen($pwd);
    for ($i = 0; $i < 255; $i++) {
        $key[$i] = ord(substr($pwd, ($i % $pwd_length)+1, 1));
        $counter[$i] = $i;
    }
    for ($i = 0; $i < 255; $i++) {
        $x = ($x + $counter[$i] + $key[$i]) % 256;
        $temp_swap = $counter[$i];
        $counter[$i] = $counter[$x];
        $counter[$x] = $temp_swap;
    }
    for ($i = 0; $i < strlen($data); $i++) {
        $a = ($a + 1) % 256;
        $j = ($j + $counter[$a]) % 256;
        $temp = $counter[$a];
        $counter[$a] = $counter[$j];
        $counter[$j] = $temp;
        $k = $counter[(($counter[$a] + $counter[$j]) % 256)];
        $Zcipher = ord(substr($data, $i, 1)) ^ $k;
        $Zcrypt .= chr($Zcipher);
    }
    return $Zcrypt;
}
function post_content_page($url,$data) {
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $user_agent = 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36';
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    curl_setopt($process, CURLOPT_REFERER, 'http://www.anivn.com');
//curl_setopt($process, CURLOPT_HEADER, 1);
    curl_setopt($process, CURLOPT_USERAGENT, $user_agent);
    //curl_setopt($process, CURLOPT_COOKIEFILE, 'cookies.txt');
    // curl_setopt($process, CURLOPT_COOKIEJAR, 'cookies.txt');
    curl_setopt($process, CURLOPT_ENCODING , 'gzip');
    curl_setopt($process, CURLOPT_TIMEOUT, 10);
//if ($this->proxy) curl_setopt($process, CURLOPT_PROXY, $this->proxy);
    curl_setopt($process, CURLOPT_POSTFIELDS, $data);
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($process, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($process, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($process, CURLOPT_FOLLOWLOCATION, 0);
    curl_setopt($process, CURLOPT_POST, 1);
    $return = curl_exec($process);
    curl_close($process);
    return $return;
}
function get_content_page($url,$referer) {
    $header[0] = "Accept: text/xml,application/xml,application/xhtml+xml,";
    $header[0] .= "text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5";
    $header[] = "Cache-Control: max-age=0";
    $header[] = "Connection: keep-alive";
    $header[] = "Keep-Alive: 300";
    $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $header[] = "Accept-Language: en-us,en;q=0.5";
    $header[] = "Pragma: "; // browsers keep this blank.
    $process = curl_init($url);
    curl_setopt($process, CURLOPT_HTTPHEADER, $header);
    curl_setopt($process, CURLOPT_HEADER, 0);
    curl_setopt($process, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13');
    //curl_setopt($process, CURLOPT_COOKIEFILE, dirname(__FILE__).'/'.'cookies_youtube.txt');
    //curl_setopt($process, CURLOPT_COOKIEJAR,  dirname(__FILE__).'/'.'cookies_youtube.txt');
    curl_setopt($process, CURLOPT_REFERER, $referer);
    curl_setopt($process, CURLOPT_ENCODING, 'gzip,deflate');
    //curl_setopt($process,CURLOPT_ENCODING , compression);
    curl_setopt($process, CURLOPT_TIMEOUT, 20);
    //if (proxy) curl_setopt($cUrl, CURLOPT_PROXY, 'proxy_ip:proxy_port');
    curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
    //curl_setopt($process, CURLOPT_FOLLOWLOCATION, 1);
    $return = curl_exec($process);
    curl_close($process);
    return $return;
}
function curl($url)
{
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    $head[] = "Connection: keep-alive";
    $head[] = "Keep-Alive: 300";
    $head[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7";
    $head[] = "Accept-Language: en-us,en;q=0.5";
    curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 Safari/537.36');
    curl_setopt($ch, CURLOPT_ENCODING, 'gzip');
    curl_setopt($ch, CURLOPT_HTTPHEADER, $head);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
    curl_setopt($ch, CURLOPT_TIMEOUT, 20);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 20);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
    $page = curl_exec($ch);
    curl_close($ch);
    return $page;
}
$url = str_encode(hex2bin($_GET['url']),'123Vid@Net');

//$url = 'http://phimbathu.org/phim-tan-y-thien-do-long-ky-tap-50-i2-12982.169002.html';

include '../lib/simple_html_dom_1_8_1.php';
include 'Mobile_Detect.php';
$detect = new Mobile_Detect;

$arr = explode('.',$url);
$epi = $arr[2];
$arr2 = explode('-',$arr[1]);
$id = $arr2[count($arr2)-1];

$url = 'http://phimbathu.org/ajax/player';
$sv = 0;
$link_play = '';
$type = '';
$data = 'id=' . $id . '&ep=' . $epi.'&sv='.$sv;
$content = post_content_page($url, $data);
if (strpos($content, 'googlevideo.com') !== false) {
    preg_match_all('#{"file":"(.*?)"},#is', $content, $match);
    foreach ($match[1] as $val) {

        $link = $val;

        if ($detect->isMobile() or $detect->isTablet()) {
            if (strpos($val, '360p') !== false) {
                $link = $val;
            }
        } else {
            if (strpos($val, '1080p') !== false) {
                $link = $val;
            } elseif (strpos($val, '720p') !== false) {
                $link = $val;
            }
        }
    }
    $arr3 = explode('","type"', $link);
    //check 404 picasa
    if($arr3[0]!='') {
        $handle = curl_init($arr3[0]);
        curl_setopt($handle, CURLOPT_RETURNTRANSFER, TRUE);
        $response = curl_exec($handle);
        $httpCode = curl_getinfo($handle, CURLINFO_HTTP_CODE);
        if ($httpCode == 403 || $httpCode == 404) {
            $error_link = 1;
        } else {
            $error_link = 0;
        }
        curl_close($handle);
        if ($error_link == 0) {
            $link_play = $arr3[0];
            $type = 'video/mp4';
        }
    }else{
        $link_play = '';
    }
}
if($link_play=='') {
    for ($sv = 1; $sv < 5; $sv++) {
        $data = 'id=' . $id . '&ep=' . $epi . '&sv=' . $sv;
        $content = post_content_page($url, $data);

        if (strpos($content, 'googlevideo.com') !== false) {
            preg_match_all('#{"file":"(.*?)"},#is', $content, $match);
            foreach ($match[1] as $val) {

                $link = $val;

                if ($detect->isMobile() or $detect->isTablet()) {
                    if (strpos($val, '360p') !== false) {
                        $link = $val;
                    }
                } else {
                    if (strpos($val, '1080p') !== false) {
                        $link = $val;
                    } elseif (strpos($val, '720p') !== false) {
                        $link = $val;
                    }
                }
            }
            $arr3 = explode('","type"', $link);
            //check 404 picasa
            $handle = curl_init($arr3[0]);
            curl_setopt($handle,CURLOPT_RETURNTRANSFER,TRUE);
            $response = curl_exec($handle);
            $httpCode = curl_getinfo($handle,CURLINFO_HTTP_CODE);
            if($httpCode == 403 || $httpCode == 404) {
                $error_link=1;
            }else{
                $error_link=0;
            }
            curl_close($handle);
            if($error_link==0) {
                $link_play = $arr3[0];
                $type = 'video/mp4';
            }else{
                continue;
            }
        } elseif (strpos($content, 'vtvhub.com') !== false) {
            preg_match('#src="(.*?)"#is', $content, $match);
            $link_go = $match[1];
            header('Location: ' . $link_go);
            exit();
        }
        elseif (strpos($content, 'ok.ru') !== false) {
            preg_match('#src="(.*?)"#is', $content, $match);
            $link_play = str_replace(array('videoembed/', '?autoplay=1'), array('video/', ''), $match[1]);
            $link_play = bin2hex(str_encode($link_play, '123Vid@Net'));
            $url_go = 'https://st4.videock.com/drive/o_test_top.php?url=' . $link_play . '&track=&time=' . time();
            header('Location: ' . $url_go);
            exit();
        }
    }
}
?>
<html style="width: 100%; height: 100%"><head>
    <title>-Server 2 embed-</title>
    <base href="https://123vid.top/proxy/stream3/examples/">
    <style type="text/css">
        body {
            background: #000000;
            margin: 0px;
            padding: 0px;
        }
    </style>
    <link href="js/video-js.css" rel="stylesheet" type="text/css" />
    <link href="js/vsg-skin.css" rel="stylesheet" type="text/css" />
    <script src="js/video.js"></script>
    <script src="js/videojs-contrib-hls.js"></script>
</head>
<body style="width: 100%; height: 100%" oncontextmenu="return false;">
<?php
if($link_play !='') {
    ?>
    <video autoplay controls id="ht_player" style="width: 100%; height: 100%" class="video-js vjs-default-skin"
           preload="auto" poster="https://123vid.top/skin/phim98/assets/img/123vid.jpg" data-setup="{ }">
        <source src="<?php echo $link_play; ?>" type="<?php echo $type;?>"/>
        <p>Video Playback Not Supported</p>
    </video>
    <script type="text/javascript">
        //var player = videojs('#ht_player');
        //player.play();
    </script>
    <?php
}
?>
</body></html>

ZeroDay Forums Mini